>> As expected, it's netfilter and the connection tracking. If you want
>> high performance load balancing, do _not_ use netfilter; especially the
>> connection tracking. It just does not scale. Simply loading ip_conntrack
>> into the kernel makes your packet rate drop by 60 kpps on a 1Gbit/s
>> connection.
> How to change ip_conntrack?
Change to what? Do you mean remove? Or do you mean how can one change
ip_conntrack to yield higher performance? If it helps, you may also ask
in Chinese, but make sure to put your English version there as well,
since my Chinese is a bit rusty.
Regards,
Roberto Nibali, ratz
--
-------------------------------------------------------------
addr://Kasinostrasse 30, CH-5001 Aarau tel://++41 62 823 9355
http://www.terreactive.com fax://++41 62 823 9356
-------------------------------------------------------------
10 Jahre Kompetenz in IT-Sicherheit. 1996 - 2006
Wir sichern Ihren Erfolg. terreActive AG
-------------------------------------------------------------
|