From: "René Pfeiffer" <lynx@luchs.at>
To: netfilter@lists.netfilter.org
Subject: Re: largescale NAT
Date: Sat, 31 Dec 2005 16:57:26 +0100 [thread overview]
Message-ID: <20051231155726.GA2423@agamemnon.luchs.at> (raw)
In-Reply-To: <43B16A57.508@fiktiv.szgtikol.kando.hu>
[-- Attachment #1: Type: text/plain, Size: 915 bytes --]
On Dec 27, 2005 at 1722 +0100, DEXTER appeared and said:
> [...]
> So my question is: How to handle this situation? I mean, just 1 NAT
> linux box is able to handle all the 400+ users with the above
> situations? Or we have to do something like CONNLIMIT on source ips? Is
> there possibilities to balance the traffic on 2 or more NAT box?
Just a wild guess, I would try to look at the timeouts in
/proc/sys/net/ipv4/netfilter/ and see if you can reduce some of them. In
addition to that I would increase the IP pool for NAT on the outgoing
interface(s). You don't need two boxes for that, just multiple IP
addresses on the interface.
Best wishes,
René.
--
)\._.,--....,'``. Let GNU/Linux work for you while you take a nap.
/, _.. \ _\ (`._ ,. R. Pfeiffer <lynx at luchs.at> + http://web.luchs.at/
`._.-(,_..'--(,_..'`-.;.' - System administration + Consulting + Teaching -
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
prev parent reply other threads:[~2005-12-31 15:57 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-12-27 16:22 largescale NAT DEXTER
2005-12-27 16:44 ` KOVACS Krisztian
[not found] ` <5d369d900512270859j45bc26f7i32397c1c6a6e12ea@mail.gmail.com>
2005-12-27 17:50 ` DEXTER
2005-12-27 18:45 ` Rob Sterenborg
2005-12-27 18:56 ` DEXTER
2005-12-28 0:03 ` Ishwar Rattan
2005-12-31 15:57 ` René Pfeiffer [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20051231155726.GA2423@agamemnon.luchs.at \
--to=lynx@luchs.at \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.