[lvs-users] IPVS/DR ip_conntrack: table full, dropping packet at squid server

[Graeme Fowler]

Hi again

On Fri, 2007-06-08 at 10:21 +0100, Graeme Fowler wrote:
> On Fri, 2007-06-08 at 15:53 +0700, Wiboon Warasittichai wrote:
> > Do I need to unload module ip_conntrack on all squid boxes?
> 
> Ideally, yes. Why do you have the conntrack module loaded in the first
> place?

Sorry - I read that you had conntrack problems on the director, not the
squid servers. The method to fix it is still the same (use the NOTRACK
target in the raw chain), but you apply it to the realservers and not
the director.

Graeme