netdev - Re: [patch 2/2] ipvs: Syncrhonise Closing of Connections

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20071107.023716.31193168.davem@davemloft.net>
Date:	Wed, 07 Nov 2007 02:37:16 -0800 (PST)
From:	David Miller <davem@...emloft.net>
To:	horms@...genet.net
Cc:	lvs-devel@...uxvirtualserver.org, netdev@...r.kernel.org,
	rumen@...cecho.com, graeme@...emef.net, jmack@...d.net, ja@....bg,
	wensong@...ux-vs.org
Subject: Re: [patch 2/2] ipvs: Syncrhonise Closing of Connections

From: horms@...genet.net
Date: Mon, 05 Nov 2007 12:08:53 +0900

> From: Rumen G. Bogdanovski <rumen@...cecho.com>
> 
> This patch makes the master daemon to sync the connection when it is about
> to close.  This makes the connections on the backup to close or timeout
> according their state.  Before the sync was performed only if the
> connection is in ESTABLISHED state which always made the connections to
> timeout in the hard coded 3 minutes. However the Andy Gospodarek's patch
> ([IPVS]: use proper timeout instead of fixed value) effectively did nothing
> more than increasing this to 15 minutes (Established state timeout).  So
> this patch makes use of proper timeout since it syncs the connections on
> status changes to FIN_WAIT (2min timeout) and CLOSE (10sec timeout).
> However if the backup misses CLOSE hopefully it did not miss FIN_WAIT.
> Otherwise we will just have to wait for the ESTABLISHED state timeout. As
> it is without this patch.  This way the number of the hanging connections
> on the backup is kept to minimum. And very few of them will be left to
> timeout with a long timeout.
> 
> This is important if we want to make use of the fix for the real server
> overcommit on master/backup fail-over.
> 
> Signed-off-by: Rumen G. Bogdanovski <rumen@...cecho.com>
> Signed-off-by: Simon Horman <horms@...ge.net.au>

Also applied, thanks.
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html