Re: [PATCH] Inbound Connection Control mechanism: Prioritized Accept

From: Sridhar Samudrala (
Date: Mon Jul 30 2001 - 02:40:43 EST

On Sun, 29 Jul 2001 wrote:

> Hello!
> > The aim of TCP SYN policing is to prevent server overload by discarding
> > connection requests
> Well, I alluded to this particularly. :-)
> But if Sridhar meaned this saying about SYN policing, I would
> prefer this, rather than bare prioritization, which is pretty
> dubious when taken alone.


Yes. I also meant that in kernel prioritization of connections needs to be
complemented with SYN policing so that starvation of a particular class of
connections is avoided. We do mention this in our HOWTO for our patch.

I also agree with your suggestion that an enhancement to our patch can be
to reserve some slots for each class based on the priority and drop lower
priority connections even when accept queue is not full.
I am not sure how much overhead is involved in maintaining the the no. of
slots left for each priority class. Also what should be the ratio of slots
that need to reserved for each class?

Do you think that the existing PAQ patch with SYN policing is a reasonable
way for prioritizing incoming connection requests? Or will it be worthwhile
to enhance our patch to add dropping of connections based on priority.
Preempting existing low priority connections in acceptq with high priority
ones may not be good idea as we need to abort them by sending a RST.

> Alexey

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

This archive was generated by hypermail 2b29 : Tue Jul 31 2001 - 21:00:42 EST