News for hackers. Stuff that matters.
Re:FreeBSD/EC2 on C5 instances by otterley on Friday November 17, 2017 @11:06AM (#15723110)
> They also have hidden limits on the number of incoming tcp connections you can have.

Do you have proof of this?

Re:FreeBSD/EC2 on C5 instances by toast0 on Friday November 17, 2017 @12:37PM (#15724072)
No, I had an experiment I was tried to run on EC2 in 2013, and ran into this. It was very clear though. Established connections would plateau, and then no more tcp syns would arrive to the ec2 host, unless a connection was closed. At the time the limit was 5000 connections on the micro instance -- from my notes, we got an allocation for hi1.4xlarge and I know we hit the limit there too, but I don't recall what the limit was. This was a very simple TCP proxy, using Linux kernel ipmasq; this uses significantly less memory than HAProxy, although with a lot less features.

We had a very excited account rep because of where I work, but he was only barely able to confirm the limits were there, he wasn't able to get them raised or removed, nor could he tell us the limits by machine type.

There's a thread from 18 months ago on the aws forums [1], where an aws rep more or less confirms, but again provides no information

[1] https://forums.aws.amazon.com/thread.jspa?threadID=231806

Re:FreeBSD/EC2 on C5 instances by galliher on Friday November 17, 2017 @05:33PM (#15726546)
The "Connection Tracking" portion of http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-net... provides some insight here and describes a method to avoid connection tracking in EC2's firewall.
Re:FreeBSD/EC2 on C5 instances by toast0 on Friday November 17, 2017 @11:30PM (#15727758)
Thanks, this looks like what I needed to know!