LVSKB - User contributions [en]

IPVS FULLNAT and SYNPROXY

2012-08-08T09:37:05Z

Benjiaming: /* Introduction */

== Introduction==

'''FullNAT: A new packet forwarding method for IPVS, other than DR/NAT/TUNNEL'''

The main principle: the module introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.

'''SYNPROXY: Defence module against synflooding attack'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jiaming Wu at taobao.com, Jian Chen at 360.cn, and Shunmin Zhu at taobao.com, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was hard coded to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu at baidu.com in 2009.

The FullNAT and SYNPROXY support were added to keepalived/ipvsadm by Jiajun Chen, and Ziang Chen at taobao.com.

Please note that FullNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;

3.1 keepalived install
cd /home/pukong/tools/keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd /home/pukong/tools/ipvsadm;
make;
make install;

3.3 quaage install
cd /home/pukong/tools/quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-08-08T07:41:26Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model for IPVS besides DR/NAT/TUNNEL'''

The main principle: the module introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.

'''SYNPROXY: Defence module against synflood attack'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang at TAOBAO;

The FULLNAT and SYNPROXY support were added to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;

3.1 keepalived install
cd /home/pukong/tools/keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd /home/pukong/tools/ipvsadm;
make;
make install;

3.3 quaage install
cd /home/pukong/tools/quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

File:Lvs-fullnat-synproxy-doc.zip

2012-08-08T07:40:35Z

Benjiaming: uploaded a new version of "Image:Lvs-fullnat-synproxy-doc.zip"

File:LVS操作手册.zip

2012-08-08T07:39:53Z

Benjiaming: uploaded a new version of "Image:LVS操作手册.zip"

File:Lvs-fullnat-synproxy-doc.zip

2012-08-08T07:16:36Z

Benjiaming: uploaded a new version of "Image:Lvs-fullnat-synproxy-doc.zip"

IPVS FULLNAT and SYNPROXY

2012-08-08T07:14:29Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model for IPVS besides DR/NAT/TUNNEL'''

The main principle: the module ntroduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.

'''SYNPROXY: Defence module against synflood attack'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang at TAOBAO;

The FULLNAT and SYNPROXY support were added to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;

3.1 keepalived install
cd /home/pukong/tools/keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd /home/pukong/tools/ipvsadm;
make;
make install;

3.3 quaage install
cd /home/pukong/tools/quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-08-01T02:06:36Z

Benjiaming: /* Building */

== Introduction==

'''FULLNAT: A new packet forwarding model for IPVS besides DR/NAT/TUNNEL'''

The main principle: the module introduces introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.

'''SYNPROXY: Defence module against synflood attack'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang at TAOBAO;

The FULLNAT and SYNPROXY support were added to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;

3.1 keepalived install
cd /home/pukong/tools/keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd /home/pukong/tools/ipvsadm;
make;
make install;

3.3 quaage install
cd /home/pukong/tools/quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-08-01T02:05:59Z

Benjiaming: /* Building */

== Introduction==

'''FULLNAT: A new packet forwarding model for IPVS besides DR/NAT/TUNNEL'''

The main principle: the module introduces introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.

'''SYNPROXY: Defence module against synflood attack'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang at TAOBAO;

The FULLNAT and SYNPROXY support were added to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;
cd tools;

3.1 keepalived install
cd /home/pukong/tools/keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd /home/pukong/tools/ipvsadm;
make;
make install;

3.3 quaage install
cd /home/pukong/tools/quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T09:34:23Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model for IPVS besides DR/NAT/TUNNEL'''

The main principle: the module introduces introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.

'''SYNPROXY: Defence module against synflood attack'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang at TAOBAO;

The FULLNAT and SYNPROXY support were added to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

File:Lvs-fullnat-synproxy-doc.zip

2012-07-31T08:47:05Z

Benjiaming: uploaded a new version of "Image:Lvs-fullnat-synproxy-doc.zip"

IPVS

2012-07-31T07:33:09Z

Benjiaming: /* Design and Implementation */

IPVS (IP Virtual Server) implements transport-layer [[load balancing]] inside the Linux kernel, so called [[Layer-4 switching]]. IPVS running on a host acts as a [[load balancer]] before a cluster of real servers, it can direct requests for TCP/UDP based services to the real servers, and makes services of the real servers to appear as a virtual service on a single IP address.

