Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Feb 2011 16:56:20 -0800
From:      Prabhu Hariharan <prabhuh@gmail.com>
To:        Julian Elischer <julian@freebsd.org>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Connections not purged on address deletion
Message-ID:  <AANLkTik7CZ=jum76CWOmbbWhJ_3PGj7PqHeXFSZYfepv@mail.gmail.com>
In-Reply-To: <4D4C9D10.4040308@freebsd.org>
References:  <AANLkTimKvMUrT-yh6aRnvdeex0V0dNepc6yz0HvyQMe-@mail.gmail.com> <4D4C9D10.4040308@freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Thanks for the reply.  I think, atleast system should have some
option/sysctl (without individual firewall rules) to enable the purging of
connections which are simply dormant when address get removed (not intended
to move address to other interface).


On Fri, Feb 4, 2011 at 4:42 PM, Julian Elischer <julian@freebsd.org> wrote:

> On 2/4/11 4:03 PM, Prabhu Hariharan wrote:
>
>> Hi,
>>
>> When I delete an IP-address from an interface, the TCP (and other)
>> connections using that local IP-address are not getting purged.  The
>> telnet
>> or ssh sessions on the other end just get hung, as FreeBSD
>> address-deletion
>> doesn't handle this situation and fails to call pfctlinput() to notify
>> protocols on this event.  The TCP connections simply linger in the system
>> and takes it due course on TCP timers to free those inpcbs.
>>
>> tcp4       0      0 30.30.30.31.22         30.30.30.30.58796
>>  ESTABLISHED
>>
>> Is this by design?  Or any significance on relying on applications
>> intelligently to do timeouts, without a notification from network layer?
>>
>
> theoretically if you move the address to another interface it should start
> working again assuming the routing is correct.
> It's mostly by design.   If you want to get rid of them you might try to
> add a firewall rule to send them resets.
> I don't know what other systems do.
>
>  Thanks,
>> Prabhu H
>> _______________________________________________
>> freebsd-net@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>>
>>
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTik7CZ=jum76CWOmbbWhJ_3PGj7PqHeXFSZYfepv>