[ClusterLabs] :Pacemaker IP Load Balancer and RFC 1812

[Somanath Jeeva]

Hi ,

We are trying to use the pacemaker load balancer feature. The Load balancer feature uses CLUSTERIP module of the RHEL iptables. CLUSTERIP Load balancer seems to be a RFC 1812 section 3.3.2 violation.

For using load balancing  option we are going with the MAC generated by the pacemaker IpAddr2 resource agent itself.

The resource details are
$ sudo pcs resource show --full
Clone: ClusterIP-clone
  Meta Attrs: clone-max=2 clone-node-max=1 globally-unique=true
  Resource: ClusterIP (class=ocf provider=heartbeat type=IPaddr2)
   Attributes: ip=10.61.198.86 cidr_netmask=23 clusterip_hash=sourceip-sourceport
   Operations: monitor interval=2s (ClusterIP-monitor-interval-2s)

$ sudo service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    CLUSTERIP  all  --  0.0.0.0/0            10.61.198.86        CLUSTERIP hashmode=sourceip-sourceport clustermac=6B:28:12:3E:4E:D4 total_nodes=2 local_node=2 hash_init=0
2    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0

Since we are not using a Multicast MAC does the usage of CLUSTERIP module as above still  constitute a RFC violation?


With Regards
Somanath Thilak J

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clusterlabs.org/pipermail/users/attachments/20160513/08a4406a/attachment-0003.html>