Hello,
On 2012-01-09 14:06, Julian Anastasov wrote:
>
> Hello,
>
> On Mon, 9 Jan 2012, Dmitry Akindinov wrote:
>
[]
>> In our case no SYN packet for an OUTGOING connection would ever be seen
>> by an IPVS system, so it does not build a session, so IPVS cannot be used for
>> "outoging respose balancing/dispatching".
>
> I think, you described the setup in previous email.
> IPVS supports creating new TCP connection for SYN+ACK packet.
> While Netfilter's stateful inspection differentiates SYN
> from SYN+ACK packets, IPVS treats them as SYN packet. See
> net/netfilter/ipvs/ip_vs_proto_tcp.c (tcp_state_idx) and
> net/netfilter/nf_conntrack_proto_tcp.c (get_conntrack_index)
> for reference. This is the way IPVS to support active FTP for
> DR/TUN mode where the real server initiates DATA connection
> to client and IPVS detects it by the SYN+ACK packet from
> client. So, I think IPVS should support scheduling by SYN+ACK.
>
[]
Thank you very much. Indeed scheduling does work with SYN+ACK. The
problem was an incorrect iptables rule. Now it's fixerd an everything
works as expected.
Thank you!
>
> Regards
>
> --
> Julian Anastasov<ja@xxxxxx>
--
Best regards,
Dmitry Akindinov
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|