On 7 January 2008 13:01:24 Max Deineko wrote:
> Marcin Owsiany <marcin@owsiany.pl> wrote:
> > On Mon, Jan 07, 2008 at 07:55:43AM +0000, Max Deineko wrote:
> >> My first guess would have been that when the server is busy serving an
> >> expensive request, the tcp rcv buffer would get full and packets would
> >> get dropped. But wouldn't tcpdump not be able to see them then?
>
> > http://forum.openvz.org/index.php?t=msg&goto=21592
> >
> > My theory is that when the (receive buffer size / current connections)
> > is too small for the window size, then kernel gets itself into a state
> > where it's impossible to recover a connection.
>
> Thanks a lot. I already had found the thread and tried increasing
> tcp_rmem size, which hung the webserver completely (maybe it was a litte
> too big ;), but I'm still experimenting with the settings.
>
> Of course there might be a problem with other server components, and I'm
> not really a networking expert, it's just that the tcp flow doesn't look
> like what I'd expect it to.
Please show files: /proc/net/netstat, /proc/net/snmp ( inside VE)
Have you seen any suspicious messages in dmesg related to this issue?
>
> So is the behaviour I see normal or is there really something wrong at
> this level already? Even if one assumed that userland components were
> broken and went haywire sometimes?
>
> Thanks, Max.
>
--
Thanks,
Vitaliy Gusev