On 13/11/2015 1:04 AM, "jaleel" <abduljal...@gmail.com> wrote:
>
> Hello,
>
> I am trying to setup the following for deployment
>
> I have 2 servers.
> server1: eth0:10.200.2.211 (255.255.252.0)
> eth1: 192.168.10.10 (255.255.255.0)
> server2: eth0: 10.200.2.242 (255.255.252.0)
> eth1: 192.168.20.10 (255.255.255.0)
>
> VRRP between server1 and server2 eth0. VRIP is 10.200.3.84
>
>
> my haproxy config:
> --------------------------
> listen ingress_traffic 10.200.3.84:7000
> mode tcp
> source 0.0.0.0 usesrc clientip
> balance roundrobin
> server server1 192.168.10.10:9001
> server server2 192.168.20.10:9001
>
> Iptables:
> -----------
> iptables -t mangle -N DIVERT
> iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
> iptables -t mangle -A DIVERT -j MARK --set-mark 1
> iptables -t mangle -A DIVERT -j ACCEPT
>
> ip rule add fwmark 1 lookup 100
> ip route add local 0.0.0.0/0 dev lo table 100
>
>
> Now 10.200.2.211 is the master and owns VRIP 10.200.3.84
>
> When traffic comes to 10.200.3.84:7000, the routing to server2 is
successful and end-to-end communication is fine. But the response from
server1 (192.168.10.10:9001) is not reaching HAProxy.
>
> I cannot have 3rd box for HAProxy alone.
>
> Any suggestions
>
> Thank you
> -Abdul Jaleel
>
>
The backends need to have haproxy set as gateway.