[lvs-users] TCP timeout and established connections in DR mode

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: [lvs-users] TCP timeout and established connections in DR mode
From: Abhijeet Rastogi <abhijeet.1989@xxxxxxxxx>
Date: Fri, 1 May 2020 18:38:04 -0700
Hi everyone,

Considering that IPVS is in DR mode with persistence disabled completely
and the client and real servers are configured to handle long-lived HTTP
connections (>15min). I understand that the default TCP timeout is 15min
but t I'm confused about the impact of this timeout on already active
established connections even when the timer value hits.

For eg, with default value 15min, will the existing connection be simply
dropped or do we keep the connection table for that 5-tuple intact?

   - If the connection is simply dropped, are there any signals to look for
   in terms of finding out how widespread it is?
   - If we keep the connection table entry, what's the new policy on this
   existing connection? (Note: persistence is disabled, as I'm aware that
   there's a 60s timer which reactivates the connection template)
      - If this is true, should we keep TCP timeouts on production servers
      lesser than 15min to ensure we're protected in terms of some
sort of abuse?

Help is greatly appreciated.

Abhijeet (
Please read the documentation before posting - it's available at: mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to

<Prev in Thread] Current Thread [Next in Thread>