I'm trying to get basic load balancing working with keepalived. It seems to be working but I can only connect to the virtual_server IP from the load balancer itself. If I try to make requests from other servers on our network they time out. Here is our config:
global_defs {
notification_email {
person@domain.com<mailto:person@domain.com>
}
notification_email_from lb_cluster1@plansource.com<mailto:lb_cluster1@plansource.com>
smtp_server 10.140.0.140
smtp_connect_timeout 30
}
vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 51
priority 101
smtp_alert
virtual_ipaddress {
10.110.7.159
}
}
virtual_server 10.110.7.159 80 {
delay_loop 10
protocol TCP
lb_algo rr
lb_kind NAT
persistence_timeout 7200
real_server 10.110.7.51 80 {
weight 1
TCP_CHECK {
connect_timeout 5
connect_port 80
}
}
real_server 10.110.7.52 80 {
weight 1
TCP_CHECK {
connect_timeout 5
connect_port 80
}
}
}
output from ipvsadm:
ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:50:56:b7:3e:f2 brd ff:ff:ff:ff:ff:ff
inet 10.110.7.157/24 brd 10.110.7.255 scope global eth0
inet 10.110.7.159/32 scope global eth0
inet6 fe80::250:56ff:feb7:3ef2/64 scope link
valid_lft forever preferred_lft forever
curl from the localhost:
curl 10.110.7.159
<html><body><h1>It works!</h1></body></html>
>From any other server or host on our network (same subnet or not) it times out.
I did notice that most other examples for keepalived and lb_kind NAT are using 2 different subnets but we'd like to avoid that if possible. It's also possible that it's required but I'm not totally sure how or why.
--
Franck Fallateuf
DevOps Manager
PlanSource – One Source. Many Benefits.
Work: 407-373-7525
Cell: 407-902-9233
What I Stand For: Automation
Follow PlanSource on Twitter<https://twitter.com/PlanSource>
PlanSource Demo Days are here! Sign up for an ACA<https://attendee.gotowebinar.com/rt/4136026658172112385> or Overview<https://attendee.gotowebinar.com/rt/2648315956248719116;j=%0Asessionid=3DabcjXrs1xw_b7cVjYJWXu> demo. Learn more.<http://www.plansource.com/plansource-demo/>
This email may contain confidential or protected material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
Send requests to lvs-users-request@LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
global_defs {
notification_email {
person@domain.com<mailto:person@domain.com>
}
notification_email_from lb_cluster1@plansource.com<mailto:lb_cluster1@plansource.com>
smtp_server 10.140.0.140
smtp_connect_timeout 30
}
vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 51
priority 101
smtp_alert
virtual_ipaddress {
10.110.7.159
}
}
virtual_server 10.110.7.159 80 {
delay_loop 10
protocol TCP
lb_algo rr
lb_kind NAT
persistence_timeout 7200
real_server 10.110.7.51 80 {
weight 1
TCP_CHECK {
connect_timeout 5
connect_port 80
}
}
real_server 10.110.7.52 80 {
weight 1
TCP_CHECK {
connect_timeout 5
connect_port 80
}
}
}
output from ipvsadm:
ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:50:56:b7:3e:f2 brd ff:ff:ff:ff:ff:ff
inet 10.110.7.157/24 brd 10.110.7.255 scope global eth0
inet 10.110.7.159/32 scope global eth0
inet6 fe80::250:56ff:feb7:3ef2/64 scope link
valid_lft forever preferred_lft forever
curl from the localhost:
curl 10.110.7.159
<html><body><h1>It works!</h1></body></html>
>From any other server or host on our network (same subnet or not) it times out.
I did notice that most other examples for keepalived and lb_kind NAT are using 2 different subnets but we'd like to avoid that if possible. It's also possible that it's required but I'm not totally sure how or why.
--
Franck Fallateuf
DevOps Manager
PlanSource – One Source. Many Benefits.
Work: 407-373-7525
Cell: 407-902-9233
What I Stand For: Automation
Follow PlanSource on Twitter<https://twitter.com/PlanSource>
PlanSource Demo Days are here! Sign up for an ACA<https://attendee.gotowebinar.com/rt/4136026658172112385> or Overview<https://attendee.gotowebinar.com/rt/2648315956248719116;j=%0Asessionid=3DabcjXrs1xw_b7cVjYJWXu> demo. Learn more.<http://www.plansource.com/plansource-demo/>
This email may contain confidential or protected material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
Send requests to lvs-users-request@LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users