Thanks for the information. I was using keepalived-1.3.5-8.el7_6.x86_64 to
manage ipvsadm settings and that seems to be not doing the right thing and
>From keepalived.conf manpage:-
# LVS granularity mask (-M in ipvsadm)
For now, I have a good understanding of the problem and you were really
On Tue, Aug 27, 2019 at 12:11 AM Julian Anastasov <ja@xxxxxx> wrote:
> On Mon, 26 Aug 2019, Abhijeet Rastogi wrote:
> > Hi Julian,
> > I still wanted to understand this behavior more. You mentioned:-
> > ```
> > When the timer expires it can be extended each time with new 60
> > seconds if there are existing connections (even if not ESTAB anymore)
> > refer to the persistence template (connection with zeros after the 48-th
> > bit)
> > created to remember which real server is used. So, the persistence
> > template can live very long time if the subnet is very active. You should
> > see one such template for every subnet.
> > ```
> > Where is this documented? Is this 60 second configurable? Can it be
> > disabled? Is this related to this code?
> Yes, it is hardcoded in ip_vs_conn_expire() and can not
> be disabled because we know only the count of connections that
> have pointer to the template (n_control), the template has no
> list of the connections from its subnet. So, the template just
> waits all traffic to stop.
> > On Mon, Aug 26, 2019 at 2:05 PM Abhijeet Rastogi <
> > wrote:
> > > Now that you said, if it's not happening it should be a bug, looks
> like I
> > > missed seeing a key section in the ipvsadm output.
> > >
> > > FWM 97284778 IPv6 rr persistent 120
> > > -> [v6_reals:9222]:0 Route 1 0 0
> > > -> [v6_reals:9223]:0 Route 1 0 0
> > > -> [v6_reals:9224]:0 Route 1 0 0
> > >
> > > There is no mask mentioned in the service table info (line1). That
> > > mean that the mask is 128 as per ipvsadm code.
> > >
> > > if (se->af == AF_INET6)
> > > if (se->netmask != 128)
> > > printf(" mask %i", se->netmask);
> Make sure -6 is specified exactly after -f FWMARK.
> For example:
> ipvsadm -A -f FWMARK -6 -s rr -p 120 -M 48
> Is it working this way?
> May be the ipvsadm man page should have example for -6.
> Julian Anastasov <ja@xxxxxx>
Please read the documentation before posting - it's available at:
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users