Mailing List Archive: Linux Virtual Server: Users

[lvs-users] Lvs for multi-site/subnet terminal services

Index | Next | Previous | View Threaded

pdickson at FrederickCountyMD

Jul 22, 2009, 4:20 AM

Post #1 of 8 (1400 views)
Permalink

[lvs-users] Lvs for multi-site/subnet terminal services

Does anyone know of a good how-to for doing this? I googled and found a
couple different walk throughs.. One specific to http and another specific
terminal services but neither worked. Tables were there, I could see the
connections coming from and to the right place on the correct ports, but no
terminal services session would show.

Paul K. Dickson
Systems Administrator
Frederick County Government, IIT
pdickson [at] fredco-md
301-600-2399/x12399

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

graeme at graemef

Jul 22, 2009, 4:47 AM

Post #2 of 8 (1340 views)
Permalink

Re: [lvs-users] Lvs for multi-site/subnet terminal services [In reply to]

Paul

On Wed, 2009-07-22 at 07:20 -0400, Paul Dickson wrote:
> Does anyone know of a good how-to for doing this?

Look at the footer of all list messages on this list. The first link
contains a link to the LVS "Bible" - Joe's HOWTO docs.

There's also a very accurate an simple example in the ipvsadm man page.

If you still can't get it working, how about you let us know what
configuration or steps you're currently following and we'll debug from
there.

Graeme

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

pdickson at FrederickCountyMD

Jul 22, 2009, 5:53 AM

Post #3 of 8 (1340 views)
Permalink

Re: [lvs-users] Lvs for multi-site/subnet terminal services [In reply to]

Thanks for the suggestion. Looking at the man page it it's exactly what I'm
doing, the connection report shows. I've tried tunnel, masq, and route.
I've created the service with and without the netmask. Any ideas?

root [at] templat:~# ipvsadm -C
root [at] templat:~# ipvsadm -A -t 10.14.2.157:3389 -s wlc
root [at] templat:~# ipvsadm -a -t 10.14.2.157:3389 -r 10.14.3.133 -i -w 100
root [at] templat:~# ipvsadm -a -t 10.14.2.157:3389 -r 10.14.3.121 -i -w 100
root [at] templat:~# ipvsadm
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP template:3389 wlc
-> tslec01.nt1.local:3389 Tunnel 100 0 0
-> tslec03.nt1.local:3389 Tunnel 100 0 1

Paul K. Dickson
Systems Administrator
Frederick County Government, IIT
pdickson [at] fredco-md
301-600-2399/x12399

> From: Graeme Fowler <graeme [at] graemef>
> Reply-To: "LinuxVirtualServer.org users mailing list."
> <lvs-users [at] linuxvirtualserver>
> Date: Wed, 22 Jul 2009 12:47:08 +0100
> To: "LinuxVirtualServer.org users mailing list."
> <lvs-users [at] linuxvirtualserver>
> Subject: Re: [lvs-users] Lvs for multi-site/subnet terminal services
>
> Paul
>
> On Wed, 2009-07-22 at 07:20 -0400, Paul Dickson wrote:
>> Does anyone know of a good how-to for doing this?
>
> Look at the footer of all list messages on this list. The first link
> contains a link to the LVS "Bible" - Joe's HOWTO docs.
>
> There's also a very accurate an simple example in the ipvsadm man page.
>
> If you still can't get it working, how about you let us know what
> configuration or steps you're currently following and we'll debug from
> there.
>
> Graeme
>
>
> _______________________________________________
> Please read the documentation before posting - it's available at:
> http://www.linuxvirtualserver.org/
>
> LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
> Send requests to lvs-users-request [at] LinuxVirtualServer
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

graeme at graemef

Jul 22, 2009, 6:01 AM

Post #4 of 8 (1329 views)
Permalink

Re: [lvs-users] Lvs for multi-site/subnet terminal services [In reply to]

Hi Paul

On Wed, 2009-07-22 at 08:53 -0400, Paul Dickson wrote:
> Thanks for the suggestion. Looking at the man page it it's exactly what I'm
> doing, the connection report shows. I've tried tunnel, masq, and route.
> I've created the service with and without the netmask. Any ideas?

