On Fri, 3 Nov 2006, Andreas Lundqvist wrote:
We seem to have found a workaround.
The problem is that our WAN only allows packets with maximum size of 1518 and
with encryption headers we exceed that. Our other site's fix this in their
switches before sending it out on our WAN but this is apparently not
supported in the switches on my two problem site's.
thanks for the info.
the problem is more widespread than I thought
http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.LVS-Tun.html#MTU
we've only had problems with MTU in LVS-Tun so far.
How does encryption increase the packet size?
So the fix was to lower MTU on my three Realservers to 1400.
OK
Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|