From lianep@absurd.sfbay.sun.com Thu Jul 5 11:17:34 2007 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l65IHXcS004249 for ; Thu, 5 Jul 2007 11:17:34 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l65IFdhv020349 for <@sunmail3mpk.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 5 Jul 2007 19:15:42 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKP0050FXE4S500@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 05 Jul 2007 11:15:40 -0700 (PDT) Received: from sfbaymail1sca.SFBay.Sun.COM ([129.145.154.35]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKP00K5JXE4JKE0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 05 Jul 2007 11:15:40 -0700 (PDT) Received: from absurd.sfbay.sun.com (absurd.SFBay.Sun.COM [129.146.228.172]) by sfbaymail1sca.SFBay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l65IFYKN012318; Thu, 05 Jul 2007 11:15:38 -0700 (PDT) Received: from absurd (localhost [127.0.0.1]) by absurd.sfbay.sun.com (8.14.1+Sun/8.14.1) with ESMTP id l65I82Qs029220; Thu, 05 Jul 2007 11:08:02 -0700 (PDT) Date: Thu, 05 Jul 2007 11:08:02 -0700 From: Liane Praza Subject: 2007/399 inetd backlog SMF property: connection_backlog Sender: lianep@absurd.sfbay.sun.com To: PSARC-ext@sun.com Cc: Vineeth.Pillai@sun.com Message-id: <200707051808.l65I82Qs029220@absurd.sfbay.sun.com> MIME-version: 1.0 X-Mailer: exmh version 2.7.2 01/07/2005 with nmh-1.2 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 3519 I'm submitting this open FastTrack on behalf of Vineeth Pillai. It re-introduces the inetd connection backlog tunable as an inetd property, at a stability of Committed, with a Patch release binding. Timeout expires on 7/11/2007. --- 1. Project Description: We plan to introduce an interface to inetd, to change the default connection backlog queue size. This interface would be an SMF property which can be changed via SMF commands. Till Solaris 9, there was an interface to inetd through which we could specify the size of the backlog queue maintained by inetd. The option was -l as specified in "Inetd Backlog Flag" (PSARC/1995/319) as public. In Solaris 10, this option was erroneously removed and has been requested by customers. We intend to re-introduce the option as a committed inetd SMF property: connection_backlog. This will continue to control the number of incoming connection requests that are temporarily queued at the server end point and later transformed into connections(if accepted by the server applications) on a seperate end point. The default value is unchanged by this proposal and continues to be 10. Admins can customize the value through the standard inetadm(1M) interface. 2. Interface table Property Stability -------- --------- connection_backlog Committed 3. Doc Impact: Manpage of inetd and inetadm would be modified to add this new interface change: inetd(1M) manpage diffs --------------------------------------------------------------------- --- inetd.man Wed Jul 4 12:07:29 2007 +++ inetd.man_new Wed Jul 4 12:09:44 2007 @@ -496,9 +496,13 @@ values 0 and -1 specify that copies lim- iting is disabled. + connection_backlog The backlog queue size. It represents a + bound on the number of incoming client + requests that are queued at the listening + endpoints for servers. + name Can be set to one of the following values: @@ -706,6 +710,7 @@ bind_fail_interval -1 bind_fail_max -1 con_rate_offline -1 + connection_backlog 10 failrate_count 40 failrate_time 60 inherit_env true --------------------------------------------------------------------- inetadm(1M) manpage diffs ---------------------------------------------------------------------- --- inetadm.man Wed Jul 4 11:58:20 2007 +++ inetadm.newman Wed Jul 4 11:58:06 2007 @@ -234,6 +234,7 @@ default inherit_env=TRUE default tcp_trace=FALSE default tcp_wrappers=FALSE + default connection_backlog=10 Example 2 Displaying Default Properties @@ -255,6 +256,7 @@ inherit_env=TRUE tcp_trace=FALSE tcp_wrappers=FALSE + connection_backlog=10 @@ -301,6 +303,7 @@ default inherit_env=TRUE tcp_trace=TRUE default tcp_wrappers=FALSE + default connection_backlog=10 --------------------------------------------------------------------- 4. References: PSARC case: PSARC/1995/319 -- Liane Praza, Solaris Kernel Development liane.praza@sun.com - http://blogs.sun.com/lianep From lianep@absurd.sfbay.sun.com Thu Jul 5 11:45:24 2007 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l65IjN2o004756 for ; Thu, 5 Jul 2007 11:45:23 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l65IhS75026876 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.Com>; Thu, 5 Jul 2007 19:43:32 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKP00603YOHI100@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.Com (ORCPT PSARC-ext@Sun.Com); Thu, 05 Jul 2007 11:43:29 -0700 (PDT) Received: from sfbaymail2sca.sfbay.sun.com ([129.145.155.42]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKP00HMKYOHWX70@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.Com (ORCPT PSARC-ext@Sun.Com); Thu, 05 Jul 2007 11:43:29 -0700 (PDT) Received: from absurd.sfbay.sun.com (absurd.SFBay.Sun.COM [129.146.228.172]) by sfbaymail2sca.sfbay.sun.com (8.13.6+Sun/8.12.10/ENSMAIL,v2.2) with ESMTP id l65IhQjh012233; Thu, 05 Jul 2007 11:43:26 -0700 (PDT) Received: from absurd.sfbay.sun.com (localhost [127.0.0.1]) by absurd.sfbay.sun.com (8.14.1+Sun/8.14.1) with ESMTP id l65I5xSt029194; Thu, 05 Jul 2007 11:05:59 -0700 (PDT) Received: (from lianep@localhost) by absurd.sfbay.sun.com (8.14.1+Sun/8.14.1/Submit) id l65I5woR029190; Thu, 05 Jul 2007 11:05:58 -0700 (PDT) Date: Thu, 05 Jul 2007 11:05:58 -0700 (PDT) From: Liane Praza Subject: inetd backlog SMF property: connection_backlog [PSARC/2007/399 FastTrack timeout 07/11/2007] To: PSARC-ext@sun.com Cc: Vineeth.Pillai@sun.com Message-id: <200707051805.l65I5woR029190@absurd.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 580 Template Version: @(#)sac_nextcase 1.63 06/14/07 SMI This information is Copyright 2007 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: inetd backlog SMF property: connection_backlog 1.2. Name of Document Author/Supplier: Author: Vineeth Pillai 1.3 Date of This Document: 05 July, 2007 4. Technical Description See the case directory for more detail 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From gww@eng.sun.com Thu Jul 5 18:49:17 2007 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l661nGoc015668 for ; Thu, 5 Jul 2007 18:49:16 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l661kdWb037791 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 5 Jul 2007 19:46:40 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKQ0000PIB05U00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 05 Jul 2007 18:47:24 -0700 (PDT) Received: from engmail3mpk.sfbay.Sun.COM ([129.146.11.26]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKQ0035TIAZOLE0@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 05 Jul 2007 18:47:23 -0700 (PDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by engmail3mpk.sfbay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l661lLkW006191; Thu, 05 Jul 2007 18:47:21 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id l661oV3l010719; Thu, 05 Jul 2007 18:50:31 -0700 (PDT) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id l661oUZn010718; Thu, 05 Jul 2007 18:50:30 -0700 (PDT) Date: Thu, 05 Jul 2007 18:50:30 -0700 (PDT) From: Gary Winiger Subject: Re: 2007/399 inetd backlog SMF property: connection_backlog To: PSARC-ext@sun.com, lianep@eng.sun.com Cc: Vineeth.Pillai@sun.com Message-id: <200707060150.l661oUZn010718@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 455 > The default value is unchanged by this proposal and continues to be > 10. Admins can customize the value through the standard inetadm(1M) > interface. This seems like an opportune time to upgrade this legacy service manifest to the SMF policy by including value and action authorizations as well as either creating a new Rights profile to add to Network Management, or by adding the solaris.smf.manage/value authorizations there. Gary.. From brian.utterback@sun.com Fri Jul 6 09:16:10 2007 Received: from sunmail4.Singapore.Sun.COM (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l66GG9Mb000180 for ; Fri, 6 Jul 2007 09:16:09 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.Singapore.Sun.COM (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id l66GDrkE005141 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Sat, 7 Jul 2007 00:14:16 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKR00709MFQQW00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 06 Jul 2007 09:14:14 -0700 (PDT) Received: from eastmail2bur.East.Sun.COM ([129.148.13.40]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKR00ANIMFPQZE0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 06 Jul 2007 09:14:13 -0700 (PDT) Received: from [129.148.226.14] (sr1-unsh01-04.East.Sun.COM [129.148.226.14]) by eastmail2bur.East.