security-bulletins/advisories/third-party/2019-001.md at master · Netflix/security-bulletins
Netflix has identified several TCP networking vulnerabilities in FreeBSD and Linux kernels. The vulnerabilities specifically relate to the Maximum Segment Size (MSS) and TCP Selective Acknowledgement (SACK) capabilities. The most serious, dubbed “SACK Panic,” allows a remotely-triggered kernel panic on recent Linux kernels. There are patches that address most of these vulnerabilities. If patches c
The mystery of the hanging S3 downloads
A coworker was experiencing a strange problem with their Internet connection at home. Large downloads from most sites worked fine. The exception was that downloads from a Amazon S3 would get up to a good speed (500Mbps), stall completely for a few seconds, restart for a while, stall again, and eventually hang completely. The problem seemed to be specific to S3, downloads from generic AWS VMs were
Nginx Optimization: understanding sendfile, tcp_nodelay and tcp_nopush
This article a is translation by popular request of Optimisations Nginx, bien comprendre sendfile, tcpnodelay et tcpnopush I wrote in French in January. Most articles dealing with optimizing Nginx performances recommend to use sendfile, tcp_nodelay and tcp_nopush options in the nginx.conf configuration file. Unfortunately, almost none of them tell neither how they impact the Web server nor how the
ほげめも: TCP Segmentation Offload の罠
TCP Segmentation Offload の罠 MicroServer のネットワークの性能テスト中、以前より発生していたある自宅サーバの怪現象に再び悩まされていたのですが、昨日ようやくその謎が解けました。 怪現象サーバには ASUS P5NT WS という nForce 680i チップセットのマザーボードを使っており、オンボードで MCP55 の GbE が載っています。Linux カーネルは Debian lenny の 2.6.26-2-openvz-amd64、ドライバは forcedeth 0.61 というちょっと古いものです。 このサーバ server1 から、他のサーバ server2 に HTTP でファイル転送するときに、server1 でキャプチャした送信パケットと、server2 でキャプチャした受信パケットが一致しないのです。 server1 10.101
TCP Tune
Enabling High Performance Data Transfers System Specific Notes for System Administrators (and Privileged Users) These notes are intended to help users and system administrators maximize TCP/IP performance on their computer systems. They summarize all of the end-system (computer system) network tuning issues including a tutorial on TCP tuning and easy configuration checks for non-experts. Introduct
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
IBM Developer
GitHub - KLab/miruo: Pretty-print TCP session monitor/analyzer