Enable TCP Fast Open on FreeBSD for role dns
ClosedPublic
Actions

Authored by dereckson on Sep 3 2025, 19:01.

Tags

None

Referenced Files

	F25370974: D3655.id9468.diff
	Sat, Apr 11, 04:17

	F25362345: D3655.id9468.diff
	Fri, Apr 10, 23:37

	Unknown Object (File)
	Fri, Apr 10, 02:34

	Unknown Object (File)
	Thu, Apr 9, 15:57

	Unknown Object (File)
	Thu, Apr 9, 14:53

	Unknown Object (File)
	Thu, Apr 9, 08:48

	Unknown Object (File)
	Wed, Apr 8, 19:19

	Unknown Object (File)
	Tue, Apr 7, 10:48

View All Files

Subscribers

None

Tokens

"Y So Serious" token, awarded by dereckson.

Details

Reviewers

DorianWinty

Commits

rOPS0df5b8cc669a: Enable TCP Fast Open on FreeBSD for role dns

Summary

While FreeBSD 14 kernel is built by default with support for
TCP Fast Open (option TCP_RFC7413), it's only enabled on boot
for clients, not for servers.

As Knot uses TCP Fast Open, we need to explicitly enable it.

Solves the following issue:

Sep  3 18:35:18 dns-001 knot[81075]: warning:
failed to enable TCP Fast Open on 178.32.70.109@53 (unknown system error)

References:

tcp(4)

Test Plan

sysctl logic tested on WindRiver

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Sep 3 2025, 19:01

dereckson created this revision.

Harbormaster completed remote builds in B5854: Diff 9467.Sep 3 2025, 19:02

dereckson awarded a token.Sep 3 2025, 19:02

dereckson edited the test plan for this revision. (Show Details)Sep 3 2025, 19:05

DorianWinty accepted this revision.Sep 4 2025, 16:41

This revision is now accepted and ready to land.Sep 4 2025, 16:41

Closed by commit rOPS0df5b8cc669a: Enable TCP Fast Open on FreeBSD for role dns (authored by dereckson). · Explain WhySep 10 2025, 18:54

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPS0df5b8cc669a: Enable TCP Fast Open on FreeBSD for role dns.

Applied to dns-001

Revision Contents
Changeset List

Path

Size

roles/

dns/

knot/

config.sls

18 lines

files/

sysctl

16 lines

Diff 9468

View Options

roles/dns/knot/config.sls