On Mon, Feb 23, 2009 at 09:36:55AM -0800, Karl Pietri wrote:
> You should see errors not in the log for haproxy but the general syslog.
> These are due to running out of state table entries in the module for
> iptables.
it is possible that they are reported by the sendto() syscall, because in many cases, UDP error reports are simply delayed till the next call.
I agree with you about the state table being full. Given the numbers, I would bet that there's a limit to 16k or 32k entries.
Regards,
Willy
Received on 2009/02/25 06:48
This archive was generated by hypermail 2.2.0 : 2009/02/25 08:00 CET