v3 beta fail to pass server response skb to client about lvs HOT 2 OPEN

the tcpdump capture on server side ( inside 2 outside) shows weird icmp error, V2 release does not have this icmp error. it looks to me LVS unable to pass the HTTP/1.1 200 OK to client, failed to ack the 200 ok from server, server keeps retransmitting the 200 ok and each time triggers the ICMP Destination unreachable error

6 14:32:48.483960 0.000745s AsustekC_51:2b:cd 3com_ca:cb:17 192.168.3.2 192.168.3.168 80 5006 HTTP 1293989791 45442026 HTTP/1.1 200 OK (text/html)

7 14:32:48.484006 0.000046s 3com_ca:cb:17 AsustekC_51:2b:cd 192.168.3.168 192.168.3.2 80 5006 ICMP 1293989791 45442026 Destination unreachable (Host administratively prohibited)

I looked at the LVS centos default iptables rules /etc/sysconfig/iptables

:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited <-----------------------------
-A FORWARD -j REJECT --reject-with icmp-host-prohibited<----------------------------
COMMIT

comment out above 2 rules, tcpdump not capturing any ICMP error any more, but still LVS unable to pass the 200 ok to client and fail to ack the 200 ok from server

from lvs.

depend on 10GE NIC with flow director features, I push a request to fix it with rps

from lvs.