lvs problem

[Marco_113]

Hi all,

I've a question about linux virtual server.
my virtual server is on the DMZ and has only one NIC with public IP (say DIP 195.120.100.1; VIP 195.120.209.102);

My Real Servers are on another LAN say 192.168.1.0

The DMZ and the LAN are not directly connected, but are both connected to a linux firewall (with 3 interfaces);

Do you think is possible that LVS (any kind of lvs: nat or dr) works with this configuration??

[Steven E. Protter]

If the Linux firewall is providing routing to the internal network, then the virutal server in the DMZ should be able to connect.

A lot of it depends on the firewall configuration though.

SEP

[Marco_113]

I tried also with the firewall "open"; with

iptables -A INPUT -j ACCEPT
iptables -A OUTPUT -j ACCEPT
iptables -A FORWARD -j ACCEPT;

It doesn't work!!

The DMZ and the LAN can communicate trought the firewall

[NiCK_76]

Hi Marco,

I suggest you to test LVS without firewall or in the same subnet is preferred.
If it is works ok and it is not works via firewall, it must be firewall problem.
For now , test it in the sam subnet.

NiCK

[kcpant]

Hi Marco,

As SEP told you, there should be a routing between your DMZ & LAN to be able to connect.make appropriate rules in iptables and sysctl.conf file for routing.

[Marco_113]

Ok,
the firewall has 3 NIC's:
one on the DMZ
one on the LAN
one on the Internet.

The LAN and the DMZ can communicate by every protocol and port, and they do it.

I know that if i change, and i put the Virtual Servers directly connected on the same Network of Real Servers it works.

But my question is exactly this, can i configure lvs having Virtual servers and Real servers not directly connected on the same network??
Thanks