aboutsummaryrefslogtreecommitdiffstats
path: root/Documentation/networking/ip-sysctl.txt
diff options
context:
space:
mode:
Diffstat (limited to 'Documentation/networking/ip-sysctl.txt')
-rw-r--r--Documentation/networking/ip-sysctl.txt68
1 files changed, 59 insertions, 9 deletions
diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt
index 6f896b94abdc..ca447b35b833 100644
--- a/Documentation/networking/ip-sysctl.txt
+++ b/Documentation/networking/ip-sysctl.txt
@@ -48,12 +48,6 @@ min_adv_mss - INTEGER
48 The advertised MSS depends on the first hop route MTU, but will 48 The advertised MSS depends on the first hop route MTU, but will
49 never be lower than this setting. 49 never be lower than this setting.
50 50
51rt_cache_rebuild_count - INTEGER
52 The per net-namespace route cache emergency rebuild threshold.
53 Any net-namespace having its route cache rebuilt due to
54 a hash bucket chain being too long more than this many times
55 will have its route caching disabled
56
57IP Fragmentation: 51IP Fragmentation:
58 52
59ipfrag_high_thresh - INTEGER 53ipfrag_high_thresh - INTEGER
@@ -468,6 +462,19 @@ tcp_syncookies - BOOLEAN
468 SYN flood warnings in logs not being really flooded, your server 462 SYN flood warnings in logs not being really flooded, your server
469 is seriously misconfigured. 463 is seriously misconfigured.
470 464
465tcp_fastopen - INTEGER
466 Enable TCP Fast Open feature (draft-ietf-tcpm-fastopen) to send data
467 in the opening SYN packet. To use this feature, the client application
468 must not use connect(). Instead, it should use sendmsg() or sendto()
469 with MSG_FASTOPEN flag which performs a TCP handshake automatically.
470
471 The values (bitmap) are:
472 1: Enables sending data in the opening SYN on the client
473 5: Enables sending data in the opening SYN on the client regardless
474 of cookie availability.
475
476 Default: 0
477
471tcp_syn_retries - INTEGER 478tcp_syn_retries - INTEGER
472 Number of times initial SYNs for an active TCP connection attempt 479 Number of times initial SYNs for an active TCP connection attempt
473 will be retransmitted. Should not be higher than 255. Default value 480 will be retransmitted. Should not be higher than 255. Default value
@@ -551,6 +558,25 @@ tcp_thin_dupack - BOOLEAN
551 Documentation/networking/tcp-thin.txt 558 Documentation/networking/tcp-thin.txt
552 Default: 0 559 Default: 0
553 560
561tcp_limit_output_bytes - INTEGER
562 Controls TCP Small Queue limit per tcp socket.
563 TCP bulk sender tends to increase packets in flight until it
564 gets losses notifications. With SNDBUF autotuning, this can
565 result in a large amount of packets queued in qdisc/device
566 on the local machine, hurting latency of other flows, for
567 typical pfifo_fast qdiscs.
568 tcp_limit_output_bytes limits the number of bytes on qdisc
569 or device to reduce artificial RTT/cwnd and reduce bufferbloat.
570 Note: For GSO/TSO enabled flows, we try to have at least two
571 packets in flight. Reducing tcp_limit_output_bytes might also
572 reduce the size of individual GSO packet (64KB being the max)
573 Default: 131072
574
575tcp_challenge_ack_limit - INTEGER
576 Limits number of Challenge ACK sent per second, as recommended
577 in RFC 5961 (Improving TCP's Robustness to Blind In-Window Attacks)
578 Default: 100
579
554UDP variables: 580UDP variables:
555 581
556udp_mem - vector of 3 INTEGERs: min, pressure, max 582udp_mem - vector of 3 INTEGERs: min, pressure, max
@@ -857,9 +883,19 @@ accept_source_route - BOOLEAN
857 FALSE (host) 883 FALSE (host)
858 884
859accept_local - BOOLEAN 885accept_local - BOOLEAN
860 Accept packets with local source addresses. In combination with 886 Accept packets with local source addresses. In combination
861 suitable routing, this can be used to direct packets between two 887 with suitable routing, this can be used to direct packets
862 local interfaces over the wire and have them accepted properly. 888 between two local interfaces over the wire and have them
889 accepted properly.
890
891 rp_filter must be set to a non-zero value in order for
892 accept_local to have an effect.
893
894 default FALSE
895
896route_localnet - BOOLEAN
897 Do not consider loopback addresses as martian source or destination
898 while routing. This enables the use of 127/8 for local routing purposes.
863 default FALSE 899 default FALSE
864 900
865rp_filter - INTEGER 901rp_filter - INTEGER
@@ -1398,6 +1434,20 @@ path_max_retrans - INTEGER
1398 1434
1399 Default: 5 1435 Default: 5
1400 1436
1437pf_retrans - INTEGER
1438 The number of retransmissions that will be attempted on a given path
1439 before traffic is redirected to an alternate transport (should one
1440 exist). Note this is distinct from path_max_retrans, as a path that
1441 passes the pf_retrans threshold can still be used. Its only
1442 deprioritized when a transmission path is selected by the stack. This
1443 setting is primarily used to enable fast failover mechanisms without
1444 having to reduce path_max_retrans to a very low value. See:
1445 http://www.ietf.org/id/draft-nishida-tsvwg-sctp-failover-05.txt
1446 for details. Note also that a value of pf_retrans > path_max_retrans
1447 disables this feature
1448
1449 Default: 0
1450
1401rto_initial - INTEGER 1451rto_initial - INTEGER
1402 The initial round trip timeout value in milliseconds that will be used 1452 The initial round trip timeout value in milliseconds that will be used
1403 in calculating round trip times. This is the initial time interval 1453 in calculating round trip times. This is the initial time interval