最近線上遇到windows機器訪問其他機器的時候失敗的情況。實際就是本地的端口不夠用造成的。
D:\>netsh interface ipv4 show dynamicportrange protocol=tcp
Protocol tcp Dynamic Port Range
---------------------------------
Start Port : 49152
Number of Ports : 16384
D:\>netsh interface ipv4 show tcpstats
MIB-II TCP Statistics
------------------------------------------------------
Timeout Algorithm: Van Jacobson's Algorithm
Minimum Timeout: 10
Maximum Timeout: 4294967295
Maximum Connections: Dynamic
Active Opens: 402947
Passive Opens: 989620
Attempts Failed: 122047
Established Resets: 49384
Currently Established: 135
In Segments: 47651175
Out Segments: 45510477
Retransmitted Segments: 465369
In Errors: 0
Out Resets: 65865
這個能用的端口實際就16384個,可以直接 netstat -atn查看一下每個狀態的數量。如果對外做大量的請求會造成本地端口不夠用。
可以修改一下起始端口:
netsh int ipv4 set dynamicport tcp start=2000 num=63000
netsh int ipv4 set dynamicport udp start=2000 num=63000
netsh int ipv6 set dynamicport tcp start=2000 num=63000
netsh int ipv6 set dynamicport udp start=2000 num=63000
然后修改一下注冊表縮短time-wait的時間。
regedit打開注冊表，添加
DWORD值
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
“MaxUserPort”=dword:0000fffe
“TcpTimeWaitDelay”=dword:0000005 (縮短為5