LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

RE: 'no hit' for LVS connection tracking (SYN+ACK not translated)

To: Jari Takkala <Jari.Takkala@xxxxxx>
Subject: RE: 'no hit' for LVS connection tracking (SYN+ACK not translated)
Cc: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
From: Julian Anastasov <ja@xxxxxx>
Date: Fri, 26 Aug 2005 08:25:34 +0300 (EEST)
        Hello,

On Thu, 25 Aug 2005, Jari Takkala wrote:

> Hello,
>
> Has anyone been able to look at this problem? Would Julian or Joe have an 
> idea of why this is occurring? Can anyone offer me any pointers on where I 
> could continue with my troubleshooting?

        I can not reproduce it, i tried with 2.4.32-pre3 as it contains
some changes. Can you show your vs settings?:

grep . /proc/sys/net/ipv4/vs/*

        So, you don't have any iptables rules, fwmarking, NAT or
linux ethernet bridging? Any extra patches for IPVS?

        From your explanation ip_vs_ftp leads to problems where SYN
creates web connection, it is hashed in table, DNAT-ed to RS, then RS
replies SYN+ACK which can not match the connection in table, it looks
like this connection is not present (may be removed, do you see something
in debug logs from the SYN to the SYN+ACK) or hash table is damaged. Do 
you still think it is caused by ip_vs_ftp? About your tests, is the
client IP on lan? Do you think this client IP has many connections to
the director?

Regards

--
Julian Anastasov <ja@xxxxxx>

<Prev in Thread] Current Thread [Next in Thread>