TCP time_wait and port exhaustion for servers

[cyril at bouthors.org (Cyril Bouthors)]

On  5 Dec 2012, rps at maine.edu wrote:

> Where there is no way to change this though /proc

10:17PM lenovo:~% sudo sysctl -a |grep wait
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120
10:17PM lenovo:~% 

?

We use this to work around the default limit on our internal load balancers.

HIH.
-- 
Cyril Bouthors - Administration Syst?me, Infog?rance
ISVTEC SARL, 14 avenue de l'Op?ra, 75001 Paris
1 rue ?mile Zola, 69002 Lyon
T?l : 01 84 16 16 17 - Fax : 01 77 72 57 24
Ligne directe : 0x7B9EE3B0E