[f-nsp] Problems with serveriron 10.2.0d code

[Alex Sharaz]

Haven't done any checking yet. 

Attached is the config file .. with a few security things removed/changed

alex

 

From: Oliver Adam [mailto:oadam at madao.de] 
Sent: 06 August 2008 18:17
To: Alex Sharaz; foundry-nsp at puck.nether.net
Subject: Re: [f-nsp] Problems with serveriron 10.2.0d code

 

Do you mind to share your config? Have you checked what is happening using a
sniffer at the real server or via debug filter at the ServerIron?

R, Oliver

At 01:30 05.08.2008, Alex Sharaz wrote:



Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
         boundary="----_=_NextPart_001_01C8F68A.18473ACE"


Hi,
We've been running ServerIronXL hardware for a few years and I've just
purchased some new chassis based replacements with WSM modules.

I've been porting our existing load balanced services over to the new boxes
and have come across a funny.

I provide a server load balanced DNS service via our foundry kit. and have 3
"remote" servers defined and bound to a VIP. I've configured the serveriron
to perform a zone health check and on each of the 3 servers I can see the
health check coming in.  The same real servers are also used by our XL boxes
in the interim.

What I've found is that weven though the serveriron thinks all 3 servers are
active, when it tries to use the last one in the group of remote servers the
query never reaches the server. a sh server real doesn't show any
connections to the server. From the users point of view the query never
resolves. If i take down the dns server on the remote server so that the
serveriron health check fails, it succesfully uses the other two servers and
everything is o.k.

I've switched off iptables on my real(remote) servers but it doesn't make
any difference. As far as i can see all my servers are identical. I have the
same setup on another serverion on our west campus with anoter 3 servers and
it does the same thing.

Anyone else seen this?

TIA
Alex 
****************************************************************************
*************
To view the terms under which this email is distributed, please go to
http://www.hull.ac.uk/legal/email_disclaimer.html
****************************************************************************
*************
_______________________________________________
foundry-nsp mailing list
foundry-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/foundry-nsp

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20080807/7915d31c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: siwest.cfg
Type: application/octet-stream
Size: 6665 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20080807/7915d31c/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5438 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20080807/7915d31c/attachment.bin>