<div dir="ltr">We are having some grief getting DRBD to connect between subnets<br>in HP Cloud Services (<a href="http://www.hpcloud.com">http://www.hpcloud.com</a> - Openstack 13.5 env).<br>In HPCS every node gets two IPs:<br>
<br>10.0.0.X private subnet<br>15.*.*.* /18 'floating IP'<br><br>Connecting on the private subnet works fine, but in one scenario<br>we want to connect between subnets and must use the floating IP.<br>Thus far this has been a non-starter. It appears that DRBD does<br>
something special with IP's that are not 'static' to the node.<br>We have set: <br><br>global {<br> disable-ip-verification;<br>}<br><br>to try to get past that but to no avail. Typical status of the two nodes:<br>
0: cs:WFConnection ro:Primary/Unknown ds:UpToDate/DUnknown C r----s<br>and:<br> 0: cs:WFConnection ro:Secondary/Unknown ds:Inconsistent/DUnknown C r----s<br><br>Other things we have done already include:<br>Ensure that iptables is stopped.<br>
Opened HPCS security groups wide open between the two floating IPs<br>Tested ping, ssh, and a test program (see below) between the nodes.<br><br>When we run this netstat on the master shortly after starting a connection<br>
attempt we can see that a SYN was sent to the secondary:<br><br>root@chefbe-east-z1(/root):<br>$ netstat -aptln<br>Active Internet connections (servers and established)<br>Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name<br>
tcp 0 0 <a href="http://15.126.215.121:7788">15.126.215.121:7788</a> 0.0.0.0:* LISTEN -<br>tcp 0 0 <a href="http://0.0.0.0:22">0.0.0.0:22</a> 0.0.0.0:* LISTEN 1098/sshd<br>
tcp 0 0 <a href="http://127.0.0.1:25">127.0.0.1:25</a> 0.0.0.0:* LISTEN 1240/master<br>tcp 0 1 <a href="http://15.126.215.121:59527">15.126.215.121:59527</a> <a href="http://15.126.215.156:7788">15.126.215.156:7788</a> SYN_SENT -<br>
tcp 0 0 <a href="http://10.0.0.22:22">10.0.0.22:22</a> <a href="http://15.219.147.254:33194">15.219.147.254:33194</a> ESTABLISHED 17484/sshd<br><br>Likewise, the same netstat on the secondary shows a SYN sent to the master.<br>
But each seems to be ignoring the SYN from the other and not starting<br>a connection.<br><br>We noticed this: <br><a href="http://www.drbd.org/users-guide/s-pacemaker-floating-peers.html">http://www.drbd.org/users-guide/s-pacemaker-floating-peers.html</a><br>
<br>And tried it replacing 'address' with 'floating' in our resource defintion but it's<br>a no go for us:<br> <br> "/pc0.res:14: Parse error: 'disk | device | address | meta-disk | flexible-meta-disk' expected,<br>
but got 'floating'"<br><br>We are not using Pacemaker so perhaps that syntax is Pacemaker specific - ?<br><br>We are running:<br>drbd84-8.4.4<br>CentOS 6.5<br><br>Finally, if we tear down DRBD and run our little client-server test program<br>
between the two nodes over port 7788 it works just fine.<br><br>We are open to suggestions.<br><br>Thx.<br><br>Ken Miles</div>