Hi , How to get access to min kenel git as i need to add some patches for reviews.
Bhagaban On Sat, Nov 8, 2014 at 10:30 PM, <[email protected]> wrote: > Send Kernelnewbies mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies > or, via email, send a message with subject or body 'help' to > [email protected] > > You can reach the person managing the list at > [email protected] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Kernelnewbies digest..." > > > Today's Topics: > > 1. Re: Eudyptula challenge status (Drew Fustini) > 2. RE: lots of connections in SYN_RECV state (Puneet Agarwal) > 3. Re: lots of connections in SYN_RECV state > ([email protected]) > 4. Re: lots of connections in SYN_RECV state (Dave Tian) > 5. RE: lots of connections in SYN_RECV state (Puneet Agarwal) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 7 Nov 2014 11:04:28 -0600 > From: Drew Fustini <[email protected]> > Subject: Re: Eudyptula challenge status > To: Dan <[email protected]> > Cc: kernelnewbies <[email protected]> > Message-ID: > < > caef4m_b6w3gj8p_shhpol8qqtgez7h18p92bxuh0foqoqyj...@mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Yup, I submitted my current task 4 weeks ago, sent a note last week, > and got reply the next day (Nov 1) with same sentiment: relax - > everything is ok, it's a slow process, and it's not a race. > > On Tue, Nov 4, 2014 at 8:59 PM, Dan <[email protected]> wrote: > > Ramon Fried <ramon.fried <at> tandemg.com> writes: > > > >> > >> > >> Hey all. > >> Tasks are pending for a long time. Anyone has Info regarding the queue? > >> Thanks. > >> Ramon > >> > >> > >> _______________________________________________ > >> Kernelnewbies mailing list > >> Kernelnewbies <at> kernelnewbies.org > >> http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies > >> > > > > > > I've been on challenge 5 for about a month and a half. I sent him a > follow > > up email a few weeks ago and he replied "Relax, things are slow, there's > no > > rush..." > > > > His response times before that were usually less than 2 days. > > > > > > > > _______________________________________________ > > Kernelnewbies mailing list > > [email protected] > > http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies > > > > ------------------------------ > > Message: 2 > Date: Fri, 7 Nov 2014 23:11:26 +0530 > From: Puneet Agarwal <[email protected]> > Subject: RE: lots of connections in SYN_RECV state > To: Dave Tian <[email protected]>, Silvan Jegen > <[email protected]> > Cc: "[email protected]" > <[email protected]> > Message-ID: <[email protected]> > Content-Type: text/plain; charset="iso-8859-1" > > I use linux kernel 2.6. I have enabled SYN cookies already. But that does > not seem to solve the problem. Overall request latency is very high with > these many half open connections. > > Thanks and Regards > Puneet > ---------------------------------------- > > Subject: Re: lots of connections in SYN_RECV state > > From: [email protected] > > Date: Fri, 7 Nov 2014 23:49:35 +0800 > > CC: [email protected]; [email protected] > > To: [email protected] > > > > Latest kernel provides a TCP SYN Cookie feature to defense from SYN > flooding. > > > > -daveti > > > > > >> On Nov 6, 2014, at 11:58 PM, Silvan Jegen <[email protected]> wrote: > >> > >> 2014-11-06 16:15,Puneet Agarwal: > >>> Is there a way to check the reason, why they do not answer to the > >>> SYN-ACK's? > >> > >> I don't think so. After all, they just don't answer and they won't tell > >> you why (AFAIK there is no way to ask them why either)... > >> > >> You could try to check for patterns in the incoming IP addresses to see > >> from how many different places these connections are being made. I think > >> that way it should be possible to figure out from which geographic > >> location these problematic connections are coming from as well. What you > >> would do with these findings I am not sure though. > >> > >> If these connection negatively impact the performance of your servers > >> you should definitely look into to countermeasures mentioned in the RFC > >> here. > >> > >> http://tools.ietf.org/html/rfc4987 > >> > >> > >> _______________________________________________ > >> Kernelnewbies mailing list > >> [email protected] > >> http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies > > > > > > ------------------------------ > > Message: 3 > Date: