Hi Mike, On Thu, Jun 03, 2010 at 06:47:54PM -0300, mike wrote: > We've got an application serving up JBoss on port 8080. I'm using LVS to > load balance and have incorporated ldirecord into LinuxHA to provide a > higly available LVS-tunnel cluster. We found that by starting up Jboss > on the "real" servers and listening on the RIP that for some reason, LVS > cannot seem to communicate with the real servers. However, by starting > up JBoss listening on all interfaces (0.0.0.0) we are able to > successfully direct traffic through the VIP to the real servers in rr form. > > I have 2 questions. First, what implications are there with starting up > JBoss listening to all interfaces (which I think is the default btw) as > opposed to listening to the RIP?
The implication is that if there are other addresses on the machine then people will be able to access your server using those addresses. Which is probably harmless, but you may decide that it is inappropriate for some reason. Alternatively, you may want another service or alternate JBoss configuration listening on the same port on different addresses. Personally, I would not get excited about it unless you find yourself in the second case. > I can't see why leaving it listening on > all interfaces would pose and issue. Also, does anyone have any ideas > why it doesn't seem to work going to the RIP? (IIRC) If you are using LVS-tunnel then connections will arrive addressed to the VIP, not the RIP. So if you listen to the VIP you should be in business. netstat or tcpdump, or something similar should be able to confirm this. _______________________________________________ Linux-HA mailing list [email protected] http://lists.linux-ha.org/mailman/listinfo/linux-ha See also: http://linux-ha.org/ReportingProblems
