Questions tagged [ipvs]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
158 views

Linux load balancing for udp services

I am trying to load balance ISAKMP using linux load balancing. Google searches indicate others have used LVS to load balance udp services successfully. I cant seem to get the load balancer to rewrite ...
user avatar
  • 1
0 votes
0 answers
111 views

How to add ipvs rule to nftables?

I want to do the equivalent of iptables -t nat -A POSTROUTING -m ipvs --vaddr 1.2.3.4 -j MASQUERADE in nftables. The nftables wiki says ipvs is supported, but add rule ip nat POSTROUTING ipvs vaddr 1....
user avatar
  • 191
0 votes
1 answer
147 views

How do routing rules from IPTables, IPVS, and NFTables get ordered from a precedent perspective, in the Linux kernel?

The Linux kernel has the ability to route traffic using nftables, iptables, and ipvs. Ive collected 3 related questions here, in order to generally ask the broader overall question of how ...
user avatar
-1 votes
1 answer
314 views

k8s loadbalancer service with externalTrafficPolicy=local passes through client ip on IPv4, hides it on IPv6

I'm having trouble getting a kubernetes IPv6 SingleStack LoadBalancer service passing through the correct source IP address to pods. It works fine on a sister IPv4 SingleStack LoadBalancer that passes ...
user avatar
  • 7,770
1 vote
0 answers
1k views

Kubernetes : kube-dns service not accessible via ClusterIP

Following an upgrade to v1.19.7 with kubeadm, my pods are unable to request the kube-dns service via the service's ClusterIP. When using the kube-dns pod IP address instead, DNS resolution works. kube-...
user avatar
  • 11
0 votes
0 answers
63 views

IPVS transmitting packets to incorrect backends

We are using ipvs for L4 loadbalancing which transmits packets to L7 backends on ipip tunnel mode. There are three ipvs systems configured with source hashing for persistence. Sometimes, ipvs is ...
user avatar
2 votes
1 answer
288 views

Why VRRP require /32 netmask?

In a VRRP configuration I've been using /32 subnet mask but I've never know the reason behind. Sometimes I've using the same subnet mask as the primary interface, like /24, and in some cases it works ...
user avatar
  • 674
1 vote
0 answers
405 views

Dual-way NAT forwarding using IPVS?

I want to replace iptables(8) with IPVS for a TCP reverse proxy which involved dual-way NAT. My current setup using iptables is functionally equivalent to a userspace forwarder (like socat(1)). It ...
user avatar
  • 1,016
2 votes
0 answers
469 views

Requests to ipvsadm server hang in state SYN_RECV, direct requests to real server OK

I have IPVS configured as: $ ipvsadm --save -A -t localhost:<port> -s rr -a -t localhost:<port> -r <other_hostname>:<port> -m -w 1 It seems to be running: $ ipvsadm IP ...
user avatar
  • 151
0 votes
1 answer
364 views

IPVS traffic doesn't seem to go through netfilter on the director node

I have the following setup on a director node running keepalived: native IP 10.65.5.72 VIP 10.65.5.230 keepalived DR mode enabled for port 80 and 443 I was debugging a problem where I couldn't ...
user avatar
1 vote
0 answers
120 views

Keepalived_vrrp issue

Configuration debian version 9.7 architecture ppc64 Issue I am running keepalived and i am encountering an issue with IPVS, here are the logs : Feb 16 17:02:35 srv Keepalived_vrrp[10109]: IPVS: ...
user avatar
  • 143
1 vote
0 answers
333 views

Docker UDP 'response'

Simply put, I have 2 containers for a service in a swarm mode. Container receives udp packets and sends them back to multiple clients, which ip's and ports are stored in db. Load-balancing: packets ...
user avatar
2 votes
0 answers
1k views

Keepalived forwarding UDP traffic to one node via NAT

I am having issues with load balancing UDP Syslog to my Graylog cluster nodes. At first everything seemed to work normal but it seems that traffic is flowing for 99% to one of the two nodes. I have ...
user avatar
  • 121
2 votes
1 answer
2k views

How do I list Docker VIP addresses?

I can list all container IP address inside a docker overlay network using: ~# docker network inspect <network_id> I'm trying to do resolver troubleshooting in some Docker swarm stack. It seems ...
user avatar
  • 123
2 votes
2 answers
5k views

Publish Docker Swarm services on specific IP addresses

On Centos 7.4 I am setting up a swarm where I want to run multiple routers all reachable on port 80/443. The purpose is to host multiple environment (test/staging...) on a single swarm, all ...
user avatar
  • 23
-1 votes
2 answers
771 views

ipvs status and netns?

Is the IPVS effort dead? I can't find docs newer than 2011, and most docs are ca. 2004. It does some interesting things, and I'd like to figure out how to make it work across netns. Specificallty, ...
user avatar
0 votes
1 answer
64 views

50% of requests failing to one host

I've encountered a weird bug and ran out of ways to troubleshoot it. I've set up 3 virtual machines: LVS, RS1 and RS2. RS1 and RS2 are running a simple php website. RS2 is an exact copy of RS1 with ...
user avatar
0 votes
0 answers
1k views

LVS + keepalived for load balancing transparent SQUID proxies

I need to load balance a number of SQUID proxies configured in transparent mode. Below is a simple diagram with one LB and SQUID boxes. ---------- | Client | ...
user avatar
2 votes
1 answer
5k views

Setting up a LVS on CentOS

I have a 3 node(dedicated servers from a provider) CentOS 7.x cluster. I am trying to set up LVS using the link here. Each of my machines already has 3 extra alias IP addresses assigned to it. I want ...
user avatar
1 vote
1 answer
2k views

Load balancing Bind9 with Keepalived and LVS

How can I correctly configure LVS to masqerade/NAT packets from virtual ip to/from clients? Currently I have: UDP 10.47.1.80:domain rr -> 10.47.1.51:domain Masq 10 0 ...
user avatar
1 vote
1 answer
2k views

LVS + HA Proxy for L4 to L7 load balancing

Currently we are using HA proxy for our load balancing needs. We are planning to integrate LVS with HA proxy to create a load balancing solution that can take care of L4 to L7 load balancing and HA. ...
user avatar
  • 11
1 vote
1 answer
5k views

Keepalived sync daemon

I've enabled lvs_sync_daemon_interface option however it looks like sync daemon is not working Active node: [MASTER:~]# ipvsadm -Lnc IPVS connection entries pro expire state source ...
user avatar
  • 3,020
4 votes
1 answer
588 views

Monitoring Linux Kernel Space Processing

I'm running two "services" that are served in linux kernel-space: Linux Netfilter Firewall ("iptables") Linux Virtual Server Loadbalancer ("IPVS", "LVS") Now I want to (performance-)monitor my "...
user avatar
  • 3,150