[f-nsp] ServerIron config question - can this be done?

Clifton Royston cliftonr at lava.net
Thu Jan 23 21:45:11 EST 2003


On Wed, Jan 22, 2003 at 11:14:27AM -1000, Clifton Royston wrote:
...
>   Are you talking about just adding the "server source-ip
> [IP-in-their-netblock]" globally, with a usual "server real foo"
> definition, and "port http dsr" on the virtual server, and that that
> should do it all?  I've never tried this particular permutation, but if
> it should work, I'll give it a shot!

  This seems to be working fine; thanks for all the help!

  We are running into some minor problems on their servers, because the
Linux kernel is insisting on proxy-arping for the virtual IP and
causing some ARP conflicts.

  <http://www.linuxvirtualserver.org/docs/arp.html>

  This is a Linux bug or serious misfeature IMHO, but there is a patch
the customer will apply for it as they have built a custom kernel
anyway.

  Apart from this, the solution is working fine even in the VLAN
environment, and has saved us having to dedicate a physical ServerIron
switch port to them.

  -- Clifton
 
-- 
     Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava.net

  "If you ride fast enough, the Specialist can't catch you."
  "What's the Specialist?" Samantha says. 
  "The Specialist wears a hat," says the babysitter. "The hat makes noises."
  She doesn't say anything else.  
                      Kelly Link, _The Specialist's Hat_


More information about the foundry-nsp mailing list