CONFIG_NF_CONNTRACK_EVENTS stability?

CONFIG_NF_CONNTRACK_EVENTS stability?

[Christopher Munns]

I was hoping someone might be able to comment on the stability of
CONFIG_NF_CONNTRACK_EVENTS(in 2.6.22 right now).  I'm trying to set up
conntrackd to aid in stateful failover between firewalls and since it is
still marked as Experimental, I was curious just how experimental it
is.  Has anyone had this under some high load?  100+ concurrent
connections?  Any issues with DNAT?

Thanks,

- Chris Munns
Meetup

Re: CONFIG_NF_CONNTRACK_EVENTS stability?

[Pablo Neira Ayuso]

Christopher Munns wrote:
> I was hoping someone might be able to comment on the stability of
> CONFIG_NF_CONNTRACK_EVENTS(in 2.6.22 right now).  I'm trying to set up
> conntrackd to aid in stateful failover between firewalls and since it is
> still marked as Experimental, I was curious just how experimental it
> is.  Has anyone had this under some high load?  100+ concurrent
> connections?  Any issues with DNAT?

No, issues. Give it a try. BTW, better post this sort of questions to
netfilter-failover. In my testbed [1] I have reached up to 2500 HTTP GET
requests/s. The firewalls are two Dual core AMD Opteron 2200 GHz with
1GBit Ethernets. Note that this is the maximum amount of connections
that I could generate with only one client.

[1] http://people.netfilter.org/pablo/conntrack-tools/testcase.html

-- 
"Los honestos son inadaptados sociales" -- Les Luthiers