|
Where are you setting your mtu of 1400?
You have to make sure that it is the mtu for data inside the tunnel. When I
changed the mtu values, the only way I could reliably get it to change the size
inside the tunnel rather than the whole tunnel packets was from the real server
not the director.
Chris
-----Original Message-----
From: Jacob Coby [mailto:jcoby@xxxxxxxxxxxxxxx]
Sent: 27 May 2004 15:49
To: LinuxVirtualServer.org users mailing list.
Subject: Re: Large HTTP GET/POST timeout
Casey Zacek wrote:
> At the time, I was running kernel 2.4.25 (IPVS 1.0.10), but since
> upgraded to 2.4.26 (IPVS 1.0.11), then 2.6.6 (IPVS 1.2.0). I have
> asked the customer to retest it, but he'll have to talk to some of his
> users, from the sound of things, since he upgraded his router
> firmware. I'd love to chalk it up to "client router problems," but
> that probably won't be good enough for this customer. It worked using
> a Riverstone smartswitch router running what equates to LVS-NAT, but
> it does not work with this LVS-Tun setup.
I could test for the problem reliably by using ping with a packet size >
934. 934 and lower worked fine. Once I bumped it up over 934, I'd see
Must Fragment (MF) ICMP messages being sent, and the ping request would
have no response. As I lowered the MTU, the size of the ping that would
cause the problem lowered in direct proportion. A 1500 MTU would cause
a 935 byte ping to fail, a 1400 MTU would cause a 835 byte ping to fail,
and so on.
Any HTTP GET or POST over that 934 byte payload would cause the site to
not respond.
--
-Jacob
Listingbook.com
_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://www.in-addr.de/mailman/listinfo/lvs-users
Berkeley Alexander
Temple House, 25-26 High Street, Lewes, East Sussex, BN7 2SD
Tel 01273 477784, Fax 01273 478994
www.baonline.co.uk
PLEASE NOTE:
The information in this e-mail is confidential and may be legally privileged.
It may not represent the views of Berkeley Alexander. It is intended solely for
the addressees. Access to this e-mail by anyone else is unauthorised. If you
are not the intended recipient, any disclosure, copying, distribution or any
action taken or omitted to be taken in reliance on it, is prohibited and may be
unlawful. Any unauthorised recipient should advise the sender immediately of
the error in transmission.
|
