Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Jun 2002 09:58:25 -0700
From:      clark shishido <clark@ruminary.org>
To:        Nguyen-Tuong Long Le <le@cs.unc.edu>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Problem with SYN cache in FreeBSD 4.5
Message-ID:  <20020603095825.A47070@ruminary.org>
In-Reply-To: <Pine.GSO.4.10.10206030156290.20082-100000@capefear.cs.unc.edu>; from le@cs.unc.edu on Mon, Jun 03, 2002 at 01:59:13AM -0400
References:  <Pine.GSO.4.10.10206030156290.20082-100000@capefear.cs.unc.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jun 03, 2002 at 01:59:13AM -0400, Nguyen-Tuong Long Le wrote:
> Hi all,
> 
> Our group has a proprietary web server that can handle 10000 requests/s
> under FreeBSD 4.3 release. We recently upgraded our system to 4.5 and got
> very poor performance. While the web server runs, I see lots of messages
> similar to the following on the console
> "Limiting open port RST response from 1068 to 200 packets per second".
> 
> The problem seems to be related to the syncache implementation
> that drops incoming SYN segments. 

4.5-RELEASE included a new feature, syncookies try turning it off:
net.inet.tcp.syncookies: 0 

you might also need to patch the kernel:
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02%3A20.syncache.asc

--clark

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020603095825.A47070>