Mailing List Archive: Linux Virtual Server: Users

[lvs-users] help debugging a weird problem. I think it is LVS

Index | Next | Previous | View Threaded

rtparies at gmail

Feb 14, 2008, 2:20 PM

Post #1 of 8 (320 views)
Permalink

[lvs-users] help debugging a weird problem. I think it is LVS

Hello,
So here is my setup.
I have 1 director and 3 real servers
the director is running Ultra monkey 2.4.20-30.9.um.1
the real servers 2 are fc4 and one is centos 5

I have a group of customers that say they can not get to my site( of
course it is not always, but often)

they are 90% either roadrunner or aol customers.

they can do a tracert and and nslookup both which are ok. But when
they try to do to my site it just times out.
Each of my real servers also have public ips.
when this problem occurs i can get to each of the boxes on their public IPs
ie
http://realserver1.domain.com
http://realserver2.domain.com
http://realserver3.domain.com

but can not get to www.domain.com

Also i am not sure if this is related or not, i have another
roadrunner customer that can get to my http site but can not get to my
https site. It behaves this same

Just need some ideas on how to debug this ugly one

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

graeme at graemef

Feb 14, 2008, 2:32 PM

Post #2 of 8 (298 views)
Permalink

Re: [lvs-users] help debugging a weird problem. I think it is LVS [In reply to]

Randy

On Thu, 2008-02-14 at 16:20 -0600, Randy Paries wrote:
> they are 90% either roadrunner or aol customers.

Are you using persistence?

Your RR or AOL users may be suffering from their "wandering proxy"
problem.

Graeme

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

rtparies at gmail

Feb 14, 2008, 2:45 PM

Post #3 of 8 (298 views)
Permalink

Re: [lvs-users] help debugging a weird problem. I think it is LVS [In reply to]

On Thu, Feb 14, 2008 at 4:32 PM, Graeme Fowler <graeme[at]graemef.net> wrote:
> Randy
>
>
> On Thu, 2008-02-14 at 16:20 -0600, Randy Paries wrote:
> > they are 90% either roadrunner or aol customers.
>
> Are you using persistence?
>
> Your RR or AOL users may be suffering from their "wandering proxy"
> problem.
>
> Graeme

Graeme

Thanks for the response

in my ldirectord.cf i have persistent=1800

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

graeme at graemef

Feb 14, 2008, 3:03 PM

Post #4 of 8 (294 views)
Permalink

Re: [lvs-users] help debugging a weird problem. I think it is LVS [In reply to]

On Thu, 2008-02-14 at 16:45 -0600, Randy Paries wrote:
> in my ldirectord.cf i have persistent=1800

OK, well...

AOL (I don't know if RR do this, but as a TW subsidiary, and therefore
probably using AOL's infrastructure these days with AOL tie-in) provide
a proxy farm for their users.

This means that a session initiated by a single client could appear to
wander between several proxies; in turn that means if you have
session-based applications or persistence in use that they could end up
(in a basic sense) having to login several times, repeatedly. Worst
case, depending on the application in use at your end, they might just
be refused connections as their session is not in place.

Joe has documented this here:

http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.persistent_connection.html#proxy_farm

There's a lot of info there, so take the time to read it and see if the
provided solutions work (or, indeed, are relevant) for you.

Graeme

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

rtparies at gmail

Feb 14, 2008, 3:14 PM

Post #5 of 8 (296 views)
Permalink

Re: [lvs-users] help debugging a weird problem. I think it is LVS [In reply to]

On Thu, Feb 14, 2008 at 5:03 PM, Graeme Fowler <graeme[at]graemef.net> wrote:
> On Thu, 2008-02-14 at 16:45 -0600, Randy Paries wrote:
> > in my ldirectord.cf i have persistent=1800
>
> OK, well...
>
> AOL (I don't know if RR do this, but as a TW subsidiary, and therefore
> probably using AOL's infrastructure these days with AOL tie-in) provide
> a proxy farm for their users.
>
> This means that a session initiated by a single client could appear to
> wander between several proxies; in turn that means if you have
> session-based applications or persistence in use that they could end up
> (in a basic sense) having to login several times, repeatedly. Worst
> case, depending on the application in use at your end, they might just
> be refused connections as their session is not in place.
>
> Joe has documented this here:
>
> http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.persistent_connection.html#proxy_farm
>
> There's a lot of info there, so take the time to read it and see if the
> provided solutions work (or, indeed, are relevant) for you.
>
>
>
> Graeme

Graeme,
thanks for the help.

