{"id":43,"date":"2010-04-17T17:39:07","date_gmt":"2010-04-18T02:39:07","guid":{"rendered":"\/blog\/?p=43"},"modified":"2023-09-21T09:41:22","modified_gmt":"2023-09-21T00:41:22","slug":"sysctl-for-networking-in-kernel-linux","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=43","title":{"rendered":"Sysctl For Networking in Kernel (Linux)"},"content":{"rendered":"\n


\/proc\/sys\/net\/ipv4\/* \uc744 \uc704\ud55c \ubb38\uc11c kernel version 2.4.25
\ubc88\uc5ed 2004.2.25 \uae40\uc815\uade0 <http:\/\/www.oops.org<\/a>>

* \uc5ed\uc8fc)
\uc774 \ud398\uc774\uc9c0\ub97c \uc77d\uae30 \uc804\uc5d0 \uc544\uc8fc \uac15\ub825\ud558\uac8c \uc8fc\uc758\ub97c \uc694\ud560 \uac83\uc740 sysctl\uc744 \uc774\uc6a9\ud558\uc5ec \uc774 \uac12\ub4e4\uc744
\ubcc0\uacbd\ud560 \uacbd\uc6b0\ub098 \uc9c1\uc811\uc801\uc73c\ub85c \ubcc0\uacbd\uc744 \ud560 \uacbd\uc6b0 \uc2dc\uc2a4\ud15c\uc774 crash \ub418\uc5b4\uc9c8 \uc704\ud5d8\uc694\uc18c\uac00 \ub9ce\uc774 \uc788
\ub2e4\ub294 \uac83\uc744 \uba85\uc2ec\ud574 \uc57c \ud55c\ub2e4. \uc989, \uc790\uae30\uc758 \uc2dc\uc2a4\ud15c\uc5d0 \ubb34\ub9ac\ud55c \uac12\uc744 \ub123\uc5c8\uc744 \uacbd\uc6b0 \uadf8 \uc989\uc2dc \uc2dc
\uc2a4\ud15c\uc774 \uba48\ucd9c\uc218\ub3c4 \uc788\uae30 \ub54c\ubb38\uc5d0 \ucda9\ubd84\ud55c \ud14c\uc2a4\ud2b8\uc640 \uc2dc\uc2a4\ud15c\uc774 crash\uac00 \ub420 \uc218 \uc788\uc74c\uc744 \uba85\uc2ec\ud558
\uace0 \ucc45\uc784\uc744 \uc9c8\uc218 \uc788\uc744 \uacbd\uc6b0\uc5d0\ub9cc \ub9cc\uc9c0\uae30\ub97c \uad8c\uc7a5\ud55c\ub2e4.

* \ucc38\uc870)
http:\/\/kldp.org\/KoreanDoc\/html\/Kernel-KLDP\/network.html

ip_forward - 01 \uc5f0\uc0b0
0 - \uc0ac\uc6a9\uc548\ud568 (\uae30\ubcf8\uac12)
0 \uc774 \uc544\ub2d0 \uacbd\uc6b0 - \uc0ac\uc6a9\ud568

interface \ub4e4 \uc0ac\uc774\uc5d0 \ud328\ud0b7\ub4e4\uc744 \uad50\ud658\uc2dc\ud0a4\ub294 \uac83\uc744 \ud5c8\ub77d.

\uc774 \ubcc0\uc218\uc758 \ubcc0\uacbd\uc740 \uae30\ubcf8\uc801\uc778 \uc0c1\ud0dc\ub85c \ubaa8\ub4e0 \uc124\uc815 \ud30c\ub77c\ubbf8\ud130\ub4e4\uc744 \ub9ac\uc14b \uc2dc\ud0a8\ub2e4.
(RFC1122 for hosts, RFC1812 for routers)


ip_default_ttl - \uc815\uc218
\uae30\ubcf8\uac12: 64

TTL (Time To Live) \uc740 IP \ud328\ud0b7 \uc548\uc5d0 \ub4e4\uc5b4\uc788\ub294 (\ub300\uac1c 0\ubd80\ud130 255 \uc0ac\uc774) \uc815\uc218\uac12
\uc73c\ub85c TTL \uc774\ub77c\ub294 \ub9d0 \uadf8\ub300\ub85c \ud328\ud0b7\uc758 \uc218\uba85\uc744 \uce74\uc6b4\ud2b8\ud55c\ub2e4. \ub77c\uc6b0\ud130 \ud558\ub098\ub97c \uc9c0\ub0a0\ub54c
\ub9c8\ub2e4 \ucd08\uae30 \uac12\uc5d0\uc11c 1 (\ud639\uc740 \uadf8 \uc774\uc0c1)\uc744 \ube7c\ub294\ub370 \uac12\uc774 0 \uc774 \ub418\uba74 \ub77c\uc6b0\ud130\ub294 \uadf8 \ud328
\ud0b7 \uc744 \ubc84\ub9ac\uace0 \uc7ac\uc804\uc1a1\uc744 \uc694\uccad\ud558\ub294 ICMP \uba54\uc2dc\uc9c0\ub97c \ubc1c\uc2e0\uc9c0 \ud638\uc2a4\ud2b8\uc5d0 \ubcf4\ub0b8\ub2e4. \ub9ac
\ub205\uc2a4\ub294 \uadf8 \uac12\uc774 255 \uc774\ub098 \uc708\ub3c4\uc6b0 95 \ub098 98 \uc758 TTL \uae30\ubcf8 \uac12\uc740 32 \ud649\uc73c\ub85c, \uc6b4\uc601
\uccb4\uc81c\ub9c8\ub2e4 \ub2e4\ub97c \uc218 \uc788\ub2e4.

ping \uacfc traceroute \uc720\ud2f8\ub9ac\ud2f0\ub294 TTL \uac12\uc744 \uc0ac\uc6a9\ud558\ub294 \ub300\ud45c\uc801\uc778 \ud504\ub85c\uadf8\ub7a8\uc778\ub370 \uc0ac
\uc6a9\uc790\uac00 TTL \uac12\uc744 \uc870\uc815\ud560 \uc218 \uc788\uc73c\uba70 traceroute \ub294 TTL \uae30\ubcf8\uac12\uc744 30 \uc73c\ub85c \ub0ae\ucd94
\uc5b4 \ud328\ud0b7\uc744 \uc804\uc1a1\ud55c\ub2e4.

\uba40\ud2f0\uce90\uc2a4\ud305\uc5d0\uc11c\ub294 TTL \uac12\uc774 \ud328\ud0b7\uc774 \uc804\ub2ec\ub418\uc5b4\uc57c \ud558\ub294 \ubc94\uc704\ub098 \uad6c\uc5ed\uc744 \uac00\ub9ac\ud0a8\ub2e4.

0 \uc740 \uac19\uc740 \ud638\uc2a4\ud2b8\ub85c \uc81c\ud55c\ub41c\ub2e4.
1 \uc740 \uac19\uc740 \uc11c\ube0c\ub137\uc73c\ub85c \uc81c\ud55c\ub41c\ub2e4.
32 \ub294 \uac19\uc740 \uc0ac\uc774\ud2b8\ub85c \uc81c\ud55c\ub41c\ub2e4.
64 \ub294 \uac19\uc740 \uc9c0\uc5ed\uc73c\ub85c \uc81c\ud55c\ub41c\ub2e4.
128 \uc740 \uac19\uc740 \ub300\ub959\uc73c\ub85c \uc81c\ud55c\ub41c\ub2e4.


ip_no_pmtu_disc - 01 \uc5f0\uc0b0
MTU discorery \uacbd\ub85c\ub97c \uc0ac\uc6a9\uc548\ud568
\uae30\ubcf8\uac12 FALSE (\uc0ac\uc6a9\ud568\uc744 \uc758\ubbf8)

MTU (Maximum Transmission Unit) \ub294 \ud504\ub808\uc784\uc774\ub098 \ud328\ud0b7\uc774 \ud55c\ubc88\uc5d0 \ud558\ub098 \uc529 \uc804\uc1a1
\ub420 \ub54c \ud1b5\uacfc\ud560 \uc218 \uc788\ub294 \ud06c\uae30\ub85c \ud504\ub85c\ud1a0\ucf5c\ub9c8\ub2e4 \uadf8 \ud06c\uae30\uac00 \ub2e4\ub974\ub2e4. \uc608\ub97c\ub4e4\uc5b4 \uc774\ub354
\ub137\uc5d0\uc11c\ub294 1500 \uc774\uc9c0\ub9cc, X.25 \uc5d0\uc11c\ub294 576 \uc774\ub2e4. Path MTU \ub294 \ub450 \ud638\uc2a4\ud2b8\uc0ac\uc774 \uacbd
\ub85c (path) \uc5d0\uc11c \uac00\uc7a5 \uc791\uc740 MTU \uac12\uc774\ub2e4.

