synproxy

Open Denyme opened this issue 1 year ago • 3 comments

Hi. How i can disable syn proxy?

May 07 '24 10:05 Denyme

synproxy is disabled by default. You must enable it explicitly with ipvsadm or keepalived.

# ipvsadm -h| grep synproxy  
  --synproxy     -j                   TCP syn proxy

May 07 '24 10:05 ywc689

in log i have dp_vs_synproxy_ack_rcv: syncookie check failed. I use Fullnat with 1 arm topology. If synproxy disabled by default why i get this error? dpvs version 1.9-6

May 07 '24 11:05 Denyme

Actually, the problem is not in synproxy. The log implies some tcp ack packets target at a virtual service but its related syn packet didn't received by DPVS.You should look into the problem and find out where the packets come from.

May 07 '24 12:05 ywc689