Commit f39060c6 authored by liangwei's avatar liangwei

set net/ipv4/vs/conn_reuse_mode to 0

parent cde4c9eb
...@@ -161,6 +161,7 @@ var ipsetWithIptablesChain = []struct { ...@@ -161,6 +161,7 @@ var ipsetWithIptablesChain = []struct {
const sysctlRouteLocalnet = "net/ipv4/conf/all/route_localnet" const sysctlRouteLocalnet = "net/ipv4/conf/all/route_localnet"
const sysctlBridgeCallIPTables = "net/bridge/bridge-nf-call-iptables" const sysctlBridgeCallIPTables = "net/bridge/bridge-nf-call-iptables"
const sysctlVSConnTrack = "net/ipv4/vs/conntrack" const sysctlVSConnTrack = "net/ipv4/vs/conntrack"
const sysctlConnReuse = "net/ipv4/vs/conn_reuse_mode"
const sysctlForward = "net/ipv4/ip_forward" const sysctlForward = "net/ipv4/ip_forward"
const sysctlArpIgnore = "net/ipv4/conf/all/arp_ignore" const sysctlArpIgnore = "net/ipv4/conf/all/arp_ignore"
const sysctlArpAnnounce = "net/ipv4/conf/all/arp_announce" const sysctlArpAnnounce = "net/ipv4/conf/all/arp_announce"
...@@ -313,6 +314,13 @@ func NewProxier(ipt utiliptables.Interface, ...@@ -313,6 +314,13 @@ func NewProxier(ipt utiliptables.Interface,
} }
} }
// Set the connection reuse mode
if val, _ := sysctl.GetSysctl(sysctlConnReuse); val != 0 {
if err := sysctl.SetSysctl(sysctlConnReuse, 0); err != nil {
return nil, fmt.Errorf("can't set sysctl %s: %v", sysctlConnReuse, err)
}
}
// Set the ip_forward sysctl we need for // Set the ip_forward sysctl we need for
if val, _ := sysctl.GetSysctl(sysctlForward); val != 1 { if val, _ := sysctl.GetSysctl(sysctlForward); val != 1 {
if err := sysctl.SetSysctl(sysctlForward, 1); err != nil { if err := sysctl.SetSysctl(sysctlForward, 1); err != nil {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment