Configuration for the verification
The application to be protected is Apache and we checked the connection from the client PC with a web browser. The active server (lk4lnode03) and the standby server (lk4lnode04) belong to different zones. The http request from the client (lkclient) is redirected to the active server virtual IP (10.3.1.200) via the ILB probing at 80.
Overview of client redirection with the ILB
The outline of connecting steps from the client PC is as follows.
- In order for the client to connect to httpd, start the connection to 10.3.1.200 (port 80) via the ILB.
- In the ILB 10.3.1.7 (active node: lk4lnode03) and 10.3.1.8 (standby node: lk4lnode04) are registered in the load balancing destination (backend pool) without port setting. The packets received by the ILB for 10.3.1.200 (port 80) are forwarded to both the active and standby nodes.
- Due to LifeKeeper specifications, it is necessary to specify [VIP protected with IP resources] for Apache resources. Create an IP resource (10.3.1.200) for receiving. Since the LifeKeeper IP resource (10.3.1.200) is in service only on the active node, only the active node (10.3.1.7) receives requests.
- As a result, httpd (10.3.1.200: port80) of the active node receives the connection request from the client.