Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to increase queue size via system tunable

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      MarekAndreansky
      last edited by

      Re: sonewconn: pcb Listen queue overflow

      I have followed the steps in the topic above and found that "lighttpd_p" has a queue size of 128 while it is constantly at 193 connections.

      I do not know why but before investigating I wanted to increase the queue size by using kern.ipc.soacceptqueue and setting it to 512

      The tunable was not listed under Advanced > System Tunables so I added it and applied, but the queue size has not increased.

      Did I use the correct tunable?

      1 Reply Last reply Reply Quote 0
      • kiokomanK
        kiokoman LAYER 8
        last edited by

        yup, and it's working for me

        [2.4.4-RELEASE][root@pfSense.localdomain]/root: netstat -L4an
        Current listen queue sizes (qlen/incqlen/maxqlen)
        Proto Listen                           Local Address
        tcp4  0/0/128                          *.7445
        [2.4.4-RELEASE][root@pfSense.localdomain]/root: sysctl kern.ipc.soacceptqueue=512
        kern.ipc.soacceptqueue: 128 -> 512
        [2.4.4-RELEASE][root@pfSense.localdomain]/root: netstat -L4an
        Current listen queue sizes (qlen/incqlen/maxqlen)
        Proto Listen                           Local Address
        tcp4  0/0/512                          *.7445
        

        check from console with

        sysctl -a | grep kern.ipc.soacceptqueue
        

        if the value is realy 512
        you need to stop the service and start again, probably a restart of the service is not enough

        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
        Please do not use chat/PM to ask for help
        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

        1 Reply Last reply Reply Quote 1
        • M
          MarekAndreansky
          last edited by

          You are right, I restarted the service and the new settings were applied.

          Makes me wonder thou why lighttpd in combination with pfblockerNG had over 100 sessions opened for one ip address hours after I disconnected the device from the network.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.