CSS intermittenlty returning ACK from destination IP not VIP

[ian.matthews]

I have evidence in a trace where we are seeing resets initiated by hosts which are trying to establish a TCP connection with services behind a VIP. Under normal circumstances the TCP SYN and SYN ACK's will be to and from the VIP, however occationally the SYN ACK's are seen from the desination host (service address) which results in a TCP reset from the initiating host.

ian.matthews@argos.co.uk

[Gilles Dufour]

so you're seeing syn/ack unnated.

Can we see the config and the trace ?

Without that it is difficult to find the cause.

Does it happen with any source ?

Is it always happening with the same sources ?

Is an affected source always showing the problem or just sometimes ?

Gilles.