From: erik.kapfer <ummeegge@ipfire.org>
Date: Fri, 14 Dec 2018 11:53:36 +0000 (+0100)
Subject: sysctl.conf: Enable TFO in sysctl
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=refs%2Fheads%2Fsysctl_tfo;p=people%2Fummeegge%2Fipfire-2.x.git

sysctl.conf: Enable TFO in sysctl

Fixes #11945

This do not enables TFO support in general there is still the execution of
echo 3 > /proc/sys/net/ipv4/tcp_fastopen
needed after every reboot (rc.local e.g.).

For further information see:
https://tools.ietf.org/html/rfc7413#section-4.2.2
https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt

Signed-off-by: erik.kapfer <ummeegge@ipfire.org>
---

diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf
index 4066af767b..52b21efa42 100644
--- a/config/etc/sysctl.conf
+++ b/config/etc/sysctl.conf
@@ -13,6 +13,7 @@ net.ipv4.tcp_syncookies = 1
 net.ipv4.tcp_fin_timeout = 30
 net.ipv4.tcp_syn_retries = 3
 net.ipv4.tcp_synack_retries = 3
+net.ipv4.tcp_fastopen = 3
 
 net.ipv4.conf.default.arp_filter = 1
 net.ipv4.conf.default.rp_filter = 0