測試keepalived在DR模式下VIP轉發資料到RIP的過程
阿新 • • 發佈：2020-10-10
測試keepalived在DR模式下VIP轉發資料到RIP的過程
此處測試環境約定： 【Client】CIP=10.0.200.22MAC=8c:89:a5:96:4c:b2（假設為11:11:11:11:11:11） 【Director】VIP=10.0.205.100DIP=10.0.200.21MAC=8c:89:a5:96:51:cf（假設為22:22:22:22:22:22） 【RealServer】RIP=10.0.205.2MAC=08:00:27:3b:62:f5（假設為33:33:33:33:33:33） 1）【Client】ARPRequestwhohas10.0.205.100tell10.0.200.22 CIP=10.0.200.22 MAC=11:11:11:11:11:11 2）【Director】響應1，ARPReply10.0.205.100is-at22:22:22:22:22:22 VIP=10.0.205.100 DIP=10.0.200.21 MAC=22:22:22:22:22:22 3）【Client】傳送TCPSYN CIP=10.0.200.22MAC=11:11:11:11:11:11 -> VIP=10.0.205.100MAC=22:22:22:22:22:22 4）【Director】選一個【RealServer】，改資料包裡的MAC為RIP的MAC，轉發給RIP CIP=10.0.200.22MAC=11:11:11:11:11:11 -> VIP=10.0.205.100MAC=33:33:33:33:33:33 5）【RealServer】收包，發ARP，Requestwhohas10.0.200.22tell10.0.205.2 6）【Client】響應5）ARPReply10.0.200.22is-at11:11:11:11:11:11 7）【RealServer】使用VIP迴應3 實測抓包內容： [[email protected]~]#tcpdump-nnhost10.0.200.22and\(10.0.200.21or10.0.205.100or10.0.205.2\) tcpdump:verboseoutputsuppressed,use-vor-vvforfullprotocoldecode listeningoneth0,link-typeEN10MB(Ethernet),capturesize65535bytes 18:08:31.342062ARP,Requestwho-has10.0.205.100tell10.0.200.22,length28 18:08:31.342627ARP,Reply10.0.205.100is-at8c:89:a5:96:51:cf,length46 18:08:31.342637IP10.0.200.22.58914>10.0.205.100.80:Flags[S],seq3567838243,win14600,options[mss1460,sackOK,TSval373309346ecr0,nop,wscale7],length0 18:08:31.343842ARP,Requestwho-has10.0.200.22tell10.0.205.2,length46 18:08:31.343854ARP,Reply10.0.200.22is-at8c:89:a5:96:4c:b2,length28 18:08:31.344629IP10.0.205.100.80>10.0.200.22.58914:Flags[S.],seq4193479915,ack3567838244,win14480,options[mss1460,sackOK,TSval27450580ecr373309346,nop,wscale6],length0 18:08:31.344649IP10.0.200.22.58914>10.0.205.100.80:Flags[.],ack1,win115,options[nop,nop,TSval373309348ecr27450580],length0 18:08:39.260264IP10.0.200.22.58914>10.0.205.100.80:Flags[P.],seq1:6,ack1,win115,options[nop,nop,TSval373317264ecr27450580],length5 18:08:39.261438IP10.0.205.100.80>10.0.200.22.58914:Flags[.],ack6,win227,options[nop,nop,TSval27458498ecr373317264],length0 18:08:39.261637IP10.0.205.100.80>10.0.200.22.58914:Flags[P.],seq1:174,ack6,win227,options[nop,nop,TSval27458498ecr373317264],length173 18:08:39.261663IP10.0.200.22.58914>10.0.205.100.80:Flags[.],ack174,win123,options[nop,nop,TSval373317265ecr27458498],length0 18:08:39.261670IP10.0.205.100.80>10.0.200.22.58914:Flags[F.],seq174,ack6,win227,options[nop,nop,TSval27458498ecr373317264],length0
轉載於:https://blog.51cto.com/nosmoking/1626394