[ilb-dev] [networking-discuss] ILB design doc ( revision 1.0) has been posted

2008-10-29 Thread Kacheong Poon
Darren Reed wrote: > There is the continued feedback from ipfilter users that > harass me when fragmentation things don't work. The > problem isn't that "most fragments on the internet are UDP", > it is the small percentage of TCP packets that are, which > when not handled correctly, cause lots of

[ilb-dev] ilbd should not run as "root" Was Re: [networking-discuss] ILB design doc ( revision 1.0) has been posted

2008-10-29 Thread Sangeeta Misra
On 10/26/08 19:43, Darren Reed wrote: > 9.1 - Health Checks. > Mentioning "root" here is not correct. > Administration of ilbd should be defined through RBAC. > I do not see the benefit in using RBAC for this, but I agree that ilbd should probably run not as root but instead we should use privile

[ilb-dev] having ilbd instance per back-end server - Was Re: [networking-discuss] ILB design doc ( revision 1.0) has been posted

2008-10-29 Thread Sangeeta Misra
h one external server can impact all of the others. >>> Instead, scheduling of work is left up to the kernel to >>> schedule threads/processes, depending on who's busy or >>> blocked, etc. >> >> anything that we expect to block (health check) is farmed out to processes, >> so that happens anyway. > > The design document does not reflect this at all. > > Darren > -- next part -- An HTML attachment was scrubbed... URL: <http://mail.opensolaris.org/pipermail/ilb-dev/attachments/20081029/1ca7800e/attachment.html>