On Wed, Sep 16, 2009 at 05:11:10PM +0200, Nicolas Haller wrote: > On Wed, Sep 16, 2009 at 03:46:08PM +0100, Malcolm Turnbull wrote: > > Nicolas,
> > Not sure but don't you need to remove the first clashing entry? > > TCP lo-pp.nerim.net:www wlc persistent 120 > > -> harrisburg.nerim.net:www Tunnel 1 0 0 > > -> sellafield.nerim.net:www Tunnel 1 0 0 > > i.e. they both match the same dest ip? > Yes it's the same dest ip. I've tried to keep only the FWM rule but > there is no effect. Ok, I confirm netfilter put marks on packets. It's seems IPVS don't care about marks. Here some logs: Sep 16 18:38:58 balancoire-1j kernel: [ 1886.901835] IN=eth0 OUT= MAC=00:30:48:5a:4e:4e:00:1f:9d:9f:89:42:08:00 SRC=62.4.16.150 DST=194.79.128.128 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=52649 DF PROTO=TCP SPT=52072 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x1 Sep 16 18:38:58 balancoire-1j kernel: [ 1886.902074] IPVS: lookup/in TCP 62.4.16.150:52072->194.79.128.128:21 not hit Sep 16 18:38:58 balancoire-1j kernel: [ 1886.902078] IPVS: lookup/out TCP 62.4.16.150:52072->194.79.128.128:21 not hit Sep 16 18:38:58 balancoire-1j kernel: [ 1886.902086] IPVS: p-schedule: src 62.4.16.150:52072 dest 194.79.128.128:21 mnet 62.4.16.150 Sep 16 18:38:58 balancoire-1j kernel: [ 1886.902091] IPVS: template lookup/in IP 62.4.16.150:0->0.0.0.1:0 not hit -- Nicolas Haller _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - [email protected] Send requests to [email protected] or go to http://lists.graemef.net/mailman/listinfo/lvs-users
