Re: ip_queue & QUEUE target

[Patrick McHardy <kaber@trash.net>]

Nigel Kukard wrote:

>>netlink sockets provide unreliable communication. your problem is
>>probably the sockets receive queue overflowing. ip_queue then
>>returns a negative error code to nf_queue which drops the packet.
>>    
>>
>
>well i'm pumping through about 5,000 pkt/s, doing a few Mb/s. What would
>the best thing be to use? or how could i remedy this problem?
>
>i set the rcv buffer to a few Mb, and also the ipq_maxlen to 8196... is
>there anything else i can do?
>
>  
>
Probably not much, but did you make sure you also increased
/proc/sys/net/core/rmem_max ? If you don't mind your statistics
beeing wrong (better than high drop rates imho) you could
modify ip_queue so it nf_reinjects packets which could not
be sent instead of returning a error to nf_queue.

Bye
Patrick

>Regards
>Nigel
>
>  
>