diff --git a/global/overlay/etc/puppet/modules/cdn/templates/l4lb/sysctl.erb b/global/overlay/etc/puppet/modules/cdn/templates/l4lb/sysctl.erb
new file mode 100644
index 0000000..d6b8ca7
--- /dev/null
+++ b/global/overlay/etc/puppet/modules/cdn/templates/l4lb/sysctl.erb
@@ -0,0 +1,5 @@
+# Allow non-SYN packets to be accepted for a IPVS service.
+# Needed if another l4lb has been taken down and routers are now sending us
+# packets for existing connections that was previously handled by the other
+# node.
+net.ipv4.vs.sloppy_tcp=1