Information
This setting controls how many half-open connections can exist for a TCP port.
Rationale:
It is necessary to control the number of completed connections to the system to provide
some protection against Denial of Service attacks. Note that the value of 4096 is a minimum
to establish a good security posture for this setting. In environments where connections
numbers are high, such as a busy webserver, this value may need to be increased.
Solution
To enforce this setting, use the command:
# ipadm set-prop -p _conn_req_max_q0=4096 tcp