TCP Fast Open (TFO) on FreeBSD

TCP Fast Open (TFO) is an extension to speed up the opening of successive Transmission Control Protocol (TCP) connections between two endpoints. It works by using a TFO cookie (a TCP option), which is a cryptographic cookie stored on the client and set upon the initial connection with the server.[1] When the client later reconnects, it sends the initial SYN packet along with the TFO cookie data to authenticate itself. If successful, the server may start sending data to the client even before the reception of the final ACK packet of the three-way handshake, skipping that way a round-trip delay and lowering the latency in the start of data transmission.

Put the following into /etc/sysctl.conf:

net.inet.tcp.fastopen.server_enable=1

and voala - the dns/unbound port compiled with "TFOCL" and "TFOSE" options on - now can be started and used without any warnings.

More how the TFO implementation on freebsd can be read on https://people.freebsd.org/~pkelsey/.

Same information was also attached bellow:

TFO_Design_Details

Share with Me via Nextcloud