zoukankan      html  css  js  c++  java
  • netstat大量time_wait连接

    http://chembo.iteye.com/blog/1503770

    http://www.2cto.com/os/201007/54067.html

    http://blog.csdn.net/dacong/article/details/50485585

     主动关闭一方会进入一个TIME_WAIT的中间状态. 通过netstat 查看到的内容如下:

    tcp 0 0 10.19.67.11:40184 10.19.67.11:7012 TIME_WAIT
    tcp 0 0 10.19.67.11:39167 10.19.67.11:7012 TIME_WAIT

    是 40184的端口主动关闭,处于TIME_WAIT状态。

    检查一下time wait的值:

    1 [root@vFStor-1RTqI ~]# sysctl -a | grep time | grep wait
    2 net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
    3 net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
    4 net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
    5 [root@vFStor-1RTqI ~]# 

    检查net.ipv4.tcp_tw当前值:

    1 [root@vFStor-1RTqI ~]# sysctl -a|grep net.ipv4.tcp_tw
    2 net.ipv4.tcp_tw_recycle = 0
    3 net.ipv4.tcp_tw_reuse = 0
    4 [root@vFStor-1RTqI ~]#

    修改 /etc/sysctl.conf 配置文件,添加内容。

    重新生效sysctl.conf 配置文件:

     1 [root@vFStor-1RTqI ~]# sysctl -p
     2 net.ipv4.ip_forward = 0
     3 net.ipv4.conf.default.rp_filter = 1
     4 net.ipv4.conf.default.accept_source_route = 0
     5 kernel.sysrq = 0
     6 kernel.core_uses_pid = 1
     7 net.ipv4.tcp_syncookies = 1
     8 net.bridge.bridge-nf-call-ip6tables = 0
     9 net.bridge.bridge-nf-call-iptables = 0
    10 net.bridge.bridge-nf-call-arptables = 0
    11 net.ipv4.tcp_tw_reuse = 1
    12 net.ipv4.tcp_tw_recycle = 1
  • 相关阅读:
    TypeScript 里 interface 和 type 的区别
    TypeScript 定义函数的几种写法
    什么是 TypeScript 里的 Constructor signature
    Linux 主要的发行系统版本介绍
    PHP跨域
    26. Remove Duplicates from Sorted Array
    关于hashmap的文章
    1. Two Sum
    qt5-资源与图像
    qt--QDialogButtonBox按钮盒
  • 原文地址:https://www.cnblogs.com/doscho/p/6102544.html
Copyright © 2011-2022 走看看