>Looking at the documentation for ipvsadm it seems that in order to run ipvsadm >on a director that is also running a nat-firewall you have to patch the >kernel with the ipvs_nfct patch. > >Can someone please confirm that that this is correct?
I can tell you that if you try to make it work without the patch, you will eat your hat. It causes a bunch of strange things to fail. In my case, I saw a situation in which, during some edge cases, the kernel would drop the "fin" packet for LVS connections. Fun stuff. I highly doubt your problem has anything to do with the patch, though. It didn't change any behavior for us. -- Jason Faulkner Linux Systems Engineer Mailtrust, a division of Rackspace _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - [email protected] Send requests to [email protected] or go to http://lists.graemef.net/mailman/listinfo/lvs-users