Yes - don't use tunnelling. You're working with Windows machines, and
tunnelling is more difficult than it needs to be.

Do your realservers (10.14.3.133 and 10.14.3.121 in your message) use
the director as their default gateway, or not? That will dictate whether
you use NAT (masq) or DR (gate).

Graeme

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

pdickson at frederickcountymd

Jul 22, 2009, 6:15 AM

Post #5 of 8 (1332 views)
Permalink

Re: [lvs-users] Lvs for multi-site/subnet terminal services [In reply to]

The default gateway for the target servers is 10.14.3.1. I'd prefer to use
DR for performance reasons. Wading through the mini howto it looks like I
need to have the VIP on the target servers as well. The problem is they are
on a different subnet so I'm not sure how to make that work.

Paul K. Dickson
Systems Administrator
Frederick County Government, IIT
pdickson [at] fredco-md
301-600-2399/x12399

> From: Graeme Fowler <graeme [at] graemef>
> Reply-To: "LinuxVirtualServer.org users mailing list."
> <lvs-users [at] linuxvirtualserver>
> Date: Wed, 22 Jul 2009 14:01:12 +0100
> To: "LinuxVirtualServer.org users mailing list."
> <lvs-users [at] linuxvirtualserver>
> Subject: Re: [lvs-users] Lvs for multi-site/subnet terminal services
>
> Hi Paul
>
> On Wed, 2009-07-22 at 08:53 -0400, Paul Dickson wrote:
>> Thanks for the suggestion. Looking at the man page it it's exactly what I'm
>> doing, the connection report shows. I've tried tunnel, masq, and route.
>> I've created the service with and without the netmask. Any ideas?
>
> Yes - don't use tunnelling. You're working with Windows machines, and
> tunnelling is more difficult than it needs to be.
>
> Do your realservers (10.14.3.133 and 10.14.3.121 in your message) use
> the director as their default gateway, or not? That will dictate whether
> you use NAT (masq) or DR (gate).
>
> Graeme
>
>
> _______________________________________________
> Please read the documentation before posting - it's available at:
> http://www.linuxvirtualserver.org/
>
> LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
> Send requests to lvs-users-request [at] LinuxVirtualServer
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

graeme at graemef

Jul 22, 2009, 6:46 AM

Post #6 of 8 (1340 views)
Permalink

Re: [lvs-users] Lvs for multi-site/subnet terminal services [In reply to]

On Wed, 2009-07-22 at 09:15 -0400, Paul Dickson wrote:
> The default gateway for the target servers is 10.14.3.1. I'd prefer to use
> DR for performance reasons. Wading through the mini howto it looks like I
> need to have the VIP on the target servers as well. The problem is they are
> on a different subnet so I'm not sure how to make that work.

They're Windows machines; you'll need to install the "Microsoft Loopback
Adapter" via the "Add Hardware" wizard.

You then configure that with the VIP and ensure that it has a /32
(255.255.255.255) netmask, either in the settings (Server 2008 allows
this I believe) or via the Registry (you'll have to Google for that
one).

The reason for this is that IPVS is a router - it shovels packets around
unaltered unless you use NAT in which case the destination IP is altered
on the way to the realserver, and the source IP is altered on the way
back to the client. In DR mode all it's doing is handing off packets to
a "next hop" - if that next hop doesn't know what to do with them,
they'll get dropped.

Good luck!

Graeme

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

leon at linux

Jul 22, 2009, 7:01 AM

Post #7 of 8 (1331 views)
Permalink

Re: [lvs-users] Lvs for multi-site/subnet terminal services [In reply to]

On Wed, 2009-07-22 at 14:46 +0100, Graeme Fowler wrote:
> On Wed, 2009-07-22 at 09:15 -0400, Paul Dickson wrote:
> > The default gateway for the target servers is 10.14.3.1. I'd prefer to use
> > DR for performance reasons. Wading through the mini howto it looks like I
> > need to have the VIP on the target servers as well. The problem is they are
> > on a different subnet so I'm not sure how to make that work.
>
> They're Windows machines; you'll need to install the "Microsoft Loopback
> Adapter" via the "Add Hardware" wizard.
>
> You then configure that with the VIP and ensure that it has a /32
> (255.255.255.255) netmask, either in the settings (Server 2008 allows
> this I believe) or via the Registry (you'll have to Google for that
> one).

