Hi, We¹re having intermittent luck using LVS/TUN and LS/DR while trying to load-balance web services running on high port numbers: 10000, 60000, and 60001. To handle the ARP issue, we¹re using the hidden interface approach with the following sysctl settings on the real servers:
> net.ipv4.conf.eth0.arp_ignore = 1 > net.ipv4.conf.eth0.arp_announce = 2 > net.ipv4.conf.all.arp_ignore = 1 > net.ipv4.conf.all.arp_announce = 2 > net.ipv4.conf.tunl0.arp_ignore = 1 > net.ipv4.conf.tunl0.arp_announce = 2 We find that client making HTTP requests at <VIP>:10000 (Webmin), <VIP>:60000 and <VIP>:60001 (both in-house web services) are able to successfully connect to real servers only intermittently. During failed requests, we find the Director is generating SYN after SYN request to the real server. The real server receives these (many thousand) SYN requests but sends no reply (SYN, ACK). One of the mysteries here is that at other times the same client will make a request and successfully connect to the web service. We¹ve test the load-balancing of SSH and had a 100% success rate. Does anyone know if this is a bug with LVS or have suggestions on what further troubleshooting may be done to identify the issue? Any help would be appreciated. Thanks, Lee - ------------------------------------------------------------------------------ Confidentiality Notice: The information contained in this transmission is legally privileged and confidential, intended only for the use of the individual(s) or entities named above. This email and any files transmitted with it are the property of Pelco. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you receive this communication in error, please notify us immediately by telephone call to +1-559-292-1981 or forward the e-mail to [EMAIL PROTECTED] and then permanently delete the e-mail and destroy all soft and hard copies of the message and any attachments. Thank you for your cooperation. - ------------------------------------------------------------------------------ _______________________________________________ LinuxVirtualServer.org mailing list - [email protected] Send requests to [EMAIL PROTECTED] or go to http://lists.graemef.net/mailman/listinfo/lvs-users
