From owner-freebsd-stable@FreeBSD.ORG Fri Mar 7 10:10:06 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 974141065671 for ; Fri, 7 Mar 2008 10:10:06 +0000 (UTC) (envelope-from dwmalone@maths.tcd.ie) Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [IPv6:2001:770:10:300::86e2:510b]) by mx1.freebsd.org (Postfix) with SMTP id EBE858FC2A for ; Fri, 7 Mar 2008 10:10:05 +0000 (UTC) (envelope-from dwmalone@maths.tcd.ie) Received: from walton.maths.tcd.ie ([134.226.81.10] helo=walton.maths.tcd.ie) by salmon.maths.tcd.ie with SMTP id ; 7 Mar 2008 10:10:04 +0000 (GMT) Date: Fri, 7 Mar 2008 10:10:02 +0000 From: David Malone To: Uwe Doering Message-ID: <20080307101002.GA99525@walton.maths.tcd.ie> References: <47D006F7.1030607@scottevil.com> <47D063FF.7000409@geminix.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <47D063FF.7000409@geminix.org> User-Agent: Mutt/1.5.6i Sender: dwmalone@maths.tcd.ie Cc: Scott Oertel , FreeBSD Mailing List Subject: Re: accf_http and incqlen X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Mar 2008 10:10:06 -0000 On Thu, Mar 06, 2008 at 10:37:03PM +0100, Uwe Doering wrote: > Last time I looked (in FreeBSD 4.x) these were connections that got > stuck in an early stage, that is, before the HTTP request had been > received. The 'accf_http' filter which wants to parse said request > waits forever in this situation because there is no timeout implemented, > as far as I recall. So these would-be HTTP connections pile up over time. The accf_http should flush out the oldest of these connections once there are more than a certain number of them. I think that the number permitted depeneds on the backlog parameter passed to listen. I checked that this worked recently, and it seemed to do the right thing on 7.X and 4.X. I'd be suprised if 5.X and 6.X differed in a substantial way. David.