lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <6fa7e62e85e1e2fd069aa9cbf307737a@visp.net.lb>
Date:	Fri, 08 Jul 2011 18:13:14 +0300
From:	Denys Fedoryshchenko <denys@...p.net.lb>
To:	<netdev@...r.kernel.org>
Subject: orphan sockets

 Hi

 Just after digging orphan sockets problem, that was causing "Address 
 already in use" for bind(),i found that in documentation is mentioned:

 tcp_orphan_retries - INTEGER
         This value influences the timeout of a locally closed TCP 
 connection,
         when RTO retransmissions remain unacknowledged.
         See tcp_retries2 for more details.

         The default value is 7.
         If your machine is a loaded WEB server,
         you should think about lowering this value, such sockets
         may consume significant resources. Cf. tcp_max_orphans.


 But all servers i have, i notice that  tcp_orphan_retries = 0 by 
 default, i check in code, and found that:
         if (retries == 0 && alive)
                 retries = 8;
 is a bit confusing, that tcp_orphan_retries = 0, is in fact = 8, or to 
 be more exact is 8 if socket has rto < RTO_MAX. But nothing like 7 
 mentioned in documentation, i guess it is wrong?. My english too bad to 
 edit that, but maybe someone will take a look :-)


 ---
 System administrator
 Denys Fedoryshchenko
 Virtual ISP S.A.L.

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