On 12/22/09 10:23, Bill Hathaway wrote: > Hi, I have tried using ILB for the last few days and had some comments > and questions > > Background > ----------------- > I am using a lab environment that consists of the following machines: > x4150 - machine running OpenSolaris b129 with ILB ip=10.250.1.51 > > web1 - web server ip=10.250.1.12 running apache on port 80 > web2 - web server ip=10.250.1.13 running apache on port 80 > > My current config is: > create-servergroup prodweb > add-server -s server=10.250.1.12:80 prodweb > add-server -s server=10.250.1.13:80 prodweb > create-healthcheck -n -h > hc-test=TCP,hc-timeout=5,hc-count=3,hc-interval=30 webhc > create-rule -e -i vip=10.250.1.51,port=80,protocol=tcp -m > lbalg=roundrobin,type=NAT,proxy-src=10.250.1.51-10.250.1.51 -h > hc-name=webhc,hc-port=ANY -t nat-timeout=120 -o servergroup=prodweb > prodweb > > > Issues > --------- > 1) ilbadm man page wasn't supplied > I already filed a bug
THe man page will be available in snv_130( which is not in Opensolaris yet) . In the meantime, manpage ( and examples) are available at: http://wikis.sun.com/display/OpenSolarisInfo/Integrated+Load+Balancer > > 2) ilbd is missing needed authorizations > I already files a bug What authorization are you looking for? See http://wikis.sun.com/display/OpenSolarisInfo/Setting+up+user+authorization+for+ILB+configuration+commands on how to get a user to have authorizations to execute config commands. Also make sure you have this line in /etc/user_attr file: daemon::::auths=solaris.smf.manage.ilb,solaris.smf.modify.application > > 3) It appears that the the default ICMP based health checks don't work > > When I use a health check of: > ilbadm create-healthcheck -h hc-test=tcp webhc (note no '-n' flag) > I can see the ICMP request and responses come back fine, but no upper > level health checks occur > and the servers are marked offline. If the ping is failing , the upper level healthcheck will not be performed. Is the ping healthcheck successful ? Do a "ilbadm show-hc-result" to find out of ping is failing. > > If I change the health check to include the '-n' flag, I can see the > TCP level probes and the servers are marked online > > 4) How do you modify health checks that are in use? > It seems like it would be handy to be able to modify things like the > timeouts or intervals, but I couldn't see any easy way to do this. > Do you need to delete the rules using the HC, delete the HC, create a > new HC, and then create a new rule? If so, this is unwieldy. > Yes. You would need to delete it and then add it. > 5) How do you modify the rules that are in use? > Same problem as health checks above. We dont have a "modify" option to modify for rules/ and healthchecks on the fly. But we can certainly fix this via RFE. > > 6) The 'delete-healthcheck' command doesn't work (but delete-hc does) > wdh at x4150:~$ ilbadm create-healthcheck -h > hc-test=tcp,hc-timeout=5,hc-count=3,hc-interval=30 webhcX > wdh at x4150:~$ ilbadm delete-healtcheck webhcX That you because you spelt "delete-healtcheck" wrong. It should be "delete-healthcheck" > ilbadm: subcommand is invalid - please refer to ilbadm(1M) > wdh at x4150:~$ ilbadm delete-hc webhcX > > Sangeeta
