Ftp In An Lvs Cluster - Red Hat CLUSTER SUITE - CONFIGURING AND MANAGING A CLUSTER 2006 Manual

Chapter 9. Setting Up a Red Hat Enterprise Linux LVS Cluster
VIP to the public network interface, see Section 10.6.1 The VIRTUAL SERVER Subsec-
tion. Also note that you must log in as root and load the module for
issuing rules for the first time.
/sbin/modprobe ip_tables
/sbin/iptables -t mangle -A PREROUTING -p tcp \
-d n.n.n.n/32 --dport 80 -j MARK --set-mark 80
/sbin/iptables -t mangle-A PREROUTING -p tcp \
-d n.n.n.n/32 --dport 443 -j MARK --set-mark 80
In the above
iptables
your HTTP and HTTPS virtual servers. These commands have the net effect of assigning
any traffic addressed to the VIP on the appropriate ports a firewall mark of 80, which in
turn is recognized by IPVS and forwarded appropriately.
Warning
The commands above will take effect immediately, but do not persist through a reboot
of the system. To ensure network packet filter settings are restored upon reboot, refer to
Section 9.5 Saving Network Packet Filter Settings

9.4. FTP In an LVS Cluster

File Transport Protocol (FTP) is an old and complex multi-port protocol that presents a
distinct set of challenges to a clustered environment. To understand the nature of these
challenges, you must first understand some key things about how FTP works.
9.4.1. How FTP Works
With most other server client relationships, the client machine opens up a connection to
the server on a particular port and the server then responds to the client on that port. When
an FTP client connects to an FTP server it opens a connection to the FTP control port 21.
Then the client tells the FTP server whether to establish an active or passive connection.
The type of connection chosen by the client determines how the server responds and on
what ports transactions will occur.
The two types of data connections are:
commands, n.n.n.n should be replaced with the floating IP for
109
before
iptables