Weird "ignoring syn" problem

John-Mark Gurney gurney_j at
Tue Jun 12 21:20:03 UTC 2007

Bill Moran wrote this message on Tue, Jun 12, 2007 at 13:13 -0400:
> >   b) you may run out of socket on the client side and reuse them
> >      too fast.  Try to lower net.inet.ip.portrange.first to 30,000
> >      or so.
> I find that unlikely.  The problem usually occurs reliably after less
> than 200 connections, and frequently after less than 50.

I've found that durning load testing, that I regularly run into the
icmp limit limiting the rst's sent to completely close connections to
web servers...  200 is the default limit per second...   Increasing
net.inet.icmp.icmplim would change this..  Note that even though it says
icmp, it limits TCP RST's...

  John-Mark Gurney				Voice: +1 415 225 5579

     "All that I will do, has been done, All that I have, has not."

More information about the freebsd-net mailing list