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l66GE7RW029580; Fri, 06 Jul 2007 12:14:09 -0400 (EDT) Date: Fri, 06 Jul 2007 12:14:07 -0400 From: Brian Utterback Subject: Re: 2007/399 inetd backlog SMF property: connection_backlog In-reply-to: <200707051808.l65I82Qs029220@absurd.sfbay.sun.com> To: Liane Praza Cc: PSARC-ext@sun.com, Vineeth.Pillai@sun.com Message-id: <468E6A4F.2070706@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200707051808.l65I82Qs029220@absurd.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.5pre (X11/20070702) Status: RO Content-Length: 4356 Any chance that this property can be made per service? I've always thought that this should really be configurable on a per service basis. When you think about it, all those customers asking for this feature really hit this limit on one or two services and need to increase those. Why must we increase them all? The 10 connection default is just fine for most services. Liane Praza wrote: > I'm submitting this open FastTrack on behalf of Vineeth Pillai. It > re-introduces the inetd connection backlog tunable as an inetd property, > at a stability of Committed, with a Patch release binding. > > Timeout expires on 7/11/2007. > > --- > > 1. Project Description: > We plan to introduce an interface to inetd, to change the default > connection backlog queue size. This interface would be an SMF > property which can be changed via SMF commands. > > Till Solaris 9, there was an interface to inetd through which we > could specify the size of the backlog queue maintained by inetd. The > option was -l as specified in "Inetd Backlog Flag" > (PSARC/1995/319) as public. > > In Solaris 10, this option was erroneously removed and has been > requested by customers. We intend to re-introduce the option > as a committed inetd SMF property: connection_backlog. This will > continue to control the number of incoming connection requests that > are temporarily queued at the server end point and later transformed > into connections(if accepted by the server applications) on a seperate > end point. > > The default value is unchanged by this proposal and continues to be > 10. Admins can customize the value through the standard inetadm(1M) > interface. > > 2. Interface table > > Property Stability > -------- --------- > connection_backlog Committed > > 3. Doc Impact: > Manpage of inetd and inetadm would be modified to add this new > interface change: > > inetd(1M) manpage diffs > --------------------------------------------------------------------- > --- inetd.man Wed Jul 4 12:07:29 2007 > +++ inetd.man_new Wed Jul 4 12:09:44 2007 > @@ -496,9 +496,13 @@ > values 0 and -1 specify that copies lim- > iting is disabled. > > + connection_backlog The backlog queue size. It represents a > + bound on the number of incoming client > + requests that are queued at the listening > + endpoints for servers. > > + > name Can be set to one of the following > values: > > @@ -706,6 +710,7 @@ > bind_fail_interval -1 > bind_fail_max -1 > con_rate_offline -1 > + connection_backlog 10 > failrate_count 40 > failrate_time 60 > inherit_env true > > --------------------------------------------------------------------- > > inetadm(1M) manpage diffs > ---------------------------------------------------------------------- > > --- inetadm.man Wed Jul 4 11:58:20 2007 > +++ inetadm.newman Wed Jul 4 11:58:06 2007 > @@ -234,6 +234,7 @@ > default inherit_env=TRUE > default tcp_trace=FALSE > default tcp_wrappers=FALSE > + default connection_backlog=10 > > Example 2 Displaying Default Properties > > @@ -255,6 +256,7 @@ > inherit_env=TRUE > tcp_trace=FALSE > tcp_wrappers=FALSE > + connection_backlog=10 > > @@ -301,6 +303,7 @@ > default inherit_env=TRUE > tcp_trace=TRUE > default tcp_wrappers=FALSE > + default connection_backlog=10 > > --------------------------------------------------------------------- > > 4. References: > PSARC case: PSARC/1995/319 > -- blu The #1 red flag for privacy advocates is when a law enforcement official says "If you aren't doing anything wrong, then you have nothing to worry about." ---------------------------------------------------------------------- Brian Utterback - Solaris RPE, Sun Microsystems, Inc. Ph:877-259-7345, Em:brian.utterback-at-ess-you-enn-dot-kom From Liane.Praza@sun.com Fri Jul 6 11:52:14 2007 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l66IqELC004654 for ; Fri, 6 Jul 2007 11:52:14 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l66IoHsR011983; Fri, 6 Jul 2007 19:50:18 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKR0010BTNR0D00@nwk-avmta-2.sfbay.sun.com>; Fri, 06 Jul 2007 11:50:15 -0700 (PDT) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.63]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKR00GE2TNPAKC0@nwk-avmta-2.sfbay.sun.com>; Fri, 06 Jul 2007 11:50:14 -0700 (PDT) Received: from jurassic-x4600.sfbay.sun.com (localhost [127.0.0.1]) by jurassic-x4600.sfbay.sun.com (8.14.1+Sun/8.14.1) with ESMTP id l66IoDIL222474; Fri, 06 Jul 2007 11:50:13 -0700 (PDT) Date: Fri, 06 Jul 2007 11:50:13 -0700 From: Liane Praza Subject: Re: 2007/399 inetd backlog SMF property: connection_backlog In-reply-to: <468E6A4F.2070706@sun.com> Sender: Liane.Praza@sun.com To: Brian Utterback Cc: Liane Praza , PSARC-ext@sun.com, Vineeth.Pillai@sun.com, lianep@jurassic-x4600.sfbay.sun.com Message-id: <200707061850.l66IoDIL222474@jurassic-x4600.sfbay.sun.com> Content-id: <222467.1183747813.1@jurassic-x4600.sfbay.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 802 Brian Utterback writes: > Any chance that this property can be made per service? I've always > thought that this should really be configurable on a per service > basis. When you think about it, all those customers asking for this > feature really hit this limit on one or two services and need to > increase those. Why must we increase them all? The 10 connection > default is just fine for most services. Answering for Vineeth, as his weekend has probably already started. This property will follow the model of other inetd default properties and both be customizable globally as well as per-service. The modified Service Properties section in inetd(1M) as well as inetadm(1M) describe the model. liane -- Liane Praza, Solaris Kernel Development liane.praza@sun.com - http://blogs.sun.com/lianep From Michael.Hunter@sun.com Fri Jul 6 21:07:29 2007 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l6747T39013736 for ; Fri, 6 Jul 2007 21:07:29 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l6744k7Z063764 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 6 Jul 2007 22:04:49 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKS00B0XJDAUW00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 06 Jul 2007 21:05:34 -0700 (PDT) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKS00B7JJD70110@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 06 Jul 2007 21:05:31 -0700 (PDT) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id l6745Vga028188 for ; Fri, 06 Jul 2007 21:05:31 -0700 (PDT) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JKS00901J45L400@fe-sfbay-10.sun.com> (original mail from Michael.Hunter@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 06 Jul 2007 21:05:31 -0700 (PDT) Received: from sun.com ([10.7.251.174]) by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JKS0058FJD64Z30@fe-sfbay-10.sun.com>; Fri, 06 Jul 2007 21:05:31 -0700 (PDT) Date: Fri, 06 Jul 2007 21:05:30 -0700 From: Michael Hunter Subject: Re: 2007/399 inetd backlog SMF property: connection_backlog In-reply-to: <200707051808.l65I82Qs029220@absurd.sfbay.sun.com> Sender: Michael.Hunter@sun.com To: Liane Praza Cc: PSARC-ext@sun.com, Vineeth.Pillai@sun.com Message-id: <20070706210530.000031d8@localhost> Organization: SMI MIME-version: 1.0 X-Mailer: Claws Mail 2.9.2-csw (GTK+ 2.10.11; i386-pc-solaris2.8) Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200707051808.l65I82Qs029220@absurd.sfbay.sun.com> Status: RO Content-Length: 448 On Thu, 05 Jul 2007 11:08:02 -0700 Liane Praza wrote: [...] > + connection_backlog 10 [...] The current code default backlog limit for unix domain sockets is tighter then this although the pre greenline limit isn't. I think consistency is a feature and the change during greenline isn't documented. I just want to make sure either the greenline change wasn't intended or this change is and is documented. mph From Vineeth.Pillai@sun.com Mon Jul 9 06:22:41 2007 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l69DMeZU023341 for ; Mon, 9 Jul 2007 06:22:40 