LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 02-13-2015, 02:47 PM   #1
maas187
Member
 
Registered: Aug 2008
Location: Yemen
Distribution: Fedora, CentOS, RedHat , OpenFiler, ESXI
Posts: 225

Rep: Reputation: 32
Lightbulb Keepalived + LVS + Direct Routing.


Hi to all,

I have been facing this issue in the past two days.
We have LVS with Keepalived with DR setup .. we have multiple IP's connected and serving many port.

There are two systems - lets say W1 and W2 . that have ports 80/443 - it was working well for the longest time ever. recently we updates the servers to Centos 6.6 for patching ever since the LVS is having issue forwarding connections to the system. however......

ports 80 and 443 are open and the LVS can connect to them. services on the VMs are running fine even LVS can see the have the ports open:

TCP 10.231.11.27:80 wlc persistent 1200
-> 10.231.11.22:80 Route 1 0 0
-> 10.231.11.23:80 Route 1 0 1
TCP 10.231.11.27:443 wlc persistent 1200
-> 10.231.11.22:443 Route 1 0 0
-> 10.231.11.23:443 Route 1 0 2

however after few hours the connections are no longer forwarded. it still shows as up and active and VM's are running - but any connections coming from the LVS is not going. even TCPDUMP is not showing anything.

To fix it I have to 'service keepalived restart' and it works again. and few hours it drops.


Did any one have this issue before and what it the fix.

if you need any further information please let me know.

Thanks guys.
 
Old 02-13-2015, 03:10 PM   #2
maas187
Member
 
Registered: Aug 2008
Location: Yemen
Distribution: Fedora, CentOS, RedHat , OpenFiler, ESXI
Posts: 225

Original Poster
Rep: Reputation: 32
Quote:
Originally Posted by maas187 View Post
Hi to all,

I have been facing this issue in the past two days.
We have LVS with Keepalived with DR setup .. we have multiple IP's connected and serving many port.

There are two systems - lets say W1 and W2 . that have ports 80/443 - it was working well for the longest time ever. recently we updates the servers to Centos 6.6 for patching ever since the LVS is having issue forwarding connections to the system. however......

ports 80 and 443 are open and the LVS can connect to them. services on the VMs are running fine even LVS can see the have the ports open:

TCP 10.231.11.27:80 wlc persistent 1200
-> 10.231.11.22:80 Route 1 0 0
-> 10.231.11.23:80 Route 1 0 1
TCP 10.231.11.27:443 wlc persistent 1200
-> 10.231.11.22:443 Route 1 0 0
-> 10.231.11.23:443 Route 1 0 2

however after few hours the connections are no longer forwarded. it still shows as up and active and VM's are running - but any connections coming from the LVS is not going. even TCPDUMP is not showing anything.

To fix it I have to 'service keepalived restart' and it works again. and few hours it drops.


Did any one have this issue before and what it the fix.

if you need any further information please let me know.

Thanks guys.


Just to add My arptables were set like this and I added the last line I do not know if that would make a difference !


Code:
:IN ACCEPT [26:728]
:OUT ACCEPT [2:56]
:FORWARD ACCEPT [0:0]
[0:0] -A IN -d 10.231.11.27 -i lo -j DROP
[0:0] -A OUT -s 10.231.11.27 -o eth0 -j mangle --mangle-ip-s 10.231.11.22
----- ADDED : [0:0] -A OUT -s 10.231.11.27 -o any -j DROP
 
Old 03-01-2015, 02:05 AM   #3
maas187
Member
 
Registered: Aug 2008
Location: Yemen
Distribution: Fedora, CentOS, RedHat , OpenFiler, ESXI
Posts: 225

Original Poster
Rep: Reputation: 32
Question

Quote:
Originally Posted by maas187 View Post
Just to add My arptables were set like this and I added the last line I do not know if that would make a difference !


Code:
:IN ACCEPT [26:728]
:OUT ACCEPT [2:56]
:FORWARD ACCEPT [0:0]
[0:0] -A IN -d 10.231.11.27 -i lo -j DROP
[0:0] -A OUT -s 10.231.11.27 -o eth0 -j mangle --mangle-ip-s 10.231.11.22
----- ADDED : [0:0] -A OUT -s 10.231.11.27 -o any -j DROP
Anything LVS experts can Add.

thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] load balancer with direct routing (LVS-DIR) williebens Linux - Networking 7 07-22-2014 06:30 AM
[SOLVED] Load Balancing with LVS-NAT, Keepalived, and iptables ccolumbu Linux - Networking 1 05-18-2014 02:58 AM
LVS not routing properly radouane_as Linux - Networking 0 03-04-2012 03:54 PM
LVS + Piranha + Direct Routing + iptables Problem rcamphor Linux - Networking 2 12-22-2009 10:42 PM
Routing and LVS Mikhail_16 Linux - Networking 3 07-22-2004 02:00 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 06:13 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration