<div dir="ltr">Thanks for answer, can you please tell me how much cost every extra IP?<br><br>Thanks<br><br>Regards<br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><span>Victor Acosta<br><br></span></div><div><span>RHCE - RHCSA - VCA-DCV<br></span></div><div dir="ltr"><img src="https://docs.google.com/uc?id=0BxRkeOBHApwsWWVZdW15N3dkbkk&export=download" height="72" width="64"><span><img src="https://docs.google.com/uc?id=0BxRkeOBHApwsdGFsVlpreTh2MDg&export=download" height="71" width="63"></span><span><span><img src="https://docs.google.com/uc?id=0BxRkeOBHApwsMTVrSHp2Y0NEY28&export=download" height="70" width="68"></span></span><br><img alt=""></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">2015-09-03 14:48 GMT-04:00 Carlos Xavier <span dir="ltr"><<a href="mailto:cbastos@connection.com.br" target="_blank">cbastos@connection.com.br</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Tank you very much Ken.<br>
<br>
I'll take a close look at that.<br>
Is there any documentation where I can learn more about the Pacemaker/IPtables integration?<br>
The chain that needs to be created has the same name of the resource I'm trying to clone?<br>
<br>
Shouldn't the IPaddr2 RA solve this issue by itself? When it sees that there is no Chain useful to add the rule, instead of giving a error create that chain?<br>
<br>
Regards,<br>
Carlos.<br>
<br>
<br>
> -----Mensagem original-----<br>
> De: Ken Gaillot [mailto:<a href="mailto:kgaillot@redhat.com">kgaillot@redhat.com</a>]<br>
> Enviada em: quarta-feira, 2 de setembro de 2015 16:16<br>
> Para: <a href="mailto:users@clusterlabs.org">users@clusterlabs.org</a><br>
> Assunto: Re: [ClusterLabs] RES: Can't get a group of IP address up when moving to a new version of<br>
> Pacemaker/Corosync<br>
><br>
<div class="HOEnZb"><div class="h5">> On 09/02/2015 01:44 PM, Carlos Xavier wrote:<br>
> > Hi Kristoffer.<br>
> ><br>
> > Tank you very much for fast reply.<br>
> ><br>
> > I did a cleanup of the resource and took a look at the log and could see that the issue has<br>
> something to do with the RA IPaddr2 trying to set some iptables rule, although we are not using any<br>
> iptables rule set.<br>
> ><br>
> > crm(live)resource# cleanup c-ip-httpd<br>
> > Cleaning up ip_ccardbusiness:0 on apolo Cleaning up ip_ccardbusiness:0<br>
> > on diana Cleaning up ip_ccardgift:0 on apolo Cleaning up<br>
> > ip_ccardgift:0 on diana Cleaning up ip_intranet:0 on apolo Cleaning up<br>
> > ip_intranet:0 on diana Cleaning up ip_ccardbusiness:1 on apolo<br>
> > Cleaning up ip_ccardbusiness:1 on diana Cleaning up ip_ccardgift:1 on<br>
> > apolo Cleaning up ip_ccardgift:1 on diana Cleaning up ip_intranet:1 on<br>
> > apolo Cleaning up ip_intranet:1 on diana Waiting for 12 replies from<br>
> > the CRMd............ OK<br>
> ><br>
> > And on the log we have<br>
> ><br>
> > 2015-09-02T14:40:54.074834-03:00 apolo crmd[5185]: warning:<br>
> > update_failcount: Updating failcount for ip_ccardbusiness on diana<br>
> > after failed start: rc=1 (update=INFINITY, time=1441215654)<br>
> > 2015-09-02T14:40:54.075034-03:00 apolo crmd[5185]: warning: status_from_rc: Action 33<br>
> (ip_ccardbusiness:0_start_0) on diana failed (target: 0 vs. rc: 1): Error 2015-09-02T14:40:54.075230-<br>
> 03:00 apolo crmd[5185]: warning: update_failcount: Updating failcount for ip_ccardbusiness on diana<br>
> after failed start: rc=1 (update=INFINITY, time=1441215654) 2015-09-02T14:40:54.075427-03:00 apolo<br>
> crmd[5185]: warning: update_failcount: Updating failcount for ip_ccardbusiness on diana after failed<br>
> start: rc=1 (update=INFINITY, time=1441215654)<br>
> > 2015-09-02T14:40:54.078344-03:00 apolo crmd[5185]: notice: abort_transition_graph: Transition<br>
> aborted by status-168427778-fail-count-ip_ccardbusiness, fail-count-ip_ccardbusiness=INFINITY:<br>
> Transient attribute change (create cib=0.378.14, source=te_update_diff:391,<br>
> path=/cib/status/node_state[@id='168427778']/transient_attributes[@id='168427778']/instance_attributes<br>
> [@id='status-168427778'], 0)<br>
> > 2015-09-02T14:40:54.184995-03:00 apolo IPaddr2(ip_ccardbusiness)[8360]: ERROR: iptables failed<br>
> > 2015-09-02T14:40:54.187651-03:00 apolo lrmd[5182]: notice: operation_finished:<br>
> ip_ccardbusiness_start_0:8360:stderr [ iptables: No chain/target/match by that name. ]<br>
> > 2015-09-02T14:40:54.187978-03:00 apolo lrmd[5182]: notice: operation_finished:<br>
> ip_ccardbusiness_start_0:8360:stderr [ ocf-exit-reason:iptables failed ]<br>
> > 2015-09-02T14:40:54.203780-03:00 apolo crmd[5185]: notice: process_lrm_event: Operation<br>
> ip_ccardbusiness_start_0: unknown error (node=apolo, call=88, rc=1, cib-update=1321, confirmed=true)<br>
> > 2015-09-02T14:40:54.204026-03:00 apolo crmd[5185]: notice: process_lrm_event: apolo-<br>
> ip_ccardbusiness_start_0:88 [ iptables: No chain/target/match by that name.\nocf-exit-reason:iptables<br>
> failed\n ]<br>
> > 2015-09-02T14:40:54.206111-03:00 apolo crmd[5185]: warning:<br>
> > status_from_rc: Action 43 (ip_ccardbusiness:1_start_0) on apolo failed<br>
> > (target: 0 vs. rc: 1): Error 2015-09-02T14:40:54.206442-03:00 apolo<br>
> > crmd[5185]: warning: update_failcount: Updating failcount for<br>
> > ip_ccardbusiness on apolo after failed start: rc=1 (update=INFINITY,<br>
> > time=1441215654) 2015-09-02T14:40:54.206663-03:00 apolo crmd[5185]: warning: update_failcount:<br>
> Updating failcount for ip_ccardbusiness on apolo after failed start: rc=1 (update=INFINITY,<br>
> time=1441215654) 2015-09-02T14:40:54.206859-03:00 apolo crmd[5185]: warning: status_from_rc: Action<br>
> 43 (ip_ccardbusiness:1_start_0) on apolo failed (target: 0 vs. rc: 1): Error 2015-09-<br>
> 02T14:40:54.207109-03:00 apolo crmd[5185]: warning: update_failcount: Updating failcount for<br>
> ip_ccardbusiness on apolo after failed start: rc=1 (update=INFINITY, time=1441215654) 2015-09-<br>
> 02T14:40:54.207489-03:00 apolo crmd[5185]: warning: update_failcount: Updating failcount for<br>
> ip_ccardbusiness on apolo after failed start: rc=1 (update=INFINITY, time=1441215654)<br>
> > 2015-09-02T14:40:54.207829-03:00 apolo crmd[5185]: notice: run_graph: Transition 1166<br>
> (Complete=14, Pending=0, Fired=0, Skipped=12, Incomplete=1, Source=/var/lib/pacemaker/pengine/pe-<br>
> input-95.bz2): Stopped<br>
> ><br>
> > Is there a way to stop the IPaddr2 RA to try to manage the iptables rule?<br>
> ><br>
> > Regards,<br>
> > Carlos<br>
><br>
> This is occurring because you cloned the IP group. When IPaddr2 is cloned, it uses iptables to do a<br>
> rudimentary form of load-balancing. The IP address will be simultaneously active on all nodes running<br>
> the clone, and each node will use iptables' support for multicast Ethernet MAC addresses to respond<br>
> only to a subset of requests.<br>
><br>
> The error you're getting is at the iptables level rather than the cluster level, so you'll need to<br>
> deal with it there.<br>
><br>
> ><br>
> >> -----Mensagem original-----<br>
> >> De: Kristoffer Grönlund [mailto:<a href="mailto:kgronlund@suse.com">kgronlund@suse.com</a>] Enviada em:<br>
> >> quarta-feira, 2 de setembro de 2015 02:46<br>
> >> Para: Carlos Xavier; <a href="mailto:users@clusterlabs.org">users@clusterlabs.org</a><br>
> >> Assunto: Re: [ClusterLabs] Can't get a group of IP address up when<br>
> >> moving to a new version of Pacemaker/Corosync<br>
> >><br>
> >> Carlos Xavier <<a href="mailto:cbastos@connection.com.br">cbastos@connection.com.br</a>> writes:<br>
> >><br>
> >>> Hi.<br>
> >>><br>
> >><br>
> >> [snip]<br>
> >><br>
> >>><br>
> >>> Failed actions:<br>
> >>> ip_ccardbusiness_start_0 on apolo 'unknown error' (1): call=65,<br>
> >>> status=complete, last-rc-change='Fri Aug 21 17:46:32 2015', queued=0ms, exec=337ms<br>
> >>> ip_ccardbusiness_start_0 on diana 'unknown error' (1): call=64,<br>
