LVS+keepalived高可用负载均衡,vrrp触发后不能广播浮动地址的arp纪录到网关

Submitted by jt8813 on 周三, 2012-05-30 10:43

LVS+keepalived
两台LVS控制机配置了keepalived
keepalived启停正常，停掉主用keepalived后，备用切换也正常（这里说的正常就是/var/log/message日志正常，显示切换成功了，也发arp了）

但是切换时网关上的arp表不能立刻更新为浮动地址对应备用LVS的mac
同样清除网关上的arp，keepalived切回主用LVS也不能自动更新网关上的arp表

从主用LVS上（keepalived已经自动绑定了vip，这个没问题）arping网关地址，网关arp表可以更新，排除网关设备的嫌疑。
怀疑vrrp切换时，未能正确发出arp广播。

这样 每次切换LVS，都要等网关上的arp表纪录衰减时间到了之后，外部访问vip，网关向网内arp广播查询后，才能访问到正确的控制机。
失去了高可用的意义。

各位有什么建议?

Forums:

benben

周一, 2012-06-11 09:26

我现在也是这个问题，从交换机上看 是 交换机把 keepalived 发过去的arp包给drop掉了。因为 交换机列表已经存在了当前mac地址

benben

周一, 2012-06-11 09:26

还不知道怎么解决那

benben

周一, 2012-06-11 09:28

*0.4080500 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!de
*0.4080790 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!
debugging
*0.4081080 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!
*0.4081370 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!
*0.4081660 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!
*0.4085500 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!
*0.4085790 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!
*0.4086080 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!
*0.4086370 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!
*0.4086660 xiji ETH/7/eth_error:-ARP Request- Board:0,IF:Vlanif1,srcMAC:0015-c5ef-e47a,dstMAC:ffff-ffff-ffff ##arp drop packet,because:destination ip isn't the interface ipand source mac of the packet is same as the mac in arp table!