On Fri, Mar 14, 2003 at 02:43:28PM +0100, Bonnet wrote:
> > Essentially what is going to happen is that even if the connection
> > expires in the backup, as soon as some more packets arrive on the
> > primary, the connection will be updated on the backup
>
> You missed Ong's point. Imagine the following :
>
> 1. a telnet connection is established thru primary director
> 2. connection sync'ed to backup
> 3. no more telnet packets for a while
> 4. connection remove from backup (but still on primary)
> 5. primary failure
> 6. backup taking over
> 7. incoming packet for telnet session
>
> Ooops ! The backup director doesn't know this connection, whereas a few
> seconds before the primary director did know it !
I guess that I did miss the point.
Of course once the connection times out on the
backup director failover of that connection is not going to work.
This timeout can be modified by changing IP_VS_SYNC_CONN_TIMEOUT
in ip_vs_sync.c. The default is 3 minutes.
It could be a /proc entry, but it isn't at the moment.
--
Horms
|