On Wed, 29 Nov 2006, Horms wrote: > On Tue, Nov 28, 2006 at 09:32:09PM +0100, Jaroslav Libák wrote: > > When i run that I get some connections with ERR! state. Persistence is > > 600 = 10 minutes, after that these connections dissappear. Without > > persistence there are no such connections. If I don't use firewall > > marks then they aren't there either. If I don't use firewall marks, > > then there are "NONE" connections which from what I have read LVS uses > > to handle persistence. These "connections" resemble my ERR! > > connections in this sence. After they dissappear client can be routed > > to a different real server. > > > > Could anyone confirm that in this case this ERR! state is harmless? > > I'm thinking that it might be happening because usage of firewall > > marks was added to LVS later and ipvsadm wasn't updated to handle this > > properly. Or when using firewall marks and persistence, somebody > > forgot to change the state of the connection to "NONE" in the C code. > > That does sound a little odd. > > I don't think that is is to do with ipvsadm, as I think that the > strings come from the kernel. Can you see if the same problem shows > up when you cat /proc/net/ip_vs_conn ? > > Once these connections get into that state, do they stay in that state > until they timeout, or do they progress to a different state? > > Could you send some examples of this behaviour? > I suspect that it is harmless, but I also think it is > a bug in the the reporting functionality.
I'm seeing similar behaviour as reported in this thread a year ago. Although this is using the RHELv5 kernel (2.6.18-53.el5), the only patches being applied by Red Hat to ipvs code is a very minor one to ip_vs_sync.c. Persistency appears to be working correctly as far as I can tell. # ipvsadm -Ln IP Virtual Server version 1.2.1 (size=4096) Prot LocalAddress:Port Scheduler Flags -> RemoteAddress:Port Forward Weight ActiveConn InActConn FWM 1 rr persistent 600 -> 136.186.1.185:0 Route 5 1 0 -> 136.186.1.184:0 Route 5 0 0 (Packets with destination address 136.186.1.29 port 8000 marked with fwm 1) # ipvsadm -Lcn IPVS connection entries pro expire state source virtual destination IP 09:56 ERR! 136.186.1.50:0 0.0.0.1:0 136.186.1.185:0 TCP 14:56 ESTABLISHED 136.186.1.50:35765 136.186.1.29:8000 136.186.1.185:8000 # cat /proc/net/ip_vs_conn Pro FromIP FPrt ToIP TPrt DestIP DPrt State Expires IP 88BA0132 0000 00000001 0000 88BA01B9 0000 ERR! 595 TCP 88BA0132 8BB5 88BA011D 1F40 88BA01B9 1F40 ESTABLISHED 895
_______________________________________________ LinuxVirtualServer.org mailing list - [email protected] Send requests to [EMAIL PROTECTED] or go to http://lists.graemef.net/mailman/listinfo/lvs-users
