From owner-freebsd-net Sun Jun 2 22:59:19 2002 Delivered-To: freebsd-net@freebsd.org Received: from wren.cs.unc.edu (wren.cs.unc.edu [152.2.128.86]) by hub.freebsd.org (Postfix) with ESMTP id 2574A37B405 for ; Sun, 2 Jun 2002 22:59:15 -0700 (PDT) Received: from capefear.cs.unc.edu (capefear.cs.unc.edu [152.2.128.19]) by wren.cs.unc.edu (8.9.3/8.9.3) with ESMTP id BAA28608 for ; Mon, 3 Jun 2002 01:59:13 -0400 (EDT) Date: Mon, 3 Jun 2002 01:59:13 -0400 (EDT) From: Nguyen-Tuong Long Le To: freebsd-net@freebsd.org Subject: Problem with SYN cache in FreeBSD 4.5 Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi all, Our group has a proprietary web server that can handle 10000 requests/s under FreeBSD 4.3 release. We recently upgraded our system to 4.5 and got very poor performance. While the web server runs, I see lots of messages similar to the following on the console "Limiting open port RST response from 1068 to 200 packets per second". The problem seems to be related to the syncache implementation that drops incoming SYN segments. I've tried to increase the size of the hash table but that didn't seem to help much. Here is the output of "sysctl net.inet.tcp.syncache". net.inet.tcp.syncache.bucketlimit: 512 net.inet.tcp.syncache.cachelimit: 262142 net.inet.tcp.syncache.count: 3 net.inet.tcp.syncache.hashsize: 512 net.inet.tcp.syncache.rexmtlimit: 3 (I'm puzzled why SYNs are dropped while the net.inet.tcp.syncache.count is so low). kern.ipc.somaxconn and kern.ipc.nmbclusters are set to 8192 and 65536 respectively. Any help would be very much appreciated! Thanks, -- long P.S. Please kindly cc' your reply to me since I'm not on the list. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message