Also (this is at least true for win2k) configure the loopback adapter to
use a metric of 253.

--
Léon

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

pdickson at frederickcountymd

Jul 22, 2009, 8:42 AM

Post #8 of 8 (1339 views)
Permalink

Re: [lvs-users] Lvs for multi-site/subnet terminal services [In reply to]

I switched target boxes because I didn't want to mess around with network
stuff on a production box. Anyway I created the loopback adapter on my
target box, set it to have the VIP with the netmask 255.255.255.0. I tried
it with no gateway, the gateway of my physical NIC, and my physical NIC's
IP. I assume being a local loopback it doesn't need a gateway but I'm quite
confused about the whole thing. It seems like it�s getting to the target
box but the response is going no where. Here is my config on my LVS box.

root [at] templat:~# ifconfig
eth2 Link encap:Ethernet HWaddr 00:50:56:ad:40:e6
inet addr:10.14.2.157 Bcast:10.14.2.255 Mask:255.255.255.0
inet6 addr: fe80::250:56ff:fead:40e6/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2251826 errors:100 dropped:0 overruns:0 frame:0
TX packets:1560562 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:691081526 (691.0 MB) TX bytes:122118021 (122.1 MB)
Interrupt:18 Base address:0x1424

eth2:0 Link encap:Ethernet HWaddr 00:50:56:ad:40:e6
inet addr:10.14.2.158 Bcast:10.14.2.158 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Interrupt:18 Base address:0x1424

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:842 errors:0 dropped:0 overruns:0 frame:0
TX packets:842 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:160192 (160.1 KB) TX bytes:160192 (160.1 KB)

10.14.2.158 is the VIP.

This is the setup of my target terminal server. First the local loopback
then the physical nic.

Paul K. Dickson
Systems Administrator
Frederick County Government, IIT
pdickson [at] fredco-md
301-600-2399/x12399

> From: "L.S. Keijser" <leon [at] linux>
> Reply-To: "LinuxVirtualServer.org users mailing list."
> <lvs-users [at] linuxvirtualserver>
> Date: Wed, 22 Jul 2009 16:01:29 +0200
> To: "LinuxVirtualServer.org users mailing list."
> <lvs-users [at] linuxvirtualserver>
> Subject: Re: [lvs-users] Lvs for multi-site/subnet terminal services
>
> On Wed, 2009-07-22 at 14:46 +0100, Graeme Fowler wrote: > On Wed, 2009-07-22
> at 09:15 -0400, Paul Dickson wrote: > > The default gateway for the target
> servers is 10.14.3.1. I'd prefer to use > > DR for performance reasons.
> Wading through the mini howto it looks like I > > need to have the VIP on the
> target servers as well. The problem is they are > > on a different subnet so
> I'm not sure how to make that work. > > They're Windows machines; you'll need
> to install the "Microsoft Loopback > Adapter" via the "Add Hardware" wizard. >
> > You then configure that with the VIP and ensure that it has a /32 >
> (255.255.255.255) netmask, either in the settings (Server 2008 allows > this I
> believe) or via the Registry (you'll have to Google for that > one). Also
> (this is at least true for win2k) configure the loopback adapter to use a
> metric of 253. --
> L�on _______________________________________________ Please read the
> documentation before posting - it's available
> at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list -
> lvs-users [at] LinuxVirtualServer Send requests to
> lvs-users-request [at] LinuxVirtualServer or go to
> http://lists.graemef.net/mailman/listinfo/lvs-users

Attachments:

image.png (6.92 KB)

image.png (7.35 KB)

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads