Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Analysis of LVS Technology-proc parameters

2025-01-19 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

Several commonly used proc parameters

1. / proc/net/ip_vs

Get the current LVS kernel configuration, including information about VS and RS; same as ipvsadm-ln

IP Virtual Server version 1.2.1 (size=1048576)-where size refers to the size of the join hash table

Prot LocalAddress:Port Scheduler Flags

-> RemoteAddress:Port Forward Weight ActiveConn InActConn

TCP 0ADC0108:0050 rr-vs information, vip and vport hexadecimal, scheduling algorithm rr

-> C0A8010B:0050 Route 100-rs information, rip and rport hexadecimal, weight 1

-> C0A8010A:0050 Route 100-ActiveConn refers to the number of connections in established statu

-InActConn refers to the number of connections in a non-established state

2./proc/net/ip_vs_conn

It is recommended not to use this command to get all connection information, because when there are a large number of connections, the CPU overhead will be very high.

Pro FromIP FPrt ToIP TPrt DestIP DPrt State Expires

-time remaining for user ip and port vs ip and port rs ip and port tcp state machine state machine connection timeout

3./proc/net/ip_vs_stats

Get global statistics for connections / packets / bytes

The first row is the cumulative value

The second line is the rate, and the statistical period is 2s.

Total Incoming Outgoing Incoming Outgoing

Conns Packets Packets Bytes Bytes

0 0 0

Conns/s Pkts/s Pkts/s Bytes/s Bytes/s

0 0 0

4./proc/sys/net/ipv4/vs/expire_nodest_conn

The default value is 0. When LVS forwards the packet and finds that the destination RS is invalid (deleted), the packet will be discarded, but the corresponding connection will not be deleted. The consideration of this design is that when RS resumes, if Client and RS socket have not timed out, the communication can continue.

If this parameter is set to 1, the connection will be released immediately

It is recommended to use the default value, which is configured to 0

5. / proc/sys/net/ipv4/vs/expire_quiescent_template

The default value is 0, and when the weight value of the RS = 0 (for example, if the health check fails and the application sets the RS weight to 0), the new connection maintained by the session will continue to be scheduled to the RS.

If configured to 1, immediately set the connection template for session persistence to invalid and reschedule the new RS

If there is a session persistence service, it is recommended that the value be configured as 1

6. / proc/sys/net/ipv4/vs/nat_icmp_send

Default value is 0

If set to 1, when LVS receives the packet sent by RS but does not find the corresponding connection, the ICMP with unreachable destination (port unreachable) is sent to RS.

The default value is recommended, which is 0

7. / proc/sys/net/ipv4/vs/sync_threshold

The default value is 3 50

This parameter is related to connection synchronization. After receiving 3 packets, LVS starts synchronization. After that, it starts synchronization for every 50 packets received.

The frequency of connection synchronization can be adjusted according to the traffic of LVS, thus the system overhead of synchronization can be controlled.

8. / other parameters under proc/sys/net/ipv4/vs/

Used to "release connections when out of memory", but the current server memory is so large that these parameters are no longer useful

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report