I am familiar with this problem, but they can not even get to the home
page (which is pure static html and needing no session/state info)

that is why i am confused. So would the persistence problem be an
issue or applicable here?

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

fixedored at gmail

Feb 14, 2008, 3:57 PM

Post #6 of 8 (293 views)
Permalink

Re: [lvs-users] help debugging a weird problem. I think it is LVS [In reply to]

Randy Paries wrote:
> On Thu, Feb 14, 2008 at 5:03 PM, Graeme Fowler <graeme[at]graemef.net> wrote:
>> On Thu, 2008-02-14 at 16:45 -0600, Randy Paries wrote:
>> > in my ldirectord.cf i have persistent=1800
>>
>> OK, well...
>>
>> AOL (I don't know if RR do this, but as a TW subsidiary, and therefore
>> probably using AOL's infrastructure these days with AOL tie-in) provide
>> a proxy farm for their users.
>>
>> This means that a session initiated by a single client could appear to
>> wander between several proxies; in turn that means if you have
>> session-based applications or persistence in use that they could end up
>> (in a basic sense) having to login several times, repeatedly. Worst
>> case, depending on the application in use at your end, they might just
>> be refused connections as their session is not in place.
>>
>> Joe has documented this here:
>>
>> http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.persistent_connection.html#proxy_farm
>>
>> There's a lot of info there, so take the time to read it and see if the
>> provided solutions work (or, indeed, are relevant) for you.
>>
>>
>>
>> Graeme
>
> Graeme,
> thanks for the help.
>
> I am familiar with this problem, but they can not even get to the home
> page (which is pure static html and needing no session/state info)
>
> that is why i am confused. So would the persistence problem be an
> issue or applicable here?

How are your servers returning? are they sending the return via the vip
or the realip? My first guess is that the request goes to the vip but
the servers are sending the return from the realip and getting stopped
by firewall rules..

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

rtparies at gmail

Feb 14, 2008, 5:53 PM

Post #7 of 8 (296 views)
Permalink

Re: [lvs-users] help debugging a weird problem. I think it is LVS [In reply to]

On Thu, Feb 14, 2008 at 5:57 PM, Jeff D <fixedored[at]gmail.com> wrote:
>
> Randy Paries wrote:
> > On Thu, Feb 14, 2008 at 5:03 PM, Graeme Fowler <graeme[at]graemef.net> wrote:
> >> On Thu, 2008-02-14 at 16:45 -0600, Randy Paries wrote:
> >> > in my ldirectord.cf i have persistent=1800
> >>
> >> OK, well...
> >>
> >> AOL (I don't know if RR do this, but as a TW subsidiary, and therefore
> >> probably using AOL's infrastructure these days with AOL tie-in) provide
> >> a proxy farm for their users.
> >>
> >> This means that a session initiated by a single client could appear to
> >> wander between several proxies; in turn that means if you have
> >> session-based applications or persistence in use that they could end up
> >> (in a basic sense) having to login several times, repeatedly. Worst
> >> case, depending on the application in use at your end, they might just
> >> be refused connections as their session is not in place.
> >>
> >> Joe has documented this here:
> >>
> >> http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.persistent_connection.html#proxy_farm
> >>
> >> There's a lot of info there, so take the time to read it and see if the
> >> provided solutions work (or, indeed, are relevant) for you.
> >>
> >>
> >>
> >> Graeme
> >
> > Graeme,
> > thanks for the help.
> >
> > I am familiar with this problem, but they can not even get to the home
> > page (which is pure static html and needing no session/state info)
> >
> > that is why i am confused. So would the persistence problem be an
> > issue or applicable here?
>
>
> How are your servers returning? are they sending the return via the vip
> or the realip? My first guess is that the request goes to the vip but
> the servers are sending the return from the realip and getting stopped
> by firewall rules..
>

the servers are returning via each of their own public ips (realip) .
The firewalls are disabled.

thanks
Randy

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

graeme at graemef

Feb 20, 2008, 6:34 AM

Post #8 of 8 (278 views)
Permalink

Re: [lvs-users] help debugging a weird problem. I think it is LVS [In reply to]

On Thu, 2008-02-14 at 19:53 -0600, Randy Paries wrote:
> the servers are returning via each of their own public ips (realip) .
> The firewalls are disabled.

tcpdump time, then.

You need to look at what's happening, starting with the external
interfaces on the directors.

Graeme

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com