Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 May 2008 05:35:56 -0400
From:      Robert Blayzor <rblayzor.bulk@inoc.net>
To:        David Malone <dwmalone@maths.tcd.ie>
Cc:        freebsd-stable@freebsd.org
Subject:   Re: Sockets stuck in FIN_WAIT_1
Message-ID:  <A1459A8E-3615-4C26-A622-AE068B638373@inoc.net>
In-Reply-To: <20080530084724.GA37672@walton.maths.tcd.ie>
References:  <483EA513.4070409@earthlink.net> <96AFE8D3-7EAC-4A4A-8EFF-35A5DCEC6426@inoc.net> <483EAED1.2050404@FreeBSD.org> <200805291912.m4TJCG56025525@apollo.backplane.com> <14DA211A-A9C5-483A-8CB9-886E5B19A840@inoc.net> <200805291930.m4TJUeGX025815@apollo.backplane.com> <0C827F66-09CE-476D-86E9-146AB255926B@inoc.net> <200805292132.m4TLWhCv026720@apollo.backplane.com> <CCBAEE3E-35A5-4BF8-A0B7-321272533B62@inoc.net> <20080530081143.GI1028@server.vk2pj.dyndns.org> <20080530084724.GA37672@walton.maths.tcd.ie>

next in thread | previous in thread | raw e-mail | index | archive | help
On May 30, 2008, at 4:47 AM, David Malone wrote:
> There has been some talk about this sort of problem on the IETF TCP
> Maintainers list. I don't think any good conclusion was reached -
> whatever the solution was certainly needs to be tunable per-socket
> because this behaviour is perfectly valid in some situations but a
> bit of a pain in others.



A timeout value would be fine.  Obviously if the client keeps sending  
back packets with a 0 size, there should be some option or work around  
to tell the stack to drop the connection.  There than to have the  
server lock up resources on a "dead connection".  Unfortunately we're  
talking about the internet here, we can't insure that every one of the  
clients connecting to our servers behaves correctly! ;-)

On a side note, I could easily fix this problem by frontending the  
server with a Cisco PIX or ASA.  I believe they have "half closed"  
timers just for this purpose... Perhaps a kernel tunable knob would be  
a nice option/fix/hack also.

-- 
Robert Blayzor, BOFH
INOC, LLC
rblayzor@inoc.net
http://www.inoc.net/~rblayzor/






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?A1459A8E-3615-4C26-A622-AE068B638373>