FR 3.0.21 : Failed adding proxy socket: Too many open sockets

Alan DeKok aland at deployingradius.com
Wed Aug 19 13:50:50 CEST 2020


On Aug 19, 2020, at 5:50 AM, Arnaud LAURIOU <arnaud.lauriou at renater.fr> wrote:
> Well, I may have found home server guilty, a broken one. I'm investigating ...
> But :
> - I don't understand why we didn't have this issue with our current FR 2.1 proxy using the same home servers list
> and having 500 open udp sockets.

  v2 is different from v3.

> - It's difficult to prevent from all home servers down/slow or broken.
> 
> Is there a way to mitigate this issue ?

  Read proxy.conf.  Look for "max_outstanding".  This is documented.

> Close udp sockets ?
> It seems that once this limit is reached the current sockets are never closed and all new clients requests are rejected.

  Likely because it's still trying to proxy to the home server, as it still thinks that the home server is alive.

  If you fill up the proxy with bad packets, then bad things happen.  Update the configuration to limit the number of packets proxied to that home server, and bad things won't happen.

  Alan DeKok.




More information about the Freeradius-Users mailing list