<html><head></head><body><div class="ydp94860792yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div dir="ltr" data-setdir="false"><div><div>Hi, </div><div><br></div><div>As I know, CLUSTERIP is deprecated for some time. Recent distributions doesn't have this module on their repositories at all (Red Hat 8)</div><div><br></div><div>It seems Pacemaker still use CLUSTERIP for clone an IP address.</div><div><br></div><div>For this reason, I have the following error on an Active/Active cluster VIP: </div><div><br></div><div>Cenario: </div><div><br></div><div>CentOS 8</div><div>Pacemaker 2.0.1</div><div>Kernel 4.18.0</div><div>Iptables 1.8.2</div><div><br></div><div># pcs resource create ClusterIP ocf:heartbeat:IPaddr2 ip=172.18.14.100 nic=ens160 cidr_netmask=24 op monitor interval=2s</div><div># pcs resource clone ClusterIP</div><div># pcs status</div><div>...</div><div>Failed Resource Actions:</div><div>* ClusterIP_start_0 on pcsnode1 'unknown error' (1): call=40, status=complete, exitreason='iptables failed',</div><div> last-rc-change='Thu Dec 19 12:30:40 2019', queued=0ms, exec=172ms</div><div><br></div><div>Logs: </div><div><br></div><div>Dec 19 12:32:54 pcsnode1 IPaddr2(ClusterIP)[10245]: ERROR: iptables failed</div><div>Dec 19 12:32:54 pcsnode1 pacemaker-execd[1436]: notice: ClusterIP_start_0:10245:stderr [ iptables v1.8.2 (nf_tables): chain name not allowed to start with `-' ]</div><div>Dec 19 12:32:54 pcsnode1 pacemaker-execd[1436]: notice: ClusterIP_start_0:10245:stderr [ ]</div><div>Dec 19 12:32:54 pcsnode1 pacemaker-execd[1436]: notice: ClusterIP_start_0:10245:stderr [ Try `iptables -h' or 'iptables --help' for more information. ]</div><div>Dec 19 12:32:54 pcsnode1 pacemaker-execd[1436]: notice: ClusterIP_start_0:10245:stderr [ ocf-exit-reason:iptables failed ]</div><div>Dec 19 12:32:54 pcsnode1 pacemaker-controld[1439]: notice: Result of start operation for ClusterIP on pcsnode1: 1 (unknown error)</div><div><br></div><div>Any one can simulate the module problem, outside Pacemaker, with this command: </div><div><br></div><div>Perfectly good for CentOS 7 installation with ipt_CLUSTERIP.ko: </div><div><br></div><div># iptables -A INPUT -d 172.18.14.100/32 -i ens192 -j CLUSTERIP --new --hashmode sourceip-sourceport --clustermac 43:0A:1F:80:58:36 --total-nodes 2 --local-node 2 --hash-init 0</div><div><br></div><div>No good for a default CentOS 8 installation: </div><div><br></div><div># iptables -A INPUT -d 172.18.14.100/32 -i ens192 -j CLUSTERIP --new --hashmode sourceip-sourceport --clustermac 43:0A:1F:80:58:36 --total-nodes 2 --local-node 2 --hash-init 0</div><div>iptables v1.8.2 (nf_tables): chain name not allowed to start with `-'</div><div><br></div><div>Try `iptables -h' or 'iptables --help' for more information.</div><div><br></div><div><br></div><div>Is there any intention to abandon CLUSTERIP in favor of xt_cluster.ko? </div><div><br></div><div>Thanks a lot!</div></div><div><br></div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Att,</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Marcus VinÃcius</div></div></div></body></html>