== IP Load Balancing Technologies ==

Since the IP load balancing techniques have good scalability, IPVS extends the TCP/IP stack of the Linux kernel to support three IP load balancing techniques: [[LVS/NAT]], [[LVS/TUN]] and [[LVS/DR]]. The box running IPVS acts as a [[load balancer]] of network connections
from clients who know a single IP address for a service, and distributes them to a set of
servers that actually perform the work.

* [[LVS/NAT | Virtual Server via Network Address Translation]]
* [[LVS/TUN | Virtual Server via IP Tunneling]]
* [[LVS/DR | Virtual Server via Direct Routing]]

== Job Scheduling Algorithms ==

=== Connection Scheduling Algorithms inside the Kernel ===

IPVS schedules jobs at connection granularity inside the Linux kernel. Here connection is defined as data communication between client socket and server socket, no matter whether it uses TCP or UDP protocol. For scheduling UDP datagrams, IPVS [[load balancer]] records UDP datagram scheduling with configurable timeout, and the default UDP timeout is 300 seconds. Before UDP connection timeouts, all UDP datagrams from the same socket (protocol, ip address and port) will be directed to the same server.

IPVS has implemented ten connection scheduling algorithms inside the kernel so far:

* [[Round-Robin Scheduling]]
* [[Weighted Round-Robin Scheduling]]
* [[Least-Connection Scheduling]]
* [[Weighted Least-Connection Scheduling]]
* [[Locality-Based Least-Connection Scheduling]]
* [[Locality-Based Least-Connection with Replication Scheduling]]
* [[Destination Hashing Scheduling]]
* [[Source Hashing Scheduling]]
* [[Shortest Expected Delay Scheduling]]
* [[Never Queue Scheduling]]

=== Dynamic Feedback Load Balancing Scheduling ===

The dynamic feedback load balancing scheduling algorithm is to use connection scheduling algorithm and adjust server weight based on dynamic feeback load information of each server, in order to avoid load imbalance among servers.

* [[Dynamic Feedback Load Balancing Scheduling]]

== Software ==

See http://www.linuxvirtualserver.org/software/ipvs.html for downloading IPVS related software.

[[ipvsadm]] is used to set up, maintain or inspect the IP virtual server table in the Linux kernel. For how to compile ipvsadm on different Linux distributions, check [[compiling ipvsadm on different Linux distributions|this article]] for detailed information.

== Design and Implementation ==

* [[IPVS Design]]
* [[IPVS Implementation]]
* [[IPv6 load balancing]] - the status of IPv6 support in IPVS and examples

== Ongoing Development ==

=== IPVS On FreeBSD ===

The [http://dragon.linux-vs.org/~dragonfly/htm/lvs_freebsd.htm LVS On FreeBSD] project was started by Li Wang, the goal is to port IPVS code to FreeBSD. Now, the LVS On FreeBSD module supports the [[LVS/DR]] and [[LVS/TUN]] ip load balancing technologies.

=== Todo ===

* [[IPVS Wish List]]

[[Category:LVS Software]]
[[Category:Load Balancing]]
[[Category:Terms and Abbreviations]]

IPVS FULLNAT and SYNPROXY

2012-07-31T07:29:33Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang at TAOBAO;

The FULLNAT and SYNPROXY support was added to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T07:28:11Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang at TAOBAO;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T07:21:23Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

File:Lvs-fullnat-synproxy.tar.gz

2012-07-31T07:16:42Z

Benjiaming: uploaded a new version of "Image:Lvs-fullnat-synproxy.tar.gz"

File:Linux-2.6.32-220.23.1.el6.x86 64.lvs.src.tar.gz

2012-07-31T07:15:31Z

Benjiaming: uploaded a new version of "Image:Linux-2.6.32-220.23.1.el6.x86 64.lvs.src.tar.gz"

File:Linux-2.6.32-220.23.1.el6.x86 64.rs.src.tar.gz

2012-07-31T07:13:42Z

Benjiaming:

File:Linux-2.6.32-220.23.1.el6.x86 64.lvs.src.tar.gz

2012-07-31T06:44:17Z

Benjiaming:

IPVS FULLNAT and SYNPROXY

2012-07-31T06:23:39Z

Benjiaming: /* Building */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.gz;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T06:21:40Z

Benjiaming: /* Building */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./; // lvs-tools.tar.bz2 is in lvs-fullnat-synproxy.tar.gz
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

File:Lvs-fullnat-synproxy-doc.zip

2012-07-31T06:19:30Z

Benjiaming:

