enable TCp window shrinking

The default is a potential denial of service issue via TCP memory exhaustion.
2024-04-13 11:04:42 -04:00 · 2024-04-13 11:04:42 -04:00 · c291b5fa23
parent 6a325f8798
commit c291b5fa23
1 changed files with 1 additions and 0 deletions
--- a/sysctl.d/local.conf
+++ b/sysctl.d/local.conf
@ -10,6 +10,7 @@ net.ipv4.conf.*.rp_filter = 0

 net.ipv4.tcp_ecn = 1
 net.ipv4.tcp_slow_start_after_idle = 0
+net.ipv4.tcp_shrink_window = 1
 net.ipv4.tcp_notsent_lowat = 131072
 net.ipv4.tcp_fin_timeout = 30
 net.ipv4.tcp_rfc1337 = 1