Mailing List Archive

Connexion Pb - LVS NAT
I just setting up an LVS cluster with 2 web server (192.168.0.1 &
192.168.0.2). My LVS server is 192.168.0.254 on eth0 and 10.11.1.67 on
eth0:1.

I configure the LVS server with ls_nat.conf, and ./configure ls_nat.conf
to have the rc.lvs_nat. When I start rc.lvs_nat all is ok. ipvsadm give
the right table.

The LVS server can access to the 2 web server on port 80. My problem is
when I trie to access the web server using LVS (telnet 10.11.1.67 80). I
have no connection. When I execute netstat -taon, I have not the line :
0.0.0.0:80 LISTEN.

Is someone can help me ?

Regards

Matthieu MARC
matthieu.marc@netcelo.com
Re: Connexion Pb - LVS NAT [ In reply to ]
Matthieu MARC wrote:
>
> I just setting up an LVS cluster with 2 web server (192.168.0.1 &
> 192.168.0.2). My LVS server is 192.168.0.254 on eth0 and 10.11.1.67 on
> eth0:1.
>
> I configure the LVS server with ls_nat.conf, and ./configure ls_nat.conf
> to have the rc.lvs_nat. When I start rc.lvs_nat all is ok. ipvsadm give
> the right table.

setup with telnet first, it's simpler to debug.
can you send the output of ipvsadm for the director
and netstat -rn for both real-servers.

What is "Pb"?

Joe
--
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center,
mailto:mack.joseph@epa.gov ph# 919-541-0007, RTP, NC, USA
Re: Connexion Pb - LVS NAT [ In reply to ]
Joseph Mack a écrit :

> Matthieu MARC wrote:
> >
> > I just setting up an LVS cluster with 2 web server (192.168.0.1 &
> > 192.168.0.2). My LVS server is 192.168.0.254 on eth0 and 10.11.1.67 on
> > eth0:1.
> >
> > I configure the LVS server with ls_nat.conf, and ./configure ls_nat.conf
> > to have the rc.lvs_nat. When I start rc.lvs_nat all is ok. ipvsadm give
> > the right table.
>
> setup with telnet first, it's simpler to debug.
> can you send the output of ipvsadm for the director
> and netstat -rn for both real-servers.
>
> What is "Pb"?
>
> Joe
> --
> Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
> contractor to the National Environmental Supercomputer Center,
> mailto:mack.joseph@epa.gov ph# 919-541-0007, RTP, NC, USA
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
> Send requests to lvs-users-request@LinuxVirtualServer.org
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users

oups 'pb' is for problem. A french shortcut :-)

##### LVS SERVER #####

IP Virtual Server version 0.9.7 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP lvs:www rr
-> ha2:www Masq 1 0 0
-> ha1:www Masq 1 0 0


-----------------


eth0 Lien encap:Ethernet HWaddr 00:01:03:11:EF:27
inet adr:192.168.0.2 Bcast:192.168.0.255 Masque:255.255.255.0

eth0:1 Lien encap:Ethernet HWaddr 00:01:03:11:EF:27
inet adr:10.11.1.67 Bcast:10.255.255.255 Masque:255.255.255.0

------------

Table de routage IP du noyau
Destination Passerelle Genmask Indic MSS Fenêtre irtt
Iface
10.11.1.67 0.0.0.0 255.255.255.255 UH 0 0 0 eth0

192.168.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 eth0

192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

10.11.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 10.11.1.67 0.0.0.0 UG 0 0 0 eth0



#############################################################################################

##### WEB 1 #####

Table de routage IP du noyau
Destination Passerelle Genmask Indic MSS Fenêtre irtt
Iface
192.168.0.67 0.0.0.0 255.255.255.255 UH 0 0 0 eth0

192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.0.2 0.0.0.0 UG 0 0 0 eth0

eth0 Lien encap:Ethernet HWaddr 00:01:03:11:ED:EF
inet adr:192.168.0.67 Bcast:192.168.0.255 Masque:255.255.255.0


#############################################################################################

##### WEB 2 #####

Table de routage IP du noyau
Destination Passerelle Genmask Indic MSS Fenêtre irtt
Iface
192.168.0.67 0.0.0.0 255.255.255.255 UH 0 0 0 eth0

