Configure TCP Connections
Setting the maximum half-open TCP connections to 4096 per IP address per port
helps to defend against SYN flood denial of service attacks. Setting the maximum
number of queued incoming connections TCP to at least 1024 helps prevent certain
distributed denial of service (DDoS) attacks.
-
Log in to one of the compute servers and access the host console as
superuser.
See Log into a Compute Server.
-
Set the maximum half-open and queued incoming TCP connections.
# ipadm set-prop -p _conn_req_max_q0=9096 tcp
# ipadm set-prop -p _conn_req_max_q=1024 tcp