search for: somaxconn

Hello. We have a webserver using FreeBSD, we read about tunning kern.ipc.somaxconn (http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-kernel-limits.html) so the OS can handle all the connections. Is there a way to know how many connections are established in a certain moment?. I know about netstat(1) but is there any other command that we can use to know the...

...ibc/klibc.git;a=commit;h=5576c967f86387f8a2eeeaa58d67f3cc6b51853a Author: maximilian attems <max at stro.at> AuthorDate: Tue, 22 May 2012 17:25:46 +0200 Committer: maximilian attems <max at stro.at> CommitDate: Tue, 22 May 2012 17:30:09 +0200 [klibc] include: [sys/socket.h] define SOMAXCONN It is part of POSIX, noticed while trying to build util-linux stuff. Signed-off-by: maximilian attems <max at stro.at> --- usr/include/sys/socket.h | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/usr/include/sys/socket.h b/usr/include/sys/socket.h index 38cfef6....

...sue concurrent ssh requests to the server. Looking at sshd.c, I noticed that the daemon's listen socket is created with a very short backlog value (5), and we are certain that this is the cause of our problem. Is there a reason for using such a small value, as opposed to setting the backlog to SOMAXCONN? We need to scale our application to clusters with thousands of nodes and we are trying to determine whether openssh would permit us to achieve these scaling requirements. If the increase of sshd's backlog has no negative implications, we would like to see this value increased to SOMAXCONN. I...

...ible SYN flooding on port 3306. Sending cookies. possible SYN flooding on port 3306. Sending cookies. possible SYN flooding on port 3306. Sending cookies. possible SYN flooding on port 3306. Sending cookies. I adapted already following: # sysctl -a |grep -E 'maxconn|syn_backlog' net.core.somaxconn = 2048 net.ipv4.tcp_max_syn_backlog = 2048 but ListenOverflows and ListenDrops values are still high # cat /proc/net/netstat | awk '{print $21 "-" $22 }' ListenOverflows-ListenDrops 13568-13568 any suggestion? -- Thanks, LF

...getprotobyname('tcp'); socket(SERVER, PF_INET, SOCK_STREAM, $proto) or die "socket: $!"; setsockopt(SERVER, SOL_SOCKET, SO_REUSEADDR, 1) or die "setsock: $!"; my $paddr = sockaddr_in($port, INADDR_ANY); bind(SERVER, $paddr) or die "bind: $!"; listen(SERVER, SOMAXCONN) or die "listen: $!"; print "SERVER started on port $port "; my $client_addr; while ($client_addr = accept(CLIENT, SERVER)) { my ($client_port, $client_ip) = sockaddr_in($client_addr); my $client_ipnum = inet_ntoa($client_ip); my $client_host = gethostbyaddr($client_ip, AF_INET...

...imit = $default_client_limit > process_min_avail = 4 > process_limit = $default_process_limit > vsz_limit = 1G > } > > limits.conf > ------------------------- > * soft nofile 4096 > * hard nofile 4096 > ------------------------- > > cat /proc/sys/net/core/somaxconn > ------------------------- > 4096 > ------------------------- > > Is there any other tuning point? > Where should I look? https://wiki.dovecot.org/SocketUnavailable Aki

Hello Icecast-dev, I am new to this list. I am working for the NPO, the Dutch Public Broadcasting agency. We do a lot of icecast streaming. We run at least 20 icecast server instances on our media streaming cluster. We ran into an issue that clients which where connecting to our streams seemed to be 'hanging' on the connection setup frequently. The client 'thinks' it is

...4 > > process_limit = $default_process_limit > > vsz_limit = 1G > > } > > > > limits.conf > > ------------------------- > > * soft nofile 4096 > > * hard nofile 4096 > > ------------------------- > > > > cat /proc/sys/net/core/somaxconn > > ------------------------- > > 4096 > > ------------------------- > > > > Is there any other tuning point? > > Where should I look? > > https://wiki.dovecot.org/SocketUnavailable > > Aki

...isten queue overflow: 16 already in queue awaiting acceptance (28 occurrences) After that I have used tcpdump for recording ldap-traffic and have seen that after TCP handshaking, server some times suddenly send TCP-RST to close connection. I have enlarged DCs resources (CPU and RAM), kern.ipc.somaxconn, did some other system tuning but all that didn't help. Load average on DCs permanently near 0.9-1.0 and samba cannot serve all ldap conncetions. ldap clients works well because they use as minimum as two domain controllers as ldap servers. Is there a some performance problem in samba4, slo...

...n port 3306. Sending cookies. >> possible SYN flooding on port 3306. Sending cookies. >> possible SYN flooding on port 3306. Sending cookies. >> >> >> I adapted already following: >> >> # sysctl -a |grep -E 'maxconn|syn_backlog' >> net.core.somaxconn = 2048 >> net.ipv4.tcp_max_syn_backlog = 2048 >> >> >> but ListenOverflows and ListenDrops values are still high >> >> # cat /proc/net/netstat | awk '{print $21 "-" $22 }' >> ListenOverflows-ListenDrops >> 13568-13568 >> &g...

