OK

Thanks: now the administration interface (10.0.4.XX) is accesible.

Only one "strange" thing about the web GUI and the administration interfaces:
I've defined a virtual IP for the cluster and configured the GUI service to listen only at the "cluster interface" BUT then the GUI service DOESN'T LISTEN AT THE VIRTUAL IP, but only at the physical IPs...is this normal/right?
* when using clusters GUI service only allow 2 options: cluster interface and "all interfaces"...and obviously I consider use "all interfaces" is too "insecure" (perhaps I'm a little paranoid ;-) ).
* If I select to listen at "all interfaces" then GUI service listens at ALL interfaces, including the cluster virtual IP, so in this case the behaviour is as expected

Example: in my case: node1: eth0=10.0.4.99, node2: eth0=10.0.4.98 and cluster virtual IP: eth0:1=10.0.4.100, and when select "cluster interface" make the GUI service to listen only at 10.0.4.98/99 but NOT at 10.0.4.100


If this is the right behaviour...Can I suggest as an enhancement to do the GUI service listen also at the virtual IP when cluster and listen on "cluster interface" are selected/defined?


Regards.

Jose Manuel Blanco Cortiñas
Analista de Sistemas - Servicio de las Tecnologias de la Informacion y Comunicaciones (STIC)
Universidad de Valladolid
Edificio Alfonso VIII, C/Real de Burgos s/n. 47011, Valladolid - ESPAÑA
Telefono: 983 18-6410, Fax: 983 423271
E-mail: [email protected]


El 30/05/13 00:40, Emilio Campos escribió:
You should access to the web gui with eth0 (10.0.4.XX) once you configure the gw for this interface.

Once you configure your cluster service, the cluster interface is locked, if you need to change something in the cluster interface, the only way is to disable the cluster service.

Regards


2013/5/29 Jose Manuel Blanco <[email protected]>
Hi.

First of all: there in no router between clients and ZLB.

Anyway...I have good and bad news:

The good news:
I've get the service to run ok BUT...with an collateral effect.

HOW: I've changed the "DEFAULT GATEWAY" for the ZLB to the "oficial" gateway of the PUBLIC NETWORK
    * the NETWORK that contains the PUBLIC_ADDRESS of ZLB
    * previously the default gateway was the "oficial" gateway of the administration network (10.0.4.1)

The bad news:
The collateral effect: now I can't access to the ZENLB web interfaces using the 10.0.4.XX private administration address


So...It's possible to use again the original administrative interface (10.0.4.XX) for access to the web interface only from a "secure network"?

* Using the web interface I can't indicate the gateway for the eth0 interface (10.0.4.XX address) cause I can't edit it (it appears the padlock indicating some actions -like edit the interface- are locked)

Regards.


Jose Manuel Blanco Cortiñas
Analista de Sistemas - Servicio de las Tecnologias de la Informacion y Comunicaciones (STIC)
Universidad de Valladolid
Edificio Alfonso VIII, C/Real de Burgos s/n. 47011, Valladolid - ESPAÑA
Telefono: 983 18-6410, Fax: 983 423271
E-mail: [email protected]


El 29/05/13 12:18, Laura Garcia escribió:
Hi again, I've just read that you've already configured the default gw.
There is any router between  the clients and the ZLB?

BR


On Wed, May 29, 2013 at 12:16 PM, Laura Garcia <[email protected]> wrote:

Hi Jose Manuel, maybe you're missing to configure the load balancer ip as the default gw for your backends. This is mandatory to make dnat works.

Regards

El 29/05/2013 12:12, "Jose Manuel Blanco" <[email protected]> escribió:
Hi.

I'm trying ZENLB (latest public version: 3.02) as a choice to substitute our ancients Alteon balancers but I have a problem:

We want to balance a web application BUT WE NEED that the backend servers receive the client connections WITH THE IP OF THE ORIGINAL CLIENT.

First I've created a farm with a HTTP profile and runs BUT the IP of the connections is the ZENLB IP, NOT the client IP...so it's useless for us.

So I've tried to create a farm with the L4TNAT profile BUT doesn't run OK:

   - the IP the backend servers receive is the client IP...OK
   - the backend servers sends their response (TCP establishment packets) trough ZENLB...OK
   - but the client receives NO RESPONSE from ZENLB...FAIL

I've tried several network/gateways configurations but none of them seems to run OK, and the online documentation doesn't cover the L4TNAT so...I don't know if I've done something wrong, I doesn't have understood the L4TNAT operation or ZENLB has some bug/problem with the L4TNAT profile.

The network configuration:

ZENLB configuration:
Network:
eth0: 10.0.4.XX -> for administration/cluster
        * Gateway: none
eth1: 192.168.31.100 -> for communicate with backend servers in a private network
        * Gateway: none
eth2: PUBLIC_ADDRESS -> for client access
        * Gateway: "oficial" gateway for the PUBLIC network
Default gateway: 10.0.4.1 -> "oficial" gateway for the 10.0.4 net
      Farm:
Profile: L4TNAT
NAT type: DNAT
Backend server configuration:
eth0: 192.168.31.YY -> Private IP for service
Default gateway: 192.168.31.100 -> the ZENLB IP in the 192.168.31.0 private network

Tcpdump shows:
- CLIENT_IP initial packet -> ZENLB -> Backend Server
    * the path/NAT of the initial packet seems to be OK
- Backend Server ansver -> ZENLB -> ????
    * the "right" packet is received by ZENLB but NOT by he client
    * Perhaps response packet is received by ZENLB but...it comes out from ZENLB?

Any idea?
Thanks

--

Jose Manuel Blanco Cortiñas
Analista de Sistemas - Servicio de las Tecnologias de la Informacion y Comunicaciones (STIC)
Universidad de Valladolid
Edificio Alfonso VIII, C/Real de Burgos s/n. 47011, Valladolid - ESPAÑA
Telefono: 983 18-6410, Fax: 983 423271
E-mail: [email protected]



------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1
_______________________________________________
Zenloadbalancer-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support




------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1


_______________________________________________
Zenloadbalancer-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support


------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1
_______________________________________________
Zenloadbalancer-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support




--
Load balancer distribution - Open Source Project
http://www.zenloadbalancer.com
Distribution list (subscribe): [email protected]


------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1


_______________________________________________
Zenloadbalancer-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support


------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1
_______________________________________________
Zenloadbalancer-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support

Reply via email to