I'm trying to get basic load balancing working with keepalived. It seems to be working but I can only connect to the virtual_server IP from the load balancer itself. If I try to make requests from other servers on our network they time out. Here is our config:
global_defs { notification_email { per...@domain.com<mailto:per...@domain.com> } notification_email_from lb_clust...@plansource.com<mailto:lb_clust...@plansource.com> smtp_server 10.140.0.140 smtp_connect_timeout 30 } vrrp_instance VI_1 { state MASTER interface eth0 virtual_router_id 51 priority 101 smtp_alert virtual_ipaddress { 10.110.7.159 } } virtual_server 10.110.7.159 80 { delay_loop 10 protocol TCP lb_algo rr lb_kind NAT persistence_timeout 7200 real_server 10.110.7.51 80 { weight 1 TCP_CHECK { connect_timeout 5 connect_port 80 } } real_server 10.110.7.52 80 { weight 1 TCP_CHECK { connect_timeout 5 connect_port 80 } } } output from ipvsadm: ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:50:56:b7:3e:f2 brd ff:ff:ff:ff:ff:ff inet 10.110.7.157/24 brd 10.110.7.255 scope global eth0 inet 10.110.7.159/32 scope global eth0 inet6 fe80::250:56ff:feb7:3ef2/64 scope link valid_lft forever preferred_lft forever curl from the localhost: curl 10.110.7.159 <html><body><h1>It works!</h1></body></html> >From any other server or host on our network (same subnet or not) it times out. I did notice that most other examples for keepalived and lb_kind NAT are using 2 different subnets but we'd like to avoid that if possible. It's also possible that it's required but I'm not totally sure how or why. -- Franck Fallateuf DevOps Manager PlanSource – One Source. Many Benefits. Work: 407-373-7525 Cell: 407-902-9233 What I Stand For: Automation Follow PlanSource on Twitter<https://twitter.com/PlanSource> PlanSource Demo Days are here! Sign up for an ACA<https://attendee.gotowebinar.com/rt/4136026658172112385> or Overview<https://attendee.gotowebinar.com/rt/2648315956248719116;j=%0Asessionid=3DabcjXrs1xw_b7cVjYJWXu> demo. Learn more.<http://www.plansource.com/plansource-demo/> This email may contain confidential or protected material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message. _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org Send requests to lvs-users-requ...@linuxvirtualserver.org or go to http://lists.graemef.net/mailman/listinfo/lvs-users