summaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_compat.c
diff options
context:
space:
mode:
authorMarcelo Ricardo Leitner2015-02-23 19:02:34 +0100
committerSimon Horman2015-02-25 05:46:35 +0100
commitd752c364571743d696c2a54a449ce77550c35ac5 (patch)
tree160b607482c080c720f27626fa7a7130307cbbf3 /net/netfilter/nft_compat.c
parentnetfilter: ipset: fix boolreturn.cocci warnings (diff)
downloadkernel-qcow2-linux-d752c364571743d696c2a54a449ce77550c35ac5.tar.gz
kernel-qcow2-linux-d752c364571743d696c2a54a449ce77550c35ac5.tar.xz
kernel-qcow2-linux-d752c364571743d696c2a54a449ce77550c35ac5.zip
ipvs: allow rescheduling of new connections when port reuse is detected
Currently, when TCP/SCTP port reusing happens, IPVS will find the old entry and use it for the new one, behaving like a forced persistence. But if you consider a cluster with a heavy load of small connections, such reuse will happen often and may lead to a not optimal load balancing and might prevent a new node from getting a fair load. This patch introduces a new sysctl, conn_reuse_mode, that allows controlling how to proceed when port reuse is detected. The default value will allow rescheduling of new connections only if the old entry was in TIME_WAIT state for TCP or CLOSED for SCTP. Signed-off-by: Marcelo Ricardo Leitner <mleitner@redhat.com> Signed-off-by: Julian Anastasov <ja@ssi.bg> Signed-off-by: Simon Horman <horms@verge.net.au>
Diffstat (limited to 'net/netfilter/nft_compat.c')
0 files changed, 0 insertions, 0 deletions