[B! tcp] halfrackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

halfrack id:halfrack

tcpã«é–¢ã™ã‚‹halfrackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (16)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

How to stop running out of ephemeral ports and start to love long-lived connections ã®å‰¯èªæœ¬ - è–„ã„ãƒ–ãƒã‚°
https://blog.cloudflare.com/how-to-stop-running-out-of-ephemeral-ports-and-start-to-love-long-lived-connections/ ã‚’èªã‚“ã§ã„ã¦ç†è§£ã§ããªã‹ã£ãŸã¨ã“ã‚ã‚’ã¾ã¨ã‚ãŸè¨˜äº‹ã§ã™ã€‚ å…ƒè¨˜äº‹ã®ç°¡å˜ãªæ¦‚è¦ ã‚¨ãƒ•ã‚§ãƒ¡ãƒ©ãƒ«ãƒãƒ¼ãƒˆãŒæž¯æ¸‡ã—ãªã„ã‚ˆã†ã«ãƒãƒ¼ã‚«ãƒ«ãƒãƒ¼ãƒˆã®å†åˆ©ç”¨ã‚’ã—ãŸã„ã€‚ TCP ã®æ™®é€šã®ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã§ã¯è‡ªå‹•ã§å†åˆ©ç”¨ã•ã‚Œã‚‹ã®ã§å›°ã‚‰ãªã„ã€‚ é€ä¿¡å…ƒã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å›ºå®šã™ã‚‹å ´åˆã¯ã†ã¾ãå†åˆ©ç”¨ã§ããªã‹ã£ãŸãŒ 2015 å¹´ã‹ã‚‰ IP_BIND_ADDRESS_NO_PORT ãŒè¿½åŠ ã•ã‚Œå•é¡Œãªãå†åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã€‚ é€ä¿¡å…ƒãƒãƒ¼ãƒˆã‚‚å›ºå®šã™ã‚‹å ´åˆã¯ SO_REUSEADDR ã‚’ä½¿ã†ã“ã¨ã§å†åˆ©ç”¨ãŒã§ãã‚‹ã€‚ ã¨ã“ã‚ãŒ UDP ã§ã¯ãƒãƒ¼ã‚«ãƒ«ãƒãƒ¼ãƒˆã®å†åˆ©ç”¨ãŒã†ã¾ãå‹•ã‹ãªã„ã—ã€TCP ã®ã‚ˆã†ãªç°¡å˜ãªå›žé¿ç–ã¯ãªã„ã€‚ ã„ã‹
$halfrack$
halfrack 2022/02/13
tcp

network

linux
ãƒªãƒ³ã‚¯
BBR Update: 1: BBR.Swift; 2: Scalable Loss Handling (pdf)
$halfrack$
halfrack 2020/11/24
network

tcp
ãƒªãƒ³ã‚¯
Linux stack or BSD stackï½œoraccha
Linuxã®TCP/IPã‚¹ã‚¿ãƒƒã‚¯ã¨*BSDã®TCP/IPã‚¹ã‚¿ãƒƒã‚¯ã©ã£ã¡ãŒå„ªã‚Œã¦ã„ã‚‹ã®ã‹ã¨ã„ã†ã®ã¯ã‚ˆãå‡ºã¦ãã‚‹è³ªå•ã§ã€æŽ¢ã›ã°ãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯çµæžœã‚‚ã„ã‚ã„ã‚å‡ºã¦ãã‚‹ãŒã€å½“ç„¶TCP/IPã‚¹ã‚¿ãƒƒã‚¯ä»¥å¤–ã®ã‚«ãƒ¼ãƒãƒ«æ§‹é€ ã®é•ã„ã‚‚å¤§ãã„ã®ã§ã€apple-to-appleã®æ¯”è¼ƒã¯é›£ã—ã„ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ™ãƒ¼ã‚¹ã§ã¯LinuxãŒåœ§å€’çš„ãªã®ã ã‚ã†ã‘ã©ã€Netflixã®CDNã§ã¯FreeBSDãŒä½¿ã‚ã‚Œã¦ã„ã‚‹ã®ã¯æœ‰åï¼ˆã€ŒNetflix and FreeBSD: Using Open Source to Deliver Streaming VideoÂ ã€[FOSDEM2019]ï¼‰ã€‚ã¾ãŸã€ã€Œã‚µãƒ¼ãƒ“ã‚¹å¯ç”¨æ€§ã‚’æ”¹å–„ã™ã‚‹ãŸã‚ã®ç•°ç¨®OSé–“ãƒ—ãƒã‚»ã‚¹ãƒžã‚¤ã‚°ãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ã®æ´»ç”¨ã€ã«ã‚ˆã‚‹ã¨ã€ä¸€èˆ¬çš„ã«Linuxã¯å¸¸ã«é«˜ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆã§ã‚ã‚‹ãŒã€é«˜è² è·æ™‚ã«ã¯ã‚¨ãƒ©ãƒ¼ãŒé »ç™ºã™ã‚‹ã€‚ä¸€æ–¹ã€FreeBSDã¯é«˜è² è·æ™‚ã§ã‚‚ã‚¨ãƒ©ãƒ¼ã‚’èµ·ã“ã•ãªã„ã€‚ç²˜ã‚ŠãŒã‚ã‚‹ã¨ã„ã†ã‹ã€ãƒ€ã‚¤ã‚½ãƒ³ã®æŽƒ
$halfrack$
halfrack 2020/10/27
linux

bsd

network

tcp
ãƒªãƒ³ã‚¯
https://tech.pepabo.com/2020/06/26/kernel-dive-tcp_mem/
$halfrack$
halfrack 2020/06/26
tcp

linux

kernel
ãƒªãƒ³ã‚¯
Active Queue Management - H07.pdf
$halfrack$
halfrack 2020/03/03
AQM (Active Queue Management) ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®å…¥é–€ã¨ã—ã¦è‰¯ã„(RED ã‚‚ä¸€ç¨®ã§ã¯ã‚ã‚‹ã®ã)

network

internet

router

tcp
ãƒªãƒ³ã‚¯
Active queue management - Wikipedia
In routers and switches, active queue management (AQM) is the policy of dropping packets inside a buffer associated with a network interface controller (NIC) before that buffer becomes full, often with the goal of reducing network congestion or improving end-to-end latency. This task is performed by the network scheduler, which for this purpose uses various algorithms such as random early detectio
$halfrack$
halfrack 2020/03/03
â€œRFC 7567 recommends active queue management as a best practiceâ€

network

tcp

internet
ãƒªãƒ³ã‚¯
SYN cookies
D. J. Bernstein TCP/IP SYN cookies Mail service for Panix, an ISP in New York, was shut down by a SYN flood starting on 6 September 1996. A week later the story was covered by the RISKS Digest, the Wall Street Journal, the Washington Post, and many other newspapers. SYN flooding had been considered by security experts before. It was generally considered insoluble. See, for example, ``Practical UNI
$halfrack$
halfrack 2019/11/22
DJB å…ˆè¦‹ã®æ˜Žã™ã’ã‡ã‚ˆãªã

server

tcp

security
ãƒªãƒ³ã‚¯
Threat Alert: TCP Amplification Attacks | Radware Blog
Throughout 2019, Radwareâ€™s Threat Research Center (TRC) and Emergency Response Team (ERT) have been monitoring and defending against an increasing number of TCP reflection attacks. TCP reflection attacks, such as SYN-ACK reflection attacks, have been less popular among attackers until recently. The lack of popularity was mainly due to the wrong assumption that TCP reflection attacks cannot generat
$halfrack$
halfrack 2019/11/11
â€œHell of a Handshakeâ€ã¨ã„ã†è«–æ–‡ã§ TCP å†é€ã«ã‚ˆã‚‹å¢—å¹…ãŒ 3æ‰‹æ³•æŒ™ã’ã‚‰ã‚Œã¦ã„ã‚‹ã¨â€¦ãã®æ”»æ’ƒã®å‚¾å‘ã‚„è§£èª¬ãªã©

