-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Jun 24, 2008 at 10:44:34AM -0500, Randy Evans wrote:

>I also have entries on the two real servers for lo:0
>
>[EMAIL PROTECTED] ~]# ifconfig lo:0
>lo:0      Link encap:Local Loopback
>          inet addr:192.168.0.125  Mask:255.255.255.255
>          UP LOOPBACK RUNNING  MTU:16436  Metric:1

Good.  What about the director?  That VIP should be on eth0:0 or
something like that.

>> I have set these values on the two real servers:
>>
>> net.ipv4.conf.lo.arp_ignore = 1
>> net.ipv4.conf.lo.arp_announce = 2
>> net.ipv4.conf.all.arp_ignore = 1
>> net.ipv4.conf.all.arp_announce = 2

Good.

>> Everything appears to be running correctly, but when I connect to the
>> VIP (192.168.0.125) I cannot establish a connection.  Apache is

Where are you attempting to connect from?  You cannot connect to a VIP
from the load balancer itself.

>> There is nothing in the ldirectord.log that indicates there is any problem.

Good.

>> I have disabled the firewall on all machines.

Good.

>> virtual=192.168.0.125:80
>>        fallback=127.0.0.1:80
>>        real=192.168.0.123:80 gate
>>        real=192.168.0.124:80 gate

As long as you're connecting from some other machine than the director,
then this should be working.

>> ipvsadm -L output:
>> IP Virtual Server version 1.2.1 (size=4096)
>> Prot LocalAddress:Port Scheduler Flags
>>  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
>> TCP  192.168.0.125:http wlc persistent 600
>>  -> centos-3.mydomain.com Route   1      0          1
>>  -> centos-4.mydomain.com Route   1      0          0

Looks good.

What is the default gateway of the director?
What is the default gateway of the real machines?  (since you're using
the direct routing method, the real machines should not be using the
director as the gateway, that method is called Masquerade).


You are very close, I suspect it will be one small tiny thing that will
make everything work properly.
- -- 
Regards...              Todd
we're off on the usual strange tangents.  next will be whether
it is ethical to walk in your neighbor's open house if they're
running ipv6:-).                                  --Randy Bush
Linux kernel 2.6.24-18-generic   3 users,  load average: 0.10, 0.07, 0.08
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIYW15Y2VBGxIDMLwRAtxbAJ0RvzAoQZoi+mZmVoj4z6aCOg7dhQCfdoFa
nUsBthDVuuNh04sxRJayfRE=
=Ar0W
-----END PGP SIGNATURE-----
_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to