[TriLUG] Building a load balanced web cluster

[Jon Carnes]

I ran my ipchains rules before my LVS rules, but as I understand it, both
programs are just manipulating ip-kernel tables.  It is the kernel tables
that actually filter or pass on the packets, not ipchains or ipvsadm.

The main gotcha from the lists, seems to be folks using the Masq option and
forgetting to set the internal machines to use the director as their
gateway.

Send me a map of your setup and I'll be happy to help.  BTW: what kernel are
you using, and does it have the VS patches added?  One of the main reasons I
used the VA Linux 6.2.4 install is that it has all the patches already
applied and the kernel is designed for running the LVS...

Jon
----- Original Message -----
From: "Ken Mink" <ken.mink at porivo.com>
To: <trilug at trilug.org>
Sent: Tuesday, September 18, 2001 12:56 PM
Subject: Re: [TriLUG] Building a load balanced web cluster


> Hi Jon,
>   Great timing. I've been beating my head against the wall all morning
working
> with LVS. I have 2 servers with apache and tomcat and I'm trying to LVS
them.
> It is working fine, with persistence(tomcat's session cookies). However,
now
> I'm trying to set up iptables on the director. The packets are getting
eaten
> somewhere. Do you know who gets the packets first, LVS or iptables? I've
> configured iptables as though it was getting the packets first. Any ideas?
>
> TIA
> Ken
>
> Jon Carnes wrote:
>
> > I just finished building my second load balanced web-cluster using the
LVS
> > project.  This stuff works great and is extremely impressive!
> > For the price of a decent machine, anyone can now have built-in
redundancy
> > and load-balancing for any of their common services: web, mail, ftp,
etc...
> >
>
> <big snip of a very helpful LVS config>
>
> >
> >
> > or remove machines from the cluster:
> >   ipvsadm -d -t 216.54.16.11:80 -r 10.1.71.14 -m
> >
> > If I use this in conjunction with Netsaint, I can automagically remove a
> > failing machine from my cluster, and send out an alarm.  Later, I can
add it
> > right back in.
> >
> > HtH - Jon
> >
> > _______________________________________________
> > TriLUG mailing list
> > http://www.trilug.org/mailman/listinfo/trilug
>
> --
>
> Ken Mink | Sr Software Engineer
> Porivo Technologies, Inc.
> 919.806.0566 | ken.mink at porivo.com
> www.porivo.com
> Measuring end-to-end Web performance.
>
> _______________________________________________
> TriLUG mailing list
> http://www.trilug.org/mailman/listinfo/trilug