Conexões através de firewall / ipconntrack

2

Eu fiz algumas perguntas aqui e recebi algumas boas respostas. Ainda estou enfrentando alguns problemas com ipconntrac e conexões através de firewall.

link

Estou a olhar para algumas orientações e passos que devo seguir na máquina de 64 bits do Ubuntu 10.10 que irá garantir que os problemas com ipconntrack e time_wait sejam reduzidos e o servidor comece a funcionar melhor e mais fiável.

    
por Sparsh Gupta 15.02.2011 / 09:33

1 resposta

0

Em / proc / sys / net / ipv4 existem arquivos

tcp_fin_timeout :

The tcp_fin_timeout variable tells kernel how long to keep sockets in the state FIN-WAIT-2 if you were the one closing the socket. This is used if the other peer is broken for some reason and don't close its side, or the other peer may even crash unexpectedly. Each socket left in memory takes approximately 1.5Kb of memory, and hence this may eat a lot of memory if you have a moderate webserver or something alike.

This value takes an integer value which is per default set to 60 seconds. 

tcp_keepalive_time :

The tcp_keepalive_time variable tells the TCP/IP stack how often to send TCP keepalive packets to keep an connection alive if it is currently unused. This value is only used when keepalive is enabled.

tcp_max_orphans :

The tcp_max_orphans variable tells the kernel how many TCP sockets that are not attached to any user file handle to maintain. In case this number is exceeded, orphaned connections are immediately reset and a warning is printed.

Todas as citações copiadas de aqui . Veja também este .

    
por 15.02.2011 / 14:00