The time-out value for TCP delayed acknowledgment (ACK) timer in milliseconds for hosts that are not directly connected.
Refer to RFC 1122, 4.2.3.2.
100 milliseconds
1 millisecond to 1 minute
Yes
Do not increase this value to more than 500 milliseconds.
If in some circumstances, slow network links (less than 57.6 Kbps) with greater than 512 bytes maximum segment size (MSS) when the interval is short for receiving more than one TCP segment, increase the value.
Unstable
The time-out value for TCP delayed acknowledgment (ACK) timer in milliseconds for hosts that are directly connected.
Refer to RFC 1122, 4.2.3.2.
50 milliseconds
1 millisecond to 1 minute
Yes
Do not increase this value to more than 500 milliseconds.
If in some circumstances, slow network links (less than 57.6 Kbps) with greater than 512 bytes maximum segment size (MSS) and the interval is short for receiving more than one TCP segment, increase the value.
Unstable
The maximum number of TCP segments (in units of maximum segment size MSS for individual connections) received from remote destinations (not directly connected) before an acknowledgment (ACK) is generated. If set to 0 or 1, it means no delayed ACKs, assuming all segments are 1 MSS long. The actual number is dynamically calculated for each connection. The value is the default maximum.
2
0 to 16
Yes
Do not change the value. In some circumstances, when the network traffic becomes very bursty because of the delayed ACK effect, decrease the value. Do not decrease this value below 2.
Unstable
The maximum number of TCP segments (in units of maximum segment size MSS for individual connections) received from directly connected destinations before an acknowledgment (ACK) is generated. If set to 0 or 1, it means no delayed ACKs, assuming all segments are 1 MSS long. The actual number is dynamically calculated for each connection. The value is the default maximum.
8
0 to 16
Yes
Do not change the value. In some circumstances, when the network traffic becomes very bursty because of the delayed ACK effect, decrease the value. Do not decrease this value below 2.
Unstable
If set to 1, TCP always sends SYN segment with the window scale option, even if the option value is 0. Note that if TCP receives a SYN segment with the window scale option, even if the parameter is set to 0, TCP responds with a SYN segment with the window scale option, and the option value is set according to the receive window size.
Refer to RFC 1323 for the window scale option.
0 (disabled)
0 (disabled), 1 (enabled)
Yes
If you want the window scale option in a high-speed network configuration, enable it.
Unstable
If set to 1, TCP always sends SYN segment with the timestamp option. Note that if TCP receives a SYN segment with the timestamp option, TCP responds with a SYN segment with the timestamp option even if the parameter is set to 0.
0 (disabled)
0 (disabled), 1 (enabled)
Yes
In summary, if an accurate measurement of round trip time (RTT) and TCP sequence number wraparound is a problem, enable it.
Refer to RFC 1323 for more reasons to enable this option.
Unstable
The default send window size in bytes. Refer to the following discussion of per-route metrics for setting a different value on a per route basis. See tcp_max_buf also.
49,152
4096 to 1,073,741,824
Yes
Note that this is the default value. An application can use setsockopt(3XNET) SO_SNDBUF to change the individual connection's send buffer.
Unstable
The default receive window size in bytes. Refer to the following discussion of per-route metrics for setting a different value on a per-route basis. See tcp_recv_hiwat_minmss and tcp_max_buf also.
49,152
2048 to 1,073,741,824
Yes
Note that this is the default value. An application can use setsockopt(3XNET) SO_RCVBUF to change the individual connection's receive buffer.
Unstable
The maximum buffer size in bytes. It controls how large the send and receive buffers are set to by an application using setsockopt(3XNET).
1,048,576
8192 to 1,073,741,824
Yes
If TCP connections are being made in a high-speed network environment, increase the value to match the network link speed.
Unstable
The maximum value of TCP congestion window (cwnd) in bytes.
For more information on TCP congestion window, refer to RFC 1122 and RFC 2581.
1,048,576
128 to 1,073,741,824
Yes
This is the maximum value a TCP cwnd can grow to. Note that even if an application uses setsockopt(3XNET) to change the window size to a value higher than tcp_cwnd_max, the actual window used can never grow beyond tcp_cwnd_max. Thus, tcp_max_buf should be greater than tcp_cwnd_max in general.
Unstable
The maximum initial congestion window (cwnd) size in MSS of a TCP connection.
Refer to RFC 2414 on how initial congestion window size is calculated.
4
1 to 4
Yes
Do not change the value.
If the initial cwnd size causes network congestion under special circumstances, decrease the value.
Unstable
The congestion window size in MSS of a TCP connection after it has been idled (no segment received) for a period of one retransmission timeout (RTO).
