|
Hi,
sorry to follow up myself.
The bug was fixed. Just try to install a newer kernel on the realserver.
-------- Original Message --------
Subject: Re: Router problems with transparent proxy
Date: Wed, 15 Aug 2001 20:53:22 +1000
From: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
To: Steffen Persvold <sp@xxxxxxxx>
CC: laforge@xxxxxxxxxxxx, kas@xxxxxxxxxxxxxxxxxxx,Lutz Vieweg
<lkv@xxxxxx>
In message <3B4568F4.DB3173A3@xxxxxxxx> you write:
> Hi,
>
> This is just a repost of the original message I sent to the Linux Kernel mail
ing list, but
> since I haven't received any response I'm sending it to you (Just took a look
in the
> MAINTAINERS file...)
Hi Steffen,
Just looked through the code, and sure enough, there is a leak
in the redirect compatibility code, as I suspected from Lutz's earlier
report.
Please try the attached patch, and thanks!
Rusty.
--
Premature optmztion is rt of all evl. --DK
diff -urN -I \$.*\$ --exclude TAGS -X
/home/rusty/devel/kernel/kernel-patches/current-dontdiff --minimal
linux-2.4.7-official/net/ipv4/netfilter/ip_fw_compat_redir.c
working-2.4.7-module/net/ipv4/netfilter/ip_fw_compat_redir.c
--- linux-2.4.7-official/net/ipv4/netfilter/ip_fw_compat_redir.c
Sat Aug 5 06:07:24 2000
+++ working-2.4.7-module/net/ipv4/netfilter/ip_fw_compat_redir.c
Wed Aug 15 20:45:02 2001
@@ -206,6 +206,8 @@
}
list_prepend(&redirs, redir);
init_timer(&redir->destroyme);
+ redir->destroyme.expires = jiffies + 75*HZ;
+ add_timer(&redir->destroyme);
}
/* In case mangling has changed, rewrite this part. */
redir->core = ((struct redir_core)
Christian Bronk wrote:
>
> Hi,
>
> patrick edwards wrote:
> >
> > I can get my lvs works with no problem. However with in a matter
> > of an hour or two my bandwidth drops to virtually nothing and the CPU load
> > goes ballistic. I have a 100Mbit internal network, but at times i'm lucky
> > to see 50Kps. Here is my LVS topology
> >
> > The director:
> > DIP: xxx.xxx.214.3
> > VIP: xxx.xxx.214.20 (webservers) and xxx.xxx.214.30 (sql)
> > software:
> > Mandrake 8.1
> > kernel 2.4.8-26mdk
> > ipvsadm 1.19-1mdk
> > other notes:
> > This box doubles as a bridging-firewall
> >
> > Real Servers:
> > RIP1: xxx.xxx.214.21 and xxx.xxx.214.31 (RedHad 7.1)
> > RIP2: xxx.xxx.214.22 and xxx.xxx.214.32 (Mandrake 8.1)
> > Both are using the ipchain methd to avoid the ARP problem
> > Both have dual eth0 eepro100s bonded
> >
> > Anyways like i said the cluster works perfectly. Then out of no where the
> > bandwidth seemlingly disappears and the CPU rises dramatically. I dont
> > know which comes first, but even ftping over the loopback gives god awful
> > ftp speeds.
> >
> > Has anyone run across this? Or is there another possible reason this
> > would occur? Perhaps upgrading the kernel on the director? Any help or
> > tips would be more then welcome!
>
> We had similar problems at our test servers for kernel 2.4
> it turned out that ipchains under kernel 2.4 does full
> connection-tracking and makes the
> system slow. Try to use iptables or the arp-patch instead.
>
> Cheers,
>
> Chris
>
> >
> > _______________________________________________
> > LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> > Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> > or go to http://www.in-addr.de/mailman/listinfo/lvs-users
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users
smime.p7s
Description: S/MIME Cryptographic Signature
|
