ip_conntrack and ip_conntrack_max

[Kristoffer Egefelt]

On another loadbalancer which has 6 times as many connections as this one
the numbers are:

# cat ip_conntrack |wc -l
22039

# cat /proc/sys/net/ipv4/ip_conntrack_max
65536

Hmmm... Strange?


On 11/13/06, Kristoffer Egefelt <dr.fersken at gmail.com> wrote:
>
> Hello,
>
> We're experiencing connection problems on a HTTP (iis) service behind a
> lvs-nat on debian 2.6.
>
> Trying to figure out if the load director could be the problem, I came
> across this:
>
> From the lvs server:
>
> # cat ip_conntrack |wc -l
> 65478
>
> # cat ip_conntrack_max
> 65528
>
>
> Having read various places that conntrack does not mean anything on kernel
> 2.6 / iptables, just wanted to double check if our connection problems
> simply isn't the masquarading on the loadbalancer that reaches the limit?
>
> Thanks
>
> /Kristoffer
>