decrease TIME_WAIT

izghitu · 06-01-2007, 02:16 PM

Hi,

I have 2 busy servers with lots of short connections per minute. Because of that when I do a netstat -antp I get lots of TIME_WAIT connections which I believe are connections that did not send the terminate signal(or how is it called).

Is there a way to decrease the TIME_WAIT time?

I am running RHEL 4 with a 2.6 kernel and Debian etch with a 2.6 kernel.

Thanks

camh · 06-01-2007, 06:06 PM

These settings are all controlled in /proc/sys/net/ipv4

The ones i think you will want to look at are:

tcp_fin_timeout
tcp_keepalive_time
tcp_max_orphans

Read http://www.securityfocus.com/infocus/1711 and http://www.faqs.org/docs/securing/chap6sec75.html

(The latter is for RedHat, but should still be applicable)

Hope this helps.

izghitu · 06-04-2007, 06:26 AM

this helped, thanks a lot

golson70 · 06-14-2007, 10:51 PM

I'm having the same problem so I made the suggested RedHat changes without any luck. I'm also running RH El4 with the 2.6 kernel. Googled the heck out of time_wait and can't find anything that works for RedHat.

Any ideas would be much appreciated.