The VIP should be on eth0, like you said - the clients need to be able to reach it. And on the real servers (web servers), you would do the VIP on lo:0 AND the sysctl.conf settings. Chris -----Original Message----- From: linux-cluster-bounces@xxxxxxxxxx [mailto:linux-cluster-bounces@xxxxxxxxxx] On Behalf Of William Ottley Sent: Saturday, January 05, 2008 2:15 PM To: linux-cluster@xxxxxxxxxx Subject: where would the VIP be? I'm trying to setup a LVS-TUN, which has 3 internet connections. eth0 - public (client) eth1 - public TUN to webserver 1 eth2 - public TUN to webserver 2 and webserver 3 where would the VIP be? eth0:1?, also, do we enable forward to the webservers or just the LVS? I'm also confused about the lo:0. do we do that on the webservers or just do the: /etc/sysctl.conf: net.ipv4.conf.eth0.arp_ignore = 1 net.ipv4.conf.eth0.arp_announce = 2 net.ipv4.conf.all.arp_ignore = 1 net.ipv4.conf.all.arp_announce = 2 sysctl -p thanks for any insight! William -- --------------- Morpheus: After this, there is no turning back. You take the blue pill - the story ends, you wake up in your bed and believe whatever you want to believe. You take the red pill - you stay in Wonderland and I show you how deep the rabbit-hole goes. -- Linux-cluster mailing list Linux-cluster@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/linux-cluster -- Linux-cluster mailing list Linux-cluster@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/linux-cluster