> Didn't I see somewhere that you set the TCP timeout on the director to
> 30mins?
Yes. We are running the SLES9 heartbeat/ldirectord where there is no
option of setting ipvsadm-attributes directly, so we are running the
default timouts (tcp 900 sec, tcpfin 120 seconds, udp 300 seconds).
> Therefore you would expect gazillions of inactive connections to stay on
> the director for at least 30 mins (as the director never sees the return
> packets to close the connection).
Ok. Since we are only running HTTP, and the Tomcat server is configured
to close an idle client-connection after 20 seconds, would it not make
sense to shorten the ipvs timeouts (tcp and tcpfin) to lets say 30
seconds?
> Do all of the connections close on the director after the 30 mins?
I cannot say for sure. It was long ago we had the patience to wait so
long.
|