I've got some problems with full sockets on one FreeBSD 6.2 system
acting as a loadbalancer for a webfarm.
Sometimes I get some errors like these from different daemons:
haproxy: Proxy my_proxy reached system memory limit at 83
sockets. Please check system tunables.
stunnel: LOG3[45738:139512832]: remote socket: No buffer space available
netstat -m looks fine:
491/874/1365 mbufs in use (current/cache/total)
450/618/1068/25600 mbuf clusters in use (current/cache/total/max)
450/490 mbuf+clusters out of packet secondary zone in use (current/cache)
0/0/0/0 4k (page size) jumbo clusters in use (current/cache/total/max)
0/0/0/0 9k jumbo clusters in use (current/cache/total/max)
0/0/0/0 16k jumbo clusters in use (current/cache/total/max)
1022K/1454K/2477K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0/8/6656 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
0 requests for I/O initiated by sendfile
7696 calls to protocol drain routines
But this looks bad:
# sysctl kern.ipc.numopensockets
# sysctl kern.ipc.maxsockets
After raising kern.ipc.maxsockets up to 16384 the errors disappeared,
Some further research gave me the following result:
# netstat -n | grep -c FIN_WAIT_2
Hmm, strange. All the connections go to (Debian Linux)-HTTP-Nodes. But I
don't know why the connections don't close. On the Debian Linux system
there are lots of sockets in LAST_ACK state.
Any ideas what could cause these problems and how I could solve them?
Can I set a timeout for the FIN_WAIT_2 state on the FreeBSD system, so
the sockets won't fill up with unused connections waiting for termination?
I also looked at all tcp4 sockets in netstat -n output. The number of
these sockets is higher than kern.ipc.numopensockets at the same time. I
think the number should be lower than kern.ipc.numopensockets because
all tcp4 sockets are only a part of all sockets, right?
email@example.com mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"