ip_conntrack and ip_conntrack_max

[Kristoffer Egefelt]

Hello,

We're experiencing connection problems on a HTTP (iis) service behind a
lvs-nat on debian 2.6.

Trying to figure out if the load director could be the problem, I came
across this:

>From the lvs server:

# cat ip_conntrack |wc -l
65478

# cat ip_conntrack_max
65528


Having read various places that conntrack does not mean anything on kernel
2.6 / iptables, just wanted to double check if our connection problems
simply isn't the masquarading on the loadbalancer that reaches the limit?

Thanks

/Kristoffer