LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

RE: masquerading table slowdown

To: "'Julian Anastasov '" <uli@xxxxxxxxxxxxxxxxxxxxxx>, Dan <dan@xxxxxxxxxxx>
Subject: RE: masquerading table slowdown
Cc: "''lvs-users@xxxxxxxxxxxxxxxxxxxxxx' '" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
From: Dan <dan@xxxxxxxxxxx>
Date: Sat, 6 May 2000 10:11:10 -0700
Hi Julian:

This is a proxy server. So the actual number of masqueraded
connections will be larger than the inbound connnections 
reported by lvs.

I have seen this under actual client load, although I have
been inducing it recently with either a server near the cluster
(100Mps local net) or from a server remotely (dual T1 on the
remote system - cluster on a 10Mpbs feed). This system has been
live during these tests, so there is a consistent client load 
of 120 active connections. The load I'm adding is (at a minimum)
200 simultaneous connections for 10000 connections.

-d

PS - Did you see F1 qualfying results this afternoon? Just curious.

-----Original Message-----
From: Julian Anastasov
To: Dan
Cc: 'lvs-users@xxxxxxxxxxxxxxxxxxxxxx'
Sent: 5/6/00 8:05 AM
Subject: Re: masquerading table slowdown


        Hello,

On Fri, 5 May 2000, Dan wrote:

> Hi:
> 
> My table size is 2^18. I have approximately 40M of free memory. When
my
> total number of active & inactive connnections (as reported by
ipvsadm)
> approaches 4000 the following message starts to appear in the log and
> connection speed slows dramatically. 

        Is this a FTP service? I can recommend you to change the MASQ
table size too (IP_MASQ_TAB_SIZE) but this is not related to the problem
with the kernel message you see. It is only for faster table lookups.

> 
> kernel: IP_MASQ:ip_masq_new(proto=TCP): could not get free masq entry
> (free=36214)
> 
> The system is running in NAT mode. Other parameters:
> 
> LVS machine: PIII/500/64M with 4 Intel Etherexpress 10/100s (1
external IP,
> 2 private IP, 1 heartbeat). There real servers are PIII/500/256M with
2
> 3Com905 10/100s. There are 7 real servers. Both NICS on each real
server
> have traffic routed to them (evenly weighted). Only one of the private
NIC
> cards on the virtual server is used at any time (the other is a
failover).

        Is the LVS attacked from real clients or from your test
suite near the cluster?


Regards

--
Julian Anastasov <uli@xxxxxxxxxxxxxxxxxxxxxx>




<Prev in Thread] Current Thread [Next in Thread>