Results 1 to 3 of 3
  1. #1
    Join Date
    Jun 2001
    Location
    Gilroy CA.
    Posts
    464

    Question TCP Setting for High Performance

    Occasionally I'm seeing "possible SYN flooding on port xxx" when there no real attack going on. What I'd like to do is some Linux tuning to increase the capacity so that it can handle more TCP activity. These's so many settings that my head is swimming.

    I'm also running OpenVZ virtualization in case that makes a difference.
    Thanks in advance.
    Marc Perkel
    /root
    http://www.junkemailfilter.com
    marc@perkel.com

  2. #2
    Join Date
    Mar 2009
    Location
    /home/khunj
    Posts
    408
    This is just a warning message, the kernel should start sending SYN cookies, if they are enabled.
    As long as you don't see some "dropping xx packets" messages you are fine.
    Look at your SYN backlog and increase it if it is too low:

    Code:
    # cat /proc/sys/net/ipv4/tcp_max_syn_backlog
    Usually the value is 1024, you can double or triple it.
    You can do that only from the HN, not from a container.
    NinTechNet
    ★ NinjaFirewall : Web Application Firewall for PHP and WordPress.
    ★ NinjaMonitoring : Monitor your website for suspicious activities.

  3. #3
    Join Date
    Jun 2001
    Location
    Gilroy CA.
    Posts
    464
    Thanks - for spam filtering - is there any other parameters that I should adjust?
    Marc Perkel
    /root
    http://www.junkemailfilter.com
    marc@perkel.com

Similar Threads

  1. Replies: 0
    Last Post: 04-04-2009, 11:22 PM
  2. Replies: 0
    Last Post: 03-27-2009, 10:41 PM
  3. Replies: 0
    Last Post: 09-22-2008, 02:37 PM
  4. High TCP Bandwitdt Usage. Please Help
    By WWWhost in forum Hosting Security and Technology
    Replies: 3
    Last Post: 04-20-2004, 03:53 AM

Related Posts from theWHIR.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •