From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] sysctl.conf: Enable TFO in sysctl
Date: Fri, 14 Dec 2018 14:59:53 +0000
Message-ID: <E897BFB1-E72F-4833-B252-86D37BE87F39@ipfire.org>
In-Reply-To: <20181214120332.5372-1-ummeegge@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============6115816426525354121=="
List-Id: <development.lists.ipfire.org>

--===============6115816426525354121==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi,

> On 14 Dec 2018, at 12:03, erik.kapfer <ummeegge(a)ipfire.org> wrote:
>=20
> Fixes #11945
>=20
> This do not enables TFO support in general there is still the execution of
> echo 3 > /proc/sys/net/ipv4/tcp_fastopen
> needed after every reboot (rc.local e.g.).
>=20

Why does this not enable it? Setting that value to 3 is what the sysctl comma=
nd does.

I am confused.

> For further information see:
> https://tools.ietf.org/html/rfc7413#section-4.2.2
> https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt
>=20
> Signed-off-by: erik.kapfer <ummeegge(a)ipfire.org>
> ---
> config/etc/sysctl.conf | 1 +
> 1 file changed, 1 insertion(+)
>=20
> diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf
> index 4066af767..52b21efa4 100644
> --- a/config/etc/sysctl.conf
> +++ b/config/etc/sysctl.conf
> @@ -13,6 +13,7 @@ net.ipv4.tcp_syncookies =3D 1
> net.ipv4.tcp_fin_timeout =3D 30
> net.ipv4.tcp_syn_retries =3D 3
> net.ipv4.tcp_synack_retries =3D 3
> +net.ipv4.tcp_fastopen =3D 3
>=20
> net.ipv4.conf.default.arp_filter =3D 1
> net.ipv4.conf.default.rp_filter =3D 0
> --=20
> 2.12.2
>=20


--===============6115816426525354121==--