测试keepalived在DR模式下VIP转发数据到RIP的过程

ew21w

测试keepalived在DR模式下VIP转发数据到RIP的过程

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46

此处测试环境约定： 【Client】                            CIP = 10.0.200.22       MAC = 8c:89:a5:96:4c:b2（假设为11:11:11:11:11:11） 【Director】      VIP = 10.0.205.100  DIP = 10.0.200.21       MAC = 8c:89:a5:96:51:cf（假设为22:22:22:22:22:22） 【RealServer】                        RIP = 10.0.205.2        MAC = 08:00:27:3b:62:f5（假设为33:33:33:33:33:33） 1）【Client】 ARP Request who has 10.0.205.100 tell 10.0.200.22 CIP = 10.0.200.22 MAC = 11:11:11:11:11:11 2）【Director】响应1，ARP Reply 10.0.205.100 is-at 22:22:22:22:22:22 VIP = 10.0.205.100 DIP = 10.0.200.21 MAC = 22:22:22:22:22:22 3）【Client】发送TCP SYN CIP = 10.0.200.22   MAC = 11:11:11:11:11:11 -> VIP = 10.0.205.100  MAC = 22:22:22:22:22:22 4）【Director】选一个【RealServer】，改数据包里的MAC为RIP的MAC，转发给RIP CIP = 10.0.200.22   MAC = 11:11:11:11:11:11 -> VIP = 10.0.205.100  MAC = 33:33:33:33:33:33 5）【RealServer】收包，发ARP，Request who has 10.0.200.22 tell 10.0.205.2 6）【Client】响应5）ARP Reply 10.0.200.22 is-at 11:11:11:11:11:11 7）【RealServer】使用VIP回应3 实测抓包内容： [iyunv@svr200-22 ~]# tcpdump -nn host 10.0.200.22 and \(10.0.200.21 or 10.0.205.100 or 10.0.205.2\) tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes 18:08:31.342062 ARP, Request who-has 10.0.205.100 tell 10.0.200.22, length 28 18:08:31.342627 ARP, Reply 10.0.205.100 is-at 8c:89:a5:96:51:cf, length 46 18:08:31.342637 IP 10.0.200.22.58914 > 10.0.205.100.80: Flags [S], seq 3567838243, win 14600, options [mss 1460,sackOK,TS val 373309346 ecr 0,nop,wscale 7], length 0 18:08:31.343842 ARP, Request who-has 10.0.200.22 tell 10.0.205.2, length 46 18:08:31.343854 ARP, Reply 10.0.200.22 is-at 8c:89:a5:96:4c:b2, length 28 18:08:31.344629 IP 10.0.205.100.80 > 10.0.200.22.58914: Flags [S.], seq 4193479915, ack 3567838244, win 14480, options [mss 1460,sackOK,TS val 27450580 ecr 373309346,nop,wscale 6], length 0 18:08:31.344649 IP 10.0.200.22.58914 > 10.0.205.100.80: Flags [.], ack 1, win 115, options [nop,nop,TS val 373309348 ecr 27450580], length 0 18:08:39.260264 IP 10.0.200.22.58914 > 10.0.205.100.80: Flags [P.], seq 1:6, ack 1, win 115, options [nop,nop,TS val 373317264 ecr 27450580], length 5 18:08:39.261438 IP 10.0.205.100.80 > 10.0.200.22.58914: Flags [.], ack 6, win 227, options [nop,nop,TS val 27458498 ecr 373317264], length 0 18:08:39.261637 IP 10.0.205.100.80 > 10.0.200.22.58914: Flags [P.], seq 1:174, ack 6, win 227, options [nop,nop,TS val 27458498 ecr 373317264], length 173 18:08:39.261663 IP 10.0.200.22.58914 > 10.0.205.100.80: Flags [.], ack 174, win 123, options [nop,nop,TS val 373317265 ecr 27458498], length 0 18:08:39.261670 IP 10.0.205.100.80 > 10.0.200.22.58914: Flags [F.], seq 174, ack 6, win 227, options [nop,nop,TS val 27458498 ecr 373317264], length 0