Fri, 07 Nov 2014 13:10:05 -0500 > From: [email protected] > Subject: Re: lots of connections in SYN_RECV state > To: Puneet Agarwal <[email protected]> > Cc: Dave Tian <[email protected]>, Silvan Jegen > <[email protected]>, "[email protected]" > <[email protected]> > Message-ID: <[email protected]> > Content-Type: text/plain; charset="us-ascii" > > On Fri, 07 Nov 2014 23:11:26 +0530, Puneet Agarwal said: > > > I use linux kernel 2.6. I have enabled SYN cookies already. But that > does not > > seem to solve the problem. Overall request latency is very high with > these many > > half open connections. > > So, out of curiosity, where are all these half open connections coming > from? Are they from addresses in your local network? Outside sites that > *should* be connecting? Places you've never heard and and probably > *shouldn't* > be connecting? > > (Also, if you have properly implemented syncookies, you shouldn't *have* > any > half-open connections. That's the whole point of syncookies....) > > -------------- next part -------------- > A non-text attachment was scrubbed... > Name: not available > Type: application/pgp-signature > Size: 848 bytes > Desc: not available > Url : > http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20141107/85f1f4aa/attachment-0001.bin > > ------------------------------ > > Message: 4 > Date: Sat, 8 Nov 2014 07:48:14 +0800 > From: Dave Tian <[email protected]> > Subject: Re: lots of connections in SYN_RECV state > To: [email protected] > Cc: Puneet Agarwal <[email protected]>, Silvan Jegen > <[email protected]>, [email protected] > Message-ID: <[email protected]> > Content-Type: text/plain; charset=utf-8 > > Oops, my bad. I remember seeing sth on LWN for the 3.x kernel talking > about a new feature related with TCP SYN. Thought this pretty old stuff was > the one? > > -daveti > > > > On Nov 8, 2014, at 12:58 AM, [email protected] wrote: > > > > On Fri, 07 Nov 2014 23:49:35 +0800, Dave Tian said: > >> Latest kernel provides a TCP SYN Cookie feature to defense from SYN > flooding. > > > > If by "latest" you mean "since Andi Kleen submitted a patch for 2.1.44", > > back in July 1997.... > > > > > ------------------------------ > > Message: 5 > Date: Sat, 8 Nov 2014 07:35:30 +0530 > From: Puneet Agarwal <[email protected]> > Subject: RE: lots of connections in SYN_RECV state > To: "[email protected]" <[email protected]> > Cc: Dave Tian <[email protected]>, Silvan Jegen > <[email protected]>, "[email protected]" > <[email protected]> > Message-ID: <[email protected]> > Content-Type: text/plain; charset="iso-8859-1" > > These connections are from outside the network, and the IP's are > legitimate ones which should be connecting. > I don't know whether the IP's which I could see are the real ones or > spoofed ones. > > sysctl -a says > net.ipv4.tcp_syncookies = 1 > > cat /proc/sys/net/ipv4/tcp_syncookies also gives 1 > > Isn't this sufficient to enable syncookies? > > Thanks and Regards > Puneet > ---------------------------------------- > > To: [email protected] > > CC: [email protected]; [email protected]; > [email protected] > > Subject: Re: lots of connections in SYN_RECV state > > From: [email protected] > > Date: Fri, 7 Nov 2014 13:10:05 -0500 > > > > On Fri, 07 Nov 2014 23:11:26 +0530, Puneet Agarwal said: > > > >> I use linux kernel 2.6. I have enabled SYN cookies already. But that > does not > >> seem to solve the problem. Overall request latency is very high with > these many > >> half open connections. > > > > So, out of curiosity, where are all these half open connections coming > > from? Are they from addresses in your local network? Outside sites that > > *should* be connecting? Places you've never heard and and probably > *shouldn't* > > be connecting? > > > > (Also, if you have properly implemented syncookies, you shouldn't *have* > any > > half-open connections. That's the whole point of syncookies....) > > > > > > ------------------------------ > > _______________________________________________ > Kernelnewbies mailing list > [email protected] > http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies > > > End of Kernelnewbies Digest, Vol 48, Issue 10 > ********************************************* >
_______________________________________________ Kernelnewbies mailing list [email protected] http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
