Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Virtual Server via IP Tunneling
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
chronotech
n00b
n00b


Joined: 26 Jun 2009
Posts: 3

PostPosted: Tue Sep 01, 2009 8:26 am    Post subject: Virtual Server via IP Tunneling Reply with quote

Hi,

I have installed an Ipvs tun like on http://www.linuxvirtualserver.org/VS-IPTunneling.html
I have 2 real server already working but i cant add a new server.

Here is my procedure : (i test on pop3)

1 - First on IP virtual server :

# ipvsadm -A -t xxx.xxx.xxx.xxx:pop3 -s wlc
# ipvsadm -a -t xxx.xxx.xxx.xxx:pop3 -r mx1.domain.tld:pop3 -i -w 1


2 - On the new real server, i add a script to /etc/conf.d/local.start :

# vi /root/lvs.sh

#!/bin/sh
echo 1 > /proc/sys/net/ipv4/ip_forward

ifconfig tunl0 xxx.xxx.xxx.xxx netmask 255.255.255.255 broadcast xxx.xxx.xxx.xxx up

ifconfig eth0 mtu 1200
ifconfig tunl0 mtu 1300 # fixe le mtu du tunnel (100 de plus pour les paquet suppl)



3 - On the new real server, i add to /etc/sysctl.conf

net.ipv4.conf.tunl0.arp_ignore = 1
net.ipv4.conf.tunl0.arp_announce = 2
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.all.rp_filter = 0


4 - i reboot real server

5 - test:

on cmd(windows), i make "telnet xxx.xxx.xxx.xxx 110" ----> timeout
but, at the same time, i make ifconfig on real server and i see RX bytes on tun10 (tunnel) increasing !!

Does anyone has an idea about my problem ?
Back to top
View user's profile Send private message
richard.scott
Veteran
Veteran


Joined: 19 May 2003
Posts: 1497
Location: Oxfordshire, UK

PostPosted: Tue Sep 01, 2009 10:12 am    Post subject: Reply with quote

Did you run this on the IPVS server:

Code:
# echo 1 > /proc/sys/net/ipv4/ip_forward


Also, if both the IPVS Server and Real servers are on the same network, try the DR method rather than TUN.
It's easier to trouble shoot and quicker as there is no ip encapsulation.

Also, is the pop3 deamon listening on the xxx.xxx.xxx.xxx ip?

If you run this on the real server you can tell:

Code:
# netstat -nat | grep LISTEN


Rich.
Back to top
View user's profile Send private message
chronotech
n00b
n00b


Joined: 26 Jun 2009
Posts: 3

PostPosted: Tue Sep 01, 2009 12:16 pm    Post subject: Reply with quote

i don't run # echo 1 > /proc/sys/net/ipv4/ip_forward on IPVS server :

Code:
# cat /proc/sys/net/ipv4/ip_forward
0


But IPVS server already work with 2 real server. Only the third (new) real server doesn't work :(

I can't use DR method rather than TUN because IPVS server work with 2 existing servers

When i make # netstat -nat | grep LISTEN, i get :

Code:
# netstat -nat | grep LISTEN
tcp        0      0 0.0.0.0:4001            0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:783           0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:58130           0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN
tcp        0      0 xxx.xxx.xxx.xxx(real server ip):53         0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum