diff options
| author |   Andrew Sy Kim <kim.andrewsy@gmail.com> | 2020-07-08 12:16:38 -0400 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2020-07-22 01:17:59 +0200 |
| commit | 35dfb013149f74c2be1ff9c78f14e6a3cd1539d1 (patch) | |
| tree | c667d506f5c295992d6381398a5f4c4c0fbd6a51 /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | netfilter: nf_tables: Fix a use after free in nft_immediate_destroy() (diff) | |
| download | linux-dev-35dfb013149f74c2be1ff9c78f14e6a3cd1539d1.tar.xz linux-dev-35dfb013149f74c2be1ff9c78f14e6a3cd1539d1.zip | |
ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
When expire_nodest_conn=1 and a destination is deleted, IPVS does not
expire the existing connections until the next matching incoming packet.
If there are many connection entries from a single client to a single
destination, many packets may get dropped before all the connections are
expired (more likely with lots of UDP traffic). An optimization can be
made where upon deletion of a destination, IPVS queues up delayed work
to immediately expire any connections with a deleted destination. This
ensures any reused source ports from a client (within the IPVS timeouts)
are scheduled to new real servers instead of silently dropped.
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions