How to Set Maximum Number of Pending TCP Connections

Use this procedure to prevent DOS attacks by controlling the number of permitted incoming connections.

Before You Begin

You must become an administrator who is assigned the Network Management rights profile. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.2 .

1. Set the maximum number of incoming connections.

   # ipadm set-prop -p _conn_req_max_q=1024 tcp

2. Verify the current value.

   # ipadm show-prop -p _conn_req_max_q tcp
   PROTO  PROPERTY         PERM CURRENT   PERSISTENT   DEFAULT   POSSIBLE
   tcp   _conn_req_max_q   rw   1024      --           128       1-4294967295

See also

For more information, see _conn_req_max_q in Oracle Solaris 11.2 Tunable Parameters Reference Manual and the ipadm(1M) man page.