IPVS CA

get ip vs(fullnat) client addr

由taobao/toa修改，可作为独立模块编译安装, 支持tcp/udp

支持 centos6.6(linux 2.6.32-220) / centos7.2(linux 3.10.0-237.4.5)

对应内核在github.com/yubo/LVS,兼容taobao/LVS(lvs_v2)

支持taobao/lvs_v2版本的tcp opt报文格式，新加入了icmp echo报文(payload),实现了tcp/udp local - client 地址对应关系的通告

Feature

• Build as a module
• Support TCP
• Support UDP
• Support centos 6.6
• Support centos 7.2
• Support centos 7.2 rpmbuild

Demo

lvs(fullnat) client address TCP

lvs(fullnat) client address UDP

Install

build kmod

cd src/ip_vs_ca
make
insmod ./ip_vs_ca.ko

build rpm

ip_vs_ca kmod for centos7.2(RHEL7)

yum groupinstall "Development tools"
yum install kernel-devel kernel-abi-whitelists bzip2
make
rpm -ivh ~/rpmbuild/RPMS/x86_64/kmod-ip_vs_ca-0.01-1.el7.centos.x86_64.rpm
modprobe ip_vs_ca

proc sys ctl

可以通过修改以下文件来设置连接超时回收的时间

• /proc/sys/net/ca/tcp_timeout (defualt 90s)
• /proc/sys/net/ca/udp_timeout (defualt 180s)

Udpd example

udpd.c

	char recvbuf[1024] = {0};
	struct sockaddr_in peeraddr[2];
	socklen_t peerlen;
	int n;

	peerlen = sizeof(peeraddr);
	n = recvfrom(sock, recvbuf, sizeof(recvbuf), 0,
			(struct sockaddr *)peeraddr, &peerlen);
	if(peerlen == sizeof(struct sockaddr_in)){
		printf("recv %d %s:%d\n", peerlen,
			inet_ntoa(peeraddr[0].sin_addr),
			ntohs(peeraddr[0].sin_port));
	}else if(peerlen == sizeof(peeraddr)){
		printf("recv %d %s:%d", peerlen,
			inet_ntoa(peeraddr[0].sin_addr),
			ntohs(peeraddr[0].sin_port));
		printf("(%s:%d)\n",
			inet_ntoa(peeraddr[1].sin_addr),
			ntohs(peeraddr[1].sin_port));
	}