LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

[lvs-users] LVS-NAT dropping connection occasionally at random

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: [lvs-users] LVS-NAT dropping connection occasionally at random
From: Jesse Cantara <jesse_cantara@xxxxxxxxxxxx>
Date: Fri, 20 Jul 2007 10:29:53 -0400
Hello,

I'm trying to figure out a problem I'm having with my LVS-NAT setup. 
It's a very simple setup, one director, two networks (director has two 
nics, one on lan one on internet), three webservers on LAN only on port 
80. The issue I'm having is occasionally and randomly the director will 
apparently just sever the connection when trying to download a file from 
the webserver. I have performed these tests just fine without issue:
1) Downloading a file directly from the director to a client
2) Downloading a file from the webserver to the director

So it would appear that the physical connection is OK, I can make 
connections to the individual machines without problem, just when 
connecting through the director to the webserver.

What happens is I will be downloading a file, and it will hang (at 
random points during the download, sometimes not at all), and not continue.

ipvsadm will show "ESTABLISHED" on that connection for quite a long 
time, then "ERR!" after it times out I believe.

Watching the traffic on a packet-sniffer client-side shows that directly 
before the failure, my client keeps sending the same "ack" message back 
to the server over and over, and the server appears to not recognize it.

It must be related, but it makes me question where the problem is: the 
exact same sort of problem happens when I set up IPTABLES to forward a 
port on the director to one of the webservers directly. I'm not sure if 
I'm barking up the wrong tree asking on this mailing list, but hopefully 
somebody has run into something similar before, or can at least point me 
in the right direction :)

Here is the config of my machines:
CentOS 5
latest kernel 2.6.18-8.1.8.el5
ipvsadm v1.24
IPVS v1.2.0

I'm not doing anything "fancy" with the webserver, just downloading a 
large file for test, from apache. Like I said, the webservers work fine 
when accessing not through the director.

If there's anything I have missed, I apologize. Please let me know 
anything else that I should provide for information.

Thanks in advance,
-Jesse



<Prev in Thread] Current Thread [Next in Thread>