Google
  Web www.spinics.net

Re: "dst cache overflow" messages and crash

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


Ivan Vladimirov wrote:
Frédéric Massot wrote:
Hi,

I regularly have errors (kernel: dst cache overflow) and crash of a
firewall under Linux 2.6.17 and the route patch from Julian Anastasov.

With rtstat I see that the route cache size increases regularly without
never decreasing.

I have this parameters:
fw:/proc/sys/net/ipv4/route# grep . *
error_burst:1250
error_cost:250
gc_elasticity:15
gc_interval:60
gc_min_interval:0
gc_min_interval_ms:500
gc_thresh:4096
gc_timeout:300
max_delay:10
max_size:65536
min_adv_mss:256
min_delay:2
min_pmtu:552
mtu_expires:600
redirect_load:5
redirect_number:9
redirect_silence:5120
secret_interval:600

I can increase the maximum size of the cache, but that will do nothing
but delay the crash.

Can you help me?

Regards.
max_size=65536
is to low increase size to 256k

Hi,

I supervised the system during a few weeks with slabtop and rtstat.

What I could see, it is that the ip_dst_cache cache grow without never being cleaned by the garbage collector.

At the end of a few days, the traffic is slowed down and the customer restart the firewall. When the cache reaches its maximum value there is the error message (kernel: dst cache overflow) and the traffic is really disturbed.

I use the Linux kernel 2.6.17 and the route patch from Julian Anastasov.

- The bug comes from the kernel or the patch?

- Do you know if this bug were corrected in the new versions of the kernel?

Regards.
--
==============================================
|              FRÉDÉRIC MASSOT               |
|     http://www.juliana-multimedia.com      |
|   mailto:frederic@xxxxxxxxxxxxxxxxxxxxxx   |
===========================Debian=GNU/Linux===

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Bugtraq]     [Fedora Legacy]     [GCC Help]     [Yosemite News]     [Yosemite Photos]     [IP Tables]     [Netfilter Devel]     [Fedora Users]

Powered by Linux