Re: something interesting with squid-2.3Stable1

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 18 Feb 2000 07:57:58 +0100

Roger Pen~a Escobio wrote:

> status we noted that we had about 6000 TCP connections in our
> server 95% of these were FIN_WAIT

You need to tune your OS to have a timeout for FIN_WAIT, or any
client/server can quickly DOS your server by locking TCP connections in
FIN_WAIT, intentionally or unintentionally.

I think there are some information on HP-UX in the Squid-FAQ.

--
Henrik Nordstrom
Squid hacker
Received on Fri Feb 18 2000 - 00:28:06 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:51:20 MST