Date: Tue, 3 Mar 2015 16:36:18 -0800 From: Rumen Telbizov <telbizov@gmail.com> To: "freebsd-stable@freebsd.org" <freebsd-stable@freebsd.org> Subject: Stale TIME_WAIT tcp connections Message-ID: <CAENR%2B_U2H9Vf1xNjOGEsc0BuLhpTNL0iz81p5qDUxS_kdvfX5w@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Hello everyone,
We have a server running 9.3-RELEASE which is exhibiting a high number of
TIME_WAIT tcp connections which are NOT being recycled. That is, netstat
reports them over and over again, no matter how long we wait for them to be
flushed out. Currently this server has been out of rotation for a couple of
hours and I still see the same tcp sockets there. Overall we have:
# netstat -na | grep TIME_WAIT | wc -l
*30066*
Tracking one particular TCP socket in TIME_WAIT proves that it stays there
all the time.
Another observation is that pfctl shows a very large number of state
entries, even after pfctl -F all, or disable/enable sequence.
# pfctl -si
State Table Total Rate
current entries *59280*
At the same time though:
# pfctl -ss | wc -l
18
After the problem was discovered we tried tweaking the following settings
without any luck:
net.inet.tcp.fast_finwait2_recycle=3D1
net.inet.tcp.finwait2_timeout=3D5000
net.inet.tcp.maxtcptw=3D50000
net.inet.tcp.msl=3D100
=E2=80=8BSo it seems like this system is "stuck" and =E2=80=8Bdoesn't recyc=
le those TCP
sockets. Again, the machine is out of rotation and not actively accepting
any traffic. I will keep it like that in case further investigation is
required. Please do let me know if there's anything else you'd like to know
from the state of the machine or something I could try.
=E2=80=8BRegards,
--=20
Rumen Telbizov
Unix Systems Administrator <http://telbizov.com>;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAENR%2B_U2H9Vf1xNjOGEsc0BuLhpTNL0iz81p5qDUxS_kdvfX5w>