search

iqiyi / dpvs

DPVS is a high performance Layer-4 load balancer based on DPDK.
Other
3k stars 723 forks source link

synproxy #956

Closed Denyme closed 3 months ago

Denyme commented 4 months ago

Hi. How i can disable syn proxy?

ywc689 commented 4 months ago

synproxy is disabled by default. You must enable it explicitly with ipvsadm or keepalived.

# ipvsadm -h| grep synproxy  
  --synproxy     -j                   TCP syn proxy
Denyme commented 4 months ago

in log i have dp_vs_synproxy_ack_rcv: syncookie check failed. I use Fullnat with 1 arm topology. If synproxy disabled by default why i get this error? dpvs version 1.9-6

ywc689 commented 4 months ago

Actually, the problem is not in synproxy. The log implies some tcp ack packets target at a virtual service but its related syn packet didn't received by DPVS.You should look into the problem and find out where the packets come from.