Re: [PATCH] sysctl.conf: Enable TFO in sysctl

[Michael Tremer <michael.tremer@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1123 bytes --]

Hi,

> On 14 Dec 2018, at 12:03, erik.kapfer <ummeegge(a)ipfire.org> wrote:
> 
> Fixes #11945
> 
> This do not enables TFO support in general there is still the execution of
> echo 3 > /proc/sys/net/ipv4/tcp_fastopen
> needed after every reboot (rc.local e.g.).
> 

Why does this not enable it? Setting that value to 3 is what the sysctl command does.

I am confused.

> For further information see:
> https://tools.ietf.org/html/rfc7413#section-4.2.2
> https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt
> 
> Signed-off-by: erik.kapfer <ummeegge(a)ipfire.org>
> ---
> config/etc/sysctl.conf | 1 +
> 1 file changed, 1 insertion(+)
> 
> diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf
> index 4066af767..52b21efa4 100644
> --- a/config/etc/sysctl.conf
> +++ b/config/etc/sysctl.conf
> @@ -13,6 +13,7 @@ net.ipv4.tcp_syncookies = 1
> net.ipv4.tcp_fin_timeout = 30
> net.ipv4.tcp_syn_retries = 3
> net.ipv4.tcp_synack_retries = 3
> +net.ipv4.tcp_fastopen = 3
> 
> net.ipv4.conf.default.arp_filter = 1
> net.ipv4.conf.default.rp_filter = 0
> -- 
> 2.12.2
>