...768 kern.ipc.nmbufs=131072 kern.ipc.nsfbufs=6656 kern.ipc.shm_use_phys=1 kern.maxfiles=32768 kern.maxproc=8192 kern.maxswzone=33554432 kern.nbuf=16384 kern.ncallout=32768 kern.vm.kmem.size=268435456 kern.vm.pmap.shpgperproc=2048 net.inet.tcp.tcbhashsize=16384 Contents of /etc/sysctl.conf: kern.ip.somaxconn=4096 vm.v_free_min=131072 vm.v_free_target=262144 vm.f_free_reserved=32768 vm.v_free_severe=65536 kern.ps_showallprocs=0 Some info from kernel config: maxusers 0 options KVA_PAGES=512 options NSWAPDEV=1 (the rest is pretty much my hardware, firewall and other irrelevant stuff) This has been copi...

...but it could also be placed in the EGD version of get_random_bytes(). For some reason, with prngd I am getting SIGPIPE even though the prngd processes is not dying. get_random_bytes() also needs to check for EPIPE and reconnect to the daemon if it gets that. 2) If there are currently SOMAXCONN connections to the entropy daemon, further ones will return ECONNREFUSED. It seems like some kind of connect || sleep loop is needed here. I used usleep() which not all OSes support. I've included the usleep.c from OpenBSD which uses nanosleep() but since not every OS has that...

Hi, We've been running tinc for a while now but, have started hitting a bottleneck where the number of packets/sec able to be processed by our Tinc nodes is maxing out around 4,000 packets/sec. Right now, we are using the default cipher and digest settings (so, blowfish and sha1). I've been testing using aes-256-cbc for the cipher and seeing ~5% increases across the board. Each Tinc node

...lman/listinfo/icecast-dev > -- Met vriendelijke groet, Stephan Leemburg, internetbeheerder NPO ICT Internet Services Bart de Graaffweg 2, 1217 ZL Hilversum servicedesk at omroep.nl, 035-6773555 -------------- next part -------------- A non-text attachment was scrubbed... Name: icecast-2.4.1-somaxconn.patch Type: text/x-patch Size: 4507 bytes Desc: not available Url : http://lists.xiph.org/pipermail/icecast-dev/attachments/20150219/0a602615/attachment-0003.bin -------------- next part -------------- A non-text attachment was scrubbed... Name: icecast-2.5-somaxconn.patch Type: text/x-patch Size:...

...(tcpsock != -1 && tcpconf != NULL) { - bindresvport(tcpsock, NULL); + if (svcport != 0) { + r = bindresvport(tcpsock, &sin); + if (r != 0) { + syslog(LOG_ERR, "bindresvport: %m"); + exit(1); + } + } else + (void)bindresvport(tcpsock, NULL); listen(tcpsock, SOMAXCONN); tcptransp = svc_vc_create(tcpsock, RPC_MAXDATASIZE, RPC_MAXDATASIZE); if (tcptransp != NULL) { @@ -432,7 +469,15 @@ } if (have_v6 && udp6sock != -1 && udp6conf != NULL) { - bindresvport(udp6sock, NULL); + if (svcport != 0) { + r = bindresvport_sa(udp6sock, +...

..._ID (hard to do calculate ip frekv. number) > options DUMMYNET (e.g. 40% for web, 30% for mail and so on) > options DEVICE_POLLING (can't do this short and not with SMP) > options HZ=1000 (can't do this short and not with SMP) > > Sysctl; > kern.ipc.somaxconn=1024 #this is set high! > kern.ipc.nmbclusters=65536 #this is set high! > kern.polling.enable=1 #remember kernel options > kern.polling.user_frac=50>90 #remember kernel options > net.xorp.polling=1 > net.xorp.poll_burst=10 > net.xorp.poll_in_trap=3 > (if you...

...okies. > possible SYN flooding on port 3306. Sending cookies. > possible SYN flooding on port 3306. Sending cookies. > possible SYN flooding on port 3306. Sending cookies. > > > I adapted already following: > > # sysctl -a |grep -E 'maxconn|syn_backlog' > net.core.somaxconn = 2048 > net.ipv4.tcp_max_syn_backlog = 2048 > > > but ListenOverflows and ListenDrops values are still high > > # cat /proc/net/netstat | awk '{print $21 "-" $22 }' > ListenOverflows-ListenDrops > 13568-13568 > > any suggestion? Use tools like tc...

...an error. service imap-login { service_count=0 client_limit = $default_client_limit process_min_avail = 4 process_limit = $default_process_limit vsz_limit = 1G } limits.conf ------------------------- * soft nofile 4096 * hard nofile 4096 ------------------------- cat /proc/sys/net/core/somaxconn ------------------------- 4096 ------------------------- Is there any other tuning point? Where should I look?

...mit > > > vsz_limit = 1G > > > } > > > > > > limits.conf > > > ------------------------- > > > * soft nofile 4096 > > > * hard nofile 4096 > > > ------------------------- > > > > > > cat /proc/sys/net/core/somaxconn > > > ------------------------- > > > 4096 > > > ------------------------- > > > > > > Is there any other tuning point? > > > Where should I look? > > > > https://wiki.dovecot.org/SocketUnavailable > > > > Aki

...ver is seriously misconfigured." *A potential fix* - increase the net.ipv4.tcp_max_syn_backlog kernel parameter. Or tune some more parameters like tcp_synack_retries and netdev_max_backlog *My question *- to fix this SYN flooding problem should I modify net.ipv4.tcp_max_syn_backlog, net.core.somaxconn and the backlog size passed to the listen() syscall or might there be an alternative easier fix such as installing 2.3.3-kh9<https://github.com/karlheyes/icecast-kh/archive/icecast-2.3.3-kh9.tar.gz> ? Potentially relevant information: [root at VM ~]# icecast -v Icecast 2.3.3 [root at HN ~]...