Red Hat Training

A Red Hat training course is available for Red Hat Enterprise Linux

4.7. Synchronizing Configuration Files

After configuring the primary LVS router, there are several configuration files that must be copied to the backup LVS router before you start LVS.
These files include:
  • /etc/sysconfig/ha/ — the configuration file for the LVS routers.
  • /etc/sysctl — the configuration file that, among other things, turns on packet forwarding in the kernel.
  • /etc/sysconfig/iptables — If you are using firewall marks, you should synchronize one of these files based on which network packet filter you are using.


The /etc/sysctl.conf and /etc/sysconfig/iptables files do not change when you configure LVS using the Piranha Configuration Tool.

4.7.1. Synchronizing

Anytime the LVS configuration file, /etc/sysconfig/ha/, is created or updated, you must copy it to the backup LVS router node.


Both the active and backup LVS router nodes must have identical files. Mismatched LVS configuration files between the LVS router nodes can prevent failover.
The best way to do this is to use the scp command.


To use scp the sshd must be running on the backup router, see Section 2.1, “Configuring Services on the LVS Routers” for details on how to properly configure the necessary services on the LVS routers.
Issue the following command as the root user from the primary LVS router to sync the files between the router nodes:
scp /etc/sysconfig/ha/ n.n.n.n:/etc/sysconfig/ha/
In the command, replace n.n.n.n with the real IP address of the backup LVS router.

4.7.2. Synchronizing sysctl

The sysctl file is only modified once in most situations. This file is read at boot time and tells the kernel to turn on packet forwarding.


If you are not sure whether or not packet forwarding is enabled in the kernel, see Section 2.5, “Turning on Packet Forwarding” for instructions on how to check and, if necessary, enable this key functionality.

4.7.3. Synchronizing Network Packet Filtering Rules

If you are using iptables, you will need to synchronize the appropriate configuration file on the backup LVS router.
If you alter the any network packet filter rules, enter the following command as root from the primary LVS router:
scp /etc/sysconfig/iptables n.n.n.n:/etc/sysconfig/
In the command, replace n.n.n.n with the real IP address of the backup LVS router.
Next either open an ssh session to the backup router or log into the machine as root and type the following command:
/sbin/service iptables restart
Once you have copied these files over to the backup router and started the appropriate services (see Section 2.1, “Configuring Services on the LVS Routers” for more on this topic) you are ready to start LVS.