IPVS FULLNAT and SYNPROXY

2012-07-31T06:19:15Z

Benjiaming: /* Document */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T06:19:08Z

Benjiaming: /* Document */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]
[[Media:lvs-fullnat-synproxy-doc.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

File:LVS操作手册.zip

2012-07-31T06:08:40Z

Benjiaming:

IPVS FULLNAT and SYNPROXY

2012-07-31T06:08:30Z

Benjiaming: /* Document */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

[[Media:LVS操作手册.zip]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

File:LVS操作手册.docx

2012-07-31T06:04:53Z

Benjiaming:

IPVS FULLNAT and SYNPROXY

2012-07-31T06:02:36Z

Benjiaming: /* Document */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

[[Media:LVS操作手册.docx]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T05:45:03Z

Benjiaming: /* Download */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[Image:LVS操作手册]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]

[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T05:44:54Z

Benjiaming: /* Download */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[Image:LVS操作手册]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]
[[Media:linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz]]
[[Media:linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T05:43:47Z

Benjiaming: /* Building */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[Image:LVS操作手册]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch; // patch is in lvs-fullnat-synproxy.tar.gz

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T05:41:47Z

Benjiaming: /* Download */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[Image:LVS操作手册]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar.gz]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

File:Lvs-fullnat-synproxy.tar.gz

2012-07-31T05:39:01Z

Benjiaming:

IPVS FULLNAT and SYNPROXY

2012-07-31T05:38:18Z

Benjiaming: /* Download */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[Image:LVS操作手册]]

== Download ==

[[Media:lvs-fullnat-synproxy.tar]]

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T03:36:53Z

Benjiaming: /* Document */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[Image:LVS操作手册]]

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T03:33:17Z

Benjiaming: /* Document */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[Media:LVS操作手册]]

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T03:30:49Z

Benjiaming: /* Document */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[Image:LVS操作手册]]

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T03:29:08Z

Benjiaming: /* Document */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==
[[LVS操作手册]]

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T03:00:01Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T02:59:23Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen, YangYi,YaoguangSun,FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T02:59:10Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL;'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen, YangYi,YaoguangSun,FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY have only had limited testing.

== Document ==

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T02:58:47Z

Benjiaming: /* Introduction */

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL;'''

The main principle: introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen, YangYi,YaoguangSun,FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The FULLNAT and SYNPROXY support was add to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY has only had limited testing.

== Document ==

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T02:53:03Z

Benjiaming:

== Introduction==

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL;'''

The main principle: introduce local ip address (IDC internal ip address, lip), translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''

The main principle: based on tcp syncookies, refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun,FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang;

The new FULLNAT+SYNPROXY support was add to keepalived/ipvsadm by JiajunZhang,ZiangChen and ShunminZhu.

Please note that FULLNAT and SYNPROXY are experimental and has only had limited testing.

== Document ==

== Download ==

== Building ==

1. LVS Kernel

1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)

2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS FULLNAT and SYNPROXY

2012-07-31T02:46:46Z

Benjiaming: New page: '''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL;''' The main principle: introduce local ip address (IDC internal ip address, lip), translate cip-vip to lip-rip, lip and rip both...

'''FULLNAT: A new packet forwarding model as DR/NAT/TUNNEL;'''
The main principle: introduce local ip address (IDC internal ip address, lip), translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS can be inter-vlan communication, and RS only need access to internal network.

'''SYNPROXY: synflood attack defence module'''
The main principle: based on tcp syncookies, refer to http://en.wikipedia.org/wiki/SYN_cookies;

The first FULLNAT and SYNPROXY modules were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun,FangHan,Yingliu and JiamingWu. Now, the second FULLNAT and SYNPROXY modules were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang; The new FULLNAT+SYNPROXY support was add to keepalived/ipvsadm by JiajunZhang,ZiangChen and ShunminZhu.
Please note that FULLNAT and SYNPROXY are experimental and has only had limited testing.

== Document ==

== Download ==

== Building ==

1. LVS Kernel
1.1 get kernel rpm from redhat
wget ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm

1.2 get kernel source code from rpm
vim ~/.rpmmacros;
add:
%_topdir /home/pukong/rpms
%_tmppath /home/pukong/rpms/tmp
%_sourcedir /home/pukong/rpms/SOURCES
%_specdir /home/pukong/rpms/SPECS
%_srcrpmdir /home/pukong/rpms/SRPMS
%_rpmdir /home/pukong/rpms/RPMS
%_builddir /home/pukong/rpms/BUILD
cd /home/pukong;
mkdir rpms;
mkdir rpms/tmp;
mkdir rpms/SOURCES;
mkdir rpms/SPECS;
mkdir rpms/SRPMS;
mkdir rpms/RPMS;
mkdir rpms/BUILD;
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm;
cd /home/pukong/rpms/SPECS;
rpmbuild -bp kernel.spec;

then you can find kernel source code in /home/pukong/rpms/BUILD.

