Q:

ipvsadm: Access loadbalanced ip's from internal network

I have the following scenario:
ipvs-Loadbalancer - direct routing: 123.123.123.117
Realserver 1: eth0: 123.123.123.123 eth1: 10.10.0.1
Realserver 2: eth0: 123.123.123.124 eth1: 10.10.0.2
Random server on internal network: eth0: 10.10.0.44

Loadbalancing works perfect from from external ip's. If I connect to 123.123.123.117 I get a response from either 123.123.123.123 or 123.123.123.124.
If I try to connect from a random server within my network, it won't work though.
tcpdump tells me, that the request goes through the loadbalancer to the realserver but there's no response.
The setup did work on Debian Squeeze but since I switched to Ubuntu Trusty it doesn't.
route -n on the realserver tells me:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         123.123.123.113 0.0.0.0         UG    0      0        0 eth1
10.10.0.0       0.0.0.0         255.255.0.0     U     0      0        0 eth0
123.123.123.112 0.0.0.0         255.255.255.240 U     0      0        0 eth1

Any ideas?
Thanks!

A:

Ok, the problem is that the kernel checks if the packet is routable through the interface which it came. If it isn't, the packet won't be accepted.
Disabling reverse path filter on the realservers did the trick:
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.eth1.rp_filter = 0

