Mailing List Archive: Linux Virtual Server: Users

[lvs-users] IPv6 tunnel forwarding method ?

Index | Next | Previous | View Threaded

nicolas.haller at corp

Sep 10, 2009, 2:28 AM

Post #1 of 7 (849 views)
Permalink

[lvs-users] IPv6 tunnel forwarding method ?

Hi all,

I'm testing the IPv6 features of LVS. I have compiled a kernel 2.6.30
and ipvsadm from the svn.

At this page(http://kb.linuxvirtualserver.org/wiki/IPv6_load_balancing),
it seemes the IPv6 patch maybe permits to use Tunnel forwarding
mechanisms.

The problem went when I configure the service with ipvsadm. When I try
to add a server, ipvsadm don't care about the -i option and add the
server with local forward method.

Is it normal or there is a way I don't see?

Regards,

--
Nicolas Haller

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

horms at verge

Sep 10, 2009, 3:35 AM

Post #2 of 7 (801 views)
Permalink

Re: [lvs-users] IPv6 tunnel forwarding method ? [In reply to]

On Thu, Sep 10, 2009 at 11:28:12AM +0200, Nicolas Haller wrote:
> Hi all,
>
> I'm testing the IPv6 features of LVS. I have compiled a kernel 2.6.30
> and ipvsadm from the svn.
>
> At this page(http://kb.linuxvirtualserver.org/wiki/IPv6_load_balancing),
> it seemes the IPv6 patch maybe permits to use Tunnel forwarding
> mechanisms.
>
> The problem went when I configure the service with ipvsadm. When I try
> to add a server, ipvsadm don't care about the -i option and add the
> server with local forward method.
>
> Is it normal or there is a way I don't see?

IPVS will use the local forward method if the IP address of the
real-server is a local IP address - that is, it is an address of
one of the interfaces. In this case yes it ignores the -i option.

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

nicolas.haller at corp

Sep 10, 2009, 6:12 AM

Post #3 of 7 (798 views)
Permalink

Re: [lvs-users] IPv6 tunnel forwarding method ? [In reply to]

On Thu, Sep 10, 2009 at 08:35:34PM +1000, Simon Horman wrote:
> On Thu, Sep 10, 2009 at 11:28:12AM +0200, Nicolas Haller wrote:
> > Hi all,
> >
> > I'm testing the IPv6 features of LVS. I have compiled a kernel 2.6.30
> > and ipvsadm from the svn.
> >
> > At this page(http://kb.linuxvirtualserver.org/wiki/IPv6_load_balancing),
> > it seemes the IPv6 patch maybe permits to use Tunnel forwarding
> > mechanisms.
> >
> > The problem went when I configure the service with ipvsadm. When I try
> > to add a server, ipvsadm don't care about the -i option and add the
> > server with local forward method.
> >
> > Is it normal or there is a way I don't see?

> IPVS will use the local forward method if the IP address of the
> real-server is a local IP address - that is, it is an address of
> one of the interfaces. In this case yes it ignores the -i option.

It's not a local IP address :-/

--
Nicolas Haller

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

graeme at graemef

Sep 10, 2009, 6:24 AM

Post #4 of 7 (801 views)
Permalink

Re: [lvs-users] IPv6 tunnel forwarding method ? [In reply to]

Nicolas

On Thu, 2009-09-10 at 15:12 +0200, Nicolas Haller wrote:
> It's not a local IP address :-/

At this point, giving your configuration would be a good idea.

Thanks!

Graeme

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

nicolas.haller at corp

Sep 11, 2009, 2:24 AM

Post #5 of 7 (783 views)
Permalink

Re: [lvs-users] IPv6 tunnel forwarding method ? [In reply to]

On Thu, Sep 10, 2009 at 02:24:31PM +0100, Graeme Fowler wrote:
> Nicolas

> On Thu, 2009-09-10 at 15:12 +0200, Nicolas Haller wrote:
> > It's not a local IP address :-/

> At this point, giving your configuration would be a good idea.

Hi,

Ok, so, I done some clean in my conf this morning and all is right now.

But I have an another problem. It seems LVS don't send the IPIP packet
to the right place.

