1372723886 P * alpha_one_x86 No matter how dark the night, somehow the Sun rises once again 1372729306 Q * hijacker Read error: Connection timed out 1372729322 J * hijacker ~hijacker@213.91.163.5 1372731847 M * Bertl off to bed now .. have a good one everyone! 1372731852 N * Bertl Bertl_zZ 1372734286 N * l0kit Guest1794 1372734295 J * l0kit ~1oxT@0001b54e.user.oftc.net 1372734692 Q * Guest1794 Ping timeout: 480 seconds 1372739713 Q * Kabaka Quit: s/Kabaka// 1372739747 J * Kabaka ~Kabaka@659AAC5BJ.tor-irc.dnsbl.oftc.net 1372748113 J * Ghislain ~aqueos@adsl1.aqueos.com 1372750897 Q * Rylai Ping timeout: 480 seconds 1372754357 Q * ser Ping timeout: 480 seconds 1372757844 Q * Ghislain Read error: Connection reset by peer 1372757851 J * Ghislain ~aqueos@adsl1.aqueos.com 1372759939 N * Bertl_zZ Bertl 1372759943 M * Bertl morning folks! 1372762794 Q * _nono_ Ping timeout: 480 seconds 1372763164 Q * distemper Read error: Connection reset by peer 1372763177 J * distemper ~user@2001:470:50b6:0:25b4:8f57:7a03:fe16 1372763332 J * _nono_ ~gomes@licencieux.ircam.fr 1372763379 Q * ircuser-1 Ping timeout: 480 seconds 1372766848 J * ircuser-1 ~ircuser-1@35.222-62-69.ftth.swbr.surewest.net 1372767262 Q * ncopa Quit: Leaving 1372767356 J * ncopa ~test@3.203.202.84.customer.cdi.no 1372767490 J * glen ~glen@scratchy.delfi.ee 1372767499 M * glen any ideas why do i get on higher usage such errors: connect(3, {sa_family=AF_INET, sin_port=htons(3312), sin_addr=inet_addr("192.168.24.62")}, 16) = -1 EADDRNOTAVAIL (Cannot assign requested address) 1372767526 M * glen that 192.168.24.62:3312 just starts throwing EADDRNOTAVAIL and when i move connections to different ip, the different ip overloads too giving EADDRNOTAVAIL 1372767534 M * glen and then the previous ip:port starts to work again 1372767545 M * glen i don't see any iptables nat modules loaded, but seems some limit gets easily FULL 1372767883 M * glen like SO_REUSEADDR needed? 1372768017 M * glen ah, indeed 1372768029 M * glen net.ipv4.tcp_tw_recycle=1 and net.ipv4.tcp_tw_reuse=1 helped 1372768077 M * Bertl what kernel/patch is this? 1372768126 M * glen something on 3.4 1372768138 M * glen ah 3.3.1-1 1372768160 M * glen byut yea, my problem was bad tcp config 1372768732 M * glen but oddly ... i can't access another vserver after enabling tw recycle 1372768772 M * glen to 443 port, 80 port is ok 1372769243 Q * Aiken Remote host closed the connection 1372769437 Q * distemper Remote host closed the connection 1372769553 J * distemper ~user@2001:470:50b6:0:8d26:80b3:fb17:9f1f 1372769554 Q * distemper autokilled: This host may be infected. Mail support@oftc.net with questions. BOPM (2013-07-02 12:52:34) 1372770522 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372770540 M * Bertl sounds odd indeed 1372770547 M * Bertl anyway, off for now ... bbl 1372770553 N * Bertl Bertl_oO 1372771352 J * distemper ~user@cable-86-56-68-115.cust.telecolumbus.net 1372772953 J * ser ~ser@host1.tldp.ibiblio.org 1372773861 Q * thierryp Read error: Connection reset by peer 1372773892 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372774367 Q * ser Ping timeout: 480 seconds 1372774439 Q * nkukard Ping timeout: 480 seconds 1372777989 M * glen Bertl_oO: i enabled net.ipv4.tcp_tw_recycle=1, and that played bad with NAT based firewalls 1372777997 M * glen so i switched to net.ipv4.tcp_tw_reuse=1 and that is oka 1372778010 M * glen but what i don't understand, is that technically i ran out of 65k sockets, right? 1372778020 M * glen but i looked ss -nat output and i saw only 15k sockets there 1372778029 M * glen SYN_SENT: 5 1372778030 M * glen CLOSE_WAIT: 19 1372778030 M * glen ESTABLISHED: 5462 1372778030 M * glen FIN_WAIT1: 56 1372778030 M * glen LAST_ACK: 83 1372778032 M * glen FIN_WAIT2: 6 1372778034 M * glen TIME_WAIT: 9666 1372778037 M * glen SYN_RECV: 6 1372778039 M * glen LISTEN: 9 1372778061 M * glen and in such system without tw_reuse making outgoing connections to same host:ip pair gave EADDRNOTAVAIL 1372778087 M * Bertl_oO sound more like a 16k limit 1372778097 M * glen what is such limit? 1372778111 M * Bertl_oO no idea 1372778133 M * glen no, such limits is way higher! 1372778133 M * glen # sysctl -a|grep tw 1372778133 M * glen net.ipv4.tcp_max_tw_buckets = 262144 1372778180 M * Bertl_oO somaxconn? 1372778253 M * glen that's too low to be any limit at all 1372778259 M * glen net.core.somaxconn = 128 1372778288 M * Bertl_oO limits the size of the listen queue for accepting new TCP connections 1372778320 M * glen somaxconn was not the problem because the problem was in the other end 1372778326 M * glen i.e i could not make outgoing connections 1372778340 M * Bertl_oO fair enough 1372778383 M * glen ow 1372778383 M * glen net.ipv4.ip_local_port_range = 1024 4999 1372778389 M * distemper is connection tracking enabled, maybe? 1372778389 M * glen this is definately too low 1372778396 M * glen no, nat is blacklisted 1372778460 M * glen this local port range could not be limit too because it couldn't imho even go that far to have 9666 tw sockets? 1372779187 M * Bertl_oO well, I'd say, for whatever reason, enough sockets got stuck in some state so that all ports were full 1372779211 M * Bertl_oO once that happens, you'll get the EADDRNOTAVAIL 1372779217 M * arekm Bertl_oO: q: any plans for 3.10? 1372779241 M * Bertl_oO not atm, i.e. I haven't even looked at 3.10 yet 1372779713 Q * thierryp Remote host closed the connection 1372781349 J * bonbons ~bonbons@2001:a18:20b:a301:c04d:eb7d:4531:909 1372781548 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372781806 J * |alpha_one_x86| ~kvirc@190.186.23.221 1372782029 Q * thierryp Ping timeout: 480 seconds 1372783212 J * Rylai ~rylai@gimme.your.oper.pw 1372783742 J * nkukard ~nkukard@197.87.42.176 1372784485 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372784971 Q * thierryp Ping timeout: 480 seconds 1372785919 P * |alpha_one_x86| No matter how dark the night, somehow the Sun rises once again 1372786327 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372786809 Q * thierryp Ping timeout: 480 seconds 1372787565 J * hijacker_ ~hijacker@cable-84-43-134-121.mnet.bg 1372789956 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372790441 Q * thierryp Ping timeout: 480 seconds 1372793608 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372794092 Q * thierryp Ping timeout: 480 seconds 1372794741 Q * imachine Remote host closed the connection 1372794743 J * imachine ~imachine@robot.greenhost24.pl 1372795588 J * alpha_one_x86 ~kvirc@190.186.23.221 1372797138 J * bl4ckc0der ~gn1mo@178-33-39-105.ovh.net 1372797241 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372797724 Q * thierryp Ping timeout: 480 seconds 1372798518 J * Aiken ~Aiken@2001:44b8:2168:1000:21f:d0ff:fed6:d63f 1372798847 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372798938 Q * bonbons Quit: Leaving 1372799035 Q * thierryp Read error: No route to host 1372799062 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372799219 Q * thierryp Remote host closed the connection 1372800164 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372802205 Q * hijacker_ Quit: Leaving 1372803743 Q * thierryp Remote host closed the connection 1372804139 Q * Ghislain Quit: Leaving. 1372807172 Q * bl4ckc0der 1372807975 J * thierryp ~thierry@LNeuilly-152-21-8-169.w193-253.abo.wanadoo.fr 1372808457 Q * thierryp Ping timeout: 480 seconds