pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Dave Hughes <dhughes20@gmail.com>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: tcp_keepalives settings not being set
Date: Wed, 04 Dec 2019 09:54:10 -0500
Message-ID: <17947.1575471250@sss.pgh.pa.us> (raw)
In-Reply-To: <CAFTBbFBdZ=-o6Q_mHe8oYJk=S2eGNxWx2B23w7VWCmXNchs3Mw@mail.gmail.com>
References: <CAFTBbFBdZ=-o6Q_mHe8oYJk=S2eGNxWx2B23w7VWCmXNchs3Mw@mail.gmail.com>

Dave Hughes <dhughes20@gmail.com> writes:
> We have PostgreSQL 10.5 installed on RHEL 6 and I’m new to both.  I’m in
> the process of completing STIGs (Security Technical Implementation Guides)
> for the Department of Defense.  One of the STIGs mentions that we must
> ensure our tcp_keepalives settings are configured in the postgresql.conf
> file.  I currently have these settings set to:
> Tcp_keepalives_idle = 60
> Tcp_keepalives_interval = 60
> Tcp_keepalives_count = 2
> I restarted the database and then ran SHOW_ALL; but it showed all 3
> parameters set to 0.

These will read as zeroes if you're using a non-TCP connection (ie
Unix socket).  Try it after "psql -h localhost" instead of just "psql".

			regards, tom lane





view thread (3+ messages)  latest in thread

Message-ID: <17947.1575471250@sss.pgh.pa.us>
Permalink:  ../17947.1575471250@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/17947.1575471250@sss.pgh.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: tgl@sss.pgh.pa.us, dhughes20@gmail.com, pgsql-admin@lists.postgresql.org
  Subject: Re: tcp_keepalives settings not being set
  In-Reply-To: <17947.1575471250@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox