lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 16 Jul 2008 16:35:20 +1000 From: Simon Horman <horms@...ge.net.au> To: LVS Devel <lvs-devel@...r.kernel.org>, Linux Netdev List <netdev@...r.kernel.org> Cc: David Miller <davem@...emloft.net>, Rumen Bogdanovski <rumen@...cecho.com>, Joseph Mack NA3T <jmack@...d.net> Subject: [PATCH] IPVS: More reliable subchronization on connection close. From: Rumen Bogdanovski <rumen@...cecho.com> This patch enhances the synchronization of the closing connections between the master and the backup director. It prevents the closed connections to expire with the 15 min timeout of the ESTABLISHED state on the backup and makes them expire as they would do on the master with much shorter timeouts. Cc: Joseph Mack NA3T <jmack@...d.net> Signed-off-by: Rumen G. Bogdanovski <rumen@...cecho.com> Acked-by: Simon Horman <horms@...ge.net.au> --- Hi Dave, please consider applying this. diff -Naur net-2.6_orig/net/ipv4/ipvs/ip_vs_core.c net-2.6/net/ipv4/ipvs/ip_vs_core.c --- net-2.6_orig/net/ipv4/ipvs/ip_vs_core.c 2008-07-15 11:23:44.000000000 +0300 +++ net-2.6/net/ipv4/ipvs/ip_vs_core.c 2008-07-15 11:27:31.000000000 +0300 @@ -993,7 +993,8 @@ == sysctl_ip_vs_sync_threshold[0])) || ((cp->protocol == IPPROTO_TCP) && (cp->old_state != cp->state) && ((cp->state == IP_VS_TCP_S_FIN_WAIT) || - (cp->state == IP_VS_TCP_S_CLOSE))))) + (cp->state == IP_VS_TCP_S_CLOSE_WAIT) || + (cp->state == IP_VS_TCP_S_TIME_WAIT))))) ip_vs_sync_conn(cp); cp->old_state = cp->state; -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists