I haven't actually tried this but if someone's currently testing a DR
setup could test this, i'd appreciate it (actually I haven't even
checked the howto if this is maybe in there).
In most cases lvs-dr sends the reply packets directly to the client
without travelling through the director, so it is not known when a
connection has been closed. However, lvs is capable of handling the
director being the default gateway (or did that require a patch?). So,
it should be possible to send the FIN packets of a closing connection
through the director, so that it wouldn't have to estimate the number of
connections (for most cases, anyway). And it shouldn't even cost all
Don't know if there is an easier way, but you could mark the FIN packets
with iptables and then use an alternate routing table for those marked
packets with the director as default route.
I feel kind of bad writing about it without testing (and even checking
the howto), but what the hell.. You're only young once :)