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l69DKhVF029864 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Mon, 9 Jul 2007 14:20:45 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKW00G1JYEJ3Q00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 09 Jul 2007 06:20:43 -0700 (PDT) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKW00L2GYEGPP70@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 09 Jul 2007 06:20:41 -0700 (PDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l69DKecn007466 for ; Mon, 09 Jul 2007 13:20:40 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JKW00101YC0S200@mail-apac.sun.com> (original mail from Vineeth.Pillai@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 09 Jul 2007 21:20:40 +0800 (SGT) Received: from [129.158.226.236] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JKW00DFJYE6954J@mail-apac.sun.com>; Mon, 09 Jul 2007 21:20:40 +0800 (SGT) Date: Mon, 09 Jul 2007 18:54:58 +0530 From: Vineeth Subject: Re: 2007/399 inetd backlog SMF property: connection_backlog In-reply-to: <20070706210530.000031d8@localhost> Sender: Vineeth.Pillai@sun.com To: Michael Hunter Cc: Liane Praza , PSARC-ext@sun.com Message-id: <4692372A.10701@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200707051808.l65I82Qs029220@absurd.sfbay.sun.com> <20070706210530.000031d8@localhost> User-Agent: Thunderbird 1.5.0.8 (X11/20061113) Status: RO Content-Length: 904 Hi Michael, Backlog queue size for inetd managed service was traditionally 10 itself(I have verified till solaris 6). Thats the reason I hope it was decided to keep it 10 in S10 also. So I think SMF didn't alter the default value of backlog for inetd services and this issue also doesn't change it either. I am not sure about the changes in Unix domain sockets. Many Thanks Vineeth Michael Hunter wrote: > On Thu, 05 Jul 2007 11:08:02 -0700 > Liane Praza wrote: > > [...] > >> + connection_backlog 10 >> > [...] > > The current code default backlog limit for unix domain sockets is > tighter then this although the pre greenline limit isn't. I think > consistency is a feature and the change during greenline isn't > documented. I just want to make sure either the greenline change > wasn't intended or this change is and is documented. > > mph > From Michael.Hunter@sun.com Mon Jul 9 11:32:06 2007 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l69IW6v3002843 for ; Mon, 9 Jul 2007 11:32:06 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l69IUAXx003333 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Mon, 9 Jul 2007 11:30:11 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKX00M1HCQ8D300@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 09 Jul 2007 11:30:08 -0700 (PDT) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKX007EQCQ8WI80@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 09 Jul 2007 11:30:08 -0700 (PDT) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id l69IU8AM015522 for ; Mon, 09 Jul 2007 11:30:08 -0700 (PDT) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JKX00301C8A4O00@fe-sfbay-09.sun.com> (original mail from Michael.Hunter@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 09 Jul 2007 11:30:08 -0700 (PDT) Received: from sun.com ([10.7.251.174]) by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JKX00JL6CPUWU70@fe-sfbay-09.sun.com>; Mon, 09 Jul 2007 11:29:54 -0700 (PDT) Date: Mon, 09 Jul 2007 11:29:54 -0700 From: Michael Hunter Subject: Re: 2007/399 inetd backlog SMF property: connection_backlog In-reply-to: <4692372A.10701@sun.com> Sender: Michael.Hunter@sun.com To: Vineeth Cc: Liane Praza , PSARC-ext@sun.com Message-id: <20070709112954.00000695@localhost> Organization: SMI MIME-version: 1.0 X-Mailer: Claws Mail 2.9.2-csw (GTK+ 2.10.11; i386-pc-solaris2.8) Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200707051808.l65I82Qs029220@absurd.sfbay.sun.com> <20070706210530.000031d8@localhost> <4692372A.10701@sun.com> Status: RO Content-Length: 1467 On Mon, 09 Jul 2007 18:54:58 +0530 Vineeth wrote: > Hi Michael, > > Backlog queue size for inetd managed service was traditionally 10 > itself(I have verified till solaris 6). Thats the reason I hope it was > decided to keep it 10 in S10 also. yes > So I think SMF didn't alter the default value of backlog for inetd > services and this issue also doesn't change it either. yes > > I am not sure about the changes in Unix domain