0
点赞
收藏
分享

微信扫一扫

Tcp 连接出现大量ESTABLISHED连接


文章目录

  • ​​查看tomcat配置​​
  • ​​查看linux系统配置​​


特征:


1,连接进不去;


2,大量超时;


3,cpu彪高

netstat -n |grep 端口| awk '/^tcp/ {++y[$NF]} END {for(w in y) print w, y[w]}'

CLOSE_WAIT 348
ESTABLISHED 1240
TIME_WAIT 5621

排查:

查看tomcat配置

<Executor name="tomcatThreadPool" namePrefix="wkApi-exec-"  maxThreads="800" minSpareThreads="200"/>
<Connector executor="tomcatThreadPool" port="9000"
protocol="org.apache.coyote.http11.Http11NioProtocol"
connectionTimeout="60000"
redirectPort="8443"
URIEncoding="UTF-8"
maxPostSize="0"
maxThreads="1024"
minSpareThreads="256"
acceptCount="300"
compression="on"
compressionMinSize="2048"
noCompressionUserAgents="gozilla,traviata"
CompressableMimeType="text/html,text/xml,text/plain,text/css,text/javascript,text/json,application/x-javascript,application/javascript,application/json,image/png,image/jpeg"
/>

  1. connectionTimeout 过大;
  2. acceptCount 过小

查看linux系统配置

系统默认240秒才会回收,

vim/etc/sysctl.conf
#编辑文件,加入以下内容:
net.ipv4.tcp_syncookies =1#表示开启SYN Cookies。当出现SYN等待队列溢出时,启用cookies来处理,可防范少量SYN攻击,默认为0,表示关闭;
net.ipv4.tcp_tw_reuse =1#表示开启重用。允许将TIME-WAIT sockets重新用于新的TCP连接,默认为0,表示关闭;
net.ipv4.tcp_tw_recycle =1#表示开启TCP连接中TIME-WAIT sockets的快速回收,默认为0,表示关闭;
net.ipv4.tcp_fin_timeout=30#修改系統默认的 TIMEOUT 时间。
#然后执行以下命令让参数生效
/sbin/sysctl -p


举报

相关推荐

0 条评论