Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Good day,

Few days ago I've installed new server on Ubuntu 12.04 and migrated all my data and services to it from an old one (pretty outdated 2011 year server). There are many different services installed on it: nginx, mysql, memcached, varnish, etc.

Now I have an issue with network connections: limited amount of connections works normally but other would not, they just time out. Such requests are not visible in web server's access log at all. Moreover, some outgoing requests with cURL are not working too, they time out at 30 second. Sometimes I cannot connect to the server -- SSH connections timeout sometimes too! Pinging google:

--- google.com ping statistics ---
33 packets transmitted, 0 received, 100% packet loss, time 32017ms

I have not updated or installed any additional firewall nor changed system network config options.

You can easily reproduce the problem by accessing any page (ex: http://en.advisor.travel/poi/Wroclaw_Palace-15356) and quickly refreshing the page multiple times. You'll end with "Server is not available" browser error.

It almost seems that the server has some weird network connections limit or rules to block quick connections succession from one IP but I cannot find any useful setting :/ Nothing interesting can be found in syslog or dmseg.

/etc/sysctl.conf has everything commented out but default lines:

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1

Default firewall ufw is stopped.

Any ideas what's happening and what to do are much appreciated!

share|improve this question
    
Have you contacted your ISP? –  mdpc May 21 at 19:55
    
@mdpc Yes but as Serverloft's "24/7" Support usually replies in 3-4 hours I thought I could give it a try with Severfault :) Still waiting for support's reply. –  WASD42 May 21 at 19:59
    
Just aside: To disable IPv6 is not the default at all. Someone put that there for some (probably bad) reason. –  Michael Hampton May 21 at 20:01
    
As this looks like an ISP issue, we probably cannot help. Of note, posting to a general website in general is not necessarily a place to get support for urgent problem resolutions. –  mdpc May 21 at 20:02
    
@mdpc This is a general question about Ubuntu and network connections (limits?) and as there any really many professional network admins here it is more then possible that someone had fought such issue already :) –  WASD42 May 21 at 20:58

1 Answer 1

up vote 1 down vote accepted

When I make connections to the server I find that some client port numbers work and other port numbers fail. It is the same port numbers that work every time, but since normal clients will be using a new port number every time, it will appear random.

This behavior could be a symptom of a broken bundle of network links. You want traffic to be load balanced over the links in a bundle, but you don't want packets in a TCP connection to overtake each other on the network, so each TCP connection should remain on the same link in the bundle.

That is why a broken link in a bundle cause some port numbers to work and other port numbers to fail.

traceroute shows that SYN packets are reliably send from my computer all the way to the last hop before the server. But I cannot reliably get a SYN-ACK back. That means the problem is either on the last hop from the last router to the server, or it is somewhere on the return path.

From the server you can run traceroute -n -p 80 name-of-another-server to see how far SYN packets from the server can be send reliably.

share|improve this answer
    
Thanks for the reply! I'll try to do it as soon as I'll manage to connect to server via SSH again :D –  WASD42 May 21 at 21:19
1  
Try ssh -o ProxyCommand="nc -p 61000 %h %p" en.advisor.travel and vary the local port number until you find one that works reliably. –  kasperd May 21 at 21:25
    
Thanks to you I was able to SSH-connect eventually but just to find out that I don't have traceroute installed yet and not able to download it :/ At least now I know that it is not possible to connect to ISP's Ubuntu repository too (ubuntu.mirror.serverloft.eu (85.25.128.62))... –  WASD42 May 21 at 21:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.