\ud638\uc2a4\ud2b8\uac00 \uac19\ub354\ub77c\ub3c4 \ub77c\uc6b0\ud305 \uacbd\ub85c\ub098 \ud504\ub85c\ud1a0\ucf5c\uc740 \ub9e4\ubc88 \ubc14\ub00c\ubbc0\ub85c, MTU \uac12\ub3c4 \uacc4\uc18d
\ub2ec\ub77c\uc9c0\uac8c \ub41c\ub2e4. \ud604\uc7ac \ud328\ud0b7\ubcf4\ub2e4 \uc791\uc740 MTU \uac12\uc744 \uac00\uc9c4 \ub77c\uc6b0\ud130\ub97c \ud1b5\uacfc\ud560 \ub54c, \ud328\ud0b7
\uc740 \uadf8 \ub77c\uc6b0\ud130 MTU \uc5d0 \ub9de\ucdb0 \uc798\uac8c \ucabc\uac1c\uc9c4\ub2e4. \uc218\uc2e0\ud558\ub294 \ud638\uc2a4\ud2b8\uc5d0\uc11c\ub294 \uadf8\ub807\uac8c \ucabc
\uac1c\uc9c4 \uc870\uac01\ub4e4\uc744 \ubaa8\ub450 \ubc1b\uc544\uc11c \ub2e4\uc2dc \uc7ac\uc870\ub9bd\ud558\ub294\ub370, \uadf8 \uac00\uc6b4\ub370 \ud55c\uc870\uac01\uc774\ub77c\ub3c4 \ub4dc\ub86d
\ub418\uba74 \ubaa8\ub4e0 \uc870\uac01\uc744 \ub2e4\uc2dc \uc804\uc1a1\ubc1b\uc544\uc57c \ud55c\ub2e4. \uc774 \uacbd\uc6b0, \ub77c\uc6b0\ud130\ub294 \uc870\uac01\uc744 \ub098\ub204\ub290\ub77c
\ubc14\uc058\uace0, \ud638\uc2a4\ud2b8\ub294 \uc7ac\uc870\ub9bd\ud558\ub290\ub77c \ubc14\ube60\uc9c0\uba70, \uc7ac\uc804\uc1a1\uc774 \ub9ce\uc544\uc9c0\ub294 \ub4f1 \ud37c\ud3ec\uba3c\uc2a4\ub97c
\ub5a8\uc5b4\ud2b8\ub9ac\uac8c \ub41c\ub2e4.

\uc774\ub7f4 \ub54c pmtu discovery \ub97c \uc0ac\uc6a9\ud55c\ub2e4. \uba3c\uc800 \ud328\ud0b7 \ubc1c\uc1a1 \uc2dc, \ud5e4\ub354\uc5d0 DF (Don't
Fragment) \ube44\ud2b8\ub97c \uc124\uc815\ud574\uc11c \uc870\uac01\ub0b4\uc9c0 \ub9d0\ub77c\uace0 \uc54c\ub9b0\ub2e4. DF \ube44\ud2b8\uac00 \uc124\uc815\ub41c \ud328\ud0b7
\uc744 \ubc1b\uc740 \ub77c\uc6b0\ud130\ub294 \uc790\uc2e0\uc758 MTU \ubcf4\ub2e4 \ud070 \uacbd\uc6b0 \uc870\uac01\ud654\ud558\ub294 \ub300\uc2e0, Can't Fragment
\uc5d0\ub7ec\uc640 MTU \uac12\uc744 \ub3cc\ub824\ubcf4\ub0b8\ub2e4. \uadf8 \uac12\uc744 \ub3cc\ub824\ubc1b\ub294 \ud638\uc2a4\ud2b8\uac00 \ub77c\uc6b0\ud130\uc758 MTU \uac12\uc5d0
\ub9de\ucd94\uc5b4 \ud328\ud0b7\uc744 \ub2e4\uc2dc \uc804\uc1a1\ud55c\ub2e4. \uc870\uac01\ub098\ub294 \uac83\uc744 \ud53c\ud558\uba74\uc11c, \uac00\uc7a5 \ud070 \ud328\ud0b7\uc744 \ubcf4\ub0b4
\uae30 \uc704\ud574 pmtu discovery\ub97c \uc0ac\uc6a9\ud558\ub294 \uac83\uc774\ub2e4.

\ub2e8, \uc774 \uae30\ub2a5\uc744 \uc0ac\uc6a9\ud558\uae30 \uc704\ud574\uc11c\ub294 ICMP \uba54\uc2dc\uc9c0 \ud0c0\uc785 3 \uac00\uc6b4\ub370 code 4
(Fragmentation Needed and Don't fragment)\ub97c \ud5c8\uc6a9\ud574\uc57c\ud55c\ub2e4.


IP Fragmentation:<\/font>

ipfrag_high_thresh - \uc815\uc218
Maximum memory \ub294 IP \uc870\uac01\ub4e4\uc744 \uc7ac\uc870\ud569\uc744 \ud55c\ub2e4. \uba54\ubaa8\ub9ac\uc758 ipfrag_high_thresh
byte\uac00 \uc774\uacb0\uacfc\ub97c \ud1b5\ud574 \uc7ac\ud560\ub2f9 \ub41c\ub2e4\uba74, fragment handler\ub294 ipfrag_low_thresh
\uac00 \ub3c4\ub2ec\ud558\uae30 \uc804\uc5d0 \ud328\ud0b7\ub4e4\uc744 \uc804\ub2ec\uc744 \ud560\uac83\uc774\ub2e4.

ipfrag_low_thresh - \uc815\uc218
ipfrag_high_thresh \ub97c \ucc38\uace0\ud558\ub77c

ipfrag_time - \uc815\uc218
\uba54\ubaa8\ub9ac\uc5d0\uc11c IP fragment \ub97c \uc720\uc9c0\ud558\ub294 \uc2dc\uac04 (\ucd08\ub2e8\uc704)

INET peer storage:<\/font>

inet_peer_threshold - \uc815\uc218
\uc2a4\ud1a0\ub9ac\uc9c0\uc758 \ub300\ub7b5\uc801\uc778 \ud06c\uae30\uc774\ub2e4. \uc774 threshold\ubaa9\ub85d\ub4e4\ub85c \ubd80\ud130 \uc2dc\uc791\ud558\ub294 \uac83\uc740 \uce68
\uc785\uc758 \uc694\uc18c\ub97c \uc548\uac8c \ub420 \uac83\uc774\ub2e4. \uc774 threshold \ub294 garbage collection passes \uc0ac
\uc774\uc5d0\uc11c \ubaa9\ub85d\ub4e4\uc758 time-to-live \uc640 time intervals\ub97c \ud55c\uc815\uc744 \ud55c\ub2e4. \ub610 \ub2e4\ub978 \uc815
\ubcf4\ub97c \uc5bb\uace0 \uc2f6\ub2e4\uba74 less time-to-live \ub098 less GC interval \uc744 \ud558\ub77c.

inet_peer_minttl - \uc815\uc218
Minimum time-to-live of entries. Should be enough to cover fragment
time-to-live on the reassembling side. This minimum time-to-live is
guaranteed if the pool size is less than inet_peer_threshold.
Measured in jiffies.

inet_peer_maxttl - \uc815\uc218
Maximum time-to-live of entries. Unused entries will expire after
this period of time if there is no memory pressure on the pool (i.e.
when the number of entries in the pool is very small).
Measured in jiffies.

inet_peer_gc_mintime - \uc815\uc218
Minimum interval between garbage collection passes. This interval is
in effect under high memory pressure on the pool.
Measured in jiffies.

inet_peer_gc_maxtime - \uc815\uc218
Minimum interval between garbage collection passes. This interval is
in effect under low (or absent) memory pressure on the pool.
Measured in jiffies.

TCP variables:<\/font>

tcp_syn_retries - \uc815\uc218
\ud65c\uc131\ud654\ub41c TCP \uc811\uc18d\uc774 \uc7ac\uc804\uc1a1\uc744 \uc2dc\ub3c4\ud558\uac8c \ud558\uae30 \uc704\ud55c \ucd5c\ucd08 SYN\uc2dc\uac04\uc758 \uac12\uc744 \uc815\ud55c
\ub2e4. 255 \ubcf4\ub2e4 \ub192\uc544\uc11c\ub294 \uc548\ub41c\ub2e4. \uae30\ubcf8\uac12\uc740 5\uc774\uba70, 180 \ucd08\uc5d0 \ub300\uc751\uc774 \ub41c\ub2e4.

tcp_synack_retries - \uc815\uc218
passive TCP \uc811\uc18d \uc2dc\ub3c4\uac00 \uc7ac\uc811\uc18d\uc744 \ud558\uae30 \uc704\ud55c SYNACKs\uc758 \uac12\uc744 \uc815\ud55c\ub2e4. 255 \ubcf4
\ub2e4 \ub192\uac8c \uc9c0\uc815\ud560 \uc218 \uc5c6\ub2e4. \uae30\ubcf8\uac12\uc740 5\uc774\uba70, 180\ucd08\uc5d0 \ub300\uc751\uc774 \ub41c\ub2e4.

tcp_keepalive_time - \uc815\uc218
keepalive \uac00 \ud65c\uc131\ub418 \ub418\uc5b4 \uc788\uc744 \uacbd\uc6b0 \uc5bc\ub9c8\ub098 \uc790\uc8fc TCP \uac00 keepalive \uba54\uc138\uc9c0\ub97c
\ubcf4\ub0b4\uac8c \ud560 \uac83\uc778\uc9c0\ub97c \uc124\uc815. \uae30\ubcf8\uac12\uc740 2\uc2dc\uac04 \uc774\ub2e4.

tcp_keepalive_probes - \uc815\uc218
\uc811\uc18d\uc774 \ub04a\uc5b4\uc9c0\ub294 \uac83\uc744 \uacb0\uc815\ud558\uae30 \uc804\uae4c\uc9c0 keepalive \uac00 TCP send out \uc744 \uc5bc\ub9c8\ub098
\uc0b4\ud53c\uac8c \ud560\uc9c0 \uc9c0\uc815\ud55c\ub2e4. \uae30\ubcf8\uac12\uc740 9 \uc774\ub2e4.

tcp_keepalive_intvl - \uc815\uc218
\uc5bc\ub9c8\ub098 \uc790\uc8fc send out \uc744 \uccb4\ud06c\ud560\uc9c0\ub97c \uc815\ud55c\ub2e4. tcp_keepalive_probes \uc5d0 \uc758\ud574
\uc99d\uac00\ub418\uc5b4\uc9c4 probes \ub294 probes \uac00 \uc2dc\uc791\ub41c \ud6c4\uc5d0\ub294 responding connection \uc744 \uc8fd
\uc77c\uc218 \uc5c6\ub2e4. \uae30\ubcf8\uac12\uc740 75\ucd08 \uc774\ub2e4. \uae30\ubcf8 \uac12\uc758 \uc0ac\uc6a9\uc2dc 11\ubd84 15\ucd08 \ud6c4\uc5d0 \uc5f0\uacb0\uc774 \ud574
\uc81c\ub41c \uac83\uc73c\ub85c \uac04\uc8fc \ub41c\ub2e4.

tcp_retries1 - \uc815\uc218
\ubb34\uc5b8\uac00 \uc798\ubabb\ub418\uc5c8\uc744 \uacbd\uc6b0, network layer \ub85c \uc774 \ud604\uc0c1\uc744 reporting \ud558\uae30\uc804 \ub2e4\uc2dc
\ud655\uc778\uc744 \ud558\uae30 \uc704\ud55c \ud69f\uc218\ub97c \uc9c0\uc815\ud55c\ub2e4. \ucd5c\uc18c RPC \uac12\uc740 3 \uc774\uba70, \uc774\ub294 RTO\uc0c1\uc5d0\uc11c 3
\ucd08\uc5d0\uc11c 8\ubd84 \uc0ac\uc774\uc5d0 \uc751\ub2f5\uc744 \ud558\ub3c4\ub85d \ud558\ub294 \uac83\uc774 \uae30\ubcf8\uac12\uc774\ub2e4.

tcp_retries2 - \uc815\uc218
\uc0b4\uc544\uc788\ub294 TCP \uc5f0\uacb0\uc744 \ub04a\uae30 \uc804\uc5d0 \ud655\uc778\ud558\ub294 \ud69f\uc218\ub97c \uc815\ud55c\ub2e4. RFC1122 \ub294 100\ucd08\ubcf4
\ub2e4 \uae38\uac8c \uc81c\ud55c\ud558\ub77c \ud558\uc9c0\ub9cc \ub108\ubb34 \uc791\uc740 \uac12\uc774\ub2e4. \uae30\ubcf8\uac12\uc740 15\ub85c RTO 13-30\ubd84\uc5d0 \ud574
\ub2f9\ud55c\ub2e4.

tcp_orphan_retries - \uc815\uc218
\uc6b0\ub9ac \ucabd\uc5d0\uc11c \ub2eb\uc740 TCP \uc5f0\uacb0\uc744 \ub04a\uae30 \uc804\uc5d0 \ud655\uc778\ud558\ub294 \ud69f\uc218\ub97c \uc815\ud55c\ub2e4. \uae30\ubcf8\uac12\uc740 7
\ub85c RTO 50 \ucd08\uc5d0\uc11c 16 \ubd84 \uc0ac\uc774\uc5d0 \ud574\ub2f9\ud55c\ub2e4. \uc6f9 \uc11c\ubc84\uac00 \uc6b4\uc601 \uc911 \uc774\ub77c\uba74 \uc774 \uac12\uc744
\uc904\uc5ec\uc11c \uc18c\ucf13 \ub4f1\uc774 \uadc0\ud55c \ub9ac\uc18c\uc2a4\ub97c \uc18c\ube44\ud558\uc9c0 \uc54a\ub3c4\ub85d \ud560 \uc218\ub3c4 \uc788\ub2e4.

tcp_fin_timeout - \uc815\uc218
\uc11c\ubc84\uc5d0 \uc758\ud574 \ub2eb\ud600\uc9c8\ub54c FIN_WAIT-2 \uc0c1\ud0dc\uc758 \uc18c\ucf13\uc744 \uc720\uc9c0 \uc2dc\ud0ac \uc2dc\uac04\uc744 \uc9c0\uc815\ud55c\ub2e4.
peer\ub294 \ud30c\uad34\ub420\uc218 \uc788\uc9c0\ub9cc \uacb0\ucf54 \uc2a4\uc2a4\ub85c \ub2eb\uc9c0\ub294 \uc54a\uac70\ub098, \uc5d0\uc0c1\uce58 \ubabb\ud558\uac8c \uc8fd\uc744\uc218\ub294
\uc788\ub2e4. \uae30\ubcf8\uac12 60\ucd08 \uc774\ub2e4. \ubcf4\ud1b5 \ucee4\ub110 2.2 \uc5d0\uc11c\ub294 180 \ucd08\ub97c \uc0ac\uc6a9 \ud558\uc9c0\ub9cc \uc218\uc815\uc744
\ud560\uc218\ub294 \uc788\ub2e4. \ud558\uc9c0\ub9cc \uc2dc\uc2a4\ud15c\uc774 \uc6f9\uc11c\ubc84\uc758 \uc6a9\ub3c4\ub77c\uba74 \uc218\ub9ce\uc740 \uc8fd\uc740 \uc18c\ucf13\ub4e4\ub85c \uc778\ud574
\uba54\ubaa8\ub9ac\uac00 \ud3ed\uc8fc\ud560 \uc704\ud5d8\ub3c4 \uc788\ub2e4. FIN-WAIT-2 \uc18c\ucf13\ub4e4\uc740 \ucd5c\uace0 1.5K \uc815\ub3c4\uc758 \uba54\ubaa8\ub9ac
\ub97c \uc0ac\uc6a9\ud558\uae30 \ub54c\ubb38\uc5d0 FIN_WAIT-1 \ubcf4\ub2e4 \ub35c \uc704\ud5d8 \ud558\uc9c0\ub9cc tcp_max_orphans \uac12\ubcf4\ub2e4
\ub354 \uc624\ub798 \uc720\uc9c0\ub418\ub824\ub294 \uacbd\ud5a5\uc774 \uc788\ub2e4.

tcp_max_tw_buckets - \uc815\uc218
\ub3d9\uc2dc\uc5d0 \uc720\uc9c0 \uac00\ub2a5\ud55c timewait \uc18c\ucf13\uc758 \uc218. \uc9c0\uc815 \uc22b\uc790\ub97c \ucd08\uacfc\ud560 \uacbd\uc6b0, timewait
\uc18c\ucf13\uc774 \uc5c6\ub2e4\ub294 \uacbd\uace0 \uba54\uc138\uc9c0 \ucd9c\ub825\ud55c\ub2e4. \uc774 \uc81c\ud55c\uc740 \ub2e8\uc21c\ud55c DoS \uacf5\uaca9\uc744 \ubc29\uc5b4\ud558\uae30
\uc704\ud574\uc11c\ub9cc \ud544\uc694\ud558\uba70, \uae30\ubcf8\uac12\ubcf4\ub2e4 \uc791\uac8c\ud574\uc11c\ub294 \uc808\ub300 \uc548\ub41c\ub2e4. \ub124\ud2b8\uc6cc\ud06c \ud658\uacbd\uc774 \uae30
\ubcf8\uac12\ubcf4\ub2e4 \ud070 \uac12\uc744 \uc694\uad6c\ud55c\ub2e4\uba74 \ub298\ub824\ub3c4 \ub41c\ub2e4. \ubcf4\ud1b5 \ub7a8 64M \ub2f9 180000 \uc73c\ub85c \uacc4\uc0b0
\uc744 \ud558\uba74 \ub41c\ub2e4.

tcp_tw_recycle - 01 \uc5f0\uc0b0
\ube60\ub978 \uc7ac\uc0dd TIME-WAIT \uc18c\ucf13\uc744 \uc0ac\uc6a9\ud55c\ub2e4. \uae30\ubcf8\uac12\uc740 1\uc774\ub2e4. \uc804\ubb38\uac00\uc758 \uc870\uc5b8 \/ \uc694
\uccad\uc774 \uc5c6\ub2e4\uba74 \uc808\ub300 \ubc14\uafb8\uc9c0 \ub9c8\ub77c.

tcp_tw_reuse - 01 \uc5f0\uc0b0
\ud504\ub85c\ud1a0\ucf5c \uad00\uc810\uc5d0\uc11c \uc548\uc804\ud558\ub2e4\uace0 \ud310\ub2e8\ub420 \ub54c \uc0c8\ub85c\uc6b4 \uc5f0\uacb0\uc5d0 \ub300\ud558\uc5ec TIME-WAIT \uc18c
\ucf13\uc744 \uc7ac\uc0ac\uc6a9\ud558\ub294 \uac83\uc744 \ud5c8\ub77d\ud55c\ub2e4. \uae30\ubcf8\uac12\uc740 0 \uc774\ub2e4. \uc774 \uac12\uc740 \uae30\uc220 \uc804\ubb38\uac00\uc758 \uc870
\uc5b8\uc774\ub098 \uc694\uccad\uc774 \uc5c6\uc774 \ubcc0\uacbd\ud558\uc9c0 \uc54a\ub294 \uac83\uc774 \uc88b\ub2e4.

tcp_max_orphans - \uc815\uc218
\uc2dc\uc2a4\ud15c\uc5d0 \uace0\uc815 \ub418\uc5c8\uac70\ub098, \uc0ac\uc6a9\uc790 \ud30c\uc77c \ud578\ub4e4\uc5d0 \uc5f0\uacb0\ub418\uc9c0 \uc54a\uc740 TCP \uc18c\ucf13\uc758 \ucd5c\ub300
\uac12\uc744 \uc9c0\uc815\ud55c\ub2e4. \uace0\uc544 \uc5f0\uacb0\uc774 \uc774 \uac12\uc744 \ucd08\uacfc\ud558\uba74, \uc989\uc2dc \ub9ac\uc14b\ub418\uace0 \uacbd\uace0\ub97c \ucd9c\ub825\ud55c
\ub2e4. \uc774 \uc81c\ud55c\uc740 \ub2e8\uc21c\ud55c DoS \uacf5\uaca9\uc744 \ubc29\uc5b4\ud558\uae30 \uc704\ud574\uc11c\ub9cc \ud544\uc694\ud558\uba70, \uae30\ubcf8 \uac12\ubcf4\ub2e4
\uc791\uac8c\ud574\uc11c\ub294 \uc808\ub300 \uc548\ub41c\ub2e4. \ub124\ud2b8\uc6cc\ud06c \ud658\uacbd\uc774 \uae30\ubcf8\uac12\ubcf4\ub2e4 \ud070 \uac12\uc744 \uc694\uad6c\ud558\uac70\ub098 \uc624
\ub798 \ubc84\ud168\uc11c \uadf8\ub7f0 \ubb38\uc81c\ub4e4\uc740 \ub354 \uacf5\uaca9\uc801\uc73c\ub85c \uc8fd\uc774\uae30 \uc704\ud574 \ub124\ud2b8\uc6cc\ud06c\ub97c \uc870\uc728 \ud55c\ub2e4\uba74
\ub298\ub824\ub3c4 \ub41c\ub2e4 (\uc544\ub9c8, \uc124\uce58\ub41c \uba54\ubaa8\ub9ac\ub97c \uc99d\uc124\ud55c \ub2e4\uc74c) \ud55c\ubc88 \ub354 \ub2f9\ubd80\ud558\uc790\uba74: \uace0\uc544
\uc5f0\uacb0\ub4e4\uc740 \uc2a4\uc651\ud560 \uc218 \uc5c6\ub294 \uba54\ubaa8\ub9ac\ub97c \uac01\uc790 64K \uc774\uc0c1 \ucc28\uc9c0\ud558\uac8c \ub41c\ub2e4..

tcp_abort_on_overflow - 01 \uc5f0\uc0b0
\ub9ac\uc2a4\ub2dd \uc11c\ube44\uc2a4\uac00 \uc0c8\ub85c\uc6b4 \uc5f0\uacb0\uc744 \uc218\ub77d\ud558\uae30\uc5d0 \ub108\ubb34 \ub290\ub9ac\ub2e4\uba74, \uadf8 \uc11c\ube44\uc2a4\ub97c \ub9ac\uc14b
\ud55c\ub2e4. \uae30\ubcf8\uac12\uc740 FALSE \uc774\ub2e4. \uc774 \uac83\uc740 \uac11\uc790\uae30 \uc624\ubc84\ud50c\ub85c\uac00 \ubc1c\uc0dd\ud558\ub354\ub77c\ub3c4 \uc5f0\uacb0\uc774
\ubcf5\uad6c\ub41c\ub2e4\ub294 \ub73b\uc774\ub2e4. \ub9ac\uc2a4\ub2dd \ub370\ubaa8\uc774 \uc5f0\uacb0\uc744 \ub354 \ube68\ub9ac \uc218\ub77d\ud558\ub3c4\ub85d \uc790\ub9ac\uc7a1\uc9c0 \ubabb\ud558
\ub294\uac8c \uc815\ub9d0 \ud655\uc2e4\ud560 \ub54c\uc5d0\ub9cc \uc774 \uc635\uc158\uc744 \ud65c\uc131\ud654 \ud55c\ub2e4. \uc774 \uc635\uc158\uc744 \ud65c\uc131\ud654\ud558\uba74 \uc11c\ubc84
\uc5d0\uc11c \uc190\uc0c1\ub41c \ud074\ub77c\uc774\uc5b8\ud2b8\ub77c\ub3c4 \ub9ac\uc2a8 \ud558\uac8c \ub41c\ub2e4.

tcp_syncookies - 01 \uc5f0\uc0b0
kernel \uc744 CONFIG_SYNCOOKIES \ub97c \uc124\uc815\ud558\uc5ec \uc0dd\uc131\uc744 \ud558\uc600\uc744 \ub54c\ub9cc \uc0ac\uc6a9\uc774 \uc720\ud6a8\ud558
\ub2e4. \uc18c\ucf13\uc73c\ub85c syn backlog queue \uac00 \ub118\uce60\ub54c syncookies \ub97c \ubcf4\ub0b8\ub2e4. \uc774\uac83\uc740 \uc77c
\ubc18\uc801\uc778 'syn flood attack' \uc774\ub77c\ub294 \uacf5\uaca9\uc744 \ubc29\uc5b4 \ud558\uae30 \uc704\ud574 \uc0ac\uc6a9\uc774 \ub41c\ub2e4. \uae30\ubcf8
\uac12\uc740 FALSE \uc774\ub2e4.

syncookies \ub294 \ub300\uccb4 \ubc29\ubc95\uc77c \ubfd0 \uc774\ub77c\ub294 \uac83\uc744 \uba85\uc2ec \ud574\uc57c \ud55c\ub2e4. \uc774\uac83\uc740 \uc815\uc0c1\uc801\uc778
\uc811\uc18d\uc5d0 \ub300\ud574 \ub354 \uc88b\uc740 \uc131\ub2a5\uc744 \ub0b4\uac8c\ud558\ub294 \uac83\uc5d0 \uc0ac\uc6a9\uc774 \ub418\ub294\uac83\uc740 \uc544\ub2c8\ub2e4. \ub9cc\uc57d \ub85c
\uadf8\uc5d0\uc11c synflood \uacbd\uace0\ub97c \ubcf4\uac8c \ub41c\ub2e4\uba74, \ud558\uc9c0\ub9cc \uc774\uac83\ub4e4\uc774 \uc815\uc0c1\uc801\uc778 \uc811\uc18d\ub4e4\uc774 \ub118
\uccd0\uc11c \ubc1c\uc0dd\ud55c \uac83\ub4e4\uc774\ub77c\uba74 \uc774 \uacbd\uace0\uac00 \uc0ac\ub77c\uc9c0\uae30 \uc804\uc5d0 tcp_syncookies \uac00 \uc544\ub2cc \ub2e4
\ub978 \ud30c\ub77c\ubbf8\ud130\ub4e4\uc744 \uc870\uc808\ud574\uc57c \ud55c\ub2e4. tcp_max_syn_backlog, tcp_synack_retries,
tcp_abort_on_overflow \ub97c \ucc38\uace0\ub97c \ud558\ub77c.

syncookies \ub294 TCP \ud504\ub85c\ud1a0\ucf5c\uc5d0 \uc2ec\uac01\ud558\uac8c \uc5b4\uae0b\ub098\uba70, TCP \ud655\uc797\ub4e4\uc744 \uc0ac\uc6a9\ud558\ub294 \uac83
\uc744 \ud5c8\ub77d\ud558\uc9c0 \uc54a\uc73c\uba70, (SMTP relaying \uac19\uc740) \ud2b9\uc815\uc11c\ube44\uc2a4\ub4e4\uc758 \uc2ec\uac01\ud55c \uc190\uc0c1\uc758 \uacb0
\uacfc\uac00 \ub420\uc218\uc788\ub2e4. \ub9cc\uc57d \uc2e4\uc81c \ub118\uce58\uc9c0 \uc54a\uc74c\uc5d0\ub3c4 \ubd88\uad6c\ud558\uace0 \ub85c\uadf8\uc5d0 synflood \uacbd\uace0\uac00
\uacc4\uc18d \ubc1c\uc0dd\ud55c\ub2e4\uba74, \uc11c\ubc84\uc758 \uc124\uc815\uc774 \uc2ec\uac01\ud558\uac8c \uc798\ubabb\ub418\uc5b4 \uc788\ub294 \uac83\uc774\ub2e4.

tcp_stdurg - 01 \uc5f0\uc0b0
TCP urg \ud3ec\uc778\ud130 \ud544\ub4dc \ud574\uc11d\uae30\uac00 \ud544\uc694\ud560 \ub54c\uc5d0 \uc0ac\uc6a9\ud55c\ub2e4. \ub300\ubd80\ubd84 \uc624\ub798\ub41c BSD \ud574
\uc11d\uae30\ub97c \uc0ac\uc6a9\ud558\ub294\ub370, \ub9ac\ub205\uc2a4\uac00 \uadf8\ub7f0 \uac83\ub4e4\uacfc \uc81c\ub300\ub85c \uc18c\ud1b5\ud558\uc9c0 \ubabb\ud55c\ub2e4\uace0 \ud310\ub2e8\ub420
\uacbd\uc6b0 \ud65c\uc131\ud654\ub97c \ud574 \ubcfc\ub9cc\ud558\ub2e4. \uae30\ubcf8\uac12\uc740 FALSE \uc774\ub2e4.

tcp_max_syn_backlog - \uc815\uc218
\uc811\uc18d\ud55c client \ub4e4 \uc911 \uc2b9\uc778\uc744 \ubc1b\uc9c0 \ubabb\ud558\ub294 \uc811\uc18d \uc694\uccad\ub4e4\uc758 \ucd5c\ub300\uac12\uc744 \uc9c0\uc815 \ud55c\ub2e4.
\ub9cc\uc57d \uc2b9\uc778\uc744 \ubc1b\uc9c0 \ubabb\ud558\uace0 \uae30\ub2e4\ub9ac\ub294 \uc811\uc18d \uc694\uccad\ub4e4\uc774 \uc774 \uc218\ub97c \ubc97\uc5b4\ub098\ub294 \uacbd\uc6b0\uc5d0\ub294
\"\ub2e4\uc2dc \uc7ac\uc811\uc18d\uc744 \ud574 \ubcf4\ub77c\" \ub77c\ub294 \uba54\uc138\uc9c0\ub97c \ubc1b\uac8c \ub41c\ub2e4. 128Mb\uc758 \uba54\ubaa8\ub9ac\uc5d0\uc11c\ub294 \uae30
\ubcf8\uac12\uc73c\ub85c 1024\ub97c \uc0ac\uc6a9\ud560\uc218 \uc788\uc73c\uba70, \uc774\ubcf4\ub2e4 \uc801\uc740 \uba54\ubaa8\ub9ac\ub97c \uac00\uc9c0\uace0 \uc788\uc744 \uacbd\uc6b0\uc5d0
\ub294 128 \uc744 \uc0ac\uc6a9\ud558\uae30\ub97c \uad8c\uc7a5 \ud55c\ub2e4. \ub9cc\uc57d \uc11c\ubc84\uc5d0 \ubd80\ud558\uac00 \ub9ce\uc774 \uac78\ub9ac\uac8c \ub41c\ub2e4\uba74 \uc774
\uac12\uc744 \uc99d\uac00\ud574 \ubcf4\uae30 \ubc14\ub780\ub2e4.

tcp_window_scaling - 01 \uc5f0\uc0b0
RFC1323 \uc5d0 \uc815\uc758\ub41c window scaling \uc744 \uac00\ub2a5\ud558\uac8c \ud55c\ub2e4.

tcp_timestamps - 01 \uc5f0\uc0b0
RFC1323 \uc5d0 \uc815\uc758\ub41c timestamp \ub4e4\uc744 \uac00\ub2a5\ud558\uac8c \ud55c\ub2e4.

tcp_sack - 01 \uc5f0\uc0b0
SYN \ud328\ud0b7\uc744 \uc804\uc1a1\ud55c \ud6c4\uc5d0, \ub85c\uc2a4\uac00 \ubc1c\uc0dd\uc744 \ud558\uc5ec ACK \ub97c \uc77c\ubd80 \ubc1b\uc9c0 \ubabb\ud588\uc744 \uacbd\uc6b0,
\uc120\ud0dd\uc801\uc73c\ub85c (selected) \ubc1b\uc9c0 \ubabb\ud55c ACK \ub9cc \ubc1b\ub3c4\ub85d \uc694\uccad\ud558\ub294 \uac83\uc744 \ud5c8\ub77d\ud55c\ub2e4. \ub85c
\uc2a4\uac00 \ub9ce\uc740 \ub124\ud2b8\uc6cc\ud06c\uc5d0\uc11c\ub294 \uc0c1\ub2f9\ud788 \uc911\uc694\ud55c \uc5ed\ud560\uc744 \ud55c\ub2e4.

tcp_fack - 01 \uc5f0\uc0b0
FACK \ubc00\uc9d1 \ud68c\ud53c\uc640 \ube60\ub978 \uc7ac\uc804\uc1a1\uc744 \uac00\ub2a5\ud558\uac8c \ud55c\ub2e4. tcp_sack \uc774 \ud65c\uc131\ud654\uac00 \ub418\uc5b4
\uc788\uc9c0 \uc54a\uc73c\uba74 \uc774 \uac12\uc740 \uc0ac\uc6a9\ub418\uc9c0 \uc54a\ub294\ub2e4.

tcp_dsack - 01 \uc5f0\uc0b0
TCP\uac00 \uc911\ubcf5\ub41c SACK \ub4e4\uc744 \ubcf4\ub0b4\ub294 \uac83\uc744 \uac00\ub2a5\ud558\uac8c \ud55c\ub2e4.

tcp_ecn - 01 \uc5f0\uc0b0
TCP \uc5d0 \uba85\ubc31\ud55c \ud63c\uc7a1 \uacf5\uc9c0(Explicit Congestion Notification) \ub97c \uac00\ub2a5\ud558\uac8c \ud55c
\ub2e4.

tcp_reordering - \uc815\uc218
TCP stream \uc5d0 \ud328\ud0b7\ub4e4\uc758 \ucd5c\ub300 \uc7ac \uc694\uccad\uc744 \uc124\uc815.

\uae30\ubcf8\uac12: 3

tcp_retrans_collapse - 01 \uc5f0\uc0b0
\ub9dd\uac00\uc9c4 \ud504\ub9b0\ud130\uc5d0 Bug-to-bug \ud638\ud658. \ub354 \ud070 \ud328\ud0b7\uc744 \uc7ac\uc804\uc1a1\ud574\uc11c \uc5b4\ub5a4 TCP \uc2a4\ud0dd\uc5d0
\uc788\ub294 \ubc84\uadf8\ub97c \ud53c\ud574\uac04\ub2e4.


tcp_wmem - vector of 3 INTEGERs: min, default, max
min: TCP \uc18c\ucf13\uc5d0\uc11c send buffer \uc5d0 \ud560\ub2f9\ub420 \uba54\ubaa8\ub9ac \uc591. \uac01 TCP \uc18c\ucf13\ub4e4\uc740 \uc5f0\uacb0
\uc774 \uc720\uc9c0\ub41c \uc0c1\ud0dc\uc5d0\uc11c\ub294 \uc774 \uba54\ubaa8\ub9ac\ub97c \uc0ac\uc6a9\ud55c \uad8c\ud55c\uc744 \uac00\uc9c0\uac8c \ub41c\ub2e4. \uae30\ubcf8\uac12\uc740 4K

default: TCP \uc18c\ucf13\uc5d0\uc11c \uae30\ubcf8\uc73c\ub85c \ud560\ub2f9\uc774 \ub418\ub294 send \ubc84\ud37c\uc758 \uba54\ubaa8\ub9ac \uc591. \uc774\uac12\uc740
\ub2e4\ub978 \ud504\ub85c\ud1a0\ucf5c\uc5d0\uc11c \uc758\ud574 \uc0ac\uc6a9\ub418\ub294 net.core.wmem_default \uac12 \ubcf4\ub2e4 \uc6b0\uc120 \ud55c\ub2e4.
\uae30\ubcf8\uac12\uc740 16K

max: TCP \uc18c\ucf13\uc5d0\uc11c \uc790\ub3d9\uc73c\ub85c \uc120\ud0dd\ub41c send \ubc84\ud37c\ub97c \uc704\ud55c \ucd5c\ub300 \uba54\ubaa8\ub9ac \ud06c\uae30. \uc774
\uac12\ubcf4\ub2e4 net.core.wmem_max \uac12\uc774 \uc6b0\uc120\ud55c\ub2e4. \uae30\ubcf8\uac12\uc740 128K

tcp_rmem - vector of 3 INTEGERs: min, default, max
min: TCP \uc18c\ucf13\uc5d0\uc11c receive buffer \uc5d0 \ud560\ub2f9\ub420 \uba54\ubaa8\ub9ac \uc591. \uac01 TCP \uc18c\ucf13\ub4e4\uc740 \uc5f0
\uacb0\uc774 \uc720\uc9c0\ub41c \uc0c1\ud0dc\uc5d0\uc11c\ub294 \uc774 \uba54\ubaa8\ub9ac\ub97c \uc0ac\uc6a9\ud560 \uad8c\ud55c\uc744 \uac00\uc9c0\uac8c \ub41c\ub2e4. \uae30\ubcf8\uac12\uc740 8K

default: TCP \uc18c\ucf13\uc5d0\uc11c \uc0ac\uc6a9\ub418\uc5b4 \uc9c0\ub294 receive buffer \uc758 \uae30\ubcf8\uac12. \uc774 \uac12\uc740 \ub2e4
\ub978 \ud504\ub85c\ud1a0\ucf5c\uc5d0 \uc758\ud574 \uc0ac\uc6a9\ub418\ub294 net.core.rmem_default \uac12 \ubcf4\ub2e4 \uc6b0\uc120\ud55c\ub2e4. \uae30\ubcf8
\uac12\uc740 87380 byte \uc774\ub2e4. \uc774 \uac12\uc740 tcp_adv_win_Scale \uc758 \uae30\ubcf8 \uc124\uc815\uacfc tcp_app_win:0
\uacfc \uae30\ubcf8 tcp_app_win \uc744 \uc704\ud55c bit less \uc640 \ud568\uaed8 65535 \uc758 window \ub97c \uac00\uc9c0\uac8c\ub41c
\ub2e4.

max: TCP \uc18c\ucf13\uc5d0 \ub300\ud558\uc5ec, \uc790\ub3d9\uc801\uc73c\ub85c \ucd5c\ub300\ud55c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 receive buffer
\uc758 \ucd5c\ub300\ud06c\uae30 \uc774 \uac12\uc740 net.core.rmem_max \uc758 \uac12\uc744 \ub36e\uc5b4\uc4f0\uc9c0 \ubabb\ud558\uba70, SO_RCVBUF
\ub97c \ud1b5\ud55c \"\uc815\uc801\"\uc778 \uc5f0\uacb0\uc740 \uc774 \uac12\uc744 \uc0ac\uc6a9\ud558\uc9c0 \uc54a\ub294\ub2e4. \uae30\ubcf8\uac12\uc740 87380*2 byte.

tcp_mem - vector of 3 INTEGERs: min, pressure, max
low: below this number of pages TCP is not bothered about its
memory appetite.

pressure: when amount of memory allocated by TCP exceeds this number
of pages, TCP moderates its memory consumption and enters memory
pressure mode, which is exited when memory consumtion falls
under \"low\".

high: number of pages allowed for queueing by all TCP sockets.

