[Bug 278982] [NEW] Unable to block ARP broadcasts of secondary addresses in order to use IPVS

batosai cornuwel at gmail.com
Mon Oct 6 09:53:22 UTC 2008


Public bug reported:

Binary package hint: linux-image-server

I have an IPVS load balancer configured for direct routing which works fine.
In order for WebServers to handle requests, they need to have the virtual IP (frontal) configured as a secondary interface of lo.

This is set with 'ifconfig lo:0 $VIP netmask 255.255.255.255 up'.
To avoid ARP problem, IPVS documentation says I should block ARP announces with the following commands lines in /etc/sysctl.conf :
net.ipv4.conf.all.arp_ignore=1
net.ipv4.conf.eth0.arp_ignore=1
net.ipv4.conf.all.arp_announce=2
net.ipv4.conf.eth0.arp_announce=2

After a reboot, I checked that above values were correctly set in /proc/ and they were. 
As soon as I bring up secondary address on lo, the load balancer receives a lot (one per request) of SYN_RECV from the switch, meaning the webservers are announcing themselves despites the above configuration.

Load balancer and webservers are Ubuntu 8.04.1 Server.

** Affects: linux-meta (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Unable to block ARP broadcasts of secondary addresses in order to use IPVS
https://bugs.launchpad.net/bugs/278982
You received this bug notification because you are a member of Kernel
Bugs, which is subscribed to linux-meta in ubuntu.




More information about the kernel-bugs mailing list