sockets. The backlog limit pre SMF for unix domain sockets was the same as the rest of the services. For SMF that was changed to 2. If there was a real reason for doing this then you might want to document the seperate default. If not then stick with 10. The issue is going to be digging through whatever old code review or deisgn documentation exists to try to understand why the UDS limit was reduced. mph > > Many Thanks > Vineeth > > > Michael Hunter wrote: > > On Thu, 05 Jul 2007 11:08:02 -0700 > > Liane Praza wrote: > > > > [...] > > > >> + connection_backlog 10 > >> > > [...] > > > > The current code default backlog limit for unix domain sockets is > > tighter then this although the pre greenline limit isn't. I think > > consistency is a feature and the change during greenline isn't > > documented. I just want to make sure either the greenline change > > wasn't intended or this change is and is documented. > > > > mph > > > From Liane.Praza@sun.com Tue Jul 10 16:41:39 2007 Received: from sunmail4.Singapore.Sun.COM (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l6ANfccD001420 for ; Tue, 10 Jul 2007 16:41:38 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.Singapore.Sun.COM (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id l6ANdbr1020610; Wed, 11 Jul 2007 07:39:41 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JKZ0070DLQ2BA00@nwk-avmta-2.sfbay.sun.com>; Tue, 10 Jul 2007 16:39:38 -0700 (PDT) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.63]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JKZ006UJLQ16J20@nwk-avmta-2.sfbay.sun.com>; Tue, 10 Jul 2007 16:39:37 -0700 (PDT) Received: from jurassic-x4600.sfbay.sun.com (localhost [127.0.0.1]) by jurassic-x4600.sfbay.sun.com (8.14.1+Sun/8.14.1) with ESMTP id l6ANdaVc637606; Tue, 10 Jul 2007 16:39:36 -0700 (PDT) Date: Tue, 10 Jul 2007 16:39:36 -0700 From: Liane Praza Subject: Re: 2007/399 inetd backlog SMF property: connection_backlog In-reply-to: <20070709112954.00000695@localhost> Sender: Liane.Praza@sun.com To: Michael Hunter Cc: Vineeth , Liane Praza , PSARC-ext@sun.com, lianep@jurassic-x4600.sfbay.sun.com Message-id: <200707102339.l6ANdaVc637606@jurassic-x4600.sfbay.sun.com> Content-id: <637600.1184110776.1@jurassic-x4600.sfbay.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 1571 Michael Hunter writes: > The backlog limit pre SMF for unix domain sockets was the same as the > rest of the services. For SMF that was changed to 2. If there was a > real reason for doing this then you might want to document the seperate > default. If not then stick with 10. The issue is going to be digging > through whatever old code review or deisgn documentation exists to try > to understand why the UDS limit was reduced. Michael and Vineeth and I chatted offline, and believe we have come to resolution. A recap for the alias (and Michael can correct me if I misrepresent)... The unix domain socket used by inetd is an internal implementation detail of inetd introduced in S10. There is no supported way for an administrator or service author to cause inetd to create a unix domain socket on their behalf. The implementors of inetd in S10 (now gone) chose to use a different #define for the backlog of that unix domain socket than is used for the backlog of inetd services. This is an implementation choice that may be reasonable, given that inetd owns that socket wholly. If it is found to be an unreasonable implementation choice, a bug will be filed. In conclusion, this is not an ARC issue, as it pertains wholly to an internal #define of inetd which doesn't effect inetd services. Certainly there's no need to document a possible difference between its value and the backlog used by all other inetd services, as being introduced in this case. liane -- Liane Praza, Solaris Kernel Development liane.praza@sun.com - http://blogs.sun.com/lianep From Liane.Praza@sun.com Wed Jul 18 09:08:53 2007 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l6IG8rJ6024350 for ; Wed, 18 Jul 2007 09:08:53 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l6IG6lqG023460; Wed, 18 Jul 2007 09:06:49 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JLD00519U3BR200@nwk-avmta-2.sfbay.sun.com>; Wed, 18 Jul 2007 09:06:47 -0700 (PDT) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.59]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JLD00MGXU3BHOE0@nwk-avmta-2.sfbay.sun.com>; Wed, 