From owner-freebsd-net@FreeBSD.ORG Fri Apr 19 09:54:10 2013 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id C42BA31C for ; Fri, 19 Apr 2013 09:54:10 +0000 (UTC) (envelope-from carlopmart@gmail.com) Received: from mail-we0-x22a.google.com (mail-we0-x22a.google.com [IPv6:2a00:1450:400c:c03::22a]) by mx1.freebsd.org (Postfix) with ESMTP id 4C1C4903 for ; Fri, 19 Apr 2013 09:54:10 +0000 (UTC) Received: by mail-we0-f170.google.com with SMTP id z2so3525610wey.1 for ; Fri, 19 Apr 2013 02:54:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type; bh=k98VZfFPlx9w/pd/PuH9WZnpqpR0TXhZkNN4H+DQ1A4=; b=MVLgcuIYotDn+YN2ofodta/zbK9oG4JrYK8T+zNM33j1uiqTdU92Z8CUFBF8HrpeMk /SeSI13Ft082kSXaxB7dfQ3OvNia7uLbCtSutDZ9lz5qp6gGamC/wOg9Vmf/sbRz+F1n UGMWEP1hNYZCOc4QIjb7zHD1AxBerE30Znl6H0Z8xZOOfA6T49qf2aQRUwNIe9gUpBU0 N7jQ5f9xJBJlT2RKaygtCqOavClV6qjsBxCTyk4tpu0rdNl0i9IXjt8XZLZYnJp3Ikpc cjQ5wwnxPOQDKoevMrDElDzdgCINeCHa28XKxnGoLGB74VP21bfH/OlvKudtNKytST8H nbCw== MIME-Version: 1.0 X-Received: by 10.180.91.106 with SMTP id cd10mr23887058wib.6.1366365249438; Fri, 19 Apr 2013 02:54:09 -0700 (PDT) Received: by 10.194.20.227 with HTTP; Fri, 19 Apr 2013 02:54:09 -0700 (PDT) In-Reply-To: References: Date: Fri, 19 Apr 2013 09:54:09 +0000 Message-ID: Subject: Re: Network connections are lost from time to time From: "C. L. Martinez" To: freebsd-net@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Apr 2013 09:54:10 -0000 On Fri, Apr 19, 2013 at 9:22 AM, C. L. Martinez wrote: > > > > On Fri, Apr 19, 2013 at 7:11 AM, C. L. Martinez wrote: > >> Hi all, >> >> I have a strange problem with my FreeBSD 9.1 (fully patched): I loose >> ssh sessions from time to time frequently. >> >> This fbsd box is installed in an ESXi 5.1 server and I have another >> three fbsd 9.1 in the same ESXi host that do not have this problem, but >> maybe the problem is with my sysctl.conf and loader.conf settings: >> >> sysctl.conf >> >> # $FreeBSD: release/9.1.0/etc/sysctl.conf 112200 2003-03-13 18:43:50Z mux >> $ >> # >> # This file is read when going to multi-user and its contents piped thru >> # ``sysctl'' to adjust kernel values. ``man 5 sysctl.conf'' for details. >> # >> >> # Uncomment this to prevent users from seeing information about processes >> that >> # are being run under another UID. >> security.bsd.see_other_uids=0 >> security.bsd.see_other_gids=0 >> >> # Refresh arp table entries in 2 minutes >> net.link.ether.inet.max_age=120 >> >> # Drop tcp/udp packets destined for closed ports >> net.inet.tcp.blackhole=2 >> net.inet.udp.blackhole=1 >> >> # Use the H-TCP congestion control algorithm which is more aggressive >> ##net.inet.tcp.cc.algorithm=htcp >> >> # Host cache is used to cache connection details and metrics >> ##net.inet.tcp.hostcache.expire=5400 >> >> # Maximum segment size (MSS) specifies the largest amount of data in a >> single TCP segment >> net.inet.tcp.mssdflt=1440 >> >> # Make sure time stamps are enabled for slowstart_flightsize >> net.inet.tcp.rfc1323=1 >> >> # Make sure rfc3390 is DISABLED so the slowstart flightsize values are >> used. >> net.inet.tcp.rfc3390=0 >> >> # Size of the TCP transmit and receive buffer. >> net.inet.tcp.sendspace=262144 >> >> # Increase auto-tuning TCP step size of the TCP transmit and receive >> buffers. >> net.inet.tcp.recvbuf_inc=524288 >> >> # Somaxconn is the buffer or backlog queue depth for accepting new TCP >> connections. >> kern.ipc.somaxconn=1024 >> >> # Reduce the amount of SYN/ACKs we will _retransmit_ to an unresponsive >> initial connection. >> net.inet.tcp.syncache.rexmtlimit=1 >> >> # Spoofed packet attacks may be used to overload the kernel route cache. >> net.inet.ip.rtexpire=60 >> net.inet.ip.rtminexpire=2 >> net.inet.ip.rtmaxcache=1024 >> >> loader.conf: >> >> ############################################################## >> ### Loader settings ######################################## >> ############################################################## >> >> autoboot_delay="5" >> beastie_disable="YES" >> >> >> ############################################################## >> ### Kernel tunables ######################################## >> ############################################################## >> >> kern.maxfiles="25000" >> kern.ipc.nmbclusters="32768" >> net.inet.tcp.syncache.hashsize="1024" >> net.inet.tcp.syncache.bucketlimit="100" >> net.inet.tcp.tcbhashsize="4096" >> >> >> ############################################################## >> ### Hardware tunables ###################################### >> ############################################################## >> >> hw.pci.enable_msi="0" >> hw.pci.enable_msix="0" >> >> >> ############################################################## >> ### Networking modules ##################################### >> ############################################################## >> >> cc_htcp_load="YES" >> >> >> ############################################################## >> ### Other modules ########################################## >> ############################################################## >> >> aio_load="YES" >> >> How can I debug where is the problem?? >> > > More info when I try to connect with PuTTY from a windows desktop appears > the following error: > > Network error: Software caused connection abort. > > ... and pf is disabled (ipfw and ipfilter, too). > > More info: I have intermittent failures with sendmail: /var/spool/mqueue (1 request) -----Q-ID----- --Size-- -----Q-Time----- ------------Sender/Recipient----------- r3J9o54G022686 243 Fri Apr 19 09:50 (reply: read error from [10.196.0.100]) susor1@domain.com Total requests: 1 It is really strange ...