RE: redhat-list Digest, Vol 60, Issue 10

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




 
> Message: 3
> Date: Tue, 10 Feb 2009 20:26:40 +0530
> From: lakshmana swamy <klakshman03@xxxxxxxxxxx>
> Subject: LVS-NAT problem
> To: <redhat-list@xxxxxxxxxx>
> Cc: klakshman03@xxxxxxxxxxx
> Message-ID: <BAY115-W3330A0BBA30DB32E32EE40B8BD0@xxxxxxx>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> 
> 
>  Dear All
> 
> I have setup LVS setup of apache with 3 machines (RHEL-5.2). One is LVS and two are Real servers. I have configured through piranha.I have been facing the following problems.
> 
> 
> * when Iam trying to  When Iam trying to telnet on port 80, It gives following error
> 
> #telnet 10.129.150.160 80
> 
> Trying 10.129.150.160...
> telnet: connect to address 10.129.150.160: Connection timed out
> 
> * If Iam trying to browse the 10.129.150.60, following error occured
> 
> "The connection has timed out
>  The server at 10.129.150.160 is taking too long to respond."
> 
> 
> 
> > Here Iam giving my complete setup details. Please help me out.
> 
> 
> LVS1
> ----
> 
> eth0      inet addr:10.129.150.158  Bcast:10.129.150.255  Mask:255.255.255.0  (Public)
>         
> eth0:1    inet addr:10.129.150.160  Bcast:10.129.150.255  Mask:255.255.255.0  (VIP-Public)
>          
> eth1      inet addr:192.168.89.10  Bcast:192.168.89.255  Mask:255.255.255.0   (Private)
>           
> eth1:1    inet addr:192.168.89.15  Bcast:192.168.89.255  Mask:255.255.255.0    (VIP-Private or NAT gateway)
> 
> 
> Real Server rs1 
> -----------
> 
> Interface:eth1
> IP:192.168.89.1
> Mask:255.255.255.0
> Gw: 192.168.89.15  
> 
>        
> Real Server rs2
> -----------
> 
> Interface:eth1
> IP:192.168.89.2
> Mask:255.255.255.0
> Gw: 192.168.89.15     
> 
> LVS configurational file
> -------------------------
> 
> [root@lvs1 ~]# cat /etc/sysconfig/ha/lvs.cf 
> serial_no = 84
> primary = 10.129.150.158
> service = lvs
> backup = 0.0.0.0
> heartbeat = 1
> heartbeat_port = 539
> keepalive = 6
> deadtime = 18
> network = nat
> nat_router = 192.168.89.15 eth1:1
> nat_nmask = 255.255.255.0
> debug_level = NONE
> virtual vrs {
>      active = 1
>      address = 10.129.150.160 eth0:1
>      vip_nmask = 255.255.255.0
>      port = 80
>      send = "GET / HTTP/1.0\r\n\r\n"
>      expect = "HTTP"
>      use_regex = 0
>      load_monitor = none
>      scheduler = wrr
>      protocol = tcp
>      timeout = 6
>      reentry = 15
>      quiesce_server = 0
>      server rs1 {
>          address = 192.168.89.1
>          active = 1
>          weight = 1
>      }
>      server rs2 {
>          address = 192.168.89.2
>          active = 1
>          weight = 1
>      }
> }
> 
> 
>  The following commands has been executed on LVS
>  ------------------------------------------------
>  
> # /sbin/iptables -t mangle -A PREROUTING -p tcp -d 10.129.150.160/32 --dport 80 -j MARK --set-mark 80
> # /sbin/iptables -t nat -A POSTROUTING -p tcp -s 192.168.89.0/24 --sport 80 -j MASQUERADE
> 
> ipvsadm output
> -----------------
> 
> [root@lvs1 ~]# ipvsadm -l
> IP Virtual Server version 1.2.1 (size=4096)
> Prot LocalAddress:Port Scheduler Flags
>   -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
> TCP  lvs1pp.locuz.org:http wrr
>   -> rs2.locuz.org:http           Masq    1      0          0         
>   -> rs1.locuz.org:http           Masq    1      0          1         
> 
> 
> 
> 
>  Thanks 
> 
> Laxman
> 
> _________________________________________________________________
> For the freshest Indian Jobs Visit MSN Jobs
> http://www.in.msn.com/jobs
> 
> ------------------------------
> 
> Message: 4
> Date: Tue, 10 Feb 2009 09:10:00 -0600
> From: Barry Brimer <lists@xxxxxxxxxx>
> Subject: Re: LVS-NAT problem
> To: General Red Hat Linux discussion list <redhat-list@xxxxxxxxxx>
> Message-ID: <1234278600.499198c8c1364@xxxxxxxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> Quoting lakshmana swamy <klakshman03@xxxxxxxxxxx>:
> 
> >
> >
> >  Dear All
> >
> > I have setup LVS setup of apache with 3 machines (RHEL-5.2). One is LVS and
> > two are Real servers. I have configured through piranha.I have been facing
> > the following problems.
> >
> >
> > * when Iam trying to  When Iam trying to telnet on port 80, It gives
> > following error
> >
> > #telnet 10.129.150.160 80
> >
> > Trying 10.129.150.160...
> > telnet: connect to address 10.129.150.160: Connection timed out
> >
> > * If Iam trying to browse the 10.129.150.60, following error occured
> >
> > "The connection has timed out
> >  The server at 10.129.150.160 is taking too long to respond."
> >
> >
> >
> > > Here Iam giving my complete setup details. Please help me out.
> 
> <snip>
> 
> I would remove the 2 iptables rules :
> 
> # /sbin/iptables -t mangle -A PREROUTING -p tcp -d 10.129.150.160/32 --dport 80
> -j MARK --set-mark 80
> 
> You are setting a mark, but you are not using it.  This shouldn't be causing a
> problem, but is not needed.
> 
> 
> # /sbin/iptables -t nat -A POSTROUTING -p tcp -s 192.168.89.0/24 --sport 80 -j
> MASQUERADE
> 
> LVS does all of the NATing that you need for LVS connections.  You will need
> similar rules to get to other network services such as DNS, to work from behind
> LVS to outside network services but not for your LVS itself.
> 
> Make sure that on your LVS in /etc/sysctl.conf you have:
> "net.ipv4.ip_forward = 1" .. if you do not, set that and then run "sysctl -p" as
> root to enable IP forwarding.
> 
> Do not expect to be able to connect to your LVS address from behind the LVS.  It
> doesn't work that way.
> 
> Hope this helps,
> Barry
> 
> 
     Thanks Barry
 
   I did what you suggested

1. Removed that two iptables rules.
2. IP Forwarding was already enabled.

 But still Its giving same error.

 In this  case Iam trying to connect the IP of virtual server.

 

  Is ther any thing wrong in my configuration. ?
  The way Iam testing is not correct, If it is So.. What is the correct way to test the setup

 Please Help me out


 Thanking You

Laxman
  



 
_________________________________________________________________
Wish to Marry Now? Join MSN Matrimony FREE!
http://www.in.msn.com/matrimony-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subjecthttps://www.redhat.com/mailman/listinfo/redhat-list


[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux