4 ms·
I think you can use -m state --state ESTABLISHED,RELATED to match existing tcp flows. But that builds on conntrack, you could get in trouble if this HA proxy i
by toong 12y ago
I think you can use -m state --state ESTABLISHED,RELATED to match existing tcp flows.
But that builds on conntrack, you could get in trouble if this HA proxy is public facing and handles a gazillion requests ?
- lobster_johnson 12y agoProbably, but realistically, it's probably fine for most shops.
- toong 12y agoMost shops don't handle a gazillion requests. And if you don't handle a gazillion requests, you don't really care about 20ms downtime while HA proxy is reloading ?