Re: Dropped connections with tcp_tw_recycle=1

2009-09-22 Thread Nils Goroll
Sven, tcp_tw_recycle is incompatible with NAT on the server side ... because it will enforce the verification of TCP time stamps. Unless all clients behind a NAT (actually PAD/masquerading) device use identical timestamps (within a certain range), most of them will send invalid TCP

Re: Dropped connections with tcp_tw_recycle=1

2009-09-22 Thread Sven Ulland
Nils Goroll wrote: The outer conditional verifies that the incoming SYN has a timestamp, that tcp_tw_recycle is enabled, and that the origin exists in our peer cache. Note that it only checks the IP of the origin. Doesn't it make sense to also match on port? My understanding is that the

PIPE asserts

2009-09-22 Thread Václav Bílek
Hello On high load we are geting asserts (and varnish restarts) like this: varnishd[23515]: Child (7569) Panic message: Assert error in Tcheck(), cache.h line 648:#012 Condition((t.e) != 0) not true. thread = (cache-worker)sp = 0x7f76c5875008 {#012 fd = 611, id = 611, xid = 778413112,#012

Re: Dropped connections with tcp_tw_recycle=1

2009-09-22 Thread Nils Goroll
Sven, Right, you're saying that the srcaddr+srcport pair of a connection in TIME_WAIT should not be reused under this scheme (i.e. the SYN can be dropped), and I agree. Then I don't understand why a new connection originating from a *different* source port (although from the same source IP)

Re: PIPE asserts

2009-09-22 Thread Václav Bílek
i redefined vcl_recv this way: if (req.request != GET req.request != HEAD req.request != PUT req.request != POST req.request != TRACE req.request != OPTIONS req.request != DELETE) { /* Non-RFC2616 or CONNECT which is weird. */ return

Serving FLV files using varnish vs nginx?

2009-09-22 Thread Ryan Chan
Hello, Anyone got experience in using varnish serving FLV file? How does it compare with nginx? Or it is recommended to using varnish for video streaming? Thanks. ___ varnish-misc mailing list varnish-misc@projects.linpro.no

Backend fail 503 Service Unavailable

2009-09-22 Thread M L
Hi list I love varnish and really want to use it :D Any clue to fix my problem , it come out alot backend fail ( i guess timeout problem ) my setup 1.Centos 5.3 64bit varnish / webserver 2.nginx backend server (it run over 200+days 2Mil pv/day without any problem healthy hardware) 3.varnish

Re: Backend fail 503 Service Unavailable

2009-09-22 Thread pub crawler
Well I might be a bit off on this, but 503's often involve ulimit ceiling maximums being hit and exceeded. ulimit -a What is that limit set at for open files? In our experience many high performance web related software products suffer from low open file limit. I've seen 256 in SunOS, 1024 in