1.3 add lvs patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp lvs-2.6.32-220.23.1.el6.patch ./;
patch -p1<lvs-2.6.32-220.23.1.el6.patch;

Or you can directly get source code from linux-2.6.32-220.23.1.el6.x86_64.lvs.src.tar.gz;

1.4 compile and install
make -j16;
make modules_install;
make install;

2. RealServer Kernel (TOA)
2.1 get kernel source code, the same as step 1.1 and 1.2;

2.2 add toa patch
cd /home/pukong/rpms/BUILD/;
cd kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64/;
cp toa-2.6.32-220.23.1.el6.patch ./;
patch -p1<toa-2.6.32-220.23.1.el6.patch;

Or you can get source code directly from linux-2.6.32-220.23.1.el6.x86_64.rs.src.tar.gz;

2.3 compile and install
make -j16;
make modules_install;
make install;

3. LVS Tools (keepalived/ipvsadm/quaage)
cd /home/pukong;
cp lvs-tools.tar.bz2 ./;
tar xzf lvs-tools.tar.bz2;
cd tools;

3.1 keepalived install
cd keepalived;
./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
make;
make install;

3.2 ipvsadm install
cd ipvsadm;
make;
make install;

3.3 quaage install
cd quagga;
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
make
make;
make install;

[[Category:IPVS]]
[[Category:Load Balancing]]

IPVS

2012-07-31T02:13:44Z

Benjiaming:

IPVS (IP Virtual Server) implements transport-layer [[load balancing]] inside the Linux kernel, so called [[Layer-4 switching]]. IPVS running on a host acts as a [[load balancer]] before a cluster of real servers, it can direct requests for TCP/UDP based services to the real servers, and makes services of the real servers to appear as a virtual service on a single IP address.

== IP Load Balancing Technologies ==

Since the IP load balancing techniques have good scalability, IPVS extends the TCP/IP stack of the Linux kernel to support three IP load balancing techniques: [[LVS/NAT]], [[LVS/TUN]] and [[LVS/DR]]. The box running IPVS acts as a [[load balancer]] of network connections
from clients who know a single IP address for a service, and distributes them to a set of
servers that actually perform the work.

* [[LVS/NAT | Virtual Server via Network Address Translation]]
* [[LVS/TUN | Virtual Server via IP Tunneling]]
* [[LVS/DR | Virtual Server via Direct Routing]]

== Job Scheduling Algorithms ==

=== Connection Scheduling Algorithms inside the Kernel ===

IPVS schedules jobs at connection granularity inside the Linux kernel. Here connection is defined as data communication between client socket and server socket, no matter whether it uses TCP or UDP protocol. For scheduling UDP datagrams, IPVS [[load balancer]] records UDP datagram scheduling with configurable timeout, and the default UDP timeout is 300 seconds. Before UDP connection timeouts, all UDP datagrams from the same socket (protocol, ip address and port) will be directed to the same server.

IPVS has implemented ten connection scheduling algorithms inside the kernel so far:

* [[Round-Robin Scheduling]]
* [[Weighted Round-Robin Scheduling]]
* [[Least-Connection Scheduling]]
* [[Weighted Least-Connection Scheduling]]
* [[Locality-Based Least-Connection Scheduling]]
* [[Locality-Based Least-Connection with Replication Scheduling]]
* [[Destination Hashing Scheduling]]
* [[Source Hashing Scheduling]]
* [[Shortest Expected Delay Scheduling]]
* [[Never Queue Scheduling]]

=== Dynamic Feedback Load Balancing Scheduling ===

The dynamic feedback load balancing scheduling algorithm is to use connection scheduling algorithm and adjust server weight based on dynamic feeback load information of each server, in order to avoid load imbalance among servers.

* [[Dynamic Feedback Load Balancing Scheduling]]

== Software ==

See http://www.linuxvirtualserver.org/software/ipvs.html for downloading IPVS related software.

[[ipvsadm]] is used to set up, maintain or inspect the IP virtual server table in the Linux kernel. For how to compile ipvsadm on different Linux distributions, check [[compiling ipvsadm on different Linux distributions|this article]] for detailed information.

