]> git.ipfire.org Git - people/ummeegge/ipfire-2.x.git/commitdiff
sysctl.conf: Enable TFO in sysctl sysctl_tfo
authorerik.kapfer <ummeegge@ipfire.org>
Fri, 14 Dec 2018 11:53:36 +0000 (12:53 +0100)
committererik.kapfer <ummeegge@ipfire.org>
Fri, 14 Dec 2018 11:53:36 +0000 (12:53 +0100)
Fixes #11945

This do not enables TFO support in general there is still the execution of
echo 3 > /proc/sys/net/ipv4/tcp_fastopen
needed after every reboot (rc.local e.g.).

For further information see:
https://tools.ietf.org/html/rfc7413#section-4.2.2
https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt

Signed-off-by: erik.kapfer <ummeegge@ipfire.org>
config/etc/sysctl.conf

index 4066af767b2876eefbb87f872f5342cf5c78e705..52b21efa42631fa19e8fa80d3b21dbaec30c02a5 100644 (file)
@@ -13,6 +13,7 @@ net.ipv4.tcp_syncookies = 1
 net.ipv4.tcp_fin_timeout = 30
 net.ipv4.tcp_syn_retries = 3
 net.ipv4.tcp_synack_retries = 3
+net.ipv4.tcp_fastopen = 3
 
 net.ipv4.conf.default.arp_filter = 1
 net.ipv4.conf.default.rp_filter = 0