|
Roberto Nibali wrote:
> Salü Per,
>
> Long time no talk.
Hi Roberto
Yeah, it's been a while - I've been busy getting this LVS setup ready
for prime time.
> Yes, there's always a chance. You check for SYN/ACK flags and clamp
> mss there, probably killing fragmented packets (which could be
> generated with such things like Word or PDF attachments). I would need
> to take a deeper look at what you've created this time :).
Just what I was hoping for :-)
> The customer is always wrong! Is there a possibility that you do not
> fix this using iptables but by adjusting the route mtu? Could you show
> us the output of:
>
> ip -o -s -s route show cache
See http://jessen.ch/files/route-show-cache (this is from real server
4).
LVS setup -
one director at 88.198.198.123:25 with 4 real servers via masquerading
over IPIP tunnels. The tunnels are using 10.0.1.x.
/Per Jessen, Zürich
|
