Discuss

discuss@lists.centos.org

34758 discussions

iptables starting while disabled
by Joseph L. Casale 14 Jun '08

14 Jun '08

I have a xen machine that has iptables turned off, and after a reboot it started behaving badly during times when network IO rose to anything other than almost nil. Since I know iptables makes xen unstable without some additional config and since its isolated I just have is disabled. As a result it was the last place I looked and spent the better half of the day chasing my tail. Somehow it gets turned on after a reboot, how can I deduce what is activating it? Thanks! jlc

5 10

assigning "best" gateway and routing ---- Re: CentOS Digest, Vol 41, Issue 14
by Kevin Abbey 14 Jun '08

14 Jun '08

Hi, Regarding the discussion of gateways, Can the Vyatta routing software and/or hardware appliance solution help? (The software is open source and available.) http://www.vyatta.com/documentation/datasheet.php http://www.vyatta.com/documentation/general/Vyatta_FAQ.pdf http://www.vyatta.com/products/vyatta_software_datasheet.pdf http://www.vyatta.com/documentation/index.php Download http://www.vyatta.com/download/ I have not ye used this. I'd be interested to learn of others experiences with this. Kevin -- Kevin C. Abbey System Administrator BioMaPS Institute and Chemistry Department Rutgers University Piscataway, NJ 08854 CentOS Digest, Vol 41, Issue 14 Relevant emails only here: ------------------------------ Message: 2 Date: Fri, 13 Jun 2008 06:29:58 -0600 From: "Joseph L. Casale" <JCasale(a)activenetwerx.com> Subject: RE: [CentOS] assigning "best" gateway via DHCP To: 'CentOS mailing list' <centos(a)centos.org> Message-ID: <49627735003F5C479100225C339F9FE06FDCEE90BD(a)Mail.activenetwerx.int> Content-Type: text/plain; charset=us-ascii > >What might I do Linux-wise to create a "system" that looked at multiple > >gateways and then assigned (via DHCP) the gateway that was the least > >congested? > > > >Anyone have any good suggestions in this department? > Your assumption is that the level of congestion would remain unchanged for the length of the lease? Maybe an alternative is something that hands out one gateway then decides possibly what ip to masquerade with. jlc ------------------------------ ------------------------------ Message: 7 Date: Fri, 13 Jun 2008 09:52:03 -0700 From: Rogelio <scubacuda(a)gmail.com> Subject: Re: [CentOS] assigning "best" gateway via DHCP To: CentOS mailing list <centos(a)centos.org> Message-ID: <4852A5B3.3000603(a)gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Joseph L. Casale wrote: >> >> What might I do Linux-wise to create a "system" that looked at multiple >> >> gateways and then assigned (via DHCP) the gateway that was the least >> >> congested? >> >> >> >> Anyone have any good suggestions in this department? >> > > > > Your assumption is that the level of congestion would remain unchanged for the > > length of the lease? Maybe an alternative is something that hands out one gateway > > then decides possibly what ip to masquerade with. > This is a good idea, thanks. So, I'm assuming that you mean something like this? http://tldp.org/HOWTO/IP-Masquerade-HOWTO/ ------------------------------ Message: 8 Date: Fri, 13 Jun 2008 11:13:16 -0600 From: "Joseph L. Casale" <JCasale(a)activenetwerx.com> Subject: RE: [CentOS] assigning "best" gateway via DHCP To: CentOS mailing list <centos(a)centos.org> Message-ID: <49627735003F5C479100225C339F9FE06FDCEE6C1A(a)Mail.activenetwerx.int> Content-Type: text/plain; charset=us-ascii > >This is a good idea, thanks. So, I'm assuming that you mean something > >like this? > > > >http://tldp.org/HOWTO/IP-Masquerade-HOWTO/ > Yeah, I don't know how "sexy" the solution would be, but you could poll for throughput/availability with a script, then rewrite the iptables rule for example taking the new, preferred outside route as your new external IP to masq with. It would be functional, and given the external link your moving away from is likely down you probably don't have to worry about existing connections, or do you? :) Once you rewrite the rule and refresh it, current connections getting masq'ed will be killed. If your in the middle of secure connection to something/someone or a download, it will be terminated. There is *no* way of maintaining any connection between different paths in this situation unless you specifically have something setup with your provider that is aggregated across {n} connections, but then we wouldn't be discussing this:) jlc ------------------------------