security

ddos

network

tcp

kernel
ãƒªãƒ³ã‚¯
TCP BBR è¼»è¼³åˆ¶å¾¡ã«ã‚ˆã‚‹ Amazon CloudFront ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹å‘ä¸Š | Amazon Web Services
Amazon Web Services ãƒ–ãƒã‚° TCP BBR è¼»è¼³åˆ¶å¾¡ã«ã‚ˆã‚‹ Amazon CloudFront ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹å‘ä¸Š ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãƒ‡ãƒªãƒãƒªãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ (CDN) ãŒæä¾›ã™ã¹ãé‡è¦ãªè¦ç´ ã®ï¼‘ã¤ã¨ã—ã¦ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãŒã‚ã‚Šã¾ã™ã€‚ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã®è‰¯ã•ã‚’ç¤ºã™ï¼’ã¤ã®è¦³ç‚¹ã¨ã—ã¦ãƒ¬ã‚¤ãƒ†ãƒ³ã‚·ãƒ¼ã¨ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆãŒã‚ã‚Šã€ã“ã‚Œã‚‰ãŒå„ªã‚Œã¦ã„ã‚‹ã¨å¤§é‡ã®æƒ…å ±ã‚’é«˜é€Ÿã«ã‹ã¤å®‰å®šã—ã¦é€ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“ã‚Œã‚‰ã®è¦³ç‚¹ã¯ãƒ“ãƒ‡ã‚ªã‚¹ãƒˆãƒªãƒ¼ãƒ ã‚„ API ã‚³ãƒ¼ãƒ«ç‰ã®ã‚ã‚‰ã‚†ã‚‹ã‚³ãƒ³ãƒ†ãƒ³ãƒ„é…ä¿¡ã§é‡è¦ã¨ãªã‚Šã¾ã™ã€‚ç§ãŸã¡ã¯ã€æœ€ã‚‚å¹…åºƒã„ãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒ‰ã¨ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«å¯¾ã—ã¦æœ€é«˜å“è³ªã®ä½“é¨“ã‚’æä¾›ã™ã‚‹ã“ã¨ã¨ã€ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã‚’æœ€å¤§åŒ–ã™ã‚‹ã“ã¨ã®ãŸã‚ã«ã€Amazon CloudFront ã®æŠ€è¡“ã¨ã‚¤ãƒ³ãƒ•ãƒ©ã‚¹ãƒˆãƒ©ã‚¯ãƒãƒ£ã‚’ç¶™ç¶šçš„ã«æ”¹è‰¯ã—ã¦ã„ã¾ã™ã€‚ 2019å¹´3æœˆã‹ã‚‰4æœˆã«ã‹ã‘ã¦ã€CloudFront ã¯ãƒ¬ã‚¤ãƒ†ãƒ³ã‚·ãƒ¼ã¨ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆã‚’æ”¹è‰¯ã™ã‚‹æ–°ã—ã„TCP
$halfrack$
halfrack 2019/08/20
tcp

amazon

cdn
ãƒªãƒ³ã‚¯
TCP SACK PANIC - Kernel vulnerabilities - CVE-2019-11477, CVE-2019-11478 & CVE-2019-11479 | Red Hat Customer Portal
0 Get notified when this content is updated. Follow Please wait...
$halfrack$
halfrack 2019/06/21
security

tcp

network

kernel
ãƒªãƒ³ã‚¯
ECN(Explicit Congestion Notification) ã®ã‚ã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
$halfrack$
halfrack 2019/03/29
"Youtube/Netflixã§ã¯åŠ¹æžœãŒã‚ã‚‹ã‚‰ã—ã„" ã¸ã‡

network

router

internet

tcp

ip
ãƒªãƒ³ã‚¯
BBR v2 A Model-based Congestion Control
$halfrack$
halfrack 2019/03/29
Google è¬¹è£½ã®è¼»è¼³åˆ¶å¾¡ BBR ã®æ–°ã—ã„ã‚„ã¤ã€‚é•·ãã¦è¦ç´„å‡ºæ¥ã‚“ã‹ã‚‰èªã‚“ã§ï¼ ECN ä½¿ã†ã®ã¸ã‡ã£ã¦æ„Ÿã˜ã€‚æ—¢ã« YouTube ã¸æŠ•å…¥ã—ã¦ã‚‹ã®ï¼Ÿ

network

tcp

router
ãƒªãƒ³ã‚¯
ã‚³ãƒ©ãƒ - ã‚°ãƒ¼ã‚°ãƒ«ã®ã‚¯ãƒ©ã‚¦ãƒ‰ã‚’æ”¯ãˆã‚‹ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ | ç¬¬22å›žã€€ãƒ‘ã‚±ãƒƒãƒˆãƒã‚¹ã«åŸºã¥ã‹ãªã„æ–°ã—ã„è¼»è¼³åˆ¶å¾¡ã®ä»•çµ„ã¿ â€• BBRï¼ˆå‰ç·¨ï¼‰ï½œCTCæ•™è‚²ã‚µãƒ¼ãƒ“ã‚¹ ç ”ä¿®/ãƒˆãƒ¬ãƒ¼ãƒ‹ãƒ³ã‚°
[ITç ”ä¿®]æ³¨ç›®ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ Python UiPath(RPA) æœ€æ–°æŠ€è¡“å‹•å‘ Microsoft Azure Docker Kubernetes ç¬¬22å›žã€€ãƒ‘ã‚±ãƒƒãƒˆãƒã‚¹ã«åŸºã¥ã‹ãªã„æ–°ã—ã„è¼»è¼³åˆ¶å¾¡ã®ä»•çµ„ã¿ â€• BBRï¼ˆå‰ç·¨ï¼‰ (ä¸äº•æ‚¦å¸) 2017å¹´8æœˆ ã¯ã˜ã‚ã« ä»Šå›žã¯ã€2016å¹´ã«å…¬é–‹ã•ã‚ŒãŸå¦è¡“è¨˜äº‹ã€ŒBBR: Congestion-Based Congestion Controlã€ã‚’ã‚‚ã¨ã«ã—ã¦ã€GoogleãŒé–‹ç™ºã—ãŸã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯é€šä¿¡ã«ãŠã‘ã‚‹æ–°ã—ã„è¼»è¼³åˆ¶å¾¡ã®ä»•çµ„ã¿ã‚’è§£èª¬ã—ã¾ã™ã€‚TCP/IPãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§ä¼çµ±çš„ã«ç”¨ã„ã‚‰ã‚Œã¦ããŸè¼»è¼³åˆ¶å¾¡ã§ã¯ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã§ã®ãƒ‘ã‚±ãƒƒãƒˆãƒã‚¹ã‚’æ¤œçŸ¥ã—ãŸéš›ã«ãƒ‘ã‚±ãƒƒãƒˆã®é€å‡ºé »åº¦ã‚’ãŠã•ãˆã‚‹ã¨ã„ã†ä»•çµ„ã¿ãŒåˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã€ã“ã®ä»•çµ„ã¿ã«ã¯ã€ç¾ä»£ã®é«˜æ€§èƒ½ãªãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ©Ÿå™¨ã«ã¯æœ€é©åŒ–ã•ã‚Œã¦ã„ãªã„ã¨ã„ã†èª²é¡ŒãŒã‚ã‚Šã¾ã—ãŸã€‚ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®å¸¯åŸŸã‚’ååˆ†ã«æ´»ç”¨ã—ãªãŒã‚‰ã€ãƒ‘
$halfrack$
halfrack 2017/08/25
TCP

network
ãƒªãƒ³ã‚¯
è¼»è¼³åˆ¶å¾¡ã®æ–°ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ TCP BBR ã‚’ GCP ã«å°Žå…¥ | Google Cloud å…¬å¼ãƒ–ãƒã‚°
ç§ãŸã¡ã¯ã“ã®ã»ã©ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã®å¸¯åŸŸå¹…ã‚’åºƒã’ã€ãƒ¬ã‚¤ãƒ†ãƒ³ã‚·ã‚’ä½Žæ¸›ã™ã‚‹æœ€å…ˆç«¯ã®è¼»è¼³åˆ¶å¾¡ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã€TCP BBR ã‚’ Google Cloud Platformï¼ˆGCPï¼‰ã«å°Žå…¥ã—ã¾ã—ãŸã€‚TCP BBR ã¯ã€google.com ã‹ã‚‰ã® TCP ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã§ä½¿ã‚ã‚Œã€YouTube ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆã‚’å…¨ä¸–ç•Œå¹³å‡ã§ 4 %ã€ä¸€éƒ¨ã®å›½ã§ã¯ 14 % ä»¥ä¸Šå¼•ãä¸Šã’ãŸã®ã¨åŒã˜ BBR ã§ã™ã€‚ ç§ãŸã¡ WP Engine ã®ãƒ‡ã‚¸ã‚¿ãƒ« ã‚¨ã‚¯ã‚¹ãƒšãƒªã‚¨ãƒ³ã‚¹ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ä¸Šã§ç¨¼åƒã™ã‚‹ 50 ä¸‡ã® WordPress ã‚µã‚¤ãƒˆã¯ã€BBR ã®ãŠã‹ã’ã§é©šç•°çš„ãªé€Ÿã•ã§ãƒãƒ¼ãƒ‰ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚Google ã®ãƒ†ã‚¹ãƒˆã«ã‚ˆã‚Œã°ã€BBR ã®ã‚¹ãƒ«ãƒ¼ãƒ—ãƒƒãƒˆã¯ã“ã‚Œã¾ã§ãƒ™ã‚¹ãƒˆã ã£ãŸ loss-based è¼»è¼³åˆ¶å¾¡ã® 2,700 å€ã«é”ã—ã€ã‚ãƒ¥ãƒ¼ã‚¤ãƒ³ã‚°é…å»¶ã¯ 25 å€ã‚‚ä¸‹ãŒã£ã¦ã„ã¾ã™ã€‚ç§ãŸã¡ãŒ GCP
$halfrack$
halfrack 2017/08/03
network

GCP

TCP

server
ãƒªãƒ³ã‚¯
TIME_WAIT and its design implications for protocols and scalable client server systems - ServerFramework.com
$halfrack$
halfrack 2012/12/25
TIME_WAIT ã®å˜åœ¨æ„ç¾©ã«ã¤ã„ã¦

network

TCP
ãƒªãƒ³ã‚¯
Setting TIME_WAIT TCP
We're trying to tune an application that accepts messages via TCP and also uses TCP for some of its internal messaging. While load testing, we noticed that response time degrades significantly (and then stops altogether) as more simultaneous requests are made to the system. During this time, we see a lot of TCP connections in TIME_WAIT status and someone suggested lowering the TIME_WAIT environmen
$halfrack$
halfrack 2012/12/25
network

TCP

Linux
ãƒªãƒ³ã‚¯
1