[lvs-users] IPVS stops tunneling with ipip on SSL traffic causing session failures

Julian Anastasov ja at ssi.bg
Fri Aug 28 20:42:43 BST 2015


On Fri, 28 Aug 2015, Phillip Moore wrote:

> I do not understand why on line 15 of the tcpdump you can see a 326
> byte packet is received from the client, but isn't forwarded to the
> real server. There wouldn't be any fragmentation issues with that
> would there? On line 15 you can see it keeps receiving the same packet
> 6 times and fails to forward it on.

	Can you test with enabled nf_conntrack_tcp_be_liberal
or ip_conntrack_tcp_be_liberal sysctl value in director?
May be packets are dropped by conntrack because packets
from reply direction are not seen.


Julian Anastasov <ja at ssi.bg>

More information about the lvs-users mailing list