# 连接跟踪模块导致的网络不可用

11点左右开始把业务的流量切到这台机器上，没多久业务反馈服务不可访问，紧急把流量切回到原服务，留下新机器备查。

## 解决办法

### 禁用连接跟踪

• The most obvious case is if your server handles an extremely high number of simultaneously active connections. For example, if your conntrack table is configured to be 128k entries but you have >128k simultaneous connections, you’ll definitely hit issues!
• The slightly less obvious case is if your server handles an extremely high number of connections per second. Even if the connections are short-lived, connections continue to be tracked by Linux for a short timeout period (120s by default). For example, if your conntrack table is configured to be 128k entries, and you are trying to handle 1,100 connections per second, that’s going to exceed the conntrack table size even if the connections are very short-lived (128k / 120s = 1092 connections/s).