ipvsadm -C

ipvsadm -A -t 10.1.0.254:80 -s rr
ipvsadm -a -t 10.1.0.254:80 -r 10.1.0.1:80 -g

ipvsadm -a -t 10.1.0.254:80 -r 10.1.0.3:80 -g

ipvsadm -a -t 10.1.0.254:80 -r 10.1.0.4:80 Cg
然后运行：/etc/rc.d/init.d/ipvsadm save
就可以保存当前配置到/etc/sysconfig/ipvsadm文件中
在DR上启用IP转发： 

# Enables packet forwarding
net.ipv4.ip_forward = 1
# Enables source route verification
net.ipv4.conf.default.rp_filter = 1 

/sbin/sysctl -p
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1 

patch -p1 < /root/hidden-2.4.25-1.diff (arp for LVS-DR/LVS-Tun)
打上补丁后需要重新编译内核：
make mrproper  检查相关文件的一致性
make menuconfig
make dep
make clean
make bzImage
make modules
make modules_install
depmod Ca: 检查内核中有没有未解析的symbol，它是生成模块间的依赖关系，这样你启动新内核之后，使用modprobe命令加载模块时就能正确地定位模块。假如输入这个命令后看不到没有任何返回信息的话，那说明在编译过程是已经成功了
在/boot下生成 initrd img文件：
cd /boot
mkinitrd initrd-lvs 2.4.21－27.ELcustom
 (后一是编译完内核后在/lib/modules/生成的，具体的文件名可以在，/usr/src/linux-2.4中的makefile中指定具体的名字，默认是initrd-当前内核名custom)
生成新的内核引导文件：
修改启动内核：
cp /usr/src/linux-2.4/arch/i386/boot/bzImage /boot/vmlinuz-lvs (rs)

cp /usr/src/liunx-2.4/System.map /boot/System.map-lvs (rs)

cp /usr/src/linux-2.4/vmlinux /boot/vmlinux-lvs (rs) 

cd /boot

rm -f System.map

ln -s System.map.lvs (rs) System.map

修改启动引导文件
vi /boot/grub/grub.conf:

title Redhat-lvs
   root (hd0,0)
   kernel /boot/ vmlinuz-lvs ro root=/dev/xxx

title Red Hat Enterprise LVS
        root (hd0,0)
        kernel /vmlinuz-lvs  ro root=LABEL=/
        initrd /initrd-lvs
重新启动计算机
shutdown Cr now
并用新内核引导系统，系统就有了Hidden补丁了。
在rc5.d, rc3.d加入如下脚本S98startrs：使realserver启动时获得路由和禁止lo:0上arp
ifconfig lo:0 10.1.0.254 netmask 255.255.255.255 broadcast 10.1.0.254:80 up
route add -host 10.1.0.254 dev lo:0
echo 1 >/proc/sys/net/ipv4/conf/all/hidden
echo 1 >/proc/sys/net/ipv4/conf/lo/hidden
 
 
 
#!/bin/bash

#----------mini-rc.lvs_dr-realserver------------------

#installing default gw 192.168.7.254 for vs-dr

/sbin/route add default gw 192.168.7.254

#showing routing table

/bin/netstat -rn

#checking if DEFAULT_GW 192.168.1.254 is reachable

ping -c 1 192.168.7.254



#set_realserver_ip_forwarding to OFF (1 on, 0 off).

echo 0 >/proc/sys/net/ipv4/ip_forward

cat    /proc/sys/net/ipv4/ip_forward



#looking for DIP 192.168.7.9

ping -c 1 192.168.7.9



#looking for VIP (will be on director)

ping -c 1 192.168.7.110



#install_realserver_vip

/sbin/ifconfig lo:0 192.168.7.110 broadcast 192.168.7.110 netmask 255.255.255.255 up

