Re: [gentoo-server] Disable ARP

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeff Rooney wrote:
> Both methods appear to work as I hoped.

Good.

> Ramon: you where exactly right, I was following some documentation sent
> over with some load balancers that I am experimenting with. Unfortunatly
> their tech staff didn't have any real options for us other than blocking
> the arp responses via ebtables.

Mmmm interesting tech support, out of curiosity what loadbalancers are you using ?

> Not sure why I didn't think about using
> the dummy interface instead of the loopback...guess its just been that
> sort of day for me =)

I have them too (those days), trying to ram the square block through the round hole.... In some cases it even works :-)

> Thanks again for your help Ramon and RijilV.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.gentoo.org Links gentoo-security gentoo-server gentoo-user Request more information about Pantek

You're welcome.
Word of warning: If you lose the noarp option on one of the real-servers you will see very weird erratic behaviour which can be hard to debug. Depending on the load you push through the loadbalancer the realserver which sends an arp will die immediately or slowly whilst generating weird bugs in your app.

Best way to check: login with ssh on the vip

Ramon
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFHFHbrwiVM6CtDHQ0RAsRxAJ9sgT8zgOpXHh5h5axm4qg+IQwYkgCffP74 sebxQ45SkGvDAm+2SSb4ONU=
=khYz
-----END PGP SIGNATURE-----

-- 
gentoo-server@gentoo.org mailing list