Comments (2)
the tcpdump capture on server side ( inside 2 outside) shows weird icmp error, V2 release does not have this icmp error. it looks to me LVS unable to pass the HTTP/1.1 200 OK to client, failed to ack the 200 ok from server, server keeps retransmitting the 200 ok and each time triggers the ICMP Destination unreachable error
6 14:32:48.483960 0.000745s AsustekC_51:2b:cd 3com_ca:cb:17 192.168.3.2 192.168.3.168 80 5006 HTTP 1293989791 45442026 HTTP/1.1 200 OK (text/html)
7 14:32:48.484006 0.000046s 3com_ca:cb:17 AsustekC_51:2b:cd 192.168.3.168 192.168.3.2 80 5006 ICMP 1293989791 45442026 Destination unreachable (Host administratively prohibited)
I looked at the LVS centos default iptables rules /etc/sysconfig/iptables
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited <-----------------------------
-A FORWARD -j REJECT --reject-with icmp-host-prohibited<----------------------------
COMMIT
comment out above 2 rules, tcpdump not capturing any ICMP error any more, but still LVS unable to pass the 200 ok to client and fail to ack the 200 ok from server
from lvs.
depend on 10GE NIC with flow director features, I push a request to fix it with rps
from lvs.
Related Issues (20)
- lvs 可以尝试嵌入 luajit吗? 这样的话用户的可定制更强?就好像nginx + lua 形成 openresty 框架?
- 需要LVS相关技术交流的可以加入
- hash表的主要作用是什么?
- 迁移lvs-fullnat到高版本内核 HOT 6
- 如何让更高版本的内核使用上v2甚至v3版本的patch?有没详细步骤? HOT 3
- 这里的版本和官网linuxvirtualserver.org提供的什么区别? HOT 3
- LVS怎么解决使用127.0.0.1无法访问的问题 HOT 1
- cp: 无法获取"lvs-2.6.32-220.23.1.el6.patch" 的文件状态(stat): 没有那个文件或目录
- lvs调度器针对大流量问题
- Can I forward ipv6(client->director) to ipv4(director->real server) or vice versa HOT 1
- 快速平滑的摘除 RS HOT 7
- RS为Java程序,无法通过TOA获取源地址
- hello 我使用fullnat 后端rs机器会出现 TcpExt.ListenDrops HOT 2
- no limitation for "%s" while calling fscanf()
- local_address_group 问题请教 HOT 1
- Could I use this module in linux kernel version:4.4.x or 4.15.x in ubuntu?
- 编译 ipvsadm 时报错了:usr/bin/ld: cannot find -lnl
- no limitation for "%s" while calling fscanf()
- ipvsadm connection stats for specific virtual service not working
- Security Vulnerability - Action Required: some unpatched vulnerabilities are detected in your repo
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lvs.