JackandWez Furlong c4dbaa743b proxy-server: add tcp_keepalive option ...

Some upstream peers (e.g. QQ Mail's rate-limiter) silently hold a
proxied TCP connection open indefinitely — sending no data, FIN, or RST
— rather than cleanly refusing.  Without some kind of timeout
management, the two file descriptors for such a session remain open for
the lifetime of the process, slowly exhausting the kernel's
file-descriptor table and occupying proxy-server worker slots.

This commit configures kernel level keepalive options with reasonable
defaults to detect and close out this class of connection.

Co-authored-by: Wez Furlong <wez@wezfurlong.org>

Closes: https://github.com/KumoCorp/kumomta/pull/509

2026-05-06 21:09:10 +01:00

..

start_proxy_listener

proxy-server: add tcp_keepalive option

2026-05-06 21:09:10 +01:00

_index.md

Add Prometheus metrics to proxy-server

2026-02-06 07:11:27 +00:00

start_http_listener.md

docs: update since('dev') macros for stable release

2026-03-04 08:03:21 +00:00