Mailing List Archive

[lvs-users] LVS-NAT and full nat (realserver as client)
Hi,

I'm testing full nat on kernel 3.1.0, trying to have realservers in LVS-NAT communicate with VIPs - see: http://archive.linuxvirtualserver.org/html/lvs-devel/2010-05/msg00000.html - but clients hang...

Client: 10.10.10.201
Realserver: 10.10.10.11
Default gateway/LVS is 10.10.10.1
VIP: 192.168.100.30
eth1 is on the realserver network

so

% ipvsadm -A -t 192.168.100.30:80 -s rr
% ipvsadm -a -t 192.168.100.30:80 -r 10.10.10.11:80 -m

and then

% iptables -t nat -A POSTROUTING -o eth1 -m ipvs --vaddr 192.168.100.30/32 --vport 80 -j SNAT --to-source 10.10.10.1

but from the realserver or the client

telnet 192.168.100.30 hangs

tcpdump on the realserver shows

13:33:39.533160 IP 10.10.10.201.54737 > 10.10.10.11.80: Flags [S], seq 1629270067, win 14600, options [mss 1460,sackOK,TS val 34103738 ecr 0,nop,wscale 7], length 0
13:33:39.533198 IP 10.10.10.11.80 >10.10.10.201.54737: Flags [S.], seq 222278326, ack 1629270068, win 14480, options [mss 1460,sackOK,TS val 284062123 ecr 34103738,nop,wscale 7], length 0
13:33:39.533627 IP 10.10.10.201.54737 > 10.10.10.11.80: Flags [R], seq 1629270068, win 0, length 0
13:33:42.779366 IP 172.16.11.1.48501 > 10.10.10.11.80: Flags [S], seq 870222793, win 14600, options [mss 1460,sackOK,TS val 1268747903 ecr 0,nop,wscale 7], length 0
13:33:42.779405 IP 10.10.10.11.80 > 172.16.11.1.48501: Flags [S.], seq 503429492, ack 870222794, win 14480, options [mss 1460,sackOK,TS val 284062934 ecr 1268747903,nop,wscale 7], length 0
13:33:42.779757 IP 172.16.11.1.48501 > 10.10.10.11.80: Flags [.], ack 1, win 115, options [nop,nop,TS val 1268747903 ecr 284062934], length 0
13:33:42.780442 IP 172.16.11.1.48501 > 10.10.10.11.80: Flags [P.], seq 1:117, ack 1, win 115, options [nop,nop,TS val 1268747903 ecr 284062934], length 116
13:33:42.780476 IP 10.10.10.11.80 > 172.16.11.1.48501: Flags [.], ack 117, win 114, options [nop,nop,TS val 284062935 ecr 1268747903], length 0
13:33:42.781389 IP 10.10.10.11.80 > 172.16.11.1.48501: Flags [P.], seq 1:453, ack 117, win 114, options [nop,nop,TS val 284062935 ecr 1268747903], length 452
13:33:42.781657 IP 172.16.11.1.48501 > 10.10.10.11.80: Flags [.], ack 453, win 123, options [nop,nop,TS val 1268747903 ecr 284062935], length 0
13:33:42.782208 IP 10.10.10.11.80 > 172.16.11.1.48501: Flags [F.], seq 453, ack 117, win 114, options [nop,nop,TS val 284062935 ecr 1268747903], length 0
13:33:42.783794 IP 172.16.11.1.48501 > 10.10.10.11.80: Flags [F.], seq 117, ack 454, win 123, options [nop,nop,TS val 1268747904 ecr 284062935], length 0
13:33:42.783810 IP 10.10.10.11.80 > 172.16.11.1.48501: Flags [.], ack 118, win 114, options [nop,nop,TS val 284062935 ecr 1268747904], length 0

Anybody have an idea what could be up with this?

Thanks

Regards
Kristoffer


_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
Send requests to lvs-users-request@LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
Re: [lvs-users] LVS-NAT and full nat (realserver as client) [ In reply to ]
2012/10/18 Kristoffer Egefelt <kristoffer@itoc.dk>

> Anybody have an idea what could be up with this?
>

echo 1 > /proc/sys/net/ipv4/vs/conntrack

perhaps, should help on the IPVS server...

--
Ivan
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
Send requests to lvs-users-request@LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
Re: [lvs-users] LVS-NAT and full nat (realserver as client) [ In reply to ]
Great - it works - thanks :-)


On 21/10/2012, at 14.08.43, Ivan Havlicek <ivan@modulix.org> wrote:

> 2012/10/18 Kristoffer Egefelt <kristoffer@itoc.dk>
>
>> Anybody have an idea what could be up with this?
>>
>
> echo 1 > /proc/sys/net/ipv4/vs/conntrack
>
> perhaps, should help on the IPVS server...
>
> --
> Ivan
> _______________________________________________
> Please read the documentation before posting - it's available at:
> http://www.linuxvirtualserver.org/
>
> LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
> Send requests to lvs-users-request@LinuxVirtualServer.org
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>


_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
Send requests to lvs-users-request@LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users