<html>

    <head>

      <base href="https://bugzilla.netfilter.org/" />

    </head>

    <body><span class="vcard"><a class="email" href="mailto:arturo.borrero.glez@gmail.com" title="Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>"> <span class="fn">Arturo Borrero Gonzalez</span></a>

</span> changed

              <a class="bz_bug_link 

          bz_status_NEW "

   title="NEW - Window Tracking not disabled"

   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1087">bug 1087</a>

          <br>

             <table border="1" cellspacing="0" cellpadding="8">

          <tr>

            <th>What</th>

            <th>Removed</th>

            <th>Added</th>

          </tr>

         <tr>

           <td style="text-align:right;">CC</td>

           <td>

           </td>

           <td>arturo.borrero.glez@gmail.com

           </td>

         </tr></table>

      <p>

        <div>

            <b><a class="bz_bug_link 

          bz_status_NEW "

   title="NEW - Window Tracking not disabled"

   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1087#c4">Comment # 4</a>

              on <a class="bz_bug_link 

          bz_status_NEW "

   title="NEW - Window Tracking not disabled"

   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1087">bug 1087</a>

              from <span class="vcard"><a class="email" href="mailto:arturo.borrero.glez@gmail.com" title="Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>"> <span class="fn">Arturo Borrero Gonzalez</span></a>

</span></b>

        <pre>Mathew, I would need additional details to understand what's happening here.

You need "TCPWindowTracking On" in conntrackd.conf to ensure the window

tracking information is exchanged between the nodes of the cluster. I.E, from

your first comment I understand that using "TCPWindowTracking Off" and pushing

out-of-window traffic leads to dropped packages. If my understanding is right,

then this is the *expected*  behaviour.

As I said, to properly deal with this situation, you need "TCPWindowTracking

On".

This is independent of the behaviour of tcp_be_liberal.

Each node of the cluster should have it's own tcp_be_liberal configuration

using the sysctl variable.

Could you please share additional details?

thanks</pre>

        </div>

      </p>

      <hr>

      <span>You are receiving this mail because:</span>

      <ul>

          <li>You are watching all bug changes.</li>

      </ul>

    </body>

</html>