Re: LVS backup router not taking role
Tapan Kumar Thapa <[email protected]> Sat, 21 Jan 2012 17:58:04 +0530
| Newsgroups | gmane.linux.redhat.piranha |
|---|---|
| Message-ID | <[email protected]> |
--===============6514101429929893311== Content-Transfer-Encoding: 7bit Content-Type: multipart/alternative; boundary=Apple-Mail-1-949355307 --Apple-Mail-1-949355307 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Can you please ensure that both active and backup router is having no firewa= ll issue in-between? Sent from my iPhone Regards Tapan Kumar Thapa Manager-Tech Support HT Mobile Solutions Limited Mob-919871701375 On Jan 21, 2012, at 2:25 PM, Khapare Joshi <[email protected]> wrote: > hi tapan=20 >=20 > Here are is my lvs.cf file >=20 > IP Virtual Server version 1.2.1 (size=3D4096) > Prot LocalAddress:Port Scheduler Flags > -> RemoteAddress:Port Forward Weight ActiveConn InActConn > TCP 192.168.1.3:80 wlc > -> 192.168.1.4:80 Route 1 0 0 =20 > -> 192.168.1.5:80 Route 1 0 0 =20 >=20 > and I have ip forward enabled on my active router. I also allowed firewall= from lvs router to real server and vice versa. I am using direct routing an= d added line in arptable in REAL server as :=20 >=20 > # Generated by arptables-save v0.0.8 on Fri Jan 20 20:23:23 2012 > *filter > :IN ACCEPT [504508:14126224] > :OUT ACCEPT [237:6636] > :FORWARD ACCEPT [0:0] > [346:9688] -A IN -d 130.208.165.193 -j DROP > [0:0] -A OUT -d 192.168.1.3 -o eth0 -j mangle --mangle-ip-s 192.16.1.4 > COMMIT > # Completed on Fri Jan 20 20:23:23 2012 >=20 >=20 > It seems it works for a while then after certain while I only get response= from one real server. There seem somewhere I am doing wrong=20 >=20 > Khapare >=20 >=20 >=20 >=20 > where else could be the issue ? >=20 > K >=20 > On Wed, Jan 18, 2012 at 4:16 PM, Tapan Kumar Thapa <tapan.thapa2000@gmail.= com> wrote: > Can you please post your complete lvs.cfg? >=20 > Sent from my iPhone >=20 > Regards > Tapan Kumar Thapa > Manager-Tech Support > HT Mobile Solutions Limited > Mob-919871701375 >=20 > On Jan 18, 2012, at 9:28 PM, Khapare Joshi <[email protected]> wrote: >=20 >>=20 >>=20 >> On Wed, Jan 18, 2012 at 1:59 PM, Ranjith Rajaram <[email protected]> wr= ote: >>=20 >>=20 >> On 01/18/2012 07:22 PM, Khapare Joshi wrote: >>>=20 >>> Hi, all, >>>=20 >>> first time poster. I recently deployed lvs (primary and backup) with pir= anh and ran into few issues. I turned off the primary lvs to see backup lvs w= ill take over. However it does not take over right a way seem require restar= t pulse. How does this fail over works if primary goes down ? should not thi= s be happen right a way if primary lvs goes down ? >> If primary goes, secondary has to take it over >>=20 >> It depends on deadtime >>=20 >> deadtime =3D n >> Length of time before a node is declared dead and IP takeov= er occurs. >>=20 >> lvs.cf needs to be checked together with system configuration. Look at /= var/log/messages >>=20 >>=20 >>=20 >> I configured these parameter as this : >> Heartbeat interval (seconds): =09 >> Assume dead after (seconds): =09 >> Heartbeat runs on port: =09 >> Monitor NIC links for failures:=09 >> Syncdaemon:=09 >>=20 >> and copied lvs.cf to redudant server as well.=20 >>=20 >>>=20 >>> And I have four real server- and it sees if one goes down whole system i= s unavailable (httpd service). Then I restart pulse and get the httpd servi= ce. I do not think this is right. could be please guide me in right directio= n to make reliable. >>>=20 >>=20 >> Do you have separate boxes for LVS directors and real server's ? [Are you= running pulse on any of the two real server's ?] >>=20 >> I have two servers for lvs i.e lvs1 lvs2 and configured using piranha too= l. I started pulse on these two machines. Rest of other four server I only s= tarted httpd not the pulse =20 >>=20 >> check the output of ipvsadm -L -n from the active lvs server [paste it he= re] >>=20 >>=20 >>> PS: I use direct routing and have=20 >>>=20 >>> net.ipv4.conf.lo.arp_ignore =3D 1 >>> net.ipv4.conf.lo.arp_announce =3D 2 >>>=20 >>> in /etc/sysctl.conf >>>=20 >>> sorry for too many question. >>>=20 >>> Thanks >>>=20 >>> _______________________________________________ >>> Piranha-list mailing list >>> [email protected] >>> https://www.redhat.com/mailman/listinfo/piranha-list >>=20 >>=20 >> _______________________________________________ >> Piranha-list mailing list >> [email protected] >> https://www.redhat.com/mailman/listinfo/piranha-list >>=20 >> _______________________________________________ >> Piranha-list mailing list >> [email protected] >> https://www.redhat.com/mailman/listinfo/piranha-list >=20 > _______________________________________________ > Piranha-list mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/piranha-list >=20 > <lvs.cf> > _______________________________________________ > Piranha-list mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/piranha-list --Apple-Mail-1-949355307 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=utf-8 <html><body bgcolor="#FFFFFF"><div>Can you please ensure that both active and backup router is having no firewall issue in-between?<br><br>Sent from my iPhone<div><br></div><div>Regards<br><div>Tapan Kumar Thapa</div><div>Manager-Tech Support</div><div>HT Mobile Solutions Limited</div></div><div>Mob-919871701375</div></div><div><br>On Jan 21, 2012, at 2:25 PM, Khapare Joshi <<a href="mailto:[email protected]">[email protected]</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>hi tapan <br><br>Here are is my <a href="http://lvs.cf">lvs.cf</a> file<br><br>IP Virtual Server version 1.2.1 (size=4096)<br>Prot LocalAddress:Port Scheduler Flags<br> -> RemoteAddress:Port Forward Weight ActiveConn InActCon n<br> TCP <a href="http://192.168.1.3:80">192.168.1.3:80</a> wlc<br> -> <a href="http://192.168.1.4:80">192.168.1.4:80</a> Route 1 0 0 <br> -> <a href="http://192.168.1.5:80">192.168.1.5:80</a> Route 1 0 0 <br> <br>and I have ip forward enabled on my active router. I also allowed firewall from lvs router to real server and vice versa. I am using direct routing and added line in arptable in REAL server as : <br><br># Generated by arptables-save v0.0.8 on Fri Jan 20 20:23:23 2012<br> *filter<br>:IN ACCEPT [504508:14126224]<br>:OUT ACCEPT [237:6636]<br>:FORWARD ACCEPT [0:0]<br>[346:9688] -A IN -d 130.208.165.193 -j DROP<br>[0:0] -A OUT -d 192.168.1.3 -o eth0 -j mangle --mangle-ip-s 192.16.1.4<br>COMMIT<br> # Completed on Fri Jan 20 20:23:23 2012<br><br><br>It seems it works for a while then after certain while I only get response from one real server. There seem somewhere I am doing wrong <br><br>Khapare<br><br><br><br><br> where else could be the issue ?<br><br>K<br><br><div class="gmail_quote">On Wed, Jan 18, 2012 at 4:16 PM, Tapan Kumar Thapa <span dir="ltr"><<a href="mailto:[email protected]"><a href="mailto:[email protected]">[email protected]</a></a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div bgcolor="#FFFFFF"><div>Can you please post your complete lvs.cfg?<br><br>Sent from my iPhone<div><br></div><div>Regards<span class="HOEnZb"><font color="#888888"><br> <div>Tapan Kumar Thapa</div><div>Manager-Tech Support</div><div>HT Mobile Solutions Limited</div></font></span></div><span class="HOEnZb"><font color="#888888"><div>Mob-919871701375</div></font></span></div><div><div class="h5"> <div><br>On Jan 18, 2012, at 9:28 PM, Khapare Joshi <<a href="mailto:[email protected]" target="_blank"><a href="mailto:[email protected]">[email protected]</a></a>> wrote:<br><br></div><div></div><blockquote type="cite"><div><br><br><div class="gmail_quote"> On Wed, Jan 18, 2012 at 1:59 PM, Ranjith Rajaram <span dir="ltr"><<a href="mailto:[email protected]" target="_blank"></a><a href="mailto:[email protected]" target="_blank"><a href="mailto:[email protected]">[email protected]</a></a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <u></u> <div bgcolor="#ffffff" text="#000000"><div> <br> <br> On 01/18/2012 07:22 PM, Khapare Joshi wrote: <blockquote type="cite"> Hi, all,<br> <br> first time poster. I recently deployed lvs (primary and backup) with piranh and ran into few issues. I turned off the primary lvs to see backup lvs will take over. However it does not take over right a way seem require restart pulse. How does this fail over works if primary goes down ? should not this be happen right a way if primary lvs goes down ?<br> </blockquote></div> If primary goes, secondary has to take it over<br> <br> It depends on deadtime<br> <br> deadtime = n<br> Length of time before a node is declared dead and IP takeover occurs.