Hi,
I use the linux-ha 2.1.4 rpm's on opensuse 11, to manage a firewall.
The firewall has multiple vlan interfaces, without IP addresses in the
networks. The virtual IP addresses are managed via heartbeat.
The slave is unable to set a default route, and other routes needed on the
firewall, because it doesn't have an IP address in these networks yet.
I took the Route ressource script from the rpm's of the 2.99.X version of
heartbeat. I configured an ordered resource group, that first starts the
virtual IP addresses on the networks, and then it should set the route.
I configured the route like this:
<primitive id="DEFAULTROUTE" class="ocf" type="Route"
provider="heartbeat">
<instance_attributes id="DEFAULTROUTE_instance_attrs">
<attributes>
<nvpair id="DEFAULTROUTE_destination" name="destination"
value="0.0.0.0/0"/>
<nvpair id="DEFAULTROUTE_gateway" name="gateway"
value="10.0.0.1"/>
</attributes>
</instance_attributes>
</primitive>
However, when heartbeat is started, then the resource scripts are run. In
the Route script, at the end of the route_validate function, the script
checks the availability of the gateway, which is not yet reachable, because
the virtual IP is not yet up. Therefore, after heartbeat is started, and the
virtual IPs are up on the master, a cleanup on the Route scripts fixes the
problem. Unfortunately, a cleanup on the Route fails on the slave, because
route_validate is called unconditionally every time, but because the slave
doesn't have the virtual IP, it cannot reach the gateway.
Therefore, I'd like to make a little change if OK, and ask for input. Either
would it be OK to remove the last check in route_validate to validate the
availability of the gateway? Or maybe better adding a parameter to the
script, making the call to route_validate optional, with a default to run
the check?
kind regards
Sebastian
_______________________________________________________
Linux-HA-Dev: [email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
Home Page: http://linux-ha.org/
