Does anyone have any comments they can make on the effect of
conntrack on LVS performance?
The LVS device I'm using also has to do some DNAT and SNAT, which
require conntrack to be enabled. LVS-NAT looks like it should work for DNAT
and would only take minor tweaking to do SNAT (since the SNAT I'm doing is
1-to-1 -- no port modifications to keep track of), but I don't want to hack
on LVS unless the wisdom is that my performance with conntrack is really
going to deteriorate.
Thanks in advance for your comments,