An ipvsadm --list say:
TCP [2001:7a8:0:fe01::1]:www wlc persistent 120
-> [2001:7a8:1:5::17]:www Tunnel 1 1 1

An ifconfig say:
eth0 Link encap:Ethernet HWaddr 00:30:48:5a:4e:4e
inet adr:194.79.134.250 Bcast:194.79.134.255 Masque:255.255.255.248
adr inet6: fe80::230:48ff:fe5a:4e4e/64 Scope:Lien
adr inet6: 2001:7a8:1:61::250/64 Scope:Global

dummy0 Link encap:Ethernet HWaddr 22:83:2d:0f:68:7e
inet adr:194.79.128.128 Bcast:194.79.128.255 Masque:255.255.255.255
adr inet6: 2001:7a8:0:fe01::1/64 Scope:Global
adr inet6: fe80::2083:2dff:fe0f:687e/64 Scope:Lien

No packet is received to the machine 2001:7a8:1:5::17.

On the director, tcpdump say this:

11:13:56.994105 00:30:48:5a:4e:4e (oui Unknown) > 00:1f:9d:9f:89:42 (oui Unknown), ethertype IPv6 (0x86dd), length 134: 2001:7a8:0:fe01::1 > 2001:7a8:1:5:::
Elf-1-pt.tunnel.tserv6.fra1.ipv6.he.net.33405 > 2001:7a8:0:fe01::1.www: S 2426580310:2426580310(0) win 4880 <mss 1220,sackOK,timestamp 1075822819 0,nop,wscale 6>
(It's my telnet 2001:7a8:0:fe01::1 80 from a client)

11:13:59.993556 00:30:48:5a:4e:4e (oui Unknown) > 00:1f:9d:9f:89:42 (oui Unknown), ethertype IPv6 (0x86dd), length 134: 2001:7a8:0:fe01::1 >
2001:7a8:1:5::: Elf-1-pt.tunnel.tserv6.fra1.ipv6.he.net.33405 > 2001:7a8:0:fe01::1.www: S 2426580310:2426580310(0) win 4880 <mss 1220,sackOK,timestamp 1075823569 0,nop,wscale 6>
(It seems to be the IPIP packet. Here you can see it try to contact 2001:7a8:1:5::. I don't know why)

11:14:00.012359 00:1f:9d:9f:89:42 (oui Unknown) > 00:30:48:5a:4e:4e (oui Unknown), ethertype IPv6 (0x86dd), length 182:
vl3-swr401-srv-courbevoie.ipv6.nerim.net > 2001:7a8:0:fe01::1: ICMP6, destination unreachable, unreachable address 2001:7a8:1:5::, length 128
(Router tell me 2001:7a8:1:5:: don't exist)

So it's seems LVS try to send a IPIP packet do 2001:7a8:1:5:: instead of
send it to 2001:7a8:1:5::17. Do you know why?

Regards,

--
Nicolas Haller

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

nicolas.haller at corp

Sep 14, 2009, 4:24 AM

Post #6 of 7 (749 views)
Permalink

Re: [lvs-users] IPv6 tunnel forwarding method ? [In reply to]

On Fri, Sep 11, 2009 at 11:24:19AM +0200, Nicolas Haller wrote:
> On Thu, Sep 10, 2009 at 02:24:31PM +0100, Graeme Fowler wrote:
> Hi,

> Ok, so, I done some clean in my conf this morning and all is right now.

> But I have an another problem. It seems LVS don't send the IPIP packet
> to the right place.

> An ipvsadm --list say:
> TCP [2001:7a8:0:fe01::1]:www wlc persistent 120
> -> [2001:7a8:1:5::17]:www Tunnel 1 1 1

> An ifconfig say:
> eth0 Link encap:Ethernet HWaddr 00:30:48:5a:4e:4e
> inet adr:194.79.134.250 Bcast:194.79.134.255 Masque:255.255.255.248
> adr inet6: fe80::230:48ff:fe5a:4e4e/64 Scope:Lien
> adr inet6: 2001:7a8:1:61::250/64 Scope:Global

> dummy0 Link encap:Ethernet HWaddr 22:83:2d:0f:68:7e
> inet adr:194.79.128.128 Bcast:194.79.128.255 Masque:255.255.255.255
> adr inet6: 2001:7a8:0:fe01::1/64 Scope:Global
> adr inet6: fe80::2083:2dff:fe0f:687e/64 Scope:Lien

> No packet is received to the machine 2001:7a8:1:5::17.

