[Bug 276390] security/i2pd you need to disable the net.inet.tcp.delayed_ack option

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 16 Jan 2024 23:57:23 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=276390

            Bug ID: 276390
           Summary: security/i2pd you need to disable the
                    net.inet.tcp.delayed_ack option
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: driesm@freebsd.org
          Reporter: admin@support.od.ua
          Assignee: driesm@freebsd.org
             Flags: maintainer-feedback?(driesm@freebsd.org)

The daemon code for Linux includes:

#ifdef linux
    const int one = 1;
    setsockopt(m_Socket.native_handle(), IPPROTO_TCP, TCP_QUICKACK, &one,
sizeof(one));
#endif

You need to explicitly disable this option in the system:

cat << EOF >> /etc/sysctl.conf
### for i2pd
net.inet.tcp.delayed_ack=0

EOF

-- 
You are receiving this mail because:
You are the assignee for the bug.