Hey all,
I'm running a few Dachstein boxes (with Seawall), and I'm having some issues with one of them. My roommate runs a P2P application that opens a huge number of connections. The application can be setup to only allow a certain number of connections, but as his PC is behind the router that limitation occurs behind the router. So what happens is if he limits the open connections to 500 or so, his box will will only ever have 500 connections (verified by running netstat), but when I run netstat -Mn | grep -c 192.168.2.201 (his IP) on the router there are 2200-3000 connections.
Having this many connections makes everything really slow (browsing times out, etc). He only seems to be using about 25% of the available bandwidth.
Stopping the P2P app fixes the problem.
So I was wondering if there is any way to limit the amount of connections that a particular box can use? Any suggestions would be appreciated.
I'm reasonably (though not completely ... one never is with a negative) sure that there is no way to do this with Dachstein (that is, with 2.2.x kernels). I'm less certain about 2.4.x ... I still don't really know iptables as well as I'd like to ... so I'll leave it to someone else to indicate if moving to Bering might help.
The one thought I do have ... if you have limited the P2P app's open connections to 500 "or so", where are the other 1700-2500 (or so) that the Dach box reports coming from? My *guess* is that they are "stale" connections ... that your (carefully, it seems) unnamed "P2P application" may open only 500 at a time, but it closes old ones and opens new ones often. If this is so, you might fiddle with the MASQ timeout setting in ipchains ("ipchains -M -S ...") to cause the stale connections to close more quickly.
But, honestly, I'd also look further for the source of the problem (the "makes everything really slow" symptom, I mean). IP MASQ under ipchains allows for about 5000 connections, so you shouldn't actually be running short unless the rest of the LAN is extraordinarily active ... and routing is so little work for modern CPUs that I'd be surprised if system load on the Dach router were a factor (unless you're also doing a lot of VPN'ing or something else with encryption). So I'd be inclined to look at that "about 25% of the available bandwidth" measure you report a bit more carefully and skeptically, better to understand what is really going on.
-------------------------------------------------------
This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
