LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] LDAP and LVS-DR problems

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] LDAP and LVS-DR problems
From: Thomas Pedoussaut <thomas@xxxxxxxxxxxxxx>
Date: Wed, 27 Aug 2008 12:11:40 +0100
Bryan Aldridge wrote:
> on both the realservers shows upwards of a thousand connections!  At
>   
I got something similar a few months back. It was all due to iptables on 
the director. Don't try to do statefull inspection (ie using --state 
ESTABLISHED,RELATED) because the ack of closing packet from the server 
won't be sent to the real server, or something similar.
It was happening on servers processes that don't time out connections 
and where the disconnect can be initiated by the server.

Anyway, keep your firewall straight on the director and it should be fine.


-- 
Thomas, bitten once


<Prev in Thread] Current Thread [Next in Thread>