From owner-freebsd-stable@FreeBSD.ORG Fri Mar 7 16:34:38 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id ACE881065672 for ; Fri, 7 Mar 2008 16:34:38 +0000 (UTC) (envelope-from freebsd@scottevil.com) Received: from gentoo.gawr.com (irc.freethescene.net [66.226.64.49]) by mx1.freebsd.org (Postfix) with ESMTP id 9633A8FC13 for ; Fri, 7 Mar 2008 16:34:38 +0000 (UTC) (envelope-from freebsd@scottevil.com) Received: from [10.34.1.89] (unknown [64.126.14.3]) (Authenticated sender: freebsd@scottevil.com) by gentoo.gawr.com (Postfix) with ESMTP id D37C940C75C; Fri, 7 Mar 2008 10:41:07 -0600 (CST) Message-ID: <47D16E9C.9060203@scottevil.com> Date: Fri, 07 Mar 2008 10:34:36 -0600 From: Scott Oertel User-Agent: Thunderbird 2.0.0.6 (X11/20070801) MIME-Version: 1.0 To: David Malone References: <47D006F7.1030607@scottevil.com> <47D063FF.7000409@geminix.org> <20080307101002.GA99525@walton.maths.tcd.ie> In-Reply-To: <20080307101002.GA99525@walton.maths.tcd.ie> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: FreeBSD Mailing List Subject: Re: accf_http and incqlen X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Mar 2008 16:34:38 -0000 David Malone wrote: > On Thu, Mar 06, 2008 at 10:37:03PM +0100, Uwe Doering wrote: > >> Last time I looked (in FreeBSD 4.x) these were connections that got >> stuck in an early stage, that is, before the HTTP request had been >> received. The 'accf_http' filter which wants to parse said request >> waits forever in this situation because there is no timeout implemented, >> as far as I recall. So these would-be HTTP connections pile up over time. >> > > The accf_http should flush out the oldest of these connections once > there are more than a certain number of them. I think that the > number permitted depeneds on the backlog parameter passed to listen. > I checked that this worked recently, and it seemed to do the right > thing on 7.X and 4.X. I'd be suprised if 5.X and 6.X differed in > a substantial way. > > David. > > So having the queue showing full in the netstat should be normal, and not have any side effects? btw, i tested this on 4.x, 5.x, 6.x and 7.x, they all appear to behave in the same fashion. -Scott