LVS + SNAT: VIP and RIP not in the same subnet not working
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
keepalived (Ubuntu) |
Triaged
|
Undecided
|
Unassigned |
Bug Description
When using keepalived/
When I turn on logging for iptables you can see the package coming in but nothing happens.
---
Nov 15 06:25:08 lb1 kernel: [922014.361577] IN= OUT=eth0 SRC=192.168.1.100 DST=192.168.10.10 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=44987 DF PROTO=TCP SPT=58504 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
---
This works running Ubuntu 14.04 or 12.04 but on Ubuntu 16.04 it stopped working.
---
In /etc/sysctl.conf I have included:
net.ipv4.
net.ipv4.
net.ipv4.
-----
# lsb_release -rd
Description: Ubuntu 16.04.1 LTS
Release: 16.04
# apt-cache policy keepalived
keepalived:
Installed: 1:1.2.19-1
Candidate: 1:1.2.19-1
Version table:
*** 1:1.2.19-1 500
500 http://
100 /var/lib/
# apt-cache policy iptables
iptables:
Installed: 1.6.0-2ubuntu3
Candidate: 1.6.0-2ubuntu3
Version table:
*** 1.6.0-2ubuntu3 500
500 http://
100 /var/lib/
# apt-cache policy ipvsadm
ipvsadm:
Installed: 1:1.28-3
Candidate: 1:1.28-3
Version table:
*** 1:1.28-3 500
500 http://
100 /var/lib/
-----
This is the iptables config:
iptables -t nat -A POSTROUTING -o eth0 --dst 192.168.10.10 -m ipvs --ipvs --vaddr 192.168.9.5 --vport 80 --vmethod masq -j SNAT --to-source 192.168.9.4
iptables -t nat -A POSTROUTING -o eth0 --dst 192.168.10.11 -m ipvs --ipvs --vaddr 192.168.9.5 --vport 80 --vmethod masq -j SNAT --to-source 192.168.9.4
This is the keepalived config:
vrrp_instance vapp1 {
state EQUAL
interface eth0
virtual_
priority 100
advert_int 1
smtp_alert
authentication {
auth_type PASS
auth_pass vapp1
}
virtual_
}
}
virtual_server 192.168.9.5 80 {
delay_loop 6
lb_algo wlc
lb_kind NAT
persistence
protocol TCP
real_server 192.168.10.10 80 {
weight 100
TCP_CHECK {
}
}
real_server 192.168.10.11 80 {
weight 100
TCP_CHECK {
}
}
}
affects: | ubuntu → keepalived (Ubuntu) |
Changed in keepalived (Ubuntu): | |
status: | New → Triaged |
Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https:/ /wiki.ubuntu. com/Bugs/ FindRightPackag e. You might also ask for help in the #ubuntu-bugs irc channel on Freenode.
To change the source package that this bug is filed about visit https:/ /bugs.launchpad .net/ubuntu/ +bug/1641918/ +editstatus and add the package name in the text box next to the word Package.
[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]