Refer to RFC 2414 for the calculation.
4
1 to 16,384
Yes
For more information, see tcp_slow_start_initial.
Unstable
If set to 2, TCP always sends SYN segment with the selective acknowledgment (SACK) permitted option. If TCP receives a SYN segment with a SACK-permitted option and this parameter is set to 1, TCP responds with a SACK-permitted option. If the parameter is set to 0, TCP does not send a SACK-permitted option, regardless of whether the incoming segment contains the SACK permitted option or not.
Refer to RFC 2018 for information on the SACK option.
2 (active enabled)
0 (disabled), 1 (passive enabled), 2 (active enabled)
Yes
SACK processing can improve TCP retransmission performance so it should be actively enabled. If, in some circumstances, the other side can be confused with the SACK option actively enabled, set the value to 1 so that SACK processing is enabled only when incoming connections allow SACK processing.
Unstable
If set to 0, TCP does not reverse the IP source routing option for incoming connections for security reasons. If set to 1, TCP does the normal reverse source routing.
0 (disabled)
0 (disabled), 1 (enabled)
Yes
If IP source routing is needed for diagnostic purposes, enable it.
Unstable
The time in milliseconds a TCP connection stays in TIME-WAIT state.
For more information, refer to RFC 1122, 4.2.2.13.
60,000 (60 seconds)
1 second to 10 minutes
Yes
Do not set the value lower than 60 seconds.
For more information, refer to RFC 1122, 4.2.2.13.
Unstable
Controls Explicit Congestion Notification (ECN) support.
If this parameter is set to 0, TCP does not negotiate with a peer that TCP supports the ECN mechanism.
If this parameter is set to 1 when initiating a connection, TCP does not tell a peer that TCP supports the ECN mechanism.
However, TCP tells a peer that it supports the ECN mechanism when accepting a new incoming connection request, if the peer indicates that the peer supports the ECN mechanism in the SYN segment.
If this parameter is set to 2, in addition to negotiating with a peer on the ECN mechanism when accepting connections, TCP indicates in the outgoing SYN segment that it supports the ECN mechanism when TCP makes active outgoing connections.
1 (passive enabled)
0 (disabled), 1 (passive enabled), 2 (active enabled)
Yes
ECN can help TCP in handling congestion control better. However, there are existing TCP implementations, firewalls, NATs, and other network devices that are confused by this mechanism. These devices do not comply to the IETF standard.
Because of these devices, the default value of this parameter is set to 1. In rare cases, passive enabling can still cause problems. Set the parameter to 0 only if absolutely necessary.
Unstable
The default maximum number of pending TCP connections for a TCP listener waiting to be accepted by accept(3SOCKET). See also tcp_conn_req_max_q0.
128
1 to 4,294,967,296
Yes
For applications such as web servers that might receive several connection requests, the default value might be increased to match the incoming rate.
Do not increase the parameter to a very large value. The pending TCP connections can consume excessive memory. And if an application is not fast enough to handle that many connection requests in a timely fashion because the number of pending TCP connections is too large, new incoming requests might be denied.
Note that increasing tcp_conn_req_max_q does not mean that applications can have that many pending TCP connections. Applications can use listen(3SOCKET) to change the maximum number of pending TCP connections for each socket. This parameter is the maximum an application can use listen() to set the number to. This means that even if this parameter is set to a very large value, the actual maximum number for a socket might be much less than tcp_conn_req_max_q, depending on the value used in listen().
Unstable
The default maximum number of incomplete (three-way handshake not yet finished) pending TCP connections for a TCP listener.
For more information on TCP three-way handshake, refer to RFC 793. See also tcp_conn_req_max_q.
1024
0 to 4,294,967,296
Yes
For applications, such as web servers that might receive excessive connection requests, you can increase the default value to match the incoming rate.
The following explains the relationship between tcp_conn_req_max_q0 and the maximum number of pending connections for each socket.
When a connection request is received, TCP first checks if the number of pending TCP connections (three-way handshake is done) waiting to be accepted exceeds the maximum (N) for the listener. If the connections are excessive, the request is denied. If the number of connections is allowable, then TCP checks if the number of incomplete pending TCP connections exceeds the sum of N and tcp_conn_req_max_q0. If it does not, the request is accepted. Otherwise, the oldest incomplete pending TCP request is dropped.
Unstable
For information, see tcp_conn_req_max_q0.
The default minimum value of the maximum number of pending TCP connection requests for a listener waiting to be accepted. This is the lowest maximum value of listen(3SOCKET) an application can use.
