On Thu, 15 Nov 2007, John Little wrote: > Sorry about the ascii are. I wasn't sure how that would turn out.
ascii art just has to have no tabs and be limited to about 60 chars wide to make it through e-mail > Medical server ip: 128.1.6.3 > LVS RIP: 128.1.247.72 eth0 is this what we call the DIP? > LVS VIP: 128.1.247.167 eth0:1 > Real Srv RIP (Tomcat): 128.1.247.51 eth0 > Real Srv VIP (Tomcat): 128.1.247.167 lo0:67 > > Netmask is 255.255.0.0. except on lo:67 which is 255.255.255.255 > > Routing table: > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref Use Iface > 128.1.247.167 * 255.255.255.255 UH 0 0 0 lo > 128.1.0.0 * 255.255.0.0 U 0 0 0 eth0 > link-local * 255.255.0.0 U 0 0 0 eth0 > loopback * 255.0.0.0 U 0 0 0 lo > default 128.1.7.7 0.0.0.0 UG 0 0 0 eth0 > > The setup is: > > Medical info. server -> LVS -> Real Server (Tomcat) -> end user server > netstat output from the real server: > tcp 1 0 ieng-repo-dev.hrh.:8325 128.1.247.72%720:54364 > CLOSE_WAIT 11968/is_domain2 > tcp 1 0 ieng-repo-dev.hrh.:8325 128.1.247.72%720:54356 > CLOSE_WAIT 11968/is_domain2 > tcp 1 0 ieng-repo-dev.hrh.:8325 128.1.247.72%720:54348 > CLOSE_WAIT 11968/is_domain2 > =>snip > As you can see from the above the tomcat server is > connecting back to the RIP on the LVS router and going > into a CLOSE_WAIT state. I assume ieng-repo-dev.hrh is a realserver. I have no idea why an application on the realserver is connecting to the DIP. It's not part of the connection that you've established from the client to the VIP on the realserver. Either something is misconfigured (LVS? application?) (most likely) or the application is making assumptions about the connection to the client which is invalid (less likely). >> Make sure the application is not listening/running/attached >> to the RIP (at least for testing that your LVS works). > > It isn't. on the realserver do you see a connection from the client to the VIP? >> You can check your routing by running telnet as your LVS'ed >> service to see if this behaves. > This works ok. you get load balancing and on the realserver you see a connection to the VIP? Joe -- Joseph Mack NA3T EME(B,D), FM05lw North Carolina jmack (at) wm7d (dot) net - azimuthal equidistant map generator at http://www.wm7d.net/azproj.shtml Homepage http://www.austintek.com/ It's GNU/Linux! _______________________________________________ LinuxVirtualServer.org mailing list - [email protected] Send requests to [EMAIL PROTECTED] or go to http://lists.graemef.net/mailman/listinfo/lvs-users
