Skip Navigation Links | |
Exit Print View | |
Oracle Solaris Tunable Parameters Reference Manual Oracle Solaris 11 Information Library |
1. Overview of Oracle Solaris System Tuning
2. Oracle Solaris Kernel Tunable Parameters
4. Internet Protocol Suite Tunable Parameters
Where to Find Tunable Parameter Information
Overview of Tuning IP Suite Parameters
Internet Request for Comments (RFCs)
_icmp_err_interval and _icmp_err_burst
_respond_to_echo_broadcast and _respond_to_echo_multicast (ipv4 or ipv6)
_send_redirects (ipv4 or ipv6)
TCP/IP Parameters Set in the /etc/system File
TCP Parameters With Additional Cautions
5. Network Cache and Accelerator Tunable Parameters
A. Tunable Parameters Change History
Controls the rate of IP in generating ICMP error messages. IP generates only up to _icmp_err_burst IP error messages in any _icmp_err_interval.
The _icmp_err_interval parameter protects IP from denial of service attacks. Setting this parameter to 0 disables rate limiting. It does not disable the generation of error messages.
100 milliseconds for _icmp_err_interval
10 error messages for _icmp_err_burst
0 – 99,999 milliseconds for _icmp_err_interval
1 – 99,999 error messages for _icmp_err_burst
Yes
If you need a higher error message generation rate for diagnostic purposes.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
Controls whether IP responds to a broadcast ICMPv4 echo request or a IPv6 multicast ICMPv6 echo request.
1 (enabled)
0 (disabled) or 1 (enabled)
Yes
If you do not want this behavior for security reasons, disable it.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
Controls whether IPv4 or IPv6 sends out ICMPv4 or ICMPv6 redirect messages.
1 (enabled)
0 (disabled) or 1 (enabled)
Yes
If you do not want this behavior for security reasons, disable it.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
Controls whether IPv4 or IPv6 forwards packets with source IPv4 routing options or IPv6 routing headers.
0 (disabled)
0 (disabled) or 1 (enabled)
Yes
Keep this parameter disabled to prevent denial of service attacks.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
Controls the time to live (TTL) value in the IPv4 header for the outbound IPv4 packets on an IP association.
255
1 to 255
Yes
Generally, you do not need to change this value.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
Sets the value of the hop limit in the IPv6 header for the outbound IPv6 packets on an IP association.
255
0 to 255
Yes
Generally, you do not need to change this value.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
Defines the maximum number of logical IP interfaces associated with a real interface.
256
1 to 8192
Yes
Do not change the value. If more logical interfaces are required, you might consider increasing the value. However, recognize that this change might have a negative impact on IP's performance.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
Controls send and receive behavior for IPv4 or IPv6 packets on a multi-homed system. This property can have the following values: weak, strong, and src-priority. The default value is weak.
weak
weak, strong, or src-priority
weak
Outgoing packets - The source address of the packet going out need not match the address configured on the outgoing interface.
Incoming packets - The destination address of the incoming packet need not match the address configured on the incoming interface.
strong
Outgoing packets - The source address of the packet going out must match the address configured on the outgoing interface.
Incoming packets - The destination address of the incoming packet must match the address configured on the incoming interface.
src-priority
Outgoing packets - If multiple routes for the IP destination in the packet are available, the system prefers routes where the IP source address in the packet is configured on the outgoing interface.
If no such route is available, the system falls back to selecting the best route, as with the weak ES case.
Incoming packets - The destination address of the incoming packet must be configured on any one of the host's interface.
Yes
If a machine has interfaces that cross strict networking domains (for example, a firewall or a VPN node), set this parameter to strong.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
Determines the mode of associating TCP/IP connections with squeues.
A value of 0 associates a new TCP/IP connection with the CPU that creates the connection. A value of 1 associates the connection with multiple squeues that belong to different CPUs.
0
0 or 1
Yes
Consider setting this parameter to 1 to spread the load across all CPUs in certain situations. For example, when the number of CPUs exceed the number of NICs, and one CPU is not capable of handling the network load of a single NIC, change this parameter to 1.
This property can only be set in the /etc/system file.
This parameter can only be set in the global zone.
Unstable
Changing the following parameters is not recommended.
Specifies the interval in milliseconds when IP flushes the path maximum transfer unit (PMTU) discovery information, and tries to rediscover PMTU.
Refer to RFC 1191 on PMTU discovery.
10 minutes
5 seconds to 277 hours
Yes
Do not change this value.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).
When IPv4 or IPv6 sends an ICMPv4 or ICMPv6 error message, it includes the IP header of the packet that caused the error message. This parameter controls how many extra bytes of the packet beyond the IPv4 or IPv6 header are included in the ICMPv4 or ICMPv6 error message.
64 for IPv4
1280 for IPv6
8–6636 for IPv4
8-1280 for IPv6
Yes
Do not change the value. Including more information in an ICMP error message might help in diagnosing network problems. If this feature is needed, increase the value.
Unstable
For information, see IP Parameter Name Changes (Oracle Solaris 11).