net.inet.ip.portrange.randomized=1 hurts

Kris Kennaway kris at obsecurity.org
Tue Jun 1 17:15:14 PDT 2004


On Tue, Jun 01, 2004 at 07:03:27PM -0500, Mike Silbersack wrote:
> 
> On Tue, 1 Jun 2004, Kris Kennaway wrote:
> 
> > On Tue, Jun 01, 2004 at 12:05:35PM -0500, Mike Silbersack wrote:
> > > Sounds like something that should be dealt with on the server's end.  Some
> > > of the changes we've made in 5.x might fix the problem, but I don't think
> > > anyone has looked into that specific case.
> >
> > Is this also the cause of the mysql server connection failures
> > reported on freebsd-stable@?
> >
> > Kris
> 
> Yes, it is possible that random ephemeral port allocation could cause the
> MySQL problems, if the connection rate is extremely high.  If it's
> happening, it would show up in the form of sockets stuck in the SYN_SENT
> state.  If one of the people reporting problems can verify it, I could
> backport the changes I made to handle this edgecase in 5.x.

I suggest posting to stable@

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20040601/19bb1ce4/attachment.bin


More information about the freebsd-net mailing list