synproxy

[Denyme]

Hi.
How i can disable syn proxy?

[ywc689]

synproxy is disabled by default. You must enable it explicitly with ipvsadm or keepalived.

# ipvsadm -h| grep synproxy  
  --synproxy     -j                   TCP syn proxy

[Denyme]

in log i have dp_vs_synproxy_ack_rcv: syncookie check failed.
I use Fullnat with 1 arm topology.
If synproxy disabled by default why i get this error?
dpvs version 1.9-6

[ywc689]

Actually, the problem is not in synproxy. The log implies some tcp ack packets target at a virtual service but its related syn packet didn't received by DPVS.You should look into the problem and find out where the packets come from.