Hello,
I have a iptables-based firewall with ~1200 IPv4 and ~950 IPv6 rules.
When I want to reload its configuration, I often get "Resource temporarily
unavailable" error from iptables.
I have a HA setup with two servers, and the error more often happens on
a server with four cores and 2 GB of RAM than on a server with two cores
and 4 GB of RAM.
I have added a band-aid fix to my startup script - sleeping for one second
and trying again when the error code from iptables is 4, and it apparently
helps. But the error messages from the startup script are still a bit ugly.
What else can I do in order to fix the problem?
Thanks,
-Yenya
--
| Jan "Yenya" Kasprzak <kas at {fi.muni.cz - work | yenya.net - private}> |
| GPG: ID 1024/D3498839 Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E |
| http://www.fi.muni.cz/~kas/ Journal: http://www.fi.muni.cz/~kas/blog/ |
Please don't top post and in particular don't attach entire digests to your
mail or we'll all soon be using bittorrent to read the list. --Alan Cox
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