1 0

LVM and ext3 filesystem question
by Mag Gam 14 Jun '08

14 Jun '08

Can someone please explain what the purpose of stride is on ext3? I have been "googling" this for hours and wasn't really able to understand the underlying concepts. How does it fit with LVM, PV create's metablock size, and hardware RAID controller? TIA

2 1

CentOS-announce Digest, Vol 40, Issue 7
by centos-announce-request＠centos.org 14 Jun '08

14 Jun '08

1 0

enabling maildir @ cli
by Ray Leventhal 13 Jun '08

13 Jun '08

Hi all, I'm following a how-to for ISPConfig using CentOS5.1 and have run into the following instruction: ----- Dovecot uses Maildir format (not mbox), so if you install ISPConfig on the server, please make sure you enable Maildir under Management -> Server -> Settings -> Email. ISPConfig will then do the necessary configuration. ---- Since I'm ssh'd in to the box and X isn't installed, what's the CLI to accomplish this? Thanks in advance, -Ray

4 7

TCP offload cards in linux
by nate 13 Jun '08

13 Jun '08

Anyone have experience with any? I've been having a real hard time finding info on any cards that actually support this under linux. (most of the cards work but I don't see drivers that actually offload the TCP stack) I have seen some comments where kernel developers don't like the idea as well. I'm running CentOS 4.6 64-bit on a dual proc quad core system with 8GB memory. I have a situation where I'm trying to make the most of my hardware here, a web application that serves up hundreds of tiny requests per second(each taking typically sub 100ms to complete). With my load balancer in it's "normal" mode I can pump about 1000 requests a second through the system, before exhausting the TCP stack on the server(all ~65k sockets in use). CPU usage tops out at about 75%. The "normal" mode terminates idle connections forcefully after 25 seconds. If I tell my load balancer to terminate idle connections *immediately* instead of waiting 25 seconds, I get similar CPU usage but transactions per second drop by about 30-33%. During my tests I've also gotten 4 kernel panics, the last two I have captured and they are virtually identical, with the exception of one time it panic's on the java process, another time it panics on the swapper process. Both times the load balancer was configured to terminate connections faster than 25 seconds. I've done several searches and can't find anything remotely related to the below panic. Kernel BUG at tcp_output:943 invalid operand: 0000 [1] SMP CPU 2 Modules linked in: dell_rbu md5 ipv6 autofs4 i2c_dev i2c_core nfs lockd nfs_acl sunrpc dm_mirror dm_mod joydev button battery ac uhci_hcd ehci_hcd hw_random shpchp bnx2 ext3 jbd ata_piix libata megaraid_sas sd_mod scsi_mod Pid: 10645, comm: java Not tainted 2.6.9-67.ELsmp RIP: 0010:[<ffffffff802e1a12>] <ffffffff802e1a12>{tcp_retransmit_skb+639} RSP: 0000:0000010006963e98 EFLAGS: 00010202 RAX: 00000101687cd9c0 RBX: 00000102266d2a80 RCX: 00000101687cd9c0 RDX: 00000101dec72e80 RSI: 0000000000000350 RDI: 0000000000000010 RBP: 000001015c0f7700 R08: 0000000000000008 R09: 0000000000000100 R10: 0000000000000000 R11: 0000000000000008 R12: 000001007b64ccb0 R13: 00000000000005b4 R14: 000001007b64ccb0 R15: 000001007b64c980 FS: 0000000048fe0960(005b) GS:ffffffff804f2e80(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 0000002adc82e028 CR3: 000000000694e000 CR4: 00000000000006e0 Process java (pid: 10645, threadinfo 0000010055cba000, task 000001005633c7f0) Stack: 0000010006963ec8 0000020000102a93 000001007b64ccb0 0000000000000001 000001007b64c980 0000000000000008 000001007b64ccb0 000001007b64ccb0 0000002c273fc4d0 ffffffff802e3f6d Call Trace:<IRQ> <ffffffff802e3f6d>{tcp_write_timer+1059} <ffffffff802e3b4a>{tcp_write_timer+0} <ffffffff80140945>{run_timer_softirq+356} <ffffffff8013cff0>{__do_softirq+88} <ffffffff8013d099>{do_softirq+49} <ffffffff80110bf5>{apic_timer_interrupt+133} <EOI> Code: 0f 0b 48 c1 34 80 ff ff ff ff af 03 48 8b 43 10 4c 63 f6 ff RIP <ffffffff802e1a12>{tcp_retransmit_skb+639} RSP <0000010006963e98> <0>Kernel panic - not syncing: Oops >From what I can tell the Broadcom chips in this server support TOE but the driver in linux does not implement it. I'd like to find a card that really has TOE in linux, if for nothing else to compare how it performs vs what I have now. With the goal of pumping out the highest number of transactions per second possible with the hardware/power utilization. thanks nate

2 2

assigning "best" gateway via DHCP
by Rogelio 13 Jun '08

13 Jun '08

What might I do Linux-wise to create a "system" that looked at multiple gateways and then assigned (via DHCP) the gateway that was the least congested? Anyone have any good suggestions in this department? (I am planning on having a temporary wireless mesh with several satellite uplinks, and I would like to forward requests to whichever uplink is the least utilized)

2 3

Key Card Access software
by Joseph L. Casale 13 Jun '08

13 Jun '08

We have http://www.cansec.com/ based prox readers and port servers but the software is a joke. It doesn't run as a service, so the server must be logged in at the console. Anyone use anything Linux based they can vouch for? Thanks! jlc

1 0

AW: Re: [CentOS] OT: HP Autoloader Issue
by Marc Rebischke 13 Jun '08

13 Jun '08

Joseph L. Casale wrote: > I spent a good chunk of time trying to get an HP LTO Autoloader to > work with Amanda only to later find out it was faulty. Aside from HP > who has a brutal system for repairing hardware, does anyone know where > I might be able to send it for repair? > Joseph, Maybe the follwing link is helpful : http://www.useddlt.com (German Website) http://www.useddlt.com/international.0.html (Overview,English) Best Regards Marc Rebischke

1 0

CentOS-announce Digest, Vol 40, Issue 6
by centos-announce-request＠centos.org 13 Jun '08

13 Jun '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0502 Important CentOS 3 i386 XFree86 - security update (Tru Huynh) 2. CESA-2008:0502 Important CentOS 3 x86_64 XFree86 - security update (Tru Huynh) 3. CESA-2008:0522 Important CentOS 3 i386 perl - security update (Tru Huynh) 4. CESA-2008:0522 Important CentOS 3 x86_64 perl - security update (Tru Huynh) 5. CESA-2008:0512-01: Important CentOS 2 i386 XFree86 security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Thu, 12 Jun 2008 15:26:31 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0502 Important CentOS 3 i386 XFree86 - security update To: centos-announce(a)centos.org Message-ID: <20080612132631.GA8180(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0502 XFree86 security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0502.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/XFree86-100dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-75dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-base-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-cyrillic-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-devel-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-doc-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-font-utils-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-ISO8859-14-100dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-ISO8859-14-75dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-ISO8859-15-100dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-ISO8859-15-75dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-ISO8859-2-100dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-ISO8859-2-75dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-ISO8859-9-100dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-ISO8859-9-75dpi-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-libs-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-libs-data-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-Mesa-libGL-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-Mesa-libGLU-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-sdk-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-syriac-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-tools-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-truetype-fonts-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-twm-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-xauth-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-xdm-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-xfs-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-Xnest-4.3.0-128.EL.i386.rpm updates/i386/RPMS/XFree86-Xvfb-4.3.0-128.EL.i386.rpm source: updates/SRPMS/XFree86-4.3.0-128.EL.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update XFree86\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss