active connections not correct

[Bill Omer]

On 9/14/06, Joseph Mack NA3T <jmack at wm7d.net> wrote:
> On Thu, 14 Sep 2006, Bill Omer wrote:
>
> > I'm using lvs to load balance several hundred ssh and
> > telnet sessions. The problem I'm having is my ipvsadm
> > table does not show the actual number of connections.
>
> the ipvsadm output of ActiveConn etc, is a complete
> fabrication for LVS-DR and LVS-Tun. The director doesn't see
> the reply packets from the realservers and can't tell if the
> realserver drops the connection. The output from ipvsadm is
> guesses based on likely timeouts etc.
>
> The numbers are there to tell if the machines are balanced
> and are operating at all. If your setup isn't working the
> first thing we ask is for the output of `ipvsadm`.
>
> Joe
> --


Hi Joe, thanks for the quick reply.

I'd rather not switch to LVS-NAT, simply because of the amount of
connections I'm going to be handling.  I am expecting ~1000 ssh
sessions and 300-500 telnet sessions and I am worried that the load on
the director would suffer.

Maybe my understanding of LVS-DR is incorrect.  I understand that
return packets that are sent from the RS to the client are not sent
through the director.  However, would the reply packets from the
client go through the director in order to get to the RS?   That was
my understanding of LVS-DR, so I thought that the ipvsadm table should
continue to be updated.

Regards,
Bill Omer