Difference between revisions of "Using the noarp module to disable ARP"
From LVSKB
m |
|||
| Line 1: | Line 1: | ||
== Introduction == | == Introduction == | ||
| + | MasarLabs noarp from Maurizio Sartori is a Linux kernel module that filters and drops unwanted [[ARP]] requests. It is useful when you need to add an alias to the loopback interface to use a [[load balancer]]. | ||
| + | |||
| + | The noarp module is available for both kernel 2.4 and kernel 2.6. | ||
| + | |||
| + | The advantages of using noarp is that it is to hide IP address, not interface, and there is no need to rebuild the kernel image. The disadvantage is that noarp module needs rebuilding every time that kernel image is upgraded. | ||
== Disable ARP for VIP == | == Disable ARP for VIP == | ||
| + | noarpctl is used to disable ARP for VIP. The basic syntax of 'noarpctl' is: | ||
| + | noarpctl add VIP RIP | ||
| + | That means hide the VIP address and use [[RIP]] in outgoing ARP requests that would use [[VIP]]. | ||
== References == | == References == | ||
| − | * http://www.linuxvirtualserver.org/ | + | * [http://www.masarlabs.com/noarp/ Noarp kernel module homepage] |
| + | * http://archive.linuxvirtualserver.org/html/lvs-users/2002-11/msg00311.html | ||
| + | * http://archive.linuxvirtualserver.org/html/lvs-users/2003-06/msg00023.html | ||
[[Category:ARP Issue]] | [[Category:ARP Issue]] | ||
Latest revision as of 15:55, 26 October 2006
Introduction
MasarLabs noarp from Maurizio Sartori is a Linux kernel module that filters and drops unwanted ARP requests. It is useful when you need to add an alias to the loopback interface to use a load balancer.
The noarp module is available for both kernel 2.4 and kernel 2.6.
The advantages of using noarp is that it is to hide IP address, not interface, and there is no need to rebuild the kernel image. The disadvantage is that noarp module needs rebuilding every time that kernel image is upgraded.
Disable ARP for VIP
noarpctl is used to disable ARP for VIP. The basic syntax of 'noarpctl' is:
noarpctl add VIP RIP
That means hide the VIP address and use RIP in outgoing ARP requests that would use VIP.
