View previous topic :: View next topic |
Author |
Message |
chronotech n00b
Joined: 26 Jun 2009 Posts: 3
|
Posted: Tue Sep 01, 2009 8:26 am Post subject: Virtual Server via IP Tunneling |
|
|
Hi,
I have installed an Ipvs tun like on http://www.linuxvirtualserver.org/VS-IPTunneling.html
I have 2 real server already working but i cant add a new server.
Here is my procedure : (i test on pop3)
1 - First on IP virtual server :
# ipvsadm -A -t xxx.xxx.xxx.xxx:pop3 -s wlc
# ipvsadm -a -t xxx.xxx.xxx.xxx:pop3 -r mx1.domain.tld:pop3 -i -w 1
2 - On the new real server, i add a script to /etc/conf.d/local.start :
# vi /root/lvs.sh
#!/bin/sh
echo 1 > /proc/sys/net/ipv4/ip_forward
ifconfig tunl0 xxx.xxx.xxx.xxx netmask 255.255.255.255 broadcast xxx.xxx.xxx.xxx up
ifconfig eth0 mtu 1200
ifconfig tunl0 mtu 1300 # fixe le mtu du tunnel (100 de plus pour les paquet suppl)
3 - On the new real server, i add to /etc/sysctl.conf
net.ipv4.conf.tunl0.arp_ignore = 1
net.ipv4.conf.tunl0.arp_announce = 2
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.all.rp_filter = 0
4 - i reboot real server
5 - test:
on cmd(windows), i make "telnet xxx.xxx.xxx.xxx 110" ----> timeout
but, at the same time, i make ifconfig on real server and i see RX bytes on tun10 (tunnel) increasing !!
Does anyone has an idea about my problem ? |
|
Back to top |
|
|
richard.scott Veteran
Joined: 19 May 2003 Posts: 1497 Location: Oxfordshire, UK
|
Posted: Tue Sep 01, 2009 10:12 am Post subject: |
|
|
Did you run this on the IPVS server:
Code: | # echo 1 > /proc/sys/net/ipv4/ip_forward |
Also, if both the IPVS Server and Real servers are on the same network, try the DR method rather than TUN.
It's easier to trouble shoot and quicker as there is no ip encapsulation.
Also, is the pop3 deamon listening on the xxx.xxx.xxx.xxx ip?
If you run this on the real server you can tell:
Code: | # netstat -nat | grep LISTEN |
Rich. |
|
Back to top |
|
|
chronotech n00b
Joined: 26 Jun 2009 Posts: 3
|
Posted: Tue Sep 01, 2009 12:16 pm Post subject: |
|
|
i don't run # echo 1 > /proc/sys/net/ipv4/ip_forward on IPVS server :
Code: | # cat /proc/sys/net/ipv4/ip_forward
0 |
But IPVS server already work with 2 real server. Only the third (new) real server doesn't work
I can't use DR method rather than TUN because IPVS server work with 2 existing servers
When i make # netstat -nat | grep LISTEN, i get :
Code: | # netstat -nat | grep LISTEN
tcp 0 0 0.0.0.0:4001 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:58130 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN
tcp 0 0 xxx.xxx.xxx.xxx(real server ip):53 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN
|
|
|
Back to top |
|
|
|