From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1IhnyM-00089P-NN for garchives@archives.gentoo.org; Tue, 16 Oct 2007 15:04:43 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.1/8.14.0) with SMTP id l9GErmGZ005467; Tue, 16 Oct 2007 14:53:48 GMT Received: from mail.networkmerchants.com (virtual000.networkmerchants.com [216.35.170.80]) by robin.gentoo.org (8.14.1/8.14.0) with SMTP id l9GEppia003087 for ; Tue, 16 Oct 2007 14:51:51 GMT Received: (qmail 14893 invoked from network); 16 Oct 2007 14:51:50 -0000 Received: from unknown (HELO ?10.1.10.29?) (76.193.193.209) by mail.networkmerchants.com with SMTP; 16 Oct 2007 14:51:50 -0000 Message-ID: <4714D000.1000405@iyd.com> Date: Tue, 16 Oct 2007 09:51:44 -0500 From: Jeff Rooney User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-server@gentoo.org Reply-to: gentoo-server@lists.gentoo.org MIME-Version: 1.0 To: gentoo-server@lists.gentoo.org Subject: Re: [gentoo-server] Disable ARP References: <4713D7DD.7020300@iyd.com> <4713DC6C.2000006@vanalteren.nl> <4713E595.4090904@iyd.com> <471476EC.2030206@vanalteren.nl> In-Reply-To: <471476EC.2030206@vanalteren.nl> Content-Type: multipart/alternative; boundary="------------040702050008040703010007" X-Archives-Salt: f06b8b80-4a02-4ed3-a465-fe28f95e92f1 X-Archives-Hash: aa0784af9c587b0371951e765db5d60f This is a multi-part message in MIME format. --------------040702050008040703010007 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit Ramon van Alteren wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Jeff Rooney wrote: > >> Both methods appear to work as I hoped. >> > > Good. > > >> Ramon: you where exactly right, I was following some documentation sent >> over with some load balancers that I am experimenting with. Unfortunatly >> their tech staff didn't have any real options for us other than blocking >> the arp responses via ebtables. >> > > Mmmm interesting tech support, out of curiosity what loadbalancers are > you using ? > Currently I am working with the load master series from Kemp Technologies. I am also going to be trying Coyote Point as well, we still haven't decided which route to take. > >> Not sure why I didn't think about using >> the dummy interface instead of the loopback...guess its just been that >> sort of day for me =) >> > > I have them too (those days), trying to ram the square block through the > round hole.... In some cases it even works :-) > > >> Thanks again for your help Ramon and RijilV. >> > > You're welcome. > Word of warning: If you lose the noarp option on one of the real-servers > you will see very weird erratic behaviour which can be hard to debug. > Depending on the load you push through the loadbalancer the realserver > which sends an arp will die immediately or slowly whilst generating > weird bugs in your app. > > Best way to check: login with ssh on the vip > Thanks for the heads up...I am actually probably still going to end up running ebtables to filter the outbound arp responses from the vip addresses just to be safe. Thanks again. -- Jeff --------------040702050008040703010007 Content-Type: text/html; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Ramon van Alteren wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeff Rooney wrote:

Both methods appear to work as I hoped.


Good.

Ramon: you where exactly right, I was following some documentation sent
over with some load balancers that I am experimenting with. Unfortunatly
their tech staff didn't have any real options for us other than blocking
the arp responses via ebtables.


Mmmm interesting tech support, out of curiosity what loadbalancers are
you using ?

Currently I am working with the load master series from Kemp Technologies. I am also going to be trying Coyote Point as well, we still haven't decided which route to take.

Not sure why I didn't think about using
the dummy interface instead of the loopback...guess its just been that
sort of day for me =)


I have them too (those days), trying to ram the square block through the
round hole.... In some cases it even works :-)

Thanks again for your help Ramon and RijilV.


You're welcome.
Word of warning: If you lose the noarp option on one of the real-servers
you will see very weird erratic behaviour which can be hard to debug.
Depending on the load you push through the loadbalancer the realserver
which sends an arp will die immediately or slowly whilst generating
weird bugs in your app.

Best way to check: login with ssh on the vip

Thanks for the heads up...I am actually probably still going to end up running ebtables to filter the outbound arp responses from the vip addresses just to be safe.

Thanks again.
--
Jeff
--------------040702050008040703010007-- -- gentoo-server@gentoo.org mailing list