LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: FIN_WAIT with direct routing.

To: Andreas Lundqvist <alun@xxxxxx>
Subject: Re: FIN_WAIT with direct routing.
Cc: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
From: Joseph Mack NA3T <jmack@xxxxxxxx>
Date: Fri, 3 Nov 2006 05:11:37 -0800 (PST)
On Fri, 3 Nov 2006, Andreas Lundqvist wrote:

We seem to have found a workaround.
The problem is that our WAN only allows packets with maximum size of 1518 and
with encryption headers we exceed that. Our other site's fix this in their
switches before sending it out on our WAN but this is apparently not
supported in the switches on my two problem site's.

thanks for the info.

the problem is more widespread than I thought

http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.LVS-Tun.html#MTU

we've only had problems with MTU in LVS-Tun so far.

How does encryption increase the packet size?

So the fix was to lower MTU on my three Realservers to 1400.

OK

Joe

--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!

<Prev in Thread] Current Thread [Next in Thread>