<br> <br> <a href="http://lvs.cf" target="_blank">lvs.cf</a> needs to be checked together with system configuration. Look at /var/log/messages<div><br> <br> <br> I configured these parameter as this :<br></div></div></blockquote><div><table><tbody><tr><td>Heartbeat interval (seconds):</td> <td><input name="hb_interval" size="5" value="2" type="TEXT"> </td> </tr> <tr> <td>Assume dead after (seconds):</td> <td><input name="dead_after" size="5" value="10" type="TEXT"> </td> </tr> <tr> <td>Heartbeat runs on port:</td> <td><input name="hb_port" size="5" value="539" type="TEXT"> </td> </tr> <tr> <td>Monitor NIC links for failures:</td> <td><input name="monitor_links" checked="" type="checkbox"> </td> </tr> <tr> <td>Syncdaemon:</td> <td><input name="syncdaemon" checked="" type="checkbox"></td></tr></tbody></table><br>and copied <a href="http://lvs.cf" target="_blank">lvs.cf</a> to redudant server as well. <br></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div bgcolor="#ffffff" text="#000000"><div> <br> <blockquote type="cite"> <br> And I have four real server- and it sees if one goes down whole system is unavailable (httpd service). Then I restart pulse and get the httpd service. I do not think this is right. could be please guide me in right direction to make reliable.<br> <br> </blockquote> <br></div> Do you have separate boxes for LVS directors and real server's ? [Are you running pulse on any of the two real server's ?]<br></div></blockquote><div><br>I have two servers for lvs i.e lvs1 lvs2 and configured using piranha tool. I started pulse on these two machines. Rest of other four server I only started httpd not the pulse <br> </div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div bgcolor="#ffffff" text="#000000"> <br> check the output of ipvsadm -L -n from the active lvs server [paste it here]<br> <br> <br> <blockquote type="cite"><div>PS: I use direct routing and have <br> <br> net.ipv4.conf.lo.arp_ignore = 1<br> net.ipv4.conf.lo.arp_announce = 2<br> <br> in /etc/sysctl.conf<br> <br> sorry for too many question.<br> <br> Thanks </div><pre><fieldset></fieldset> _______________________________________________ Piranha-list mailing list <a href="mailto:[email protected]" target="_blank"></a><a href="mailto:[email protected]" target="_blank"><a href="mailto:[email protected]">[email protected]</a></a> <a href="https://www.redhat.com/mailman/listinfo/piranha-list" target="_blank"></a><a href="https://www.redhat.com/mailman/listinfo/piranha-list" target="_blank"><a href="https://www.redhat.com/mailman/listinfo/piranha-list">https://www.redhat.com/mailman/listinfo/piranha-list</a></a></pre> </blockquote> <br> <pre cols="72"></pre> </div> <br>_______________________________________________<br> Piranha-list mailing list<br> <a href="mailto:[email protected]" target="_blank"></a><a href="mailto:[email protected]" target="_blank"><a href="mailto:[email protected]">[email protected]</a></a><br> <a href="https://www.redhat.com/mailman/listinfo/piranha-list" target="_blank"></a><a href="https://www.redhat.com/mailman/listinfo/piranha-list" target="_blank"><a href="https://www.redhat.com/mailman/listinfo/piranha-list">https://www.redhat.com/mailman/listinfo/piranha-list</a></a><br> </blockquote></div><br> </div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Piranha-list mailing list</span><br><span><a href="mailto:[email protected]" target="_blank"><a href="mailto:[email protected]">[email protected]</a></a></span><br> <span><a href="https://www.redhat.com/mailman/listinfo/piranha-list" target="_blank"><a href="https://www.redhat.com/mailman/listinfo/piranha-list">https://www.redhat.com/mailman/listinfo/piranha-list</a></a></span></div></blockquote></div></div></div><br>_______________________________________________<br> Piranha-list mailing list<br> <a href="mailto:[email protected]"><a href="mailto:[email protected]">[email protected]</a></a><br> <a href="https://www.redhat.com/mailman/listinfo/piranha-list" target="_blank"><a href="https://www.redhat.com/mailman/listinfo/piranha-list">https://www.redhat.com/mailman/listinfo/piranha-list</a></a><br></blockquote></div><br> </div></blockquote><blockquote type="cite"><div><lvs.cf></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Piranha-list mailing list</span><br><span><a href="mailto:[email protected]">[email protected]</a></span><br><span><a href="https://www.redhat.com/mailman/listinfo/piranha-list">https://www.redhat.com/mailman/listinfo/piranha-list</a></span></div></blockquote></body></html> --Apple-Mail-1-949355307-- --===============6514101429929893311== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Piranha-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/piranha-list --===============6514101429929893311==--