Ben Timby wrote:
You can have the same IP on more than one node if you are using
CLUSTERIP. This module for iptables will look at each incoming packet
and apply a hash algorithm to it. It then decides if the packet was
meant for the local node or not. Each node has an identity.
For example, you provide a --total-nodes count to the module, the hash
algorithm will result in a 1-N value. Each node has it's own identity
within that range. When the hash value does not match the machine's
identity, it drops the packet.
Your setup is not dropping the packet for whatever reason. You should
look at your iptables rules and see what the --total-nodes count is,
as well as looking in /proc/net/ipt_CLUSTERIP/<your shared ip>, this
proc file will show you the identity(s) your box currently responds
to. Also, /var/log/messages will contain stuff like:
Apr 30 16:03:43 localhost kernel: hash=2 ct_hash=2 not responsible
Apr 30 16:03:44 localhost kernel: hash=1 ct_hash=1 responsible
See below for more information.
http://ben.timby.com/?p=48
How does something like this relate to switches that want to learn
addresses and limit delivery to the correct port?
--
Les Mikesell
[email protected]
_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems
