Make the service bind to the virtual IP only
 OR
use SNAT with iptables to masq the source (watch our to make a cluster resource for the nat service too, you can use portblock for that or a simple init script used as lsb resource) .

Robert

Rob Epping schrieb:
Hello list,

I've been searching a while for this some time now, but can't seem
to find the solution.
I'm not even sure this is the right list but I guess there are more
people on this list who ran into the issue.

The issue is with UDP (and probably other (semi-)stateless) services
(like SNMP).
When an SNMP query is done on the cluster(/virtual) IP the responses
are send with source-IP set to the IP address of the
master(/active) node.

How can this be resolved?

In a packet capture it looks like this:

client: x.y.z.10
cluster ip: x.y.z.20
current master: x.y.z.21

from            port    to              port            remark
x.y.z.10        1234    x.y.z.20        161             SNMP request to
cluster
x.y.z.21        161     x.y.z.10        1234            SNMP reply from
master

GRTNX,
RobJE

_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to