LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] Outgoing TCP from real servers using VIP as the source i

To: Julian Anastasov <ja@xxxxxx>
Subject: Re: [lvs-users] Outgoing TCP from real servers using VIP as the source in DR balancing mode
Cc: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
From: Dmitry Akindinov <dimak@xxxxxxxxxxx>
Date: Wed, 11 Jan 2012 14:32:26 +0400
Hello,

On 2012-01-09 14:06, Julian Anastasov wrote:
>
>       Hello,
>
> On Mon, 9 Jan 2012, Dmitry Akindinov wrote:
>
[]

>> In our case no SYN packet for an OUTGOING connection would ever be seen
>> by an IPVS system, so it does not build a session, so IPVS cannot be used for
>> "outoging respose balancing/dispatching".
>
>       I think, you described the setup in previous email.
> IPVS supports creating new TCP connection for SYN+ACK packet.
> While Netfilter's stateful inspection differentiates SYN
> from SYN+ACK packets, IPVS treats them as SYN packet. See
> net/netfilter/ipvs/ip_vs_proto_tcp.c (tcp_state_idx) and
> net/netfilter/nf_conntrack_proto_tcp.c (get_conntrack_index)
> for reference. This is the way IPVS to support active FTP for
> DR/TUN mode where the real server initiates DATA connection
> to client and IPVS detects it by the SYN+ACK packet from
> client. So, I think IPVS should support scheduling by SYN+ACK.
>
[]

Thank you very much. Indeed scheduling does work with SYN+ACK. The 
problem was an incorrect iptables rule. Now it's fixerd an everything 
works as expected.

Thank you!

>
> Regards
>
> --
> Julian Anastasov<ja@xxxxxx>

-- 
Best regards,
Dmitry Akindinov

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

<Prev in Thread] Current Thread [Next in Thread>