On Mon, May 21, 2007 at 07:05:50PM +0800, Kacheong Poon wrote: > Darren J Moffat wrote: > > # Set TCP_STRONG_ISS to be: > > # 0 = Old-fashioned sequential initial sequence number generation. > > # 1 = Improved sequential generation, with random variance in > > increment. > > # 2 = RFC 1948 sequence number generation, unique-per-connection-ID. > > # > > TCP_STRONG_ISS=1 > > > > > > Why shouldn't this be set to case 2 as the default ? > > > AFAIK, it is a performance consideration. I don't know > if the performance hit is still a concern given our > new hardware... BTW, there is an RFE 4625629 for this.
Why dont't you ask (similar to SBD - Solaris Secure by Default during Solaris installation) admins what they prefer ? Regards przemol -- http://przemol.blogspot.com/ ---------------------------------------------------------------------- Kasia Cichopek eksponuje biust >>> http://link.interia.pl/f1a6f _______________________________________________ networking-discuss mailing list [email protected]
