Re: connections not expireing, kernel using over 400Megs

[Sébastien BONNET <sebastien.bonnet@xxxxxxxxxxx>]

>         dns_vips= [9 IPs]
>         dns_realservers= [4 IPs]
>
>         for service in $dns_vips
>         do
>             $IPVSADM -A -t ${service}:53 -s wrr
>             $IPVSADM -A -u ${service}:53 -s wrr
>             for real in $dns_realservers
>             do
>                 $IPVSADM -a -t ${service}:53 -r ${real} -g -w 10
>                 $IPVSADM -a -u ${service}:53 -r ${real} -g -w 10
>             done
>         done
If you don't plan to associate different real servers to specific VIPs, 
why don't you just mark incoming TCP and UDP to port 53 (for each VIP) 
using iptables and load balance using firewall marks ?
This would result in a much lighter ipvs routing table ... which could 
in turn lower your problem.
Just my 2 cents

--
Sébastien BONNET     --    Ingénieur système
Tel: 04.42.25.15.40      GSM: 06.64.44.58.98