lvs-dr模式部署遇到問題，求教老鳥
部署LVS-DR模式遇到了問題，特向老鳥們請教
在Client發起請求時Director和Real Server 都出現SYN-RECV 的狀態，感覺是我的Real Server沒有響應Director發來的請求。
請老鳥們幫我排查一下問題，萬分感謝！
拓撲以及IP地址規劃
1、打開GATEWAY路由轉發功能
[root@node139 ~]# sysctl -p
net.ipv4.ip_forward = 1
#添加源地址轉換
[root@node139 ~]# iptables -t nat -A POSTROUTING -s 192.168.3.0/24 ! -d 192.168.3.0/24 -j SNAT --to-source 10.10.3.139
#檢查結果
[root@node139 ~]# service iptables status
Table: nat
Chain PREROUTING (policy ACCEPT)
num target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
num target prot opt source destination
1 SNAT all -- 192.168.3.0/24 !192.168.3.0/24 to:10.10.3.139
2、配置RIP並將網關指向GATWEAY（192.168.3.139）
#檢查結果ping Client 地址
[root@node136 ~]# ping 10.10.3.100
PING 10.10.3.100 (10.10.3.100) 56(84) bytes of data.
64 bytes from 10.10.3.100: icmp_seq=1 ttl=127 time=0.769 ms
64 bytes from 10.10.3.100: icmp_seq=2 ttl=127 time=0.578 ms
64 bytes from 10.10.3.100: icmp_seq=3 ttl=127 time=0.576 ms
64 bytes from 10.10.3.100: icmp_seq=4 ttl=127 time=6.18 ms
[root@node137 ~]# ping 10.10.3.100
PING 10.10.3.100 (10.10.3.100) 56(84) bytes of data.
64 bytes from 10.10.3.100: icmp_seq=1 ttl=127 time=0.590 ms
64 bytes from 10.10.3.100: icmp_seq=2 ttl=127 time=0.484 ms
64 bytes from 10.10.3.100: icmp_seq=3 ttl=127 time=0.843 ms
64 bytes from 10.10.3.100: icmp_seq=4 ttl=127 time=0.597 ms
3、配置Real Server 的ARP抑制
echo 2 > /proc/sys/net/ipv4/conf/eth0/arp_announce
echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce
echo 1 > /proc/sys/net/ipv4/conf/eth0/arp_ignore
echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore
#檢查結果
[root@node136 ~]# sysctl -a |grep arp_ignor
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.default.arp_ignore = 0
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.eth0.arp_ignore = 1
[root@node136 ~]# sysctl -a |grep arp_announce
net.ipv4.conf.all.arp_announce = 2
net.ipv4.conf.default.arp_announce = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.eth0.arp_announce = 2
4、打開Director的路由轉發，配置DIP（不指DIP的網關）
[root@node135 ~]# sysctl -p
net.ipv4.ip_forward = 1
[root@node135 ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth0
1 DEVICE=eth0
2 TYPE=Ethernet
3 UUID=d1be5ee5-76b8-4dfb-a997-67b3ca4a82d1
4 ONBOOT=yes
5 NM_CONTROLLED=yes
6 BOOTPROTO=none
7 HWADDR=00:0C:29:D4:EE:E2
8 IPADDR=192.168.3.135
9 PREFIX=24
10 DEFROUTE=yes
11 IPV4_FAILURE_FATAL=yes
12 IPV6INIT=no
13 NAME="System eth0"
#檢查結果與Real Server 通訊
[root@node135 ~]# ping 192.168.3.136
PING 192.168.3.136 (192.168.3.136) 56(84) bytes of data.
64 bytes from 192.168.3.136: icmp_seq=1 ttl=64 time=1.44 ms
64 bytes from 192.168.3.136: icmp_seq=2 ttl=64 time=0.099 ms
[root@node135 ~]# ping 192.168.3.137
PING 192.168.3.137 (192.168.3.137) 56(84) bytes of data.
