From: Simon Horman <horms@verge.net.au> Date: 2017-03-16 12:43:10
Hi Pablo,
please consider these enhancements to the IPVS for v4.12.
* Update sysctl documentation
* Remove unnecessary printk in __ip_vs_init
The following changes since commit 03e5fd0e9bcc1f34b7a542786b34b8f771e7c260:
netfilter: nft_set_rbtree: use per-set rwlock to improve the scalability (2017-03-13 19:30:43 +0100)
are available in the git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next.git tags/ipvs-for-v4.12
for you to fetch changes up to 3c679cba588a46ba81a264673e192bbd3c92455b:
ipvs: Document sysctl pmtu_disc (2017-03-16 13:33:39 +0100)
----------------------------------------------------------------
Cong Wang (1):
ipvs: remove an annoying printk in netns init
Hangbin Liu (4):
ipvs: fix sync_threshold description and add sync_refresh_period, sync_retries
ipvs: Document sysctl sync_qlen_max and sync_sock_size
ipvs: Document sysctl sync_ports
ipvs: Document sysctl pmtu_disc
Documentation/networking/ipvs-sysctl.txt | 68 ++++++++++++++++++++++++++++----
net/netfilter/ipvs/ip_vs_core.c | 2 -
2 files changed, 60 insertions(+), 10 deletions(-)
From: Simon Horman <horms@verge.net.au> Date: 2017-03-16 12:43:28
From: Hangbin Liu <redacted>
Fix sync_threshold description which should have two values. Also add
sync_refresh_period and sync_retries based on commit 749c42b620a9
("ipvs: reduce sync rate with time thresholds").
Signed-off-by: Hangbin Liu <redacted>
Signed-off-by: Simon Horman <horms@verge.net.au>
---
Documentation/networking/ipvs-sysctl.txt | 40 +++++++++++++++++++++++++-------
1 file changed, 31 insertions(+), 9 deletions(-)
@@ -185,15 +185,37 @@ secure_tcp - INTEGER The value definition is the same as that of drop_entry and drop_packet.-sync_threshold - INTEGER- default 3-- It sets synchronization threshold, which is the minimum number- of incoming packets that a connection needs to receive before- the connection will be synchronized. A connection will be- synchronized, every time the number of its incoming packets- modulus 50 equals the threshold. The range of the threshold is- from 0 to 49.+sync_threshold - vector of 2 INTEGERs: sync_threshold, sync_period+ default 3 50++ It sets synchronization threshold, which is the minimum number+ of incoming packets that a connection needs to receive before+ the connection will be synchronized. A connection will be+ synchronized, every time the number of its incoming packets+ modulus sync_period equals the threshold. The range of the+ threshold is from 0 to sync_period.++ When sync_period and sync_refresh_period are 0, send sync only+ for state changes or only once when pkts matches sync_threshold++sync_refresh_period - UNSIGNED INTEGER+ default 0++ In seconds, difference in reported connection timer that triggers+ new sync message. It can be used to avoid sync messages for the+ specified period (or half of the connection timeout if it is lower)+ if connection state is not changed since last sync.++ This is useful for normal connections with high traffic to reduce+ sync rate. Additionally, retry sync_retries times with period of+ sync_refresh_period/8.++sync_retries - INTEGER+ default 0++ Defines sync retries with period of sync_refresh_period/8. Useful+ to protect against loss of sync messages. The range of the+ sync_retries is from 0 to 3. snat_reroute - BOOLEAN 0 - disabled
From: Simon Horman <horms@verge.net.au> Date: 2017-03-16 12:43:30
From: Cong Wang <redacted>
At most it is used for debugging purpose, but I don't think
it is even useful for debugging, just remove it.
Signed-off-by: Cong Wang <redacted>
Signed-off-by: Simon Horman <horms@verge.net.au>
---
net/netfilter/ipvs/ip_vs_core.c | 2 --
1 file changed, 2 deletions(-)
@@ -217,6 +217,20 @@ sync_retries - INTEGER to protect against loss of sync messages. The range of the sync_retries is from 0 to 3.+sync_qlen_max - UNSIGNED LONG++ Hard limit for queued sync messages that are not sent yet. It+ defaults to 1/32 of the memory pages but actually represents+ number of messages. It will protect us from allocating large+ parts of memory when the sending rate is lower than the queuing+ rate.++sync_sock_size - INTEGER+ default 0++ Configuration of SNDBUF (master) or RCVBUF (slave) socket limit.+ Default value is 0 (preserve system defaults).+ snat_reroute - BOOLEAN 0 - disabled not 0 - enabled (default)
From: Simon Horman <horms@verge.net.au> Date: 2017-03-16 12:43:35
From: Hangbin Liu <redacted>
Document sysctl sync_ports based on commit f73181c8288f ("ipvs: add support
for sync threads").
Signed-off-by: Hangbin Liu <redacted>
Signed-off-by: Simon Horman <horms@verge.net.au>
---
Documentation/networking/ipvs-sysctl.txt | 8 ++++++++
1 file changed, 8 insertions(+)
@@ -231,6 +231,14 @@ sync_sock_size - INTEGER Configuration of SNDBUF (master) or RCVBUF (slave) socket limit. Default value is 0 (preserve system defaults).+sync_ports - INTEGER+ default 1++ The number of threads that master and backup servers can use for+ sync traffic. Every thread will use single UDP port, thread 0 will+ use the default port 8848 while last thread will use port+ 8848+sync_ports-1.+ snat_reroute - BOOLEAN 0 - disabled not 0 - enabled (default)
From: Simon Horman <horms@verge.net.au> Date: 2017-03-16 12:43:37
From: Hangbin Liu <redacted>
Document sysctl pmtu_disc based on commit 3654e61137db ("ipvs: add
pmtu_disc option to disable IP DF for TUN packets").
Signed-off-by: Hangbin Liu <redacted>
Signed-off-by: Simon Horman <horms@verge.net.au>
---
Documentation/networking/ipvs-sysctl.txt | 8 ++++++++
1 file changed, 8 insertions(+)
@@ -175,6 +175,14 @@ nat_icmp_send - BOOLEAN for VS/NAT when the load balancer receives packets from real servers but the connection entries don't exist.+pmtu_disc - BOOLEAN+ 0 - disabled+ not 0 - enabled (default)++ By default, reject with FRAG_NEEDED all DF packets that exceed+ the PMTU, irrespective of the forwarding method. For TUN method+ the flag can be disabled to fragment such packets.+ secure_tcp - INTEGER 0 - disabled (default)
From: Pablo Neira Ayuso <pablo@netfilter.org> Date: 2017-03-17 11:48:43
On Thu, Mar 16, 2017 at 01:43:10PM +0100, Simon Horman wrote:
Hi Pablo,
please consider these enhancements to the IPVS for v4.12.
* Update sysctl documentation
* Remove unnecessary printk in __ip_vs_init
The following changes since commit 03e5fd0e9bcc1f34b7a542786b34b8f771e7c260:
netfilter: nft_set_rbtree: use per-set rwlock to improve the scalability (2017-03-13 19:30:43 +0100)
are available in the git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-next.git tags/ipvs-for-v4.12