How to Set Maximum Number of Incomplete TCP Connections

Use this procedure to prevent denial of service (DOS) attacks by controlling the number of pending connections that are incomplete.

Before You Begin

You must become an administrator who is assigned the Network Management rights profile. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.2 .

1. Set the maximum number of incoming connections.

   # ipadm set-prop -p _conn_req_max_q0=4096 tcp

2. Verify the current value.

   # ipadm show-prop -p _conn_req_max_q0 tcp
   PROTO  PROPERTY         PERM CURRENT   PERSISTENT   DEFAULT   POSSIBLE
   tcp   _conn_req_max_q0  rw   4096      --           128       1-4294967295

See also

For more information, see _conn_req_max_q0 in Oracle Solaris 11.2 Tunable Parameters Reference Manual and the ipadm(1M) man page.