high Traffic setup problem, module status don't deliver data

[Valentin V. Bartenev]

On Monday 10 February 2014 17:41:47 Aleksandar Lazic wrote:
> Hi Jonathan.
> 
> Sorry to be unclear, thanks for answer and question.
> 
> Am 10-02-2014 16:37, schrieb Jonathan Matthews:
> > On 10 February 2014 12:06, Aleksandar Lazic <al-nginx at none.at> wrote:
> >> Thanks for help.
> > 
> > Aleksandar - I can't work out what you need help with. There aren't
> > any questions (or question marks!) in your email :-)
> > 
> > I can't see your problem at first or second glance; I'm sure others
> > will, but I'm quite slow. Could you spell the problem out (what you
> > observe; what you expect to observe; what's changed; how you're
> > testing)?
> 
> I run nginx on the described HW & OS.
> 
> I use
> 
> https://github.com/munin-monitoring/contrib/blob/master/plugins/nginx/nginx-combined
> 
> to get the statistics from stub_status_module.
> 
> The call from nginx-combined_<IP-ALIAS> runs on the same machine as the 
> nginx server.
> 
> Due to this fact we have no external network traffic, just an ip alias 
> call on eth2.
> 
> Every time when I have more then ~400 r/s we get no data from the 
> status-request, this request rate means ~20k Packets/Second.
> I use netfilter with fail2ban, but not the connection tracking module!

Do you see the issue without fail2ban?

> 
> I have now seen on the tcpdump that I get a 'RST' Package quite 
> immediately after a request when the 'no answer from server' cames.
> 
> I think this could be a kernel-network issue not a nginx issue.
> 
> The question is:
> Please can you help me to find the reason for the immediately  'RST' 
> answer.
> 
> I hope my question is more clear now.
> 
> Thanks for reading and patience.
> 

You haven't shown your server level configuration.
Do you use deferred accept?

  wbr, Valentin V. Bartenev