On Thu, 20 Sep 2007, Steve Wray wrote: > Joseph Mack NA3T wrote: >> On Thu, 20 Sep 2007, Steve Wray wrote: >> >> >>> I am trying to set up a simple 2-network LVS-NAT to a webserver. >>> >>> So far as I can tell all of my config is by the book. >>> >>> I've stripped it down to one DIP, one RIP. >>> >>> In the end there is intended to be two directors with failover so the config >>> shows the virtual IP of the interior interface of the director (eth1). >>> >> >> not by the book. The VIP is on the outside >> > > There are two 'virtual IP addresses'. > > One is on the outside, this is 10.10.0.15, this is the actual VIP > address to which the client connects. > > One is on the inside to provide the gateway for the realservers, this is > 192.168.0.254.
this is the DIP not the VIP > > I've tried it without this, with just the one director and using its > internal interface as the gateway for the realserver. This has made no > difference. > > >>> This is used as the default route on the realserver. >>> >>> In the case of the /etc/network/interfaces, this is where I've been setting >>> up the masquerading. Note that I've tried this with and without iptables >>> masquerading on the director. >>> >> >> not by the book. The HOWTO tells you not to use any iptables >> rules till after you have the LVS running. >> > > Like I said I've tried with and without. Both turn out the same. > >>> I am guessing not as most of the LVS-NAT documentation >>> I've found does indicate configuring iptables rules for >>> masquerading. >>> >> >> not in the HOWTO. It's the gold standard on these matters. >> >> >>> This appears to be such a simple setup that there has to be something very >>> basic that I'm missing... >>> >> >> yes, the setup in the mini-HOWTO >> > I've been through the mini-HOWTO I don't know how many times. > > Its not helping. > > > Do you think that you could spare a moment to please look at the > tcpdumps I sent through? there's no point in looking through tcpdumps for an LVS that isn't set up correctly. Joe -- Joseph Mack NA3T EME(B,D), FM05lw North Carolina jmack (at) wm7d (dot) net - azimuthal equidistant map generator at http://www.wm7d.net/azproj.shtml Homepage http://www.austintek.com/ It's GNU/Linux! _______________________________________________ LinuxVirtualServer.org mailing list - [email protected] Send requests to [EMAIL PROTECTED] or go to http://lists.graemef.net/mailman/listinfo/lvs-users