192.168.0.68 0.0.0.0 255.255.255.255 UH 0 0 0 eth0

192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.0.2 0.0.0.0 UG 0 0 0 eth0



eth0 Lien encap:Ethernet HWaddr 00:01:03:11:ED:B3
inet adr:192.168.0.68 Bcast:192.168.0.255 Masque:255.255.255.0
Re: Connexion Pb - LVS NAT [ In reply to ]
Matthieu MARC wrote:
>
> Joseph Mack a écrit :
>
> > Matthieu MARC wrote:
> > >
> > > I just setting up an LVS cluster with 2 web server (192.168.0.1 &
> > > 192.168.0.2). My LVS server is 192.168.0.254 on eth0 and 10.11.1.67 on
> > > eth0:1.

your data below show that you have the real-servers on 192.168.0.67 and 68,
youe DIIP on 192.168.0.2 and your VIP 10.11.1.67.

what is the lvs_nat.conf file you used?

The setup below looks reasonable.

What happens if you setup for telnet?

Joe

--
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center,
mailto:mack.joseph@epa.gov ph# 919-541-0007, RTP, NC, USA
Re: Connexion Pb - LVS NAT [ In reply to ]
Joseph Mack a écrit :
>
> Matthieu MARC wrote:
> >
> > Joseph Mack a écrit :
> >
> > > Matthieu MARC wrote:
> > > >
> > > > I just setting up an LVS cluster with 2 web server (192.168.0.1 &
> > > > 192.168.0.2). My LVS server is 192.168.0.254 on eth0 and 10.11.1.67 on
> > > > eth0:1.
>
> your data below show that you have the real-servers on 192.168.0.67 and 68,
> youe DIIP on 192.168.0.2 and your VIP 10.11.1.67.
>
> what is the lvs_nat.conf file you used?
>
> The setup below looks reasonable.
>
> What happens if you setup for telnet?
>
> Joe
>
> --
> Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
> contractor to the National Environmental Supercomputer Center,
> mailto:mack.joseph@epa.gov ph# 919-541-0007, RTP, NC, USA
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
> Send requests to lvs-users-request@LinuxVirtualServer.org
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users

I have made test with adding a PC Client with send request to the LVS.
It is working well. The Client access to the 2 web server.

But I don't understant why the LVS box doesn't listen on the port 80 !

Thanks

Matthieu MARC
Re: Connexion Pb - LVS NAT [ In reply to ]
Matthieu MARC wrote:

> I have made test with adding a PC Client with send request to the LVS.
> It is working well. The Client access to the 2 web server.
>
> But I don't understant why the LVS box doesn't listen on the port 80 !

I assume the "LVS box" is the director. What is your test for listening
on port 80?

Joe

--
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center,
mailto:mack.joseph@epa.gov ph# 919-541-0007, RTP, NC, USA
Re: Connexion Pb - LVS NAT [ In reply to ]
Joseph Mack a écrit :
>
> Matthieu MARC wrote:
>
> > I have made test with adding a PC Client with send request to the LVS.
> > It is working well. The Client access to the 2 web server.
> >
> > But I don't understant why the LVS box doesn't listen on the port 80 !
>
> I assume the "LVS box" is the director. What is your test for listening
> on port 80?
>

Yes, the LVS box is the director.

My test for listening on port 80 is :

netstat -taon on the LVS box.

The resultat is no line which show me that the box is listening on port
80.

When I use another box with navigator on, and I request for an URL on
port 80 on the LVX box, I get the resultat from one of the web serveur
(depending of the balancing).

Matthieu MARC


> Joe
>
> --
> Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
> contractor to the National Environmental Supercomputer Center,
> mailto:mack.joseph@epa.gov ph# 919-541-0007, RTP, NC, USA
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
> Send requests to lvs-users-request@LinuxVirtualServer.org
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users
Re: Connexion Pb - LVS NAT [ In reply to ]
Matthieu MARC wrote:

> > > But I don't understant why the LVS box doesn't listen on the port 80 !

> My test for listening on port 80 is :
>
> netstat -taon on the LVS box.

The LVS director is only a router. It has rules for forwarding
packets. It doesn't listen on any of the ports for which it
forwards packets (in your case 80)

Joe

--
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center,
mailto:mack.joseph@epa.gov ph# 919-541-0007, RTP, NC, USA