|
On Fri, 14 Sep 2007, Joerg Delker wrote:
> Hi Folks,
>
> I just found this thread in the archives describing my problem.
> So let me tune in so we hopefully can find that bummer.
>
> Symptoms:
> I'm also suffering from very slow connections via the VIPs in contrast to
> accessing the real servers directly. A wget fetch from a particular web takes
> ~40sec via the VIP and ~4sec directly.
>
> Analysis:
> Looking at the related tcpdumps for the VIP traffic I see:
> in dump (Client<->Director):
> * TCP Retransmissions VIP->Client
> * Duplicate ACKs Client->VIP
> in dump (Director<->Realserver)
> * TCP Retransmissions Realserver->Client
> * Duplicate ACKs Client->Realserver
> * TCP previous segment lost Client->Realserver (appears after each Dup ACK)
>
> Note: Routing client traffic directly to the real server shows perfect TCP
> traffic!
>
> Environment:
> The director is acting as firewall, router, loadbalancer using
> ipvsadm v1.24 2003/06/07 (compiled with popt and IPVS v1.2.0)
> and configured as LVS-NAT to access the real servers.
> Kernel tested: 2.6.16, 2.6.18, 2.6.22 - no difference noticable
> Hardware issues can be ruled out as the directly routed traffic uses exact
> the same path.
there's a section on slow loading webpages in (I think) the
mini-HOWTO.
Also try your setup without the firewall rules
Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|