1
1 to 1024
Yes
This can be a solution for applications that use listen(3SOCKET) to set the maximum number of pending TCP connections to a value too low. Increase the value to match the incoming connection request rate.
Unstable
These parameters can be set only in the /etc/system file. After the file is modified, reboot the system.
The following entry sets tcp_conn_hash_size:
set tcp:tcp_conn_hash_size=1024 |
Controls the hash table size in the TCP module for all TCP connections.
Signed integer
512
512 to 1,073,741,824
The value should be a power of 2.
No. The parameter can only be changed at boot time.
If you set the parameter to a value that is not a power of 2, it is rounded up to the nearest power of 2.
If the system consistently has tens of thousands of TCP connections, increase the value accordingly. With the default value, TCP performs well up to a few thousand active connections. Note that increasing the hash table size means more memory consumption so set an appropriate value to avoid wasting memory unnecessarily.
Unstable
Controls the hash table size in an IP module for all active (in ESTABLISHED state) TCP connections.
Unsigned integer
512
512 to 2,147,483,648
It should be a power of two.
No. This parameter can only be changed at boot time.
If you set the parameter to a value that is not a power of 2, it is rounded up to the nearest power of two.
If the system consistently has tens of thousands of active TCP connections, increase the value accordingly. With the default value, the system performs well up to a few thousand active connections. Note that increasing the hash table size means more memory consumption so set an appropriate value to avoid wasting memory unnecessarily.
Unstable
Changing the following parameters is not recommended unless there are extenuating circumstances that are described with each parameter.
The default total retransmission timeout value for a TCP connection in milliseconds. For a given TCP connection, if TCP has been retransmitting for tcp_ip_abort_interval period of time and it has not received any acknowledgment from the other endpoint during this period, TCP closes this connection.
For TCP retransmission timeout (RTO) calculation, refer to RFC 1122, 4.2.3. See also tcp_rexmit_interval_max.
8 minutes
500 millisecond to 1193 hours
Yes
Do not change this value. See tcp_rexmit_interval_max for exceptions.
Unstable
The default initial retransmission timeout (RTO) value for a TCP connection in milliseconds. Refer to the following discussion of per route metrics for setting a different value on a per-route basis.
3 seconds
1 millisecond to 20 seconds
Yes
Do not change this value. Lowering the value can result in unnecessary retransmissions.
Unstable
The default maximum retransmission timeout value (RTO) in milliseconds. The calculated RTO for all TCP connections cannot exceed this value. See also tcp_ip_abort_interval.
60 seconds
1 millisecond to 2 hours
Yes
Do not change the value in a normal network environment.
If in some special circumstances, the round trip time (RTT) for a connection is in the order of 10 seconds, you can change the value to a higher value. If you change this value, you should also change the tcp_ip_abort_interval parameter to match it. Change the value of tcp_ip_abort_interval to at least four times the value of tcp_rexmit_interval_max.
Unstable
The default minimum retransmission time-out (RTO) value in milliseconds. The calculated RTO for all TCP connections cannot be lower than this value. See also tcp_rexmit_interval_max.
400 milliseconds
1 millisecond to 20 seconds
Yes
Do not change the value in a normal network environment.
TCP's RTO calculation should be able to cope with most RTT fluctuations. If in some very special circumstances such that the round trip time (RTT) for a connection is in the order of 10 seconds, change to a higher value. If you change this value, you should change the tcp_rexmit_interval_max parameter to match it. You should change the value of tcp_rexmit_interval_max to at least eight times the value of tcp_rexmit_interval_min.
Unstable
A constant added to the calculated retransmission time-out value (RTO) in milliseconds.
0 milliseconds
0 to 2 hours
Yes
Do not change the value.
When the RTO calculation fails to obtain a good value for a connection in some circumstances, you can change this value to avoid unnecessary retransmissions.
Unstable
If this parameter is set to 1, and the window scale option is enabled for a connection, TCP also enables the timestamp option for that connection.
1 (enabled)
0 (disabled), 1 (enabled)
Yes
Do not change this value. In general, when TCP is used in high-speed network, protection against sequence number wraparound is essential, thus you need the timestamp option.
Unstable
Controls the default minimum receive window size. The minimum is tcp_recv_hiwat_minmss times the size of maximum segment size (MSS) of a connection.
4
1 to 65,536
Yes
Do not change the value. If changing it is necessary, do not change the value lower than 4.
Unstable
If set to 1, protocol control blocks of TCP connections in TIME-WAIT state are compressed to reduce memory usage. If set to 0, no compression is done. See tcp_time_wait_interval also.
1 (enabled)
0 (disabled), 1 (enabled)
Yes
Do not turn off the compression mechanism.
Unstable