[Freeipa-users] Increase ListenBacklog for httpd

[Rakesh Rajasekharan]

can anyone provide some insight on this please.. I have been trying to
debug a hang issues for past few weeks.. and finally foudn that it starts
with this issue when I see a lot of connections in SYN_RECV state.

as it is happening now

netstat shows around 14-16 connectiosn in SYNC_RECV

If I could get some inputs on this , I could have some workaround to
mitigate the issues

Thanks

On Mon, Sep 12, 2016 at 10:13 AM, Rakesh Rajasekharan <
rakesh.rajasekharan at gmail.com> wrote:

> sorry I guess I did not put the question correctly....
>
> I wanted to know .. like we have the ListenBacklog for apache to basically
> define the number of connections it can handle.. do we have some thing
> similar for our krb5kdc service.. as the SYN floodin at 88 looks like
> krb5kdc service is not able to handle sudden spurt in connections or the
> number of connections are more than it could handle..
>
> So, would be great if I could know how many connection it can support at
> any given time ..most of the times I see this error while i add clients to
> IPA master.. so if thers a known limit , I could first check netstat to see
> how many connections I have at any point and if its below the limit only
> then setup ipa-client-install
>
> Thanks,
>
> Rakesh
>
> On Sun, Sep 11, 2016 at 11:10 PM, Rakesh Rajasekharan <
> rakesh.rajasekharan at gmail.com> wrote:
>
>> Hi,
>>
>> In my Freeipa setup, I frequently see this message
>>
>> request_sock_TCP: Possible SYN flooding on port 88. Sending cookies
>>
>>
>> Is there a way to increase the ListenBacklog so that I can workaround
>> this error as suggested i this doc
>> https://access.redhat.com/solutions/30453
>>
>> Thanks,
>> Rakesh
>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160912/5877e959/attachment.htm>