> On the director, tcpdump say this:

> 11:13:56.994105 00:30:48:5a:4e:4e (oui Unknown) > 00:1f:9d:9f:89:42 (oui Unknown), ethertype IPv6 (0x86dd), length 134: 2001:7a8:0:fe01::1 > 2001:7a8:1:5:::
> Elf-1-pt.tunnel.tserv6.fra1.ipv6.he.net.33405 > 2001:7a8:0:fe01::1.www: S 2426580310:2426580310(0) win 4880 <mss 1220,sackOK,timestamp 1075822819 0,nop,wscale 6>
> (It's my telnet 2001:7a8:0:fe01::1 80 from a client)

> 11:13:59.993556 00:30:48:5a:4e:4e (oui Unknown) > 00:1f:9d:9f:89:42 (oui Unknown), ethertype IPv6 (0x86dd), length 134: 2001:7a8:0:fe01::1 >
> 2001:7a8:1:5::: Elf-1-pt.tunnel.tserv6.fra1.ipv6.he.net.33405 > 2001:7a8:0:fe01::1.www: S 2426580310:2426580310(0) win 4880 <mss 1220,sackOK,timestamp 1075823569 0,nop,wscale 6>
> (It seems to be the IPIP packet. Here you can see it try to contact 2001:7a8:1:5::. I don't know why)

> 11:14:00.012359 00:1f:9d:9f:89:42 (oui Unknown) > 00:30:48:5a:4e:4e (oui Unknown), ethertype IPv6 (0x86dd), length 182:
> vl3-swr401-srv-courbevoie.ipv6.nerim.net > 2001:7a8:0:fe01::1: ICMP6, destination unreachable, unreachable address 2001:7a8:1:5::, length 128
> (Router tell me 2001:7a8:1:5:: don't exist)

> So it's seems LVS try to send a IPIP packet do 2001:7a8:1:5:: instead of
> send it to 2001:7a8:1:5::17. Do you know why?

Hi,

I have recompiled my kernel with IPVS debug option. I have the same
problem and IPVS seems to know to witch IP address it should send the
IPIP packet.

Here is kernel message when I try to contact my IPv6 service.

[99928.879295] IPVS: lookup/in TCP [2001:0470:1f0a:11c0:0000:0000:0000:0002]:42806->[2001:07a8:0000:fe01:0000:0000:0000:0001]:80 hit
[99928.879302] IPVS: Incoming packet: TCP 2001:0470:1f0a:11c0:0000:0000:0000:0002:42806->2001:07a8:0000:fe01:0000:0000:0000:0001:80
[99928.879307] Enter: ip_vs_tunnel_xmit_v6, net/netfilter/ipvs/ip_vs_xmit.c line 646
[99928.879314] IPVS: new dst 2001:07a8:0001:0005:0000:0000:0000:0017, refcnt=4
[99928.879327] Leave: ip_vs_tunnel_xmit_v6, net/netfilter/ipvs/ip_vs_xmit.c line 727

Regards,

--
Nicolas Haller

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

nicolas.haller at corp

Sep 14, 2009, 6:10 AM

Post #7 of 7 (743 views)
Permalink

Re: [lvs-users] IPv6 tunnel forwarding method ? [In reply to]

On Mon, Sep 14, 2009 at 01:24:19PM +0200, Nicolas Haller wrote:
> On Fri, Sep 11, 2009 at 11:24:19AM +0200, Nicolas Haller wrote:
> > On Thu, Sep 10, 2009 at 02:24:31PM +0100, Graeme Fowler wrote:
> > Hi,

> Hi,

> I have recompiled my kernel with IPVS debug option. I have the same
> problem and IPVS seems to know to witch IP address it should send the
> IPIP packet.

> Here is kernel message when I try to contact my IPv6 service.

> [99928.879295] IPVS: lookup/in TCP [2001:0470:1f0a:11c0:0000:0000:0000:0002]:42806->[2001:07a8:0000:fe01:0000:0000:0000:0001]:80 hit
> [99928.879302] IPVS: Incoming packet: TCP 2001:0470:1f0a:11c0:0000:0000:0000:0002:42806->2001:07a8:0000:fe01:0000:0000:0000:0001:80
> [99928.879307] Enter: ip_vs_tunnel_xmit_v6, net/netfilter/ipvs/ip_vs_xmit.c line 646
> [99928.879314] IPVS: new dst 2001:07a8:0001:0005:0000:0000:0000:0017, refcnt=4
> [99928.879327] Leave: ip_vs_tunnel_xmit_v6, net/netfilter/ipvs/ip_vs_xmit.c line 727

Hi,

I try with an i386 and amd64 kernel and I have the same problem.

Regards,

--
Nicolas Haller

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads