Hi,

We've been playing with relayd recently - both from 4.5 and the latest
snapshot.

Approximately every hour we are seeing one or two state changes logged. But
I can't see reason for the change of state and there doesn't appear to be a
pattern in the way that the hosts are failed.

According to `relayctl sh su` we have around 30 redirects and 60 hosts. All
of the check modes are TCP. The only other significant options are:

timeout 1000
log updates

An example of the state changes we are seeing:

May 20 13:27:37 sysbuild-obsd45 relayd[30524]: host xxx.xxx.xxx.157, check
tcp (10ms), state up -> down, availability 89.17%
May 20 13:27:47 sysbuild-obsd45 relayd[17005]: table lb_ev5_https: 0 added,
1 deleted, 0 changed, 0 killed
May 20 13:27:47 sysbuild-obsd45 relayd[30524]: host xxx.xxx.xxx.157, check
tcp (23ms), state down -> up, availability 89.18%
May 20 13:27:57 sysbuild-obsd45 relayd[17005]: table lb_ev5_https: 1 added,
0 deleted, 0 changed, 0 killed

Obviously the host wasn't failed because the check exceeded the timeout
period. Does that mean that the TCP socket returned as closed/RST within
10ms?

A tcpdump of traffic from the relayd host doesn't reveal anything
particularly unusual. Except that no check was attempted at 13:27:37. Would
this have been skipped due to an offending check at 13:27:27?

13:26:57.051947 xxx.xxx.xxx.103.36021 > xxx.xxx.xxx.157.443: S
4024993942:4024993942(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 3310083888 0> (DF)
13:26:57.052612 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.36021: S
1781097887:1781097887(0) ack 4024993943 win 5792 <mss 1460,sackOK,timestamp
1848303010 3310083888,nop,wscale 2> (DF)
13:26:57.052689 xxx.xxx.xxx.103.36021 > xxx.xxx.xxx.157.443: . ack 1 win
16384 <nop,nop,timestamp 3310083888 1848303010> (DF)
13:26:57.060215 xxx.xxx.xxx.103.36021 > xxx.xxx.xxx.157.443: F 1:1(0) ack 1
win 16384 <nop,nop,timestamp 3310083888 1848303010> (DF)
13:26:57.060920 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.36021: F 1:1(0) ack 2
win 1448 <nop,nop,timestamp 1848303012 3310083888> (DF)
13:26:57.062337 xxx.xxx.xxx.103.36021 > xxx.xxx.xxx.157.443: . ack 2 win
16384 <nop,nop,timestamp 3310083888 1848303012> (DF)

13:27:07.082681 xxx.xxx.xxx.103.1746 > xxx.xxx.xxx.157.443: S
3987093519:3987093519(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 3472130146 0> (DF)
13:27:07.083370 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.1746: S
1795324639:1795324639(0) ack 3987093520 win 5792 <mss 1460,sackOK,timestamp
1848305518 3472130146,nop,wscale 2> (DF)
13:27:07.083496 xxx.xxx.xxx.103.1746 > xxx.xxx.xxx.157.443: . ack 1 win
16384 <nop,nop,timestamp 3472130146 1848305518> (DF)
13:27:07.091940 xxx.xxx.xxx.103.1746 > xxx.xxx.xxx.157.443: F 1:1(0) ack 1
win 16384 <nop,nop,timestamp 3472130146 1848305518> (DF)
13:27:07.092726 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.1746: F 1:1(0) ack 2
win 1448 <nop,nop,timestamp 1848305520 3472130146> (DF)
13:27:07.093700 xxx.xxx.xxx.103.1746 > xxx.xxx.xxx.157.443: . ack 2 win
16384 <nop,nop,timestamp 3472130146 1848305520> (DF)

13:27:17.099730 xxx.xxx.xxx.103.17697 > xxx.xxx.xxx.157.443: S
913231965:913231965(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 1801123610 0> (DF)
13:27:17.100270 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.17697: S
1801344162:1801344162(0) ack 913231966 win 5792 <mss 1460,sackOK,timestamp
1848308022 1801123610,nop,wscale 2> (DF)
13:27:17.100387 xxx.xxx.xxx.103.17697 > xxx.xxx.xxx.157.443: . ack 1 win
16384 <nop,nop,timestamp 1801123610 1848308022> (DF)
13:27:17.110345 xxx.xxx.xxx.103.17697 > xxx.xxx.xxx.157.443: F 1:1(0) ack 1
win 16384 <nop,nop,timestamp 1801123610 1848308022> (DF)
13:27:17.111156 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.17697: F 1:1(0) ack 2
win 1448 <nop,nop,timestamp 1848308025 1801123610> (DF)
13:27:17.111464 xxx.xxx.xxx.103.17697 > xxx.xxx.xxx.157.443: . ack 2 win
16384 <nop,nop,timestamp 1801123610 1848308025> (DF)

13:27:27.130132 xxx.xxx.xxx.103.44072 > xxx.xxx.xxx.157.443: S
2602652962:2602652962(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 490198935 0> (DF)
13:27:27.130771 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.44072: S
1805757957:1805757957(0) ack 2602652963 win 5792 <mss 1460,sackOK,timestamp
1848310530 490198935,nop,wscale 2> (DF)
13:27:27.130841 xxx.xxx.xxx.103.44072 > xxx.xxx.xxx.157.443: . ack 1 win
16384 <nop,nop,timestamp 490198935 1848310530> (DF)
13:27:27.140176 xxx.xxx.xxx.103.44072 > xxx.xxx.xxx.157.443: F 1:1(0) ack 1
win 16384 <nop,nop,timestamp 490198935 1848310530> (DF)
13:27:27.141091 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.44072: F 1:1(0) ack 2
win 1448 <nop,nop,timestamp 1848310532 490198935> (DF)
13:27:27.141354 xxx.xxx.xxx.103.44072 > xxx.xxx.xxx.157.443: . ack 2 win
16384 <nop,nop,timestamp 490198935 1848310532> (DF)

13:27:47.180243 xxx.xxx.xxx.103.15780 > xxx.xxx.xxx.157.443: S
352869815:352869815(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 1128451500 0> (DF)
13:27:47.180983 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.15780: S
1835720746:1835720746(0) ack 352869816 win 5792 <mss 1460,sackOK,timestamp
1848315542 1128451500,nop,wscale 2> (DF)
13:27:47.181064 xxx.xxx.xxx.103.15780 > xxx.xxx.xxx.157.443: . ack 1 win
16384 <nop,nop,timestamp 1128451500 1848315542> (DF)
13:27:47.190720 xxx.xxx.xxx.103.15780 > xxx.xxx.xxx.157.443: F 1:1(0) ack 1
win 16384 <nop,nop,timestamp 1128451500 1848315542> (DF)
13:27:47.191539 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.15780: . ack 2 win
1448 <nop,nop,timestamp 1848315545 1128451500> (DF)
13:27:47.191677 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.15780: F 1:1(0) ack 2
win 1448 <nop,nop,timestamp 1848315545 1128451500> (DF)
13:27:47.192419 xxx.xxx.xxx.103.15780 > xxx.xxx.xxx.157.443: . ack 2 win
16384 <nop,nop,timestamp 1128451500 1848315545> (DF)

13:27:57.206911 xxx.xxx.xxx.103.14295 > xxx.xxx.xxx.157.443: S
3538246269:3538246269(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 1522145855 0> (DF)
13:27:57.207676 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.14295: S
1841244545:1841244545(0) ack 3538246270 win 5792 <mss 1460,sackOK,timestamp
1848318049 1522145855,nop,wscale 2> (DF)
13:27:57.207793 xxx.xxx.xxx.103.14295 > xxx.xxx.xxx.157.443: . ack 1 win
16384 <nop,nop,timestamp 1522145855 1848318049> (DF)
13:27:57.218664 xxx.xxx.xxx.103.14295 > xxx.xxx.xxx.157.443: F 1:1(0) ack 1
win 16384 <nop,nop,timestamp 1522145855 1848318049> (DF)
13:27:57.219468 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.14295: F 1:1(0) ack 2
win 1448 <nop,nop,timestamp 1848318052 1522145855> (DF)
13:27:57.219739 xxx.xxx.xxx.103.14295 > xxx.xxx.xxx.157.443: . ack 2 win
16384 <nop,nop,timestamp 1522145855 1848318052> (DF)

13:28:07.226086 xxx.xxx.xxx.103.8496 > xxx.xxx.xxx.157.443: S
3686084883:3686084883(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 461343923 0> (DF)
13:28:07.226674 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.8496: S
1854050794:1854050794(0) ack 3686084884 win 5792 <mss 1460,sackOK,timestamp
1848320553 461343923,nop,wscale 2> (DF)
13:28:07.226777 xxx.xxx.xxx.103.8496 > xxx.xxx.xxx.157.443: . ack 1 win
16384 <nop,nop,timestamp 461343923 1848320553> (DF)
13:28:07.237413 xxx.xxx.xxx.103.8496 > xxx.xxx.xxx.157.443: F 1:1(0) ack 1
win 16384 <nop,nop,timestamp 461343923 1848320553> (DF)
13:28:07.238273 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.8496: . ack 2 win 1448
<nop,nop,timestamp 1848320556 461343923> (DF)
13:28:07.238385 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.8496: F 1:1(0) ack 2
win 1448 <nop,nop,timestamp 1848320556 461343923> (DF)
13:28:07.238671 xxx.xxx.xxx.103.8496 > xxx.xxx.xxx.157.443: . ack 2 win
16384 <nop,nop,timestamp 461343923 1848320556> (DF)

13:28:17.254854 xxx.xxx.xxx.103.41233 > xxx.xxx.xxx.157.443: S
3915914431:3915914431(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 2586596977 0> (DF)
13:28:17.255411 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.41233: S
1866315326:1866315326(0) ack 3915914432 win 5792 <mss 1460,sackOK,timestamp
1848323060 2586596977,nop,wscale 2> (DF)
13:28:17.255492 xxx.xxx.xxx.103.41233 > xxx.xxx.xxx.157.443: . ack 1 win
16384 <nop,nop,timestamp 2586596977 1848323060> (DF)
13:28:17.265841 xxx.xxx.xxx.103.41233 > xxx.xxx.xxx.157.443: F 1:1(0) ack 1
win 16384 <nop,nop,timestamp 2586596977 1848323060> (DF)
13:28:17.266490 xxx.xxx.xxx.157.443 > xxx.xxx.xxx.103.41233: F 1:1(0) ack 2
win 1448 <nop,nop,timestamp 1848323063 2586596977> (DF)
13:28:17.266667 xxx.xxx.xxx.103.41233 > xxx.xxx.xxx.157.443: . ack 2 win
16384 <nop,nop,timestamp 2586596977 1848323063> (DF)

Thanks in advance,
Dan

Reply via email to