X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=man%2Fsystemd.socket.xml;h=57f769f23a177b66a87be63d8623ee807a2ba276;hp=170d010f601625c04679276c6062f8c3a9a803b3;hb=281a92f80c215d6e07526d33563adb6d37c531c6;hpb=9528592ff8d7ff361da430285deba8196e8984d5 diff --git a/man/systemd.socket.xml b/man/systemd.socket.xml index 170d010f6..57f769f23 100644 --- a/man/systemd.socket.xml +++ b/man/systemd.socket.xml @@ -487,6 +487,42 @@ . + + KeepAliveTimeSec= + Takes time (in seconds) as argument . The connection needs to remain + idle before TCP starts sending keepalive probes. This controls the TCP_KEEPIDLE + socket option (see + socket7 + and the TCP + Keepalive HOWTO for details.) + Defaults value is 7200 seconds (2 hours). + + + + KeepAliveIntervalSec= + Takes time (in seconds) as argument between individual keepalive probes, + if the socket option SO_KEEPALIVE has been set on this socket seconds as argument. + This controls the TCP_KEEPINTVL socket option (see + socket7 + and the TCP + Keepalive HOWTO for details.) + Defaults value is 75 seconds. + + + + KeepAliveProbes= + Takes integer as argument. It's the number of unacknowledged probes to + send before considering the connection dead and notifying the application layer. + This controls the TCP_KEEPCNT socket option (see + socket7 + and the TCP + Keepalive HOWTO for details.) + Defaults value is 9. + + NoDelay= Takes a boolean @@ -498,21 +534,6 @@ . - - FastOpen= - Takes a boolean - argument. It works by using a TFO cookie (a TCP option) in the initial - SYN packet to authenticate a previously connected client. If successful, - it may start sending data to the client before the receipt of the final - ACK packet of the three way handshake is received, skipping a round trip - and lowering the latency in the start of transmission of data. - This controls the TCP_FASTOPEN socket option (see - the TCP - Fast Open: expediting web services for details.) - Defaults to - . - - Priority= Takes an integer @@ -524,6 +545,47 @@ for details.). + + DeferAcceptSec= + + Takes time (in + seconds) as argument. If set, the + listening process will be awakened + only when data arrives on the socket, + and not immediately when connection is + established. When this option is set, + the + TCP_DEFER_ACCEPT + socket option will be used (see + tcp7), + and the kernel will ignore initial ACK + packets without any data. The argument + specifies the approximate amount of + time the kernel should wait for + incoming data before falling back to + the normal behaviour of honouring + empty ACK packets. This option is + beneficial for protocols where the + client sends the data first (e.g. + HTTP, in contrast to SMTP), because + the server process will not be woken + up unnecessarily before it can take + any action. + + + If the client also uses the + TCP_DEFER_ACCEPT + option, the latency of the initial + connection may be reduced, because the + kernel will send data in the final + packet establishing the connection + (the third packet in the "three-way + handshake"). + + Disabled by default. + + + ReceiveBuffer= SendBuffer= @@ -613,6 +675,32 @@ for details. + + SELinuxContextFromNet= + Takes a boolean + argument. When true, systemd will attempt + to figure out the SELinux label used + for the instantiated service from the + information handed by the peer over the + network. Note that only the security + level is used from the information + provided by the peer. Other parts of + the resulting SELinux context originate + from either the target binary that is + effectively triggered by socket unit + or from the value of the + SELinuxContext= + option. This configuration option only + affects sockets with + Accept= mode set to + true. Also note that + this option is useful only when + MLS/MCS SELinux policy is + deployed. Defaults to + false. + + + PipeSize= Takes a size in @@ -758,7 +846,7 @@ 20s". Pass 0 to disable the timeout logic. Defaults to DefaultTimeoutStartSec= from the manager configuration file - (see systemd-systemd.conf5). + (see systemd-system.conf5). @@ -827,7 +915,7 @@ See Also systemd1, - systemctl8, + systemctl1, systemd.unit5, systemd.exec5, systemd.kill5,