Hi to all,

I have been facing this issue in the past two days.
We have LVS with Keepalived with DR setup .. we have multiple IP's connected and serving many port.

There are two systems - lets say W1 and W2 . that have ports 80/443 - it was working well for the longest time ever. recently we updates the servers to Centos 6.6 for patching ever since the LVS is having issue forwarding connections to the system. however......

ports 80 and 443 are open and the LVS can connect to them. services on the VMs are running fine even LVS can see the have the ports open:

TCP 10.231.11.27:80 wlc persistent 1200
-> 10.231.11.22:80 Route 1 0 0
-> 10.231.11.23:80 Route 1 0 1
TCP 10.231.11.27:443 wlc persistent 1200
-> 10.231.11.22:443 Route 1 0 0
-> 10.231.11.23:443 Route 1 0 2

however after few hours the connections are no longer forwarded. it still shows as up and active and VM's are running - but any connections coming from the LVS is not going. even TCPDUMP is not showing anything.

To fix it I have to 'service keepalived restart' and it works again. and few hours it drops.


Did any one have this issue before and what it the fix.

if you need any further information please let me know.

Thanks guys.

Just to add My arptables were set like this and I added the last line I do not know if that would make a difference !

Code:

:IN ACCEPT [26:728]
:OUT ACCEPT [2:56]
:FORWARD ACCEPT [0:0]
[0:0] -A IN -d 10.231.11.27 -i lo -j DROP
[0:0] -A OUT -s 10.231.11.27 -o eth0 -j mangle --mangle-ip-s 10.231.11.22
----- ADDED : [0:0] -A OUT -s 10.231.11.27 -o any -j DROP

Anything LVS experts can Add.

thanks