Deployment of 3rd IP on Gateway seems to cause network issue issues
book
Article ID: 113744
calendar_today
Updated On:
Products
STARTER PACK-7CA Rapid App SecurityCA API Gateway
Issue/Introduction
I tried to deploy a 3rd Gateway IP on my current linux box so that I can filter an entire service to that IP. Seemed like this went well in regards to the installation, however after running a continues ping on the box, I seemed to get a lot of dropped packets. I need to re-verify if I completed the steps properly, or if I was missing something.
Environment
Applies to all Appliance Gateway's
Cause
Need to be careful when using PING as a tool to test network stability, many network devices and operating system have setting put in place to avoid ICMP storms
The gateway uses iptables to prevent ICMP storms, the default setting will drop packets when more than 2 PING's occur in the same second
Resolution
Resolution to allow more ping sessions Needed to increase how many per-second iptables:
#/etc/init.d/iptables stop # vi etc/init.d/iptables
[0:0] -A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 2/sec -j ACCEPT T o [0:0] -A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 5/sec -j ACCEPT