Defaults are calculated at boot time from amount of available
memory.

tcp_app_win - \uc815\uc218
Reserve max(window\/2^tcp_app_win, mss) of window for application
buffer. Value 0 is special, it means that nothing is reserved.

\uae30\ubcf8\uac12: 31

tcp_adv_win_scale - \uc815\uc218
Count buffering overhead as bytes\/2^tcp_adv_win_scale
(if tcp_adv_win_scale > 0) or bytes-bytes\/2^(-tcp_adv_win_scale),
if it is <= 0.

\uae30\ubcf8\uac12: 2

tcp_rfc1337 - BOOLEAN
\uc138\ud305\ub418\uba74 TCP \uc2a4\ud0dd\uc740 RFC1337\uc744 \ub530\ub978\ub2e4. \ud574\uc81c\ub418\uba74 RFC\ub97c \ub530\ub974\uc9c0 \uc54a\uc9c0\ub9cc TCP
TIME_WAIT asassination\uc740 \ub9c9\uc544\uc900\ub2e4.

\uae30\ubcf8\uac12: 0

tcp_low_latency - BOOLEAN
If set, the TCP stack makes decisions that prefer lower
latency as opposed to higher throughput. By default, this
option is not set meaning that higher throughput is preferred.
An example of an application where this default should be
changed would be a Beowulf compute cluster.
\uae30\ubcf8\uac12: 0

ip_local_port_range - 2 \uc815\uc218\uac12
TCP \uc640 UDP \uc5d0 \uc758\ud574 \uc0ac\uc6a9\ub420 local \ud3ec\ud2b8 \ubc94\uc704\ub97c \uc815\uc758\ud55c\ub2e4. \uccab\ubc88\uc9f8 \uc22b\uc790\ub294 \uc0ac\uc6a9
\ud560 \uc601\uc5ed\uc758 \uac00\uc7a5 \uc55e\ubd80\ubd84 \ud3ec\ud2b8 \ubc88\ud638\ub97c \uc9c0\uc815\ud558\uace0 \ub450\ubc88\uc9f8\ub294 \ub9c8\uc9c0\ub9c9 \ud3ec\ud2b8\ubc88\ud638\ub97c \uc9c0
\uc815\ud55c\ub2e4. \uae30\ubcf8\uac12\uc740 \uc2dc\uc2a4\ud15c\uc758 \uc0ac\uc6a9\uac00\ub2a5\ud55c \uba54\ubaa8\ub9ac\uc758 \uc591\uc5d0 \uc758\ud574 \uacb0\uc815\uc774 \ub41c\ub2e4:
\uba54\ubaa8\ub9ac\uac00 128Mb \ubcf4\ub2e4 \ub9ce\uc744 \uacbd\uc6b0 32768-61000
\uba54\ubaa8\ub9ac\uac00 128Mb \ubcf4\ub2e4 \uc801\uc744 \uacbd\uc6b0 1024-4999 \ub610\ub294 \uc774\ubcf4\ub2e4 \uc801\uac8c..
\uc774 \uac12\uc740 TCP \ud655\uc7a5\uc744 \uc9c0\uc6d0\ud558\uc9c0 \uc54a\ub294 \uc2dc\uc2a4\ud15c\uc73c\ub85c \ub3d9\uc2dc\uc5d0 \ubc1c\uc0dd\uc774 \ub420\uc218 \uc788\ub294 \ud65c\uc131
\ud654\ub41c \uc811\uc18d\ub4e4\uc758 \uc218\ub97c \uacb0\uc815\ud55c\ub2e4. tcp_tw_recycle \uc744 \uac00\ub2a5\ud558\uac8c \ud568\uc73c\ub85c\uc11c (\uae30\ubcf8\uc801
\uc73c\ub85c) 1024-4999 \uc601\uc5ed\uc740 timestamps\ub97c \uc9c0\uc6d0\ud558\ub294 \uc2dc\uc2a4\ud15c\ub4e4\uc5d0 \ucd08\ub2f9 2000\uac1c\uc758 \uc811
\uc18d \uc815\ub3c4\ub97c \uac00\ub2a5\ud558\uac8c \ud558 \ub294\ub370 \ucda9\ubd84\ud558\ub2e4.

\uc815\ud655\uce58\ub294 \uc54a\uc9c0\ub9cc 2.4.20 \uc774 \ud6c4 \ubd80\ud130\ub294 \ucee4\ub110\uc5d0\uc11c \uc790\ub3d9\uc73c\ub85c \uac10\uc9c0\ub97c \ud558\uc5ec \uc7a1\uc73c\ubbc0
\ub85c \uc2e0\uacbd\uc744 \uc4f0\uc9c0 \uc54a\uc544\ub3c4 \uc0c1\uad00\uc774 \uc5c6\ub2e4.

ip_nonlocal_bind - BOOLEAN
\uc138\ud305\ub418\uba74 \ud504\ub85c\uc138\uc2a4\uac00 \ub85c\uceec IP \uac00 \uc544\ub2cc \uc8fc\uc18c\uc5d0 bind() \ud560\uc218 \uc788\ub2e4. \ub9e4\uc6b0 \uc720\uc6a9\ud55c
\uae30\ub2a5\uc774\uc9c0\ub9cc \uc5b4\ub5a4 \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0\uc11c\ub294 \ub098\uc060 \uc218 \uc788\ub2e4.

\uae30\ubcf8\uac12: 0

ip_dynaddr - BOOLEAN
0 \uc774 \uc544\ub2cc \uac12\uc744 \uc138\ud305\ud558\uba74 \ub3d9\uc801 \uc8fc\uc18c\ub97c (dynamic addresses) \uc9c0\uc6d0\ud55c\ub2e4. 1 \ubcf4\ub2e4
\ud070 \uac12\uc744 \uc138\ud305\ud558\uba74 \ub3d9\uc801\uc8fc\uc18c\uac00 \ub2e4\uc2dc \uc4f0\uc5ec\uc9c8 \ub54c\ub9c8\ub2e4 \ub85c\uadf8 \uba54\uc2dc\uc9c0\uac00 \ucd9c\ub825\ub420 \uac83\uc774
\ub2e4.

\uae30\ubcf8\uac12: 0


icmp_echo_ignore_all - 01 \uc5f0\uc0b0
\uc774 \uac12\uc744 1 \ub85c \ud560 \uacbd\uc6b0 kernel \uc740 \ubaa8\ub4e0 ICMP ECHO \uc694\uccad\uc744 \ubb34\uc2dc\ud574 \ubc84\ub9b0\ub2e4.
\uc989 ping \uc774 \uc548\ub418\uac8c \ud55c\ub2e4.
icmp_echo_ignore_broadcasts - 01 \uc5f0\uc0b0
\ub9cc\uc57d \ubaa8\ub4e0 ICMP ECHO \uc694\uccad\uc744 \ucee4\ub110\uc774 \ubb34\uc2dc\ud558\uac8c \ud558\uac70\ub098, ICMP ECHO \uc694\uccad \uc911
broadcast \uc640 multicast \uc8fc\uc18c\uc5d0\ub9cc \ubb34\uc2dc\ud558\uac8c \ud560\ub54c 1\uc758 \uac12\uc740 \ubb34\uc2dc, 0\uc758 \uac12\uc740 \ub9ac
\ud134\uc744 \ud558\uac8c \ub41c\ub2e4. \ub9cc\uc57d boardcast\/multicast \uc8fc\uc18c\uc758 ICMP ECHO \uc694\uccad\uc744 \uc218\uc6a9\ud558
\uac8c \ud55c\ub2e4\uba74, network\uac00 \ub2e4\ub978\ud638\uc2a4\ud2b8\ub85c denial of service(DOS) packet flooding
\uacf5\uaca9\uc744 \ud558\ub294\ub370 \uc774\uc6a9\uc774 \ub420\uc218\uac00 \uc788\ub2e4.

icmp_ratelimit - \uc815\uc218
\uc544\ub798\uc758 icmp_ratemask \uc5d0 \uc9c0\uc815\ub41c BIT \uc640 \uc77c\uce58\ud558\ub294 \ud0c0\uc785\uc758 ICMP \ud328\ud0b7\uc744 \ubcf4\ub0b4\uae30
\uc704\ud55c \ucd5c\ub300 \ube48\ub3c4\ub97c \uc81c\ud55c\ud55c\ub2e4.

0 \uc740 \uc81c\ud55c\uc744 \uc5c6\uc560\uba70 \uadf8 \ubc16\uc758 \uac12\uc740 jiffies(1) \uc758 \ucd5c\ub300 \ube48\ub3c4\ub97c \uc758\ubbf8\ud55c\ub2e4.

\uae30\ubcf8\uac12: 100

icmp_ratemask - \uc815\uc218
Mask made of ICMP types for which rates are being limited.
Significant bits: IHGFEDCBA9876543210
Default mask: 0000001100000011000 (6168)

Bit \uc815\uc758 (see include\/linux\/icmp.h):
0 Echo Reply
3 Destination Unreachable *
4 Source Quench *
5 Redirect
8 Echo Request
B Time Exceeded *
C Parameter Problem *
D Timestamp Request
E Timestamp Reply
F Info Request
G Info Reply
H Address Mask Request
I Address Mask Reply

* These are rate limited by default (see default mask above)

icmp_ignore_bogus_error_responses - 01 \uc5f0\uc0b0
\uc5b4\ub5a4 router \ub4e4\uc740 broadcast frame \ub4e4\ub85c \uac70\uc9d3 \uc751\ub2f5\uc744 \ubcf4\ub0c4\uc73c\ub85c\uc11c RFC 1122 \ub97c
\uc704\ubc18\ud55c\ub2e4. \uc774\ub7ec\ud55c \uc704\ud55c\ub4e4\uc740 \ubcf4\ud1b5 \ucee4\ub110 \uacbd\uace0\ub97c \ud1b5\ud574 \ub85c\uae45\uc774 \ub41c\ub2e4. \uc774\uac83\uc744 TRUE
\ub85c \uc124\uc815\uc744 \ud560\uacbd\uc6b0 \ucee4\ub110\uc740 \uc774\ub7ec\ud55c \uacbd\uace0\ub97c \ud558\uc9c0 \uc54a\uc744 \uac83\uc774\uba70, \ub85c\uadf8 \ud30c\uc77c\uc774 \uc9c0\uc800
\ubd84\ud574 \uc9c0\ub294 \uac83\uc744 \ud53c\ud560\uc218 \uc788\ub2e4.

\uae30\ubcf8\uac12: FALSE

igmp_max_memberships - \uc815\uc218
\uba40\ud2f0\uce90\uc2a4\ud2b8 \uadf8\ub8f9\uc5d0 \ucc38\uc5ec\ud560 \uc218 \uc788\ub294 \ucd5c\ub300\uac12\uc744 \ubcc0\uacbd\ud55c\ub2e4.
\uae30\ubcf8\uac12: 20


conf\/interface\/* changes special settings per interface (where \"interface\" is
the name of your network interface)
conf\/all\/* is special, changes the settings for all interfaces


log_martians - 01 \uc5f0\uc0b0
\ubd88\uac00\ub2a5\ud55c \uc8fc\uc18c\ub4e4\uc744 \uc9c0\ub2cc \ud328\ud0b7\uc744 kerenl log \uc5d0 \uae30\ub85d\ud55c\ub2e4. IP soppfing packet
\uc744 \uccb4\ud06c\ud558\ub294\ub370 \uc720\uc6a9\ud558\ub2e4.
Log packets with impossible addresses to kernel log.
log_martians for the interface will be enabled if at least one of
conf\/{all,interface}\/log_martians is set to TRUE,
it will be disabled otherwise

accept_redirects - 01 \uc5f0\uc0b0
ICMP redirect message \ub4e4\uc744 \ud5c8\uc6a9\ud55c\ub2e4.
\uae30\ubcf8\uac12 TRUE (host)
FALSE (router)
Accept ICMP redirect messages.
accept_redirects for the interface will be enabled if:
- both conf\/{all,interface}\/accept_redirects are TRUE in the case forwarding
for the interface is enabled
or
- at least one of conf\/{all,interface}\/accept_redirects is TRUE in the case
forwarding for the interface is disabled
accept_redirects for the interface will be disabled otherwise
default TRUE (host)
FALSE (router)

forwarding - 01 \uc5f0\uc0b0
\uc774 interface \ub85c IP forwarding \uc744 \uac00\ub2a5\ud558\uac8c \ud55c\ub2e4.

mc_forwarding - 01 \uc5f0\uc0b0
multicast routing\uc744 \uac00\ub2a5\ud558\uac8c \ud55c\ub2e4. \uc774 \uac12\uc744 \uc0ac\uc6a9\ud558\uae30 \uc704\ud574\uc11c\ub294 \ucee4\ub110 config
\uc5d0\uc11c CONFIG_MROUTE \ub97c \uc124\uc815\ud574\uc11c \ube4c\ub4dc\ub97c \ud574\uc57c \ud558\uba70, multicast routing \uc774 \uac00
\ub2a5\ud55c \ub370\ubaac\uc774 \uc694\uad6c\ub418\uc5b4 \uc9c4\ub2e4.

medium_id - \uc815\uc218
Integer value used to differentiate the devices by the medium they
are attached to. Two devices can have different id values when
the broadcast packets are received only on one of them.
The default value 0 means that the device is the only interface
to its medium, value of -1 means that medium is not known.

Currently, it is used to change the proxy_arp behavior:
the proxy_arp feature is enabled for packets forwarded between
two devices attached to different media.

proxy_arp - 01 \uc5f0\uc0b0
\ud504\ub85d\uc2dc ARP\ub294 \uc9c0\uc815\ud55c \uc778\ud130\ud398\uc774\uc2a4\uc640 \uc5f0\uacb0\ub41c \ub2e4\ub978 \ud638\uc2a4\ud2b8\uc758 ARP \uc8fc\uc18c\ub97c \ub300\uc2e0 \ubfcc
\ub824\uc8fc\uace0, \ubc1b\ub294\ub2e4. \ud22c\uba85\ud558\uac8c \ub3d9\uc791\ud558\ub294 \ub124\ud2b8\uc6cc\ud06c \uc7a5\ube44\uc5d0 \ubc18\ub4dc\uc2dc \ud544\uc694\ud558\ub2e4.

shared_media - 01 \uc5f0\uc0b0
RFC1620 \ubbf8\ub514\uc5b4 \uacf5\uc720 \ub9ac\ub2e4\uc774\ub809\ud2b8\ub97c \ubcf4\ub0b4\uac70\ub098 (\ub77c\uc6b0\ud130) \uc218\ub77d (\ud638\uc2a4\ud2b8)\ud55c\ub2e4. \uc774
\uc635\uc158 \uac12\uc774 0 \uc774\uba74 \ud55c \uc7a5\uce58\uc5d0 \uc124\uc815\ub41c \uc11c\ub85c \ub2e4\ub978 \uc11c\ube0c\ub137\uc744 \uc9c1\uc811 \ud1b5\uc2e0\ud560 \uc218 \uc5c6\ub2e4.
\uae30\ubcf8\uac12: TRUE

secure_redirects - 01 \uc5f0\uc0b0
\ub514\ud3f4\ud2b8 \uac8c\uc774\ud2b8\uc6e8\uc774 \ubaa9\ub85d\uc5d0 \uc62c\ub77c\uc788\ub294 \uac8c\uc774\ud2b8\uc6e8\uc774\uc5d0\ub9cc ICMP \ub9ac\ub2e4\uc774\ub809\ud2b8 \uba54\uc2dc\uc9c0\ub97c
\ud5c8\uc6a9\ud55c\ub2e4. \uae30\ubcf8\uac12\uc740 TRUE

send_redirects - 01 \uc5f0\uc0b0
router \ub85c \uc0ac\uc6a9\uc774 \ub41c\ub2e4\uba74 redirect \ub97c \ubcf4\ub0b8\ub2e4. \uae30\ubcf8\uac12\uc740 TRUE \uc774\ub2e4.
Accept ICMP redirect messages only for gateways,
listed in default gateway list.
secure_redirects for the interface will be enabled if at least one of
conf\/{all,interface}\/secure_redirects is set to TRUE,
it will be disabled otherwise
default TRUE

send_redirects - BOOLEAN
Send redirects, if router.
send_redirects for the interface will be enabled if at least one of
conf\/{all,interface}\/send_redirects is set to TRUE,
it will be disabled otherwise
\uae30\ubcf8\uac12: TRUE

bootp_relay - 01 \uc5f0\uc0b0
Accept packets with source address 0.b.c.d destined
not to this host as local ones. It is supposed, that
BOOTP relay daemon will catch and forward such packets.

default FALSE
Not Implemented Yet.

accept_source_route - 01 \uc5f0\uc0b0
SRR \uc635\uc158\uc73c\ub85c \ud328\ud0b7\ub4e4\uc744 \uc218\uc6a9\ud55c\ub2e4. IP source routing \uc744 \uc81c\uc5b4\ud55c\ub2e4. \ubcf4\ud1b5 \ud638\uc2a4
\ud2b8\ub85c \ud5a5\ud558\uac8c \ud558\ub294 \uac83\uc744 \uad8c\uc7a5\ud55c\ub2e4. \uc774 \uac12\uc774 \ucc38\uc774\uba74 \ud328\ud0b7 \uacbd\ub85c\ub97c \ucd9c\ubc1c\uc9c0\uc5d0\uc11c \uc870
\uc791\uc774 \uac00\ub2a5\ud558\ubbc0\ub85c, IP \uc2a4\ud478\ud551\uc5d0 \uc545\uc6a9\ub420 \uc18c\uc9c0\uac00 \uc788\ub2e4.
\uae30\ubcf8\uac12 TRUE (router)
FALSE (host)

rp_filter - 01 \uc5f0\uc0b0
1 - \uc9d1\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \uc2f1\uae00 \ud638\uc2a4\ud2b8\ub098 \uba87\uac1c\uc758 \uc11c\ube0c\ub137\uc73c\ub85c \ub098\ub258\uc5b4\uc9c4 \ub124\ud2b8\uc6cc\ud06c \uac19
\uc774 RFC1812\uc5d0 \uc9c0\uc815\ub418\uc5b4\uc9c4 \uc5ed\uacbd\ub85c\uc5d0 \uc758\ud55c \uc18c\uc2a4 \uc720\ud6a8\uc131\uc744 \uccb4\ud06c\ud55c\ub2e4. \ubd84\uc11d\ud558
\uae30 \uc5b4\ub824\uc6b4 \ub124\ud2b8\uc6cc\ud06c\uc5d0\uc11c \ub290\ub9ac\uace0 \uc2e0\ub8b0\ud560 \uc218 \uc5c6\ub294 \ud504\ub85c\ud1a0\ucf5c \ub610\ub294 \uc815\uc801\uc778 \ub124
\ud2b8\uc6cc\ud06c\ub97c \ud1b5\ud574 \ubb38\uc81c\ub97c \uc57c\uae30\ud560\uc218\ub3c4 \uc788\ub2e4.

\ubcf4\ud1b5\uc740 IP spoofing \uc744 \ubc29\uc9c0\ud558\uae30 \uc704\ud574 \ub9ce\uc774 \uc0ac\uc6a9\uc744 \ud55c\ub2e4.

0 - \uc18c\uc2a4 \uc720\ud6a8\uc131 \uccb4\ud06c\ub97c \ud558\uc9c0 \uc54a\ub294\ub2e4.

conf\/all\/rp_filter must also be set to TRUE to do source validation
on the interface

\uae30\ubcf8\uac12\uc740 0 \uc774\ub2e4. startip \uc2a4\ud06c\ub9bd\ud2b8\uc5d0\uc11c \uc774\ub97c \uac00\ub2a5\ud558\uac8c \ud574 \ub193\uc740 \ubc30\ud3ec\ud310\ub3c4 \uc788
\uc73c\ub2c8 \uc8fc\uc758\ud574\uc57c \ud55c\ub2e4.

arp_filter - BOOLEAN
1 - Allows you to have multiple network interfaces on the same
subnet, and have the ARPs for each interface be answered
based on whether or not the kernel would route a packet from
the ARP'd IP out that interface (therefore you must use source
based routing for this to work). In other words it allows control
of which cards (usually 1) will respond to an arp request.

0 - (default) The kernel can respond to arp requests with addresses
from other interfaces. This may seem wrong but it usually makes
sense, because it increases the chance of successful communication.
IP addresses are owned by the complete host on Linux, not by
particular interfaces. Only for more complex setups like load-
balancing, does this behaviour cause problems.

arp_filter for the interface will be enabled if at least one of
conf\/{all,interface}\/arp_filter is set to TRUE,
it will be disabled otherwise

tag - \uc815\uc218
Allows you to write a number, which can be used as required.
Default value is 0.


(1) Jiffie:
\ucee4\ub110\uc744 \uc704\ud55c \ub0b4\ubd80 \ud0c0\uc784\uc720\ub2db. i386 \uc5d0\uc11c 1\/100 \ucd08, \uc54c\ud30c\uc5d0\uc11c 1\/1024 \ucd08\uc774\ub2e4. \uc54c\ub9de\uc740 \uac12
\uc774 \uad81\uae08\ud558\ub2e4\uba74 \/usr\/include\/asm\/param.h \uc5d0\uc11c HZ define\uc744 \ucc38\uace0\ud55c\ub2e4.

Alexey Kuznetsov.
kuznet@ms2.inr.ac.ru

Updated by:
Andi Kleen
ak@muc.de
Nicolas Delon
delon.nicolas@wanadoo.fr

\/proc\/sys\/net\/ipv6\/* Variables:

IPv6 has no global variables such as tcp_*. tcp_* settings under ipv4\/ also
apply to IPv6 [XXX?].

bindv6only - BOOLEAN
Default value for IPV6_V6ONLY socket option,
which restricts use of the IPv6 socket to IPv6 communication
only.
TRUE: disable IPv4-mapped address feature
FALSE: enable IPv4-mapped address feature

\uae30\ubcf8\uac12: FALSE (as specified in RFC2553bis)

conf\/default\/*:
Change the interface-specific default settings.


conf\/all\/*:
Change all the interface-specific settings.

[XXX: Other special features than forwarding?]

conf\/all\/forwarding - BOOLEAN
Enable global IPv6 forwarding between all interfaces.

IPv4 and IPv6 work differently here; e.g. netfilter must be used
to control which interfaces may forward packets and which not.

This also sets all interfaces' Host\/Router setting
'forwarding' to the specified value. See below for details.

This referred to as global forwarding.

conf\/interface\/*:
Change special settings per interface.

The functional behaviour for certain settings is different
depending on whether local forwarding is enabled or not.

accept_ra - BOOLEAN
Accept Router Advertisements; autoconfigure using them.

Functional default: enabled if local forwarding is disabled.
disabled if local forwarding is enabled.

accept_redirects - BOOLEAN
Accept Redirects.

Functional default: enabled if local forwarding is disabled.
disabled if local forwarding is enabled.

autoconf - BOOLEAN
Configure link-local addresses using L2 hardware addresses.

\uae30\ubcf8\uac12: TRUE

dad_transmits - \uc815\uc218
The amount of Duplicate Address Detection probes to send.
\uae30\ubcf8\uac12: 1

forwarding - BOOLEAN
Configure interface-specific Host\/Router behaviour.

Note: It is recommended to have the same setting on all
interfaces; mixed router\/host scenarios are rather uncommon.

FALSE:

By default, Host behaviour is assumed. This means:

1. IsRouter flag is not set in Neighbour Advertisements.
2. Router Solicitations are being sent when necessary.
3. If accept_ra is TRUE (default), accept Router
Advertisements (and do autoconfiguration).
4. If accept_redirects is TRUE (default), accept Redirects.

TRUE:

If local forwarding is enabled, Router behaviour is assumed.
This means exactly the reverse from the above:

1. IsRouter flag is set in Neighbour Advertisements.
2. Router Solicitations are not sent.
3. Router Advertisements are ignored.
4. Redirects are ignored.

\uae30\ubcf8\uac12: FALSE if global forwarding is disabled (default),
otherwise TRUE.

hop_limit - \uc815\uc218
Default Hop Limit to set.
\uae30\ubcf8\uac12: 64

mtu - \uc815\uc218
Default Maximum Transfer Unit
\uae30\ubcf8\uac12: 1280 (IPv6 required minimum)

router_solicitation_delay - \uc815\uc218
Number of seconds to wait after interface is brought up
before sending Router Solicitations.
\uae30\ubcf8\uac12: 1

router_solicitation_interval - \uc815\uc218
Number of seconds to wait between Router Solicitations.
\uae30\ubcf8\uac12: 4

router_solicitations - \uc815\uc218
Number of Router Solicitations to send until assuming no
routers are present.
\uae30\ubcf8\uac12: 3

icmp\/*:
ratelimit - \uc815\uc218
Limit the maximal rates for sending ICMPv6 packets.
0 to disable any limiting, otherwise the maximal rate in jiffies(1)
\uae30\ubcf8\uac12: 100

IPv6 Update by:
Pekka Savola <pekkas AT netcore.fi>
YOSHIFUJI Hideaki \/ USAGI Project <yoshfuji AT linux-ipv6.org>
<\/p>\n","protected":false},"excerpt":{"rendered":"

\/proc\/sys\/net\/ipv4\/* \uc744 \uc704\ud55c \ubb38\uc11c kernel version 2.4.25 \ubc88\uc5ed 2004.2.25 \uae40\uc815\uade0 <http:\/\/www.oops.org> * \uc5ed\uc8fc)\uc774 \ud398\uc774\uc9c0\ub97c \uc77d\uae30 \uc804\uc5d0 \uc544\uc8fc \uac15\ub825\ud558\uac8c \uc8fc\uc758\ub97c \uc694\ud560 \uac83\uc740 sysctl\uc744 \uc774\uc6a9\ud558\uc5ec \uc774 \uac12\ub4e4\uc744\ubcc0\uacbd\ud560 \uacbd\uc6b0\ub098 \uc9c1\uc811\uc801\uc73c\ub85c \ubcc0\uacbd\uc744 \ud560 \uacbd\uc6b0 \uc2dc\uc2a4\ud15c\uc774 crash \ub418\uc5b4\uc9c8 \uc704\ud5d8\uc694\uc18c\uac00 \ub9ce\uc774 \uc788\ub2e4\ub294 \uac83\uc744 \uba85\uc2ec\ud574 \uc57c \ud55c\ub2e4. \uc989, \uc790\uae30\uc758 \uc2dc\uc2a4\ud15c\uc5d0 \ubb34\ub9ac\ud55c \uac12\uc744 \ub123\uc5c8\uc744 \uacbd\uc6b0 \uadf8 \uc989\uc2dc \uc2dc\uc2a4\ud15c\uc774 \uba48\ucd9c\uc218\ub3c4 \uc788\uae30 \ub54c\ubb38\uc5d0 \ucda9\ubd84\ud55c \ud14c\uc2a4\ud2b8\uc640 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[39],"tags":[],"class_list":["post-43","post","type-post","status-publish","format-standard","hentry","category-os_linux_unix_macos"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/43","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=43"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/43\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=43"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=43"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=43"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}