LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] Firewall on LVS NAT

To: LinuxVirtualServer.org users mailing list. <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] Firewall on LVS NAT
From: Jay Faulkner <jay.faulkner@xxxxxxxxxxxxx>
Date: Mon, 9 Aug 2010 08:52:20 -0500
> Update: The NFCT patch greatly reduced the dropped ACK FIN & ACK RST.
> There still are a few so I don't know what is causing this, but it is small
> compared to what I was getting before. Those users who had terrible
> connection problems seem to have no problems at all now. So thanks Jay for
> heading me in the right direction. For some reason this didn't appear to be as
> big of a problem in kernel 2.4.x, although it still might have existed.


Yeah, for us it was the same behavior -- updated one machine to RHEL5 / kernel 
2.6, and we started seeing the dropped FIN/RST. Added NFCT, and now it's 
effectively gone.

Good luck!

--
Jason Faulkner
Linux Engineer, Rackspace Email & Apps
jason.faulkner@xxxxxxxxxxxxx

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

<Prev in Thread] Current Thread [Next in Thread>