LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

TCP Connections to LVS behind a CheckPoint FW

To: <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: TCP Connections to LVS behind a CheckPoint FW
From: "Rob Leasure" <rl@xxxxxxxxxxxxxx>
Date: Fri, 2 Nov 2001 08:09:57 -0800
Hi All,

        I am experiencing a problem using LVS behind a CheckPoint firewall.

        It seems as though several packets are dropped by the firewall as a 
result of being "out of sequence"  When I ask the firewall administrator what 
the problem is, he tells me that he can't be sure, but he has seen this problem 
before when he has had other load balancers using a Virtual IP (eth0:0) to 
balance incoming packets.

        So... with that being said, I have to admit I am a little skeptical of 
this assumption that just because I am using a Virtual IP, TCP packets are 
getting out of sync... however, with that being said, the firewall 
administrator seems to be pretty savvy when it comes to TCP, where as I am 
hardly TCP savvy, so I pose the question to the group... Has anyone seen 
anything similar to this problem? and if so, what was done to correct it?

Regards,
Rob.



<Prev in Thread] Current Thread [Next in Thread>