Mail Archive Search: <+subject:/^(?:^\s*(re|sv|fwd|fw)[\[\]\d]*[:>-]+\s*)*\[lvs\-users\]\s+IPVS\s+stops\s+tunneling\s+with\s+ipip\s+on\s+SSL\s+traffic\s+causing\s+session\s+failures\s*$/>

Results:

References: [ +subject:/^(?:^\s*(re|sv|fwd|fw)[\[\]\d]*[:>-]+\s*)*\[lvs\-users\]\s+IPVS\s+stops\s+tunneling\s+with\s+ipip\s+on\s+SSL\s+traffic\s+causing\s+session\s+failures\s*$/: 9 ]

Total 9 documents matching your query.

1. Re: [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Alex Lopez <alxmlpz@xxxxxxxxx>; Date: Fri, 28 Aug 2015 15:02:29 -0700; Do you use IPIP tunnel on the real servers ? _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ Linux; /html/lvs-users/2015-08/msg00032.html (12,884 bytes)
2. Re: [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Phillip Moore <pdm@xxxxxxxxx>; Date: Fri, 28 Aug 2015 16:20:11 -0500; Well now for the facepalm moment. I updated our kernel for Scientific Linux for a security update and it seems to have solved this problem. I will endeavor to find what bug was fixed now. failing ker; /html/lvs-users/2015-08/msg00031.html (11,953 bytes)
3. Re: [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Julian Anastasov <ja@xxxxxx>; Date: Sat, 29 Aug 2015 00:15:25 +0300 (EEST); Hello, What is the model/revision of the incoming network device? Do you have IPVS debugging enabled to check if IPVS works with these dropped packets? Or they are lost before reaching IPVS at LOCAL_; /html/lvs-users/2015-08/msg00030.html (12,005 bytes)
4. Re: [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Phillip Moore <pdm@xxxxxxxxx>; Date: Fri, 28 Aug 2015 15:16:37 -0500; Thank you for the suggestion. We didn't have the netfilter module loaded at all so I don't think it would have having any impact. However I loaded it and set this setting and it didn't change the beh; /html/lvs-users/2015-08/msg00029.html (11,232 bytes)
5. Re: [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Chris Cowart <ccowart@xxxxxxxxxxxxx>; Date: Fri, 28 Aug 2015 12:54:42 -0700; Hello, I'm the network guy working through this issue with Phillip. I'm going to have to clutter up the email to annotate the packet captures, so please bear with me... I want to echo Phillip that we; /html/lvs-users/2015-08/msg00028.html (21,820 bytes)
6. Re: [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Julian Anastasov <ja@xxxxxx>; Date: Fri, 28 Aug 2015 22:42:43 +0300 (EEST); Hello, Can you test with enabled nf_conntrack_tcp_be_liberal or ip_conntrack_tcp_be_liberal sysctl value in director? May be packets are dropped by conntrack because packets from reply direction are; /html/lvs-users/2015-08/msg00027.html (10,057 bytes)
7. Re: [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Phillip Moore <pdm@xxxxxxxxx>; Date: Fri, 28 Aug 2015 13:54:08 -0500; I do not understand why on line 15 of the tcpdump you can see a 326 byte packet is received from the client, but isn't forwarded to the real server. There wouldn't be any fragmentation issues with th; /html/lvs-users/2015-08/msg00026.html (15,474 bytes)
8. Re: [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Julian Anastasov <ja@xxxxxx>; Date: Fri, 28 Aug 2015 10:42:50 +0300 (EEST); Hello, 17:09:40.820663 IP 10.240.8.72.60642 > 10.64.96.10.443: Flags [.], ack 1449, win 137, options [nop,nop,TS val 592982574 ecr 2501301618], length 0 17:09:40.820678 IP 10.65.74.77 > 10.65.74.72:; /html/lvs-users/2015-08/msg00025.html (13,187 bytes)
9. [lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures (score: 1): Author: Phillip Moore <pdm@xxxxxxxxx>; Date: Thu, 27 Aug 2015 23:00:24 -0500; I have IPVS setup with 2 VIPs talking to the same real server configured for direct server return (ie TUN type). One vip is port 80 http and one vip is 443 for https/SSL. The SSL vip doesn't work pro; /html/lvs-users/2015-08/msg00024.html (10,335 bytes)

Current List: 1 - 9
Page: [1]