[Linux-cluster] ipvs/ipvsadm

[Barry Brimer]

On Tue, 19 May 2009, Sam Wun wrote:

> Hi,
>
> I used the following commands setup a loadbalancer, however, it doesn't work.
>
> ipvsadm -A -t 192.168.1.240:ssh -s wlc -p
> ipvsadm -a -t 192.168.1.240:ssh -r 192.168.1.246 -i -w 3
>
> Here is the IP configuration:
> eth0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>        options=8<VLAN_MTU>
>        ether 00:13:20:65:ad:bd
>        inet 192.168.1.248 netmask 0xffffff00 broadcast 192.168.1.255
>        inet 192.168.1.240 netmask 0xffffff00 broadcast 192.168.1.255
>        media: Ethernet autoselect (100baseTX <full-duplex>)
>        status: active
>
> If I remove the ipvsadm setup with "ipvsadm -C", ssh into
> 192.168.1.240 works for 192.168.1.240 host.
>
> With the above ipvadm rules in-placed,
> I can't ssh thru 192.168.1.240 and ipvsadm shown:
> # ipvsadm
> IP Virtual Server version 1.0.10 (size=4096)
> Prot LocalAddress:Port Scheduler Flags
>  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
> TCP  192.168.1.240:ssh wlc persistent 360
>  -> 192.168.1.246:ssh            Tunnel  3      0          1
>
> What is the correct steps to setup ipvs and use ipvsadm?
>
> Your help is very much appreciated.
> Thanks

Your ipvsadm output shows you using tunneling .. if you drop the "-i" in 
your second ipvsadm statement you will be using gatewaying, which is what 
I would expect you are looking for?  Past that you will need to block 
arps, bind your address to localhost, etc as one would do for gatewaying.