From c4b9bef3c569bd68e298d0c2da74764b33e08ac0 Mon Sep 17 00:00:00 2001
From: Patrik Lundin <patlu@sunet.se>
Date: Tue, 29 Oct 2024 08:29:21 +0100
Subject: [PATCH] Set net.ipv4.vs.sloppy_tcp=1

Needed if taking over packets for a connection that was established via
another node.
---
 .../overlay/etc/puppet/modules/cdn/templates/l4lb/sysctl.erb | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 global/overlay/etc/puppet/modules/cdn/templates/l4lb/sysctl.erb

diff --git a/global/overlay/etc/puppet/modules/cdn/templates/l4lb/sysctl.erb b/global/overlay/etc/puppet/modules/cdn/templates/l4lb/sysctl.erb
new file mode 100644
index 0000000..d6b8ca7
--- /dev/null
+++ b/global/overlay/etc/puppet/modules/cdn/templates/l4lb/sysctl.erb
@@ -0,0 +1,5 @@
+# Allow non-SYN packets to be accepted for a IPVS service.
+# Needed if another l4lb has been taken down and routers are now sending us
+# packets for existing connections that was previously handled by the other
+# node.
+net.ipv4.vs.sloppy_tcp=1