> >>> status=complete, last-rc-change='Fri Aug 21 17:44:21 2015',<br>
> >>> queued=1ms, exec=254ms<br>
> >>><br>
> >><br>
> >> Hi Carlos,<br>
> >><br>
> >> There should be more information in the logs as to what is going<br>
> >> wrong. Look in /var/log/messages for the time indicated in the failure and search for<br>
> ip_ccardbusiness.<br>
> >><br>
> >> Cheers,<br>
> >> Kristoffer<br>
> >><br>
> >>><br>
> >>> I have already trayed to set the clone this way, but without any success:<br>
> >>><br>
> >>> clone c-ip-httpd ip-httpd \<br>
> >>> meta interleave=true globally-unique=false clone-max=2<br>
> >>> clone-node-max=1 target-role=Started<br>
> >>><br>
> >>><br>
> >>> Am I missing something?<br>
> >>> Please, can someone shade some light on this issue? Any help will be very welcome.<br>
> >>><br>
> >>> Best regards,<br>
> >>> Carlos<br>
> >>><br>
> >>><br>
> >>> _______________________________________________<br>
> >>> Users mailing list: <a href="mailto:Users@clusterlabs.org">Users@clusterlabs.org</a><br>
> >>> <a href="http://clusterlabs.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://clusterlabs.org/mailman/listinfo/users</a><br>
> >>><br>
> >>> Project Home: <a href="http://www.clusterlabs.org" rel="noreferrer" target="_blank">http://www.clusterlabs.org</a> Getting started:<br>
> >>> <a href="http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf" rel="noreferrer" target="_blank">http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf</a><br>
> >>> Bugs: <a href="http://bugs.clusterlabs.org" rel="noreferrer" target="_blank">http://bugs.clusterlabs.org</a><br>
> >>><br>
> >><br>
> >> --<br>
> >> // Kristoffer Grönlund<br>
> >> // <a href="mailto:kgronlund@suse.com">kgronlund@suse.com</a><br>
> ><br>
> ><br>
> ><br>
> > _______________________________________________<br>
> > Users mailing list: <a href="mailto:Users@clusterlabs.org">Users@clusterlabs.org</a><br>
> > <a href="http://clusterlabs.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://clusterlabs.org/mailman/listinfo/users</a><br>
> ><br>
> > Project Home: <a href="http://www.clusterlabs.org" rel="noreferrer" target="_blank">http://www.clusterlabs.org</a> Getting started:<br>
> > <a href="http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf" rel="noreferrer" target="_blank">http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf</a><br>
> > Bugs: <a href="http://bugs.clusterlabs.org" rel="noreferrer" target="_blank">http://bugs.clusterlabs.org</a><br>
> ><br>
><br>
><br>
> _______________________________________________<br>
> Users mailing list: <a href="mailto:Users@clusterlabs.org">Users@clusterlabs.org</a> <a href="http://clusterlabs.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://clusterlabs.org/mailman/listinfo/users</a><br>
><br>
> Project Home: <a href="http://www.clusterlabs.org" rel="noreferrer" target="_blank">http://www.clusterlabs.org</a> Getting started:<br>
> <a href="http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf" rel="noreferrer" target="_blank">http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf</a><br>
> Bugs: <a href="http://bugs.clusterlabs.org" rel="noreferrer" target="_blank">http://bugs.clusterlabs.org</a><br>
<br>
<br>
<br>
_______________________________________________<br>
Users mailing list: <a href="mailto:Users@clusterlabs.org">Users@clusterlabs.org</a><br>
<a href="http://clusterlabs.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://clusterlabs.org/mailman/listinfo/users</a><br>
<br>
Project Home: <a href="http://www.clusterlabs.org" rel="noreferrer" target="_blank">http://www.clusterlabs.org</a><br>
Getting started: <a href="http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf" rel="noreferrer" target="_blank">http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf</a><br>
Bugs: <a href="http://bugs.clusterlabs.org" rel="noreferrer" target="_blank">http://bugs.clusterlabs.org</a><br>
</div></div></blockquote></div><br></div>