用netstat命令发现大量的TIME_WAIT现象

最新推荐文章于 2025-07-17 20:31:22 发布

最新推荐文章于 2025-07-17 20:31:22 发布 · 142 阅读

本文介绍了解决大量TIME_WAIT状态连接的方法，通过调整Linux内核参数net.ipv4.tcp_tw_reuse和net.ipv4.tcp_tw_recycle来重复利用TIME_WAIT状态的连接，减少TIME_WAIT状态的数量，提高网络性能。

用netstat命令发现大量的TIME_WAIT现象：
netstat -ae|grep 1521|grep root
……
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root
TIME_WAIT root

检查net.ipv4.tcp_tw当前值，将当前的值更改为1分钟：
[root@aaa1 ~]# sysctl -a|grep net.ipv4.tcp_tw
net.ipv4.tcp_tw_reuse = 0
net.ipv4.tcp_tw_recycle = 0
[root@aaa1 ~]#

vi /etc/sysctl
增加或修改net.ipv4.tcp_tw值：
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1

使内核参数生效：
[root@aaa1 ~]# sysctl -p

[root@aaa1 ~]# sysctl -a|grep net.ipv4.tcp_tw
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1

用netstat再观察正常

这里解决问题的关键是如何能够重复利用time_wait的值，我们可以设置时检查一下time和wait的值
#sysctl -a | grep time | grep wait
net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120