Hello,
I am trying to setup the following for deployment
I have 2 servers.
server1: eth0:10.200.2.211 (255.255.252.0)
eth1: 192.168.10.10 (255.255.255.0)
server2: eth0: 10.200.2.242 (255.255.252.0)
eth1: 192.168.20.10 (255.255.255.0)
VRRP between server1 and server2 eth0. VRIP is 10.200.3.84
my haproxy config:
--------------------------
listen ingress_traffic 10.200.3.84:7000
mode tcp
source 0.0.0.0 usesrc clientip
balance roundrobin
server server1 192.168.10.10:9001
server server2 192.168.20.10:9001
Iptables:
-----------
iptables -t mangle -N DIVERT
iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
iptables -t mangle -A DIVERT -j MARK --set-mark 1
iptables -t mangle -A DIVERT -j ACCEPT
ip rule add fwmark 1 lookup 100
ip route add local 0.0.0.0/0 dev lo table 100
Now 10.200.2.211 is the master and owns VRIP 10.200.3.84
When traffic comes to 10.200.3.84:7000, the routing to server2 is
successful and end-to-end communication is fine. But the response from
server1 (192.168.10.10:9001) is not reaching HAProxy.
I cannot have 3rd box for HAProxy alone.
Any suggestions
Thank you
-Abdul Jaleel
I am trying to setup the following for deployment
I have 2 servers.
server1: eth0:10.200.2.211 (255.255.252.0)
eth1: 192.168.10.10 (255.255.255.0)
server2: eth0: 10.200.2.242 (255.255.252.0)
eth1: 192.168.20.10 (255.255.255.0)
VRRP between server1 and server2 eth0. VRIP is 10.200.3.84
my haproxy config:
--------------------------
listen ingress_traffic 10.200.3.84:7000
mode tcp
source 0.0.0.0 usesrc clientip
balance roundrobin
server server1 192.168.10.10:9001
server server2 192.168.20.10:9001
Iptables:
-----------
iptables -t mangle -N DIVERT
iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
iptables -t mangle -A DIVERT -j MARK --set-mark 1
iptables -t mangle -A DIVERT -j ACCEPT
ip rule add fwmark 1 lookup 100
ip route add local 0.0.0.0/0 dev lo table 100
Now 10.200.2.211 is the master and owns VRIP 10.200.3.84
When traffic comes to 10.200.3.84:7000, the routing to server2 is
successful and end-to-end communication is fine. But the response from
server1 (192.168.10.10:9001) is not reaching HAProxy.
I cannot have 3rd box for HAProxy alone.
Any suggestions
Thank you
-Abdul Jaleel