From: Patrick McHardy <kaber@trash.net>
To: Herbert Xu <herbert@gondor.apana.org.au>
Cc: Netfilter Developer Mailing List
<netfilter-devel@vger.kernel.org>,
Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Subject: Re: TCP connection tracking timeout
Date: Tue, 29 Jul 2008 08:13:05 +0200 [thread overview]
Message-ID: <488EB4F1.60806@trash.net> (raw)
In-Reply-To: <20080729060105.GA16797@gondor.apana.org.au>
Herbert Xu wrote:
> On Tue, Jul 29, 2008 at 07:00:46AM +0200, Patrick McHardy wrote:
>>> That sounds like a pretty neat idea. I'm testing a patch now, I'll
>>> send it over in a few minutes if it survives :)
>>>
>
> Awesome! I'll try this out on my router.
>
>
>> This seems to work. I'm wondering however if this will really help.
>> We already track retransmissions and decrease the timeout on the
>> 3rd retransmission, so this should only help if both the sender and
>> the receiver went down.
>>
>
> The problem with requiring a 3rd retransmit is that once a socket
> is orphaned (closed) on Linux, we fast-track the retransmit timeout
> process. In particular, if it's already maxed out the RTO prior
> to closing, we'll kill it straight away.
>
> This is in violation of the RFCs but it's an important optimisation.
Thanks for this explanation. Unless Jozsef sees something wrong with this
patch, I'll queue it with a proper changelog. Its small enough, so perhaps
we can even put this in 2.6.27.
next prev parent reply other threads:[~2008-07-29 6:13 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20080729030104.GA15915@gondor.apana.org.au>
2008-07-29 4:47 ` TCP connection tracking timeout Patrick McHardy
2008-07-29 5:00 ` Patrick McHardy
2008-07-29 6:01 ` Herbert Xu
2008-07-29 6:13 ` Patrick McHardy [this message]
2008-07-29 9:07 ` Herbert Xu
2008-07-29 9:30 ` Herbert Xu
2008-07-29 12:30 ` Jozsef Kadlecsik
2008-07-29 13:34 ` Herbert Xu
2008-07-29 20:34 ` Jozsef Kadlecsik
2008-07-30 1:35 ` Herbert Xu
2008-07-30 21:18 ` Jozsef Kadlecsik
2008-07-31 12:19 ` Herbert Xu
2008-07-31 19:26 ` Jozsef Kadlecsik
2008-08-01 11:58 ` Herbert Xu
2008-07-29 12:20 ` Jozsef Kadlecsik
2008-07-30 10:07 ` Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=488EB4F1.60806@trash.net \
--to=kaber@trash.net \
--cc=herbert@gondor.apana.org.au \
--cc=kadlec@blackhole.kfki.hu \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.