Page MenuHomeVyOS Platform
Feed Advanced Search

Jun 30 2022

trae32566 added a comment to T1641: VRRP conntrack-sync dropping packets passing through the router.

@trae32566 Extentd conntrack table and reduce timeouts:
for example

Jun 30 2022, 8:37 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav added a comment to T1641: VRRP conntrack-sync dropping packets passing through the router.

@trae32566 Extentd conntrack table and reduce timeouts:
for example

set system sysctl parameter net.netfilter.nf_conntrack_generic_timeout value 60
set system sysctl parameter net.netfilter.nf_conntrack_icmp_timeout value 10
set system sysctl parameter net.netfilter.nf_conntrack_icmpv6_timeout value 10
set system sysctl parameter net.netfilter.nf_conntrack_tcp_timeout_close_wait value 20
set system sysctl parameter net.netfilter.nf_conntrack_tcp_timeout_established value 1800
set system sysctl parameter net.netfilter.nf_conntrack_tcp_timeout_fin_wait value 30
set system sysctl parameter net.netfilter.nf_conntrack_tcp_timeout_syn_recv value 30
set system sysctl parameter net.netfilter.nf_conntrack_tcp_timeout_syn_sent value 60
set system sysctl parameter net.netfilter.nf_conntrack_tcp_timeout_time_wait value 120
set system sysctl parameter net.netfilter.nf_conntrack_udp_timeout_stream value 60
Jun 30 2022, 6:15 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
trae32566 added a comment to T1641: VRRP conntrack-sync dropping packets passing through the router.

This seems to be an issue in 1.4 as well, I have the exact same symptoms, and removing the accept-protocol fixes the issue.

Jun 30 2022, 3:05 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus