Mailing List Archive

ldirector forwarding
hi all,
i am having a problem with an ldirectord box.

the box has one real and two virtual IPs in front nic, and 3 services
configured.

~# cat /etc/ha.d/ldirectord.cf

# Global Directives
checktimeout=3
checkinterval=15
autoreload=yes
logfile="/var/log/ldirectord.log"

# normal
virtual=10.60.5.11:80
real=192.168.201.21:80 masq
real=192.168.201.22:80 masq
fallback=127.0.0.1:80 masq
service=http
request=".ha.html"
receive="ok"
scheduler=rr
protocol=tcp
persistent=14400
quiescent=no

# secure
virtual=10.60.5.11:443
real=192.168.201.21:443 masq
real=192.168.201.22:443 masq
fallback=127.0.0.1:80 masq
service=https
request=".ha.php"
receive="ok"
scheduler=rr
protocol=tcp
persistent=14400
quiescent=no

# the last one
virtual=10.60.5.12:80
real=192.168.201.123:0 masq
fallback=127.0.0.1:0 masq
service=http
request=".ha.php"
receive="ok"
scheduler=rr
protocol=tcp
persistent=14400
quiescent=no


behind this box we have 3 webservers, two should respond the first 2
services and one should respond the last service...

the problem is that all my traffic pointing to the last service is sent to
those "first" 2 webservers and from time to time to the correct
webserver...
how can this be happening if those two webservers are not in the "real"
section of the last service?

is this because of the virtual IP addresses present in the box?

the addresses are (snipped to leave only importants):

~# ip add sh
2: eth1: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:0a:5e:5c:c1:16 brd ff:ff:ff:ff:ff:ff
inet 10.60.5.112/22 brd 10.60.7.255 scope global eth1
inet 10.60.5.12/22 brd 10.60.7.255 scope global secondary eth1:2
inet 10.60.5.11/22 brd 10.60.7.255 scope global secondary eth1
inet6 fe80::20a:5eff:fe5c:c116/64 scope link
valid_lft forever preferred_lft forever
3: eth2: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:0a:5e:5c:c1:d0 brd ff:ff:ff:ff:ff:ff
inet 192.168.201.12/24 brd 192.168.201.255 scope global eth2
inet 192.168.201.1/24 brd 192.168.201.255 scope global secondary eth2
inet6 fe80::20a:5eff:fe5c:c1d0/64 scope link
valid_lft forever preferred_lft forever

any help is appreciated,

thanks in advance!


--
Roberto Scattini
_______________________________________________
Linux-HA mailing list
Linux-HA@lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems
Re: ldirector forwarding [ In reply to ]
sorry, the last one section was:

# the last one
virtual=10.60.5.12:80
real=192.168.201.123:80 masq
fallback=127.0.0.1:80 masq
service=http
request=".ha.php"
receive="ok"
scheduler=rr
protocol=tcp
persistent=14400
quiescent=no

i was trying with fwmark but it doesnt work...




On Thu, Apr 24, 2014 at 7:24 PM, Roberto Scattini <
roberto.scattini@gmail.com> wrote:

> hi all,
> i am having a problem with an ldirectord box.
>
> the box has one real and two virtual IPs in front nic, and 3 services
> configured.
>
> ~# cat /etc/ha.d/ldirectord.cf
>
> # Global Directives
> checktimeout=3
> checkinterval=15
> autoreload=yes
> logfile="/var/log/ldirectord.log"
>
> # normal
> virtual=10.60.5.11:80
> real=192.168.201.21:80 masq
> real=192.168.201.22:80 masq
> fallback=127.0.0.1:80 masq
> service=http
> request=".ha.html"
> receive="ok"
> scheduler=rr
> protocol=tcp
> persistent=14400
> quiescent=no
>
> # secure
> virtual=10.60.5.11:443
> real=192.168.201.21:443 masq
> real=192.168.201.22:443 masq
> fallback=127.0.0.1:80 masq
> service=https
> request=".ha.php"
> receive="ok"
> scheduler=rr
> protocol=tcp
> persistent=14400
> quiescent=no
>
> # the last one
> virtual=10.60.5.12:80
> real=192.168.201.123:0 masq
> fallback=127.0.0.1:0 masq
> service=http
> request=".ha.php"
> receive="ok"
> scheduler=rr
> protocol=tcp
> persistent=14400
> quiescent=no
>
>
> behind this box we have 3 webservers, two should respond the first 2
> services and one should respond the last service...
>
> the problem is that all my traffic pointing to the last service is sent to
> those "first" 2 webservers and from time to time to the correct
> webserver...
> how can this be happening if those two webservers are not in the "real"
> section of the last service?
>
> is this because of the virtual IP addresses present in the box?
>
> the addresses are (snipped to leave only importants):
>
> ~# ip add sh
> 2: eth1: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
> link/ether 00:0a:5e:5c:c1:16 brd ff:ff:ff:ff:ff:ff
> inet 10.60.5.112/22 brd 10.60.7.255 scope global eth1
> inet 10.60.5.12/22 brd 10.60.7.255 scope global secondary eth1:2
> inet 10.60.5.11/22 brd 10.60.7.255 scope global secondary eth1
> inet6 fe80::20a:5eff:fe5c:c116/64 scope link
> valid_lft forever preferred_lft forever
> 3: eth2: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
> link/ether 00:0a:5e:5c:c1:d0 brd ff:ff:ff:ff:ff:ff
> inet 192.168.201.12/24 brd 192.168.201.255 scope global eth2
> inet 192.168.201.1/24 brd 192.168.201.255 scope global secondary eth2
> inet6 fe80::20a:5eff:fe5c:c1d0/64 scope link
> valid_lft forever preferred_lft forever
>
> any help is appreciated,
>
> thanks in advance!
>
>
> --
> Roberto Scattini
>



--
Roberto Scattini
_______________________________________________
Linux-HA mailing list
Linux-HA@lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems