{"id":1730,"date":"2010-06-24T21:23:16","date_gmt":"2010-06-24T15:53:16","guid":{"rendered":"http:\/\/www.jeffrin.in\/?p=1730"},"modified":"2010-06-24T21:23:16","modified_gmt":"2010-06-24T15:53:16","slug":"timewait-sockets-held-tw_bucket","status":"publish","type":"post","link":"https:\/\/www.trueangle.org\/index.php\/2010\/06\/24\/timewait-sockets-held-tw_bucket\/","title":{"rendered":"timewait sockets held&#8230;tw_bucket"},"content":{"rendered":"<pre>\n$cat \/proc\/sys\/net\/ipv4\/tcp_max_tw_buckets\n180000\n$\n<\/pre>\n<pre>\ntcp_max_tw_buckets\n\nMaximal number of timewait sockets held by system simultaneously.\nIf this number is exceeded time-wait socket is immediately destroyed\nand warning is printed. This limit exists only to prevent simple DoS\nattacks, you _must_ not lower the limit artificially, but rather increase\n it (probably, after increasing installed memory), if network conditions\n require more than default value.\n\nsource :\n\nLinux kernel Documentation .\n\n\n<\/pre>\n<pre>\ncifs-1.13\/fs\/cifs\/file.s\n\n 65032:\n.LC2776:\n65033:         .string \"NET_TCP_MAX_TW_BUCKETS\"\n65034: .LC4101:\n\nde.samba.org\/samba\/ftp\/cifs-cvs\/cifs-1.13-2.6-bad.tar.gz - Unknown - Assembly - More from cifs-1.13-2.6-bad.tar.gz \u00bb\n<\/pre>\n<pre>\n\"Firewall performance measurement\"\n\n--- a selection follows.\n\nSize of available TCP port range:\nWhen connecting to the same server on the same port, there are\n64,512 non-privileged ports available on the client side as source\n ports. According to RFC793[5], a port cannot be reused until the\n TCP_TIME_WAIT state expires. The recommended timeout value in\n the RFC is 4 minutes, which would mean 268 new request per\n second at the maximum. In the Linux kernel the timeout value of\nthe TCP_TIME_WAIT state is around 1 minute, which means a\nmaximum of 1075 new request per second.\n\nsource :\nNetfilter Performance Testing\nJ\u00f3zsef Kadlecsik\nKFKI RMKI\nkadlec@sunserv.kfki.hu\nGy\u00f6rgy P\u00e1sztor\nSZTE EK\npasztor@linux.gyakg.u-szeged.hu\n\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>$cat \/proc\/sys\/net\/ipv4\/tcp_max_tw_buckets 180000 $ tcp_max_tw_buckets Maximal number of timewait sockets held by system simultaneously. If this number is exceeded time-wait socket is immediately destroyed and warning is printed. This limit exists only to prevent simple DoS attacks, you _must_ not lower the limit artificially, but rather increase it (probably, after increasing installed memory), if network &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.trueangle.org\/index.php\/2010\/06\/24\/timewait-sockets-held-tw_bucket\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;timewait sockets held&#8230;tw_bucket&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[502,1035,1460,1579],"_links":{"self":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts\/1730"}],"collection":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/comments?post=1730"}],"version-history":[{"count":0,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts\/1730\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/media?parent=1730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/categories?post=1730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/tags?post=1730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}