18 Jul 2007 09:06:47 -0700 (PDT) Received: from jurassic-x4600.sfbay.sun.com (localhost [127.0.0.1]) by jurassic-x4600.sfbay.sun.com (8.14.1+Sun/8.14.1) with ESMTP id l6IG6lqY826583; Wed, 18 Jul 2007 09:06:47 -0700 (PDT) Date: Wed, 18 Jul 2007 09:06:47 -0700 From: Liane Praza Subject: Re: 2007/399 inetd backlog SMF property: connection_backlog In-reply-to: <200707060150.l661oUZn010718@marduk.eng.sun.com> Sender: Liane.Praza@sun.com To: Gary Winiger Cc: PSARC-ext@sun.com, lianep@eng.sun.com, Vineeth.Pillai@sun.com Message-id: <200707181606.l6IG6lqY826583@jurassic-x4600.sfbay.sun.com> Content-id: <826577.1184774807.1@jurassic-x4600.sfbay.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 4377 Gary Winiger writes: > > The default value is unchanged by this proposal and continues to be > > 10. Admins can customize the value through the standard inetadm(1M) > > interface. > > This seems like an opportune time to upgrade this legacy service > manifest to the SMF policy by including value and action authorizations > as well as either creating a new Rights profile to add to Network > Management, or by adding the solaris.smf.manage/value authorizations > there. Gary and the project team has agreed that exactly this will be done as part of this case. I've included an updated spec below. As we agreed in last week's meeting, this closes the last remaining issue, so I'll be marking this case as approved. liane --- 1. Project Description: We plan to introduce an interface to inetd, to change the default connection backlog queue size. This interface would be an SMF property which can be changed via SMF commands. Till Solaris 9, there was an interface to inetd through which we could specify the size of the backlog queue maintained by inetd. The option was -l as specified in "Inetd Backlog Flag" (PSARC/1995/319) as public. In Solaris 10, this option was erroneously removed and has been requested by customers. We intend to re-introduce the option as a committed inetd SMF property: connection_backlog. This will continue to control the number of incoming connection requests that are temporarily queued at the server end point and later transformed into connections(if accepted by the server applications) on a seperate end point. The default value is unchanged by this proposal and continues to be 10. Admins can customize the value through the standard inetadm(1M) interface. In addition, inetd will be brought into compliance with the RBAC portion of the SMF policy by this case. We'll introduce the inetd Management rights profile, include that in the Network Management profile, and add solaris.smf.manage.inetd and solaris.smf.value.inetd authorizations. 2. Interface table Property Stability -------- --------- connection_backlog Committed Action Authorization: solaris.smf.manage.inetd Value Authorization: solaris.smf.value.inetd Rights Profile: inetd Management 3. Doc Impact: Manpage of inetd and inetadm would be modified to add this new interface change: inetd(1M) manpage diffs --------------------------------------------------------------------- --- inetd.man Wed Jul 4 12:07:29 2007 +++ inetd.man_new Wed Jul 4 12:09:44 2007 @@ -496,9 +496,13 @@ values 0 and -1 specify that copies lim- iting is disabled. + connection_backlog The backlog queue size. It represents a + bound on the number of incoming client + requests that are queued at the listening + endpoints for servers. + name Can be set to one of the following values: @@ -706,6 +710,7 @@ bind_fail_interval -1 bind_fail_max -1 con_rate_offline -1 + connection_backlog 10 failrate_count 40 failrate_time 60 inherit_env true --------------------------------------------------------------------- inetadm(1M) manpage diffs ---------------------------------------------------------------------- --- inetadm.man Wed Jul 4 11:58:20 2007 +++ inetadm.newman Wed Jul 4 11:58:06 2007 @@ -234,6 +234,7 @@ default inherit_env=TRUE default tcp_trace=FALSE default tcp_wrappers=FALSE + default connection_backlog=10 Example 2 Displaying Default Properties @@ -255,6 +256,7 @@ inherit_env=TRUE tcp_trace=FALSE tcp_wrappers=FALSE + connection_backlog=10 @@ -301,6 +303,7 @@ default inherit_env=TRUE tcp_trace=TRUE default tcp_wrappers=FALSE + default connection_backlog=10 --------------------------------------------------------------------- 4. References: PSARC case: PSARC/1995/319