== Design and Implementation ==

* [[IPVS Design]]
* [[IPVS Implementation]]
* [[IPv6 load balancing]] - the status of IPv6 support in IPVS and examples
* [[IPVS FULLNAT and SYNPROXY]]

== Ongoing Development ==

=== IPVS On FreeBSD ===

The [http://dragon.linux-vs.org/~dragonfly/htm/lvs_freebsd.htm LVS On FreeBSD] project was started by Li Wang, the goal is to port IPVS code to FreeBSD. Now, the LVS On FreeBSD module supports the [[LVS/DR]] and [[LVS/TUN]] ip load balancing technologies.

=== Todo ===

* [[IPVS Wish List]]

[[Category:LVS Software]]
[[Category:Load Balancing]]
[[Category:Terms and Abbreviations]]

IPVS

2012-07-31T01:21:35Z

Benjiaming:

IPVS (IP Virtual Server) implements transport-layer [[load balancing]] inside the Linux kernel, so called [[Layer-4 switching]]. IPVS running on a host acts as a [[load balancer]] before a cluster of real servers, it can direct requests for TCP/UDP based services to the real servers, and makes services of the real servers to appear as a virtual service on a single IP address.

== IP Load Balancing Technologies ==

Since the IP load balancing techniques have good scalability, IPVS extends the TCP/IP stack of the Linux kernel to support three IP load balancing techniques: [[LVS/NAT]], [[LVS/TUN]] and [[LVS/DR]]. The box running IPVS acts as a [[load balancer]] of network connections
from clients who know a single IP address for a service, and distributes them to a set of
servers that actually perform the work.

* [[LVS/NAT | Virtual Server via Network Address Translation]]
* [[LVS/TUN | Virtual Server via IP Tunneling]]
* [[LVS/DR | Virtual Server via Direct Routing]]

== Job Scheduling Algorithms ==

=== Connection Scheduling Algorithms inside the Kernel ===

IPVS schedules jobs at connection granularity inside the Linux kernel. Here connection is defined as data communication between client socket and server socket, no matter whether it uses TCP or UDP protocol. For scheduling UDP datagrams, IPVS [[load balancer]] records UDP datagram scheduling with configurable timeout, and the default UDP timeout is 300 seconds. Before UDP connection timeouts, all UDP datagrams from the same socket (protocol, ip address and port) will be directed to the same server.

IPVS has implemented ten connection scheduling algorithms inside the kernel so far:

* [[Round-Robin Scheduling]]
* [[Weighted Round-Robin Scheduling]]
* [[Least-Connection Scheduling]]
* [[Weighted Least-Connection Scheduling]]
* [[Locality-Based Least-Connection Scheduling]]
* [[Locality-Based Least-Connection with Replication Scheduling]]
* [[Destination Hashing Scheduling]]
* [[Source Hashing Scheduling]]
* [[Shortest Expected Delay Scheduling]]
* [[Never Queue Scheduling]]

=== Dynamic Feedback Load Balancing Scheduling ===

The dynamic feedback load balancing scheduling algorithm is to use connection scheduling algorithm and adjust server weight based on dynamic feeback load information of each server, in order to avoid load imbalance among servers.

* [[Dynamic Feedback Load Balancing Scheduling]]

== Software ==

See http://www.linuxvirtualserver.org/software/ipvs.html for downloading IPVS related software.

[[ipvsadm]] is used to set up, maintain or inspect the IP virtual server table in the Linux kernel. For how to compile ipvsadm on different Linux distributions, check [[compiling ipvsadm on different Linux distributions|this article]] for detailed information.

== Design and Implementation ==

* [[IPVS Design]]
* [[IPVS Implementation]]
* [[IPv6 load balancing]] - the status of IPv6 support in IPVS and examples
* [[FULLNAT+SYNPROXY]]

== Ongoing Development ==

=== IPVS On FreeBSD ===

The [http://dragon.linux-vs.org/~dragonfly/htm/lvs_freebsd.htm LVS On FreeBSD] project was started by Li Wang, the goal is to port IPVS code to FreeBSD. Now, the LVS On FreeBSD module supports the [[LVS/DR]] and [[LVS/TUN]] ip load balancing technologies.

=== Todo ===

* [[IPVS Wish List]]

[[Category:LVS Software]]
[[Category:Load Balancing]]
[[Category:Terms and Abbreviations]]