topic Re: lvs problem in Operating System - Linux

lvs problem

Marco_113 — Mon, 14 Mar 2005 10:35:25 GMT

Hi all,

I've a question about linux virtual server.
my virtual server is on the DMZ and has only one NIC with public IP (say DIP 195.120.100.1; VIP 195.120.209.102);

My Real Servers are on another LAN say 192.168.1.0

The DMZ and the LAN are not directly connected, but are both connected to a linux firewall (with 3 interfaces);

Do you think is possible that LVS (any kind of lvs: nat or dr) works with this configuration??

Re: lvs problem

Steven E. Protter — Mon, 14 Mar 2005 11:04:44 GMT

If the Linux firewall is providing routing to the internal network, then the virutal server in the DMZ should be able to connect.

A lot of it depends on the firewall configuration though.

SEP

Re: lvs problem

Marco_113 — Mon, 14 Mar 2005 11:14:33 GMT

I tried also with the firewall "open"; with

iptables -A INPUT -j ACCEPT
iptables -A OUTPUT -j ACCEPT
iptables -A FORWARD -j ACCEPT;

It doesn't work!!

The DMZ and the LAN can communicate trought the firewall

Re: lvs problem

NiCK_76 — Mon, 14 Mar 2005 22:38:14 GMT

Hi Marco,

I suggest you to test LVS without firewall or in the same subnet is preferred.
If it is works ok and it is not works via firewall, it must be firewall problem.
For now , test it in the sam subnet.

NiCK

Re: lvs problem

kcpant — Mon, 14 Mar 2005 23:45:26 GMT

Hi Marco,

As SEP told you, there should be a routing between your DMZ & LAN to be able to connect.make appropriate rules in iptables and sysctl.conf file for routing.

Re: lvs problem

Marco_113 — Tue, 15 Mar 2005 03:30:13 GMT

Ok,
the firewall has 3 NIC's:
one on the DMZ
one on the LAN
one on the Internet.

The LAN and the DMZ can communicate by every protocol and port, and they do it.

I know that if i change, and i put the Virtual Servers directly connected on the same Network of Real Servers it works.

But my question is exactly this, can i configure lvs having Virtual servers and Real servers not directly connected on the same network??
Thanks