netfilter buglog - Sep 2011 - [Bug 746] New: ipt_clusterip running in debug mode by default

http://bugzilla.netfilter.org/show_bug.cgi?id=746

           Summary: ipt_clusterip running in debug mode by default
           Product: netfilter/iptables
           Version: linux-2.6.x
          Platform: All
        OS/Version: RedHat Linux
            Status: NEW
          Severity: major
          Priority: P3
         Component: ip_tables (kernel)
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: jeanchristophe.garnier at gmail.com
   Estimated Hours: 0.0
          Deadline: 2011-09-30


Hi,

We are using clusterip in order to manage load sharing on a small cluster.
This cluster accepts messages from about 3000 sources. 

As it is coded in ./net/ipv4/netfilter/ipt_CLUSTERIP.c, the target procedure
prints messages such as:

hash=1 ct_hash=1 not responsible
hash=2 ct_hash=2 responsible

On a normal day, for a node of the cluster, /var/log/messages contains 691149
of these lines out of 691197 messages.
This is clearly flooding, but I don't want to filter out kernel debug
messages.

Could we envisage to get as soon as possible a CLUSTERIP module which
doesn't
print such lines by default ?

Thanks
Jc


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

http://bugzilla.netfilter.org/show_bug.cgi?id=746


Jan Engelhardt <jengelh at medozas.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jengelh at medozas.de
         AssignedTo|netfilter-                  |pablo at netfilter.org
                   |buglog at lists.netfilter.org  |




--- Comment #1 from Jan Engelhardt <jengelh at medozas.de>  2011-09-08
16:47:20 ---
N.B.: xt_cluster is what is normally used these days.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

http://bugzilla.netfilter.org/show_bug.cgi?id=746





--- Comment #2 from jcc416 <jeanchristophe.garnier at gmail.com> 
2011-09-12 09:58:02 ---
(In reply to comment #1)
> N.B.: xt_cluster is what is normally used these days.
> 
Is there any documentation about this ? can pacemaker use it ?

Thanks
Jc


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

http://bugzilla.netfilter.org/show_bug.cgi?id=746





--- Comment #3 from Jan Engelhardt <jengelh at medozas.de>  2011-10-02
14:19:00 ---
The iptables manpage has a section on xt_cluster.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

http://bugzilla.netfilter.org/show_bug.cgi?id=746

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX

--- Comment #4 from Pablo Neira Ayuso <pablo at netfilter.org> 2013-03-02
23:02:36 CET ---
You can disable those debugging messages by unsetting CONFIG_NETFILTER_DEBUG in
your kernel .config file.

-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.