64 bytes from 192.168.3.137: icmp_seq=1 ttl=64 time=1.30 ms
64 bytes from 192.168.3.137: icmp_seq=2 ttl=64 time=0.190 ms
5、配置VIP
#配置Director上的VIP
[root@node135 ~]# ifconfig eth0:0 10.10.3.135/16 up
#檢查結果
[root@node135 ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0C:29:D4:EE:E2
inet addr:192.168.3.135 Bcast:192.168.3.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fed4:eee2/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:920681 errors:0 dropped:0 overruns:0 frame:0
TX packets:1071 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:60442376 (57.6 MiB) TX bytes:91252 (89.1 KiB)
eth0:0 Link encap:Ethernet HWaddr 00:0C:29:D4:EE:E2
inet addr:10.10.3.135 Bcast:10.10.3.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
#配置Real Server 上的VIP
[root@node136 ~]# ifconfig lo:0 10.10.3.135 dev lo:0 up
[root@node136 ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0C:29:2F:62:37
inet addr:192.168.3.136 Bcast:192.168.3.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe2f:6237/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:771221 errors:0 dropped:0 overruns:0 frame:0
TX packets:2589 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:50744484 (48.3 MiB) TX bytes:139999 (136.7 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
lo:0 Link encap:Local Loopback
inet addr:10.10.3.135 Mask:0.0.0.0
UP LOOPBACK RUNNING MTU:65536 Metric:1
#添加請求流量引導路由
[root@node135 ~]# route add -host 10.10.3.135 dev eth0:0
#檢查結果
[root@node135 ~]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.10.3.135 0.0.0.0 255.255.255.255 UH 0 0 0 eth0
192.168.3.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
10.10.3.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 eth0
[root@node136 ~]# route add -host 10.10.3.135 dev lo:0
[root@node136 ~]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.10.3.135 0.0.0.0 255.255.255.255 UH 0 0 0 lo
192.168.3.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 eth0
0.0.0.0 192.168.3.139 0.0.0.0 UG 0 0 0 eth0
#檢查從客戶端到VIP的通訊
C:\Users\Administrator>ping 10.10.3.135
正在 Ping 10.10.3.135 具有 32 字節的數據:
來自 10.10.3.135 的回復: 字節=32 時間<1ms TTL=64
來自 10.10.3.135 的回復: 字節=32 時間<1ms TTL=64
6、配置lvs
[root@node135 ~]# ipvsadm -ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 10.10.3.135:80 rr
-> 192.168.3.136:80 Route 1 0 0
-> 192.168.3.137:80 Route 1 0 0
7、發起訪問時lvs狀態
[root@node135 ~]# ipvsadm -lnc
IPVS connection entries
pro expire state source virtual destination
TCP 00:57 SYN_RECV 10.10.3.100:51167 10.10.3.135:80 192.168.3.137:80
TCP 00:57 SYN_RECV 10.10.3.100:51154 10.10.3.135:80 192.168.3.136:80
TCP 00:57 SYN_RECV 10.10.3.100:51158 10.10.3.135:80 192.168.3.137:80
TCP 00:57 SYN_RECV 10.10.3.100:51168 10.10.3.135:80 192.168.3.136:80
#發起訪問時Real Server狀態
[root@node136 ~]# ss -tan
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:80 *:*
SYN-RECV 0 0 10.10.3.135:80 10.10.3.100:51154
SYN-RECV 0 0 10.10.3.135:80 10.10.3.100:63149
SYN-RECV 0 0 10.10.3.135:80 10.10.3.100:51168
LISTEN 0 128 :::22 :::*
LISTEN 0 128 *:22 *:*
LISTEN 0 100 ::1:25 :::*
LISTEN 0 100 127.0.0.1:25 *:*
ESTAB 0 0 192.168.3.136:22 192.168.3.100:50658
lvs-dr模式部署遇到問題，求教老鳥