use kill_tcp_connections() to kill off all tcp connections to the

"single public ip" address when we do a recovery

(This used to be ctdb commit 19b52a2d5db31efa9e7c77037097ff8539986ac3)

diff --git a/ctdb/config/events.d/90.ipmux b/ctdb/config/events.d/90.ipmux
index 6b3a436aac6671bd6c927bcca47e27ab4ab47490..69b3c89f00e8b1cfa5aa63a7a048a46c3793ca6e 100755 (executable)
--- a/ctdb/config/events.d/90.ipmux
+++ b/ctdb/config/events.d/90.ipmux
@@ -37,6 +37,12 @@ case $cmd in
        # kill off any ipmux processes
        killall -9 ctdb_ipmux >/dev/null 2>/dev/null
 
+       # kill off any tcp connections
+       /sbin/iptables -D INPUT -i $CTDB_PUBLIC_INTERFACE -d $CTDB_SINGLE_PUBLIC_IP -j DROP 2> /dev/null
+       /sbin/iptables -I INPUT -i $CTDB_PUBLIC_INTERFACE -d $CTDB_SINGLE_PUBLIC_IP -j DROP
+       kill_tcp_connections $CTDB_SINGLE_PUBLIC_IP
+       /sbin/iptables -D INPUT -i $CTDB_PUBLIC_INTERFACE -d $CTDB_SINGLE_PUBLIC_IP -j DROP 2> /dev/null
+
        # are we the recmaster ? 
        ctdb isnotrecmaster >/dev/null 2>/dev/null || {
            # change the ip address to have scope host so we wont respond