Nicolas, Not sure but don't you need to remove the first clashing entry?
TCP lo-pp.nerim.net:www wlc persistent 120 -> harrisburg.nerim.net:www Tunnel 1 0 0 -> sellafield.nerim.net:www Tunnel 1 0 0 i.e. they both match the same dest ip? > Malcolm, > > Thanks for your answer. It's a good track but it's seem LVS don't care > about my marks :-) > > here is my new ipvsadm conf > IP Virtual Server version 1.2.1 (size=4096) > Prot LocalAddress:Port Scheduler Flags > -> RemoteAddress:Port Forward Weight ActiveConn InActConn > TCP lo-pp.nerim.net:www wlc persistent 120 > -> harrisburg.nerim.net:www Tunnel 1 0 0 > -> sellafield.nerim.net:www Tunnel 1 0 0 > FWM 1 wlc persistent 120 > -> harrisburg.nerim.net:0 Tunnel 1 0 0 > -> sellafield.nerim.net:0 Tunnel 1 0 0 > > and the iptables conf > Chain PREROUTING (policy ACCEPT 20638 packets, 3081K bytes) > pkts bytes target prot opt in out source > destination > 14 880 MARK tcp -- any any anywhere > lo-pp.nerim.net tcp dpt:ftp MARK xset 0x1/0xffffffff > 1 64 MARK tcp -- any any anywhere > lo-pp.nerim.net tcp dpt:ftp-data MARK xset 0x1/0xffffffff > 0 0 MARK tcp -- any any anywhere > lo-pp.nerim.net tcp dpts:1024:65535 MARK xset 0x1/0xffffffff > > As you can see, some packets match these mark rules but they are not > load-balanced. > > -- > Nicolas Haller > > _______________________________________________ > Please read the documentation before posting - it's available at: > http://www.linuxvirtualserver.org/ > > LinuxVirtualServer.org mailing list - [email protected] > Send requests to [email protected] > or go to http://lists.graemef.net/mailman/listinfo/lvs-users > -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/ _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - [email protected] Send requests to [email protected] or go to http://lists.graemef.net/mailman/listinfo/lvs-users
