Hi,

Thank you both for your answer. There were 8s difference between both server (it's fixed now - for some reason ntpdate to our ntp server was not working, when have installed ntpd and with that it works). But obviously it could run like that for several days/weeks ... so why especially today at 13:00... Not sure the time is the issue we had with the flapping.

For the carp settings, I know they are not in the gui but can I change the config file somewhere in CLI? For the gratuitous arp for Aliases, I thought it was the case, but then why was the CARP VIP working correctly while the Aliases were not working. I believe the router .254 associated the Aliases with the Slave's MAC when the Aliases came UP there and did not switch back to the Master (because the interface did not went down on the Master so he did not sent any gratuitous arp).

Anyway, I need to fix the flapping issue instead of fixing why it's not working after flapping :-)

Thanks

On 2/8/2012 3:27 PM, Emilio Campos wrote:
tibz Also you need that your zen server is configured with a ntp server correctly. to sync date with ntp server there is a filed in the gui : Setting > Server > ntp server

you can confirm in command line that the sync is ok with:

#ntpdate ntpserver

Regards

2012/8/2 Laura Garcia <[email protected] <mailto:[email protected]>>

    Hi,
    Are you using ZenLB in virtual? In this case, you've to install
    the tools to optimize the guest system.
    ZenLB has an hourly task to synchronize the system clock (note
    that the failover was at 13:00), if the clock has a delay more
    than 3 seconds (if I remember well) the backup node understand
    that it hasn't any response from the master node along this shift
    of time.
    So, it's important to install the virtual tools to optimize the
    clock timekeeping.
    http://www.vmware.com/files/pdf/Timekeeping-In-VirtualMachines.pdf
    I answer your questions below.
    Regards,
    Laura.

    On Thu, Aug 2, 2012 at 2:29 PM, tibz <[email protected]
    <mailto:[email protected]>> wrote:

        Hello,

        We just had a serious issue with ZLB. To summarize, no Aliases
        VIP was
        able to reach its default gateway. The gateway was however
        reachable
        using the physical IP or the CARP VIP.
        Analyzing the logs i've seen that there were a flapping. The
        standby
        decided to go Master and then switched back to standby afterward.

        # On the Master
        Aug  2 13:00:20 VMWZLB001 ucarp[1141]: [WARNING] Non-preferred
        master
        advertising: reasserting control of VIP with another
        gratuitous arp
        Aug  2 13:00:20 VMWZLB001 ucarp[1141]: [WARNING] Non-preferred
        master
        advertising: reasserting control of VIP with another
        gratuitous arp
        Aug  2 13:00:20 VMWZLB001 ucarp[1141]: [WARNING] Non-preferred
        master
        advertising: reasserting control of VIP with another
        gratuitous arp

        # On the Slave
        Aug  2 13:00:16 VMWZLB002 ucarp[1073]: [WARNING] Switching to
        state: MASTER
        Aug  2 13:00:16 VMWZLB002 ucarp[1073]: [WARNING] Spawning
        [/usr/local/zenloadbalancer/app/zenlatency/zenlatency-start.pl
        <http://zenlatency-start.pl/> eth0
        192.168.135.240]
        Aug  2 13:00:28 VMWZLB002 ucarp[1073]: [WARNING] Switching to
        state: BACKUP
        Aug  2 13:00:28 VMWZLB002 ucarp[1073]: [WARNING] Spawning
        [/usr/local/zenloadbalancer/app/zenlatency/zenlatency-stop.pl
        <http://zenlatency-stop.pl/> eth0
        192.168.135.240]
        Aug  2 13:00:33 VMWZLB002 ucarp[1073]: [WARNING] Preferred master
        advertised: going back to BACKUP state

        The result was that the physical and CARP VIP was still
        working, but the
        VIP used in farms were not working. I'm not exacly sure why,
        perhaps
        because they became UP at 2 location at the same time and the
        Zen and/or
        Switch/Router did not like that fast flapping. I believe the
        CARP VIP
        continued to work because it's actively sending gratuitous
        arp, but the
        other aliases not?

        My questions are:
        - Is it possible (I believe yes but I have not found where yet) to
        change the deadratio and/or advertisement interval of carp so
        it's less
        sensitive ? And would you advice it?

    Not avaliable through the GUI

        - Is it possible to send gratuitous arp also for the Aliases
        used in farms ?

    This is done already.

        Thanks a lot
        tibz

        ps: Emilio i've applied your farmgardian patch, will see in
        the coming
        days how it goes ;-)

        
------------------------------------------------------------------------------
        Live Security Virtual Conference
        Exclusive live event will cover all the ways today's security and
        threat landscape has changed and how IT managers can respond.
        Discussions
        will include endpoint security, mobile security and the latest
        in malware
        threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
        _______________________________________________
        Zenloadbalancer-support mailing list
        [email protected]
        <mailto:[email protected]>
        https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support



    
------------------------------------------------------------------------------
    Live Security Virtual Conference
    Exclusive live event will cover all the ways today's security and
    threat landscape has changed and how IT managers can respond.
    Discussions
    will include endpoint security, mobile security and the latest in
    malware
    threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
    _______________________________________________
    Zenloadbalancer-support mailing list
    [email protected]
    <mailto:[email protected]>
    https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support




--
Load balancer distribution - Open Source Project
http://www.zenloadbalancer.com
Distribution list (subscribe): [email protected] <mailto:[email protected]>



------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/


_______________________________________________
Zenloadbalancer-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Zenloadbalancer-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support

Reply via email to