#ifconfig output

/sbin/ifconfig lo:0

#installing route for VIP 192.168.1.110 on device lo:0

/sbin/route add -host 192.168.7.110 dev lo:0

#listing routing info for VIP 192.168.7.110

/bin/netstat -rn



#hiding interface lo:0, will not arp

echo 1 >/proc/sys/net/ipv4/conf/all/hidden

cat    /proc/sys/net/ipv4/conf/all/hidden

echo 1 >/proc/sys/net/ipv4/conf/lo/hidden

cat    /proc/sys/net/ipv4/conf/lo/hidden



#----------mini-rc.lvs_dr-realserver------------------
  

# Enables packet forwarding
net.ipv4.ip_forward = 1
# Enables source route verification
net.ipv4.conf.default.rp_filter = 1 

 
/sbin/sysctl -p
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1
通过以上修改应该ip_forward就不用在ipvsadm中手工修改了！现在还有路由不知在什么地方加！
10．Ldirectord的debug模式启动：
ldirectord -d ldirectord.cf start
这样可以通过重定向查看debug信息，以定位错误！
下面是别人的一个测试例子和报错信息：
> ldirectord -d /etc/ha.d/ldirectord.cf start
> DEBUG2: Running exec(/usr/sbin/ldirectord -d /etc/ha.d/ldirectord.cf start)
> Running exec(/usr/sbin/ldirectord -d /etc/ha.d/ldirectord.cf start)
> DEBUG2: Starting Linux Director v1.62 with pid: 15834
> Starting Linux Director v1.62 with pid: 15834
> DEBUG2: Running system(/sbin/ipvsadm -A -t 192.168.0.163:80 -s rr )
> Running system(/sbin/ipvsadm -A -t 192.168.0.163:80 -s rr )
> DEBUG2: Added virtual server: 192.168.0.163:80
> Added virtual server: 192.168.0.163:80
> DEBUG2: Running system(/sbin/ipvsadm -a -t 192.168.0.163:80 -r 127.0.0.1:80 
> -g 
> -w 1)
> Running system(/sbin/ipvsadm -a -t 192.168.0.163:80 -r 127.0.0.1:80 -g -w 1)
> DEBUG2: Added fallback server: 127.0.0.1:80 (0 x 192.168.0.163:80) (Weight 
> set 
> to 1)
> Added fallback server: 127.0.0.1:80 (0 x 192.168.0.163:80) (Weight set to 1)
> DEBUG2: Checking negotiate: real 
> server=negotiate:http:tcp:192.168.0.160:80:\/index\.html:ds10Testseite\ fuer\ 
> die\ Apache\-Installation\ auf\ dieser\ Web\ Site 
> (virtual=tcp:192.168.0.163:80)
> ldirectord ldirectord.cf received signal: Can't locate LWP/UserAgent.pm in 
> @INC (@INC contains: /usr/local/lib/perl5/5.8.0/i686-linux 
> /usr/local/lib/perl5/5.8.0 /usr/local/lib/perl5/site_perl/5.8.0/i686-linux 
> /usr/local/lib/perl5/site_perl/5.8.0 /usr/local/lib/perl5/site_perl .) at 
> /usr/sbin/ldirectord line 1514.
 
You are missing LWP/UserAgent.pm which is part of the libwww-perl
perl module. I have packages for this and all of ldirectord's
dependancies available on ultramonkey.org.
 
Alternatively you can manually installed the dependancies from CPAN.
(Refer to the download directory on ultramonley.org for a guide
 to the modules needed).
 
参照官方文档，将fallback重新打开了。
修改了ldirectord.cf中的通讯页，原来是TestPage改为index.html 

patch -p1 < /root/ipvs-1.0.9/contrib/patches/hidden-2.4.20pre10-1.diff
patching file include/linux/sysctl.h 

      # Start the hiding interface functionality
echo 1 > /proc/sys/net/ipv4/conf/all/hidden
# Hide all addresses for this interface
echo 1 > /proc/sys/net/ipv4/conf/<interface_name>/hidden
在打patch前查看一下：