Questions tagged [ipvs]
The ipvs tag has no usage guidance.
26
questions
1
vote
1
answer
55
views
Packet with same src addr with loop back beening dropped
There are two servers with the same VIP, and when one server curls another server, the reply packet (which has src addr same as lo addr) seems to be dropped by the request server. How can I allow it?
...
0
votes
0
answers
88
views
persistence_timeout break the LB logic in Keepalived
In a DR mode load balancer configuration with ipvsadm + keepalived, persistence_timeout n value making unexpected issues. I have two real servers configured (web - port 80) for testing purpose.
When I ...
0
votes
0
answers
70
views
Basic LVS implementation
I am testing a basic lvs/ipvsadm implementation.
192.168.1.200 is the Loadbalance Director (Master LB), At the moment I am not testing a VIP.
1.1 enabled sysctl -w net.ipv4.ip_forward=1 in the ...
0
votes
1
answer
37
views
ipvsadm rewriting virtual service ip address
$ sudo ipvsadm -A -u 127.10.5.5:1293
$ sudo ipvsadm -L
IP Virtual Server version 1....
1
vote
0
answers
364
views
Why is access to Kubernetes lost if I turn on the IPVS mode?
The problem is that after enabling the IPVS mode in the kube-proxy, everything works fine for me. But as soon as I install Traefik, I immediately lose connection with Kubernetes.
OS: CentOS 7.9
$ ...
0
votes
1
answer
326
views
How do routing rules from IPTables, IPVS, and NFTables get ordered from a precedent perspective, in the Linux kernel?
The Linux kernel has the ability to route traffic using nftables, iptables, and ipvs. Ive collected 3 related questions here, in order to generally ask the broader overall question of how ...
0
votes
1
answer
520
views
k8s loadbalancer service with externalTrafficPolicy=local passes through client ip on IPv4, hides it on IPv6
I'm having trouble getting a kubernetes IPv6 SingleStack LoadBalancer service passing through the correct source IP address to pods. It works fine on a sister IPv4 SingleStack LoadBalancer that passes ...
1
vote
1
answer
2k
views
Kubernetes : kube-dns service not accessible via ClusterIP
Following an upgrade to v1.19.7 with kubeadm, my pods are unable to request the kube-dns service via the service's ClusterIP. When using the kube-dns pod IP address instead, DNS resolution works.
kube-...
0
votes
0
answers
157
views
IPVS transmitting packets to incorrect backends
We are using ipvs for L4 loadbalancing which transmits packets to L7 backends on ipip tunnel mode.
There are three ipvs systems configured with source hashing for persistence. Sometimes, ipvs is ...
2
votes
1
answer
516
views
Why VRRP require /32 netmask?
In a VRRP configuration I've been using /32 subnet mask but I've never know the reason behind.
Sometimes I've using the same subnet mask as the primary interface, like /24, and in some cases it works ...
1
vote
0
answers
600
views
Dual-way NAT forwarding using IPVS?
I want to replace iptables(8) with IPVS for a TCP reverse proxy which involved dual-way NAT.
My current setup using iptables is functionally equivalent to a userspace forwarder (like socat(1)). It ...
2
votes
0
answers
616
views
Requests to ipvsadm server hang in state SYN_RECV, direct requests to real server OK
I have IPVS configured as:
$ ipvsadm --save
-A -t localhost:<port> -s rr
-a -t localhost:<port> -r <other_hostname>:<port> -m -w 1
It seems to be running:
$ ipvsadm
IP ...
0
votes
1
answer
519
views
IPVS traffic doesn't seem to go through netfilter on the director node
I have the following setup on a director node running keepalived:
native IP 10.65.5.72
VIP 10.65.5.230
keepalived DR mode enabled for
port 80 and 443
I was debugging a problem where I couldn't ...
1
vote
0
answers
141
views
Keepalived_vrrp issue
Configuration
debian version 9.7
architecture ppc64
Issue
I am running keepalived and i am encountering an issue with IPVS, here are the logs :
Feb 16 17:02:35 srv Keepalived_vrrp[10109]: IPVS: ...
1
vote
0
answers
412
views
Docker UDP 'response'
Simply put, I have 2 containers for a service in a swarm mode. Container receives udp packets and sends them back to multiple clients, which ip's and ports are stored in db. Load-balancing: packets ...
2
votes
0
answers
2k
views
Keepalived forwarding UDP traffic to one node via NAT
I am having issues with load balancing UDP Syslog to my Graylog cluster nodes. At first everything seemed to work normal but it seems that traffic is flowing for 99% to one of the two nodes.
I have ...
2
votes
1
answer
2k
views
How do I list Docker VIP addresses?
I can list all container IP address inside a docker overlay network using:
~# docker network inspect <network_id>
I'm trying to do resolver troubleshooting in some Docker swarm stack. It seems ...
2
votes
2
answers
5k
views
Publish Docker Swarm services on specific IP addresses
On Centos 7.4 I am setting up a swarm where I want to run multiple routers all reachable on port 80/443.
The purpose is to host multiple environment (test/staging...) on a single swarm, all ...
-1
votes
2
answers
885
views
ipvs status and netns?
Is the IPVS effort dead? I can't find docs newer than 2011, and most docs are ca. 2004.
It does some interesting things, and I'd like to figure out how to make it work across netns. Specificallty, ...
0
votes
1
answer
65
views
50% of requests failing to one host
I've encountered a weird bug and ran out of ways to troubleshoot it.
I've set up 3 virtual machines: LVS, RS1 and RS2.
RS1 and RS2 are running a simple php website. RS2 is an exact copy of RS1 with ...
0
votes
0
answers
1k
views
LVS + keepalived for load balancing transparent SQUID proxies
I need to load balance a number of SQUID proxies configured in transparent mode. Below is a simple diagram with one LB and SQUID boxes.
----------
| Client |
...
2
votes
1
answer
5k
views
Setting up a LVS on CentOS
I have a 3 node(dedicated servers from a provider) CentOS 7.x cluster. I am trying to set up LVS using the link here.
Each of my machines already has 3 extra alias IP addresses assigned to it. I want ...
1
vote
1
answer
2k
views
Load balancing Bind9 with Keepalived and LVS
How can I correctly configure LVS to masqerade/NAT packets from virtual ip to/from clients?
Currently I have:
UDP 10.47.1.80:domain rr
-> 10.47.1.51:domain Masq 10 0 ...
1
vote
1
answer
2k
views
LVS + HA Proxy for L4 to L7 load balancing
Currently we are using HA proxy for our load balancing needs. We are planning to integrate LVS with HA proxy to create a load balancing solution that can take care of L4 to L7 load balancing and HA.
...
1
vote
1
answer
5k
views
Keepalived sync daemon
I've enabled lvs_sync_daemon_interface option however it looks like sync daemon is not working
Active node:
[MASTER:~]# ipvsadm -Lnc
IPVS connection entries
pro expire state source ...
4
votes
1
answer
614
views
Monitoring Linux Kernel Space Processing
I'm running two "services" that are served in linux kernel-space:
Linux Netfilter Firewall ("iptables")
Linux Virtual Server Loadbalancer ("IPVS", "LVS")
Now I want to (performance-)monitor my "...