pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedtcp_keepalives settings not being set
3+ messages / 2 participants
[nested] [flat]
* tcp_keepalives settings not being set
@ 2019-12-04 14:33 Dave Hughes <dhughes20@gmail.com>
0 siblings, 1 reply; 3+ messages in thread
From: Dave Hughes @ 2019-12-04 14:33 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
Hello,
We have PostgreSQL 10.5 installed on RHEL 6 and I’m new to both. I’m in
the process of completing STIGs (Security Technical Implementation Guides)
for the Department of Defense. One of the STIGs mentions that we must
ensure our tcp_keepalives settings are configured in the postgresql.conf
file. I currently have these settings set to:
Tcp_keepalives_idle = 60
Tcp_keepalives_interval = 60
Tcp_keepalives_count = 2
I restarted the database and then ran SHOW_ALL; but it showed all 3
parameters set to 0.
After looking online, I saw a post where possibly Linux is not allowing
this to be configured and instead is using the OS parameters. When I ran
the command: sysctl -A | grep net.ipv4, it returned:
Net.ipv4.tcp_keepalive_time = 7200
Net.ipv4.tcp_keepalive_probs = 9
Net.ipv4.tcp_keepalive_intvl = 75
Is it possible Linux is not allowing these parameters to be configured via
the PostgreSQL config file?
Thanks in advance,
Dave Hughes
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: tcp_keepalives settings not being set
@ 2019-12-04 14:54 Tom Lane <tgl@sss.pgh.pa.us>
parent: Dave Hughes <dhughes20@gmail.com>
0 siblings, 1 reply; 3+ messages in thread
From: Tom Lane @ 2019-12-04 14:54 UTC (permalink / raw)
To: Dave Hughes <dhughes20@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org
Dave Hughes <dhughes20@gmail.com> writes:
> We have PostgreSQL 10.5 installed on RHEL 6 and I’m new to both. I’m in
> the process of completing STIGs (Security Technical Implementation Guides)
> for the Department of Defense. One of the STIGs mentions that we must
> ensure our tcp_keepalives settings are configured in the postgresql.conf
> file. I currently have these settings set to:
> Tcp_keepalives_idle = 60
> Tcp_keepalives_interval = 60
> Tcp_keepalives_count = 2
> I restarted the database and then ran SHOW_ALL; but it showed all 3
> parameters set to 0.
These will read as zeroes if you're using a non-TCP connection (ie
Unix socket). Try it after "psql -h localhost" instead of just "psql".
regards, tom lane
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: tcp_keepalives settings not being set
@ 2019-12-04 15:09 Dave Hughes <dhughes20@gmail.com>
parent: Tom Lane <tgl@sss.pgh.pa.us>
0 siblings, 0 replies; 3+ messages in thread
From: Dave Hughes @ 2019-12-04 15:09 UTC (permalink / raw)
To: Tom Lane <tgl@sss.pgh.pa.us>; +Cc: pgsql-admin@lists.postgresql.org
Thank you! That change allowed me to view those parameters. I had no idea
i wasn't connecting via TCP.
Thanks again!
On Wed, Dec 4, 2019 at 9:54 AM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Dave Hughes <dhughes20@gmail.com> writes:
> > We have PostgreSQL 10.5 installed on RHEL 6 and I’m new to both. I’m in
> > the process of completing STIGs (Security Technical Implementation
> Guides)
> > for the Department of Defense. One of the STIGs mentions that we must
> > ensure our tcp_keepalives settings are configured in the postgresql.conf
> > file. I currently have these settings set to:
> > Tcp_keepalives_idle = 60
> > Tcp_keepalives_interval = 60
> > Tcp_keepalives_count = 2
> > I restarted the database and then ran SHOW_ALL; but it showed all 3
> > parameters set to 0.
>
> These will read as zeroes if you're using a non-TCP connection (ie
> Unix socket). Try it after "psql -h localhost" instead of just "psql".
>
> regards, tom lane
>
^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2019-12-04 15:09 UTC | newest]
Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2019-12-04 14:33 tcp_keepalives settings not being set Dave Hughes <dhughes20@gmail.com>
2019-12-04 14:54 ` Tom Lane <tgl@sss.pgh.pa.us>
2019-12-04 15:09 ` Dave Hughes <dhughes20@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox