Date: Mon, 26 Mar 2001 10:06:32 +0300 From: Ruslan Ermilov <ru@FreeBSD.ORG> To: Luigi Rizzo <luigi@info.iet.unipi.it> Cc: ipfw@FreeBSD.ORG Subject: Re: half-close timeout in stateful ipfw Message-ID: <20010326100632.B97610@sunbay.com> In-Reply-To: <200103260613.IAA67110@info.iet.unipi.it>; from luigi@info.iet.unipi.it on Mon, Mar 26, 2001 at 08:13:35AM %2B0200 References: <200103260613.IAA67110@info.iet.unipi.it>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Mar 26, 2001 at 08:13:35AM +0200, Luigi Rizzo wrote: > Hi, > I received a request from an ipfw user to change the timeout for > half-closed connections from dyn_fin_lifetime to something > different, such as dyn_ack_lifetime -- the requestor claims > that there are many cases where a web client aborts the connection > when the (remote) server becomes too slow, and in such cases > the dynamic rule timeout for half-closed connection often > expires before the fin from the other side comes in. > > The request seems reasonable, so if there are no objections I > would like to ask jordan permission to commit this to 4.3 > The right solution would be to use keepalives on the server. We should not abort half-closed TCP connections by themselves, they are pretty valid. % rsh host sort < bigfile is a good example from Stevens. Cheers, -- Ruslan Ermilov Oracle Developer/DBA, ru@sunbay.com Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010326100632.B97610>