On Wed, Jun 20, 2007 at 09:58:23AM -0400, Greg Troxel wrote:
>   keepalive interval should be well greater than RTT

In practise, the lower bound must be > RTT x max_retries. Using that
should be as good enough though.

>   keepalive intercal should only be short enough to keep broken nat
>   boxes working

Using a low setting can be also be used to detect dead machines, so I
can understand why using the above could be a good idea.

> I suggest not limiting the high value.  If an admin does want to force
> apps that don't want keepalive, then that's another sysctl to override
> policy but it seems unwarranted.

Agreed.

Joerg