diff options
| author | Haishuang Yan | 2017-09-27 05:35:43 +0200 |
|---|---|---|
| committer | David S. Miller | 2017-10-02 02:55:54 +0200 |
| commit | 3733be14a32bae288b61ed28341e593baba983af (patch) | |
| tree | 972622b76e08246aee043832bdc8224f6ac50501 /net/ipv4/tcp_ipv4.c | |
| parent | ipv4: Namespaceify tcp_fastopen_key knob (diff) | |
| download | kernel-qcow2-linux-3733be14a32bae288b61ed28341e593baba983af.tar.gz kernel-qcow2-linux-3733be14a32bae288b61ed28341e593baba983af.tar.xz kernel-qcow2-linux-3733be14a32bae288b61ed28341e593baba983af.zip | |
ipv4: Namespaceify tcp_fastopen_blackhole_timeout knob
Different namespace application might require different time period in
second to disable Fastopen on active TCP sockets.
Tested:
Simulate following similar situation that the server's data gets dropped
after 3WHS.
C ---- syn-data ---> S
C <--- syn/ack ----- S
C ---- ack --------> S
S (accept & write)
C? X <- data ------ S
[retry and timeout]
And then print netstat of TCPFastOpenBlackhole, the counter increased as
expected when the firewall blackhole issue is detected and active TFO is
disabled.
# cat /proc/net/netstat | awk '{print $91}'
TCPFastOpenBlackhole
1
Signed-off-by: Haishuang Yan <yanhaishuang@cmss.chinamobile.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/tcp_ipv4.c')
| -rw-r--r-- | net/ipv4/tcp_ipv4.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/ipv4/tcp_ipv4.c b/net/ipv4/tcp_ipv4.c index 49c74c0d0d21..ad3b5bbaf942 100644 --- a/net/ipv4/tcp_ipv4.c +++ b/net/ipv4/tcp_ipv4.c @@ -2474,6 +2474,8 @@ static int __net_init tcp_sk_init(struct net *net) net->ipv4.sysctl_tcp_fastopen = TFO_CLIENT_ENABLE; spin_lock_init(&net->ipv4.tcp_fastopen_ctx_lock); + net->ipv4.sysctl_tcp_fastopen_blackhole_timeout = 60 * 60; + atomic_set(&net->ipv4.tfo_active_disable_times, 0); return 0; fail: |