We have LVS-loadbalanced ldap://VIP/ with IP tunneling.
When a program on a realserver connects to ldap://VIP/, it gets connected to the loopback interface, because interface tunl0 has the VIP address. This breaks when the realserver's LDAP daemon is down. (This is not a problem with DNS or /etc/hosts, and it happens both when I connect to the IP address and the DNS name.) Anyway, can I prevent this so connections to VIP really go to VIP, and only connections to $(hostname) and localhost go to loopback? The realservers are currently Red Hat Linux release 6 or 7. iptables LOG shows source = destination = VIP, interface = lo. We do have the necessary users/groups in /etc/passwd & co so the basics will work without LDAP. But it'd still be convenient to have LDAP working for a realserver during maintenance. -- Hallvard _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org Send requests to lvs-users-requ...@linuxvirtualserver.org or go to http://lists.graemef.net/mailman/listinfo/lvs-users
