netdev - orphan sockets

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 08 Jul 2011 18:13:14 +0300
From:	Denys Fedoryshchenko <denys@...p.net.lb>
To:	<netdev@...r.kernel.org>
Subject: orphan sockets

 Hi

 Just after digging orphan sockets problem, that was causing "Address 
 already in use" for bind(),i found that in documentation is mentioned:

 tcp_orphan_retries - INTEGER
         This value influences the timeout of a locally closed TCP 
 connection,
         when RTO retransmissions remain unacknowledged.
         See tcp_retries2 for more details.

         The default value is 7.
         If your machine is a loaded WEB server,
         you should think about lowering this value, such sockets
         may consume significant resources. Cf. tcp_max_orphans.


 But all servers i have, i notice that  tcp_orphan_retries = 0 by 
 default, i check in code, and found that:
         if (retries == 0 && alive)
                 retries = 8;
 is a bit confusing, that tcp_orphan_retries = 0, is in fact = 8, or to 
 be more exact is 8 if socket has rto < RTO_MAX. But nothing like 7 
 mentioned in documentation, i guess it is wrong?. My english too bad to 
 edit that, but maybe someone will take a look :-)


 ---
 System administrator
 Denys Fedoryshchenko
 Virtual ISP S.A.L.

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html