If the method succeeds, rc is 0 else rc > 0. Values above 0x8000 indicate Warnings.

If the method succeeds, message is NULL else message contains Error/Warning message.

List of nstcpparams

Enable or disable window scaling.

Factor used to calculate the new window size. This argument is needed only when the window scaling is enabled.

Enable or disable Selective ACKnowledgement (SACK).

Enable or disable maximum segment size (MSS) learning for virtual servers.

Maximum number of TCP segments allowed in a burst.

Initial maximum upper limit on the number of TCP packets that can be outstanding on the TCP link to the server.

TCP Receive buffer size
NOTE: This attribute is deprecated.
This option is deprecated in favour of -buffersize

Timeout for TCP delayed ACK, in milliseconds.

Flag to switch on RST on down services.

Enable or disable the Nagle algorithm on TCP connections.

Limit the number of persist (zero window) probes.

Maximum size of out-of-order packets queue. A value of 0 means no limit.

Immediate ACK on PUSH packet

Maximum packets per MSS

Maximum packets per retransmission

Minimum retransmission timeout, in milliseconds, specified in 10-millisecond increments (value must yield a whole number if divided by 10).

TCP slowstart increment factor

Maximum number of probes that Citrix ADC can send out in 10 milliseconds, to dynamically learn a service. Citrix ADC probes for the existence of the origin in case of wildcard virtual server or services.

Maximum threshold. After crossing this threshold number of outstanding probes for origin, the Citrix ADC reduces the number of connection retries for probe connections.

Limit the number of client connections (SYN) waiting for status of single probe. Any new SYN packets will be dropped.

Limit the number of client connections (SYN) waiting for status of probe system wide. Any new SYN packets will be dropped.

Duration, in seconds, to sample the Maximum Segment Size (MSS) of the services. The Citrix ADC determines the best MSS to set for the virtual server based on this sampling. The argument to enable maximum segment size (MSS) for virtual servers must be enabled.

Frequency, in seconds, at which the virtual servers learn the Maximum segment size (MSS) from the services. The argument to enable maximum segment size (MSS) for virtual servers must be enabled.

Maximum number of connections to hold in the TCP TIME_WAIT state on a packet engine. New connections entering TIME_WAIT state are proactively cleaned up.

Update last activity for KA probes
NOTE: This attribute is deprecated.
This option has been moved tcpProfile

When 'syncookie' is disabled in the TCP profile that is bound to the virtual server or service, and the number of TCP SYN+ACK retransmission by Citrix ADC for that virtual server or service crosses this threshold, the Citrix ADC responds by using the TCP SYN-Cookie mechanism.

Detect TCP SYN packet flood and send an SNMP trap.

Flush an existing connection if no memory can be obtained for new connection. HALF_CLOSED_AND_IDLE: Flush a connection that is closed by us but not by peer, or failing that, a connection that is past configured idle time. New connection fails if no such connection can be found. FIFO: If no half-closed or idle connection can be found, flush the oldest non-management connection, even if it is active. New connection fails if the oldest few connections are management connections. Note: If you enable this setting, you should also consider lowering the zombie timeout and half-close timeout, while setting the Citrix ADC timeout. See Also: connFlushThres argument below.

Flush an existing connection (as configured through -connFlushIfNoMem FIFO) if the system has more than specified number of connections, and a new connection is to be established. Note: This value may be rounded down to be a whole multiple of the number of packet engines running.

Accept DATA_FIN/FAST_CLOSE on passive subflow

Use MPTCP DSS checksum

The timeout value in seconds for idle mptcp subflows. If this timeout is not set, idle subflows are cleared after cltTimeout of vserver

The minimum idle time value in seconds for idle mptcp subflows after which the sublow is replaced by new incoming subflow if maximum subflow limit is reached. The priority for replacement is given to those subflow without any transaction

Maximum number of subflow connections supported in established state per mptcp connection.

Maximum number of subflow connections supported in pending join state per mptcp connection.

Maximum system level pending join connections allowed.

Number of RTO's at subflow level, after which MPCTP should start using other subflow.

When enabled, if NS receives a DSS on a backup subflow, NS will start using that subflow to send data. And if disabled, NS will continue to transmit on current chosen subflow. In case there is some error on a subflow (like RTO's/RST etc.) then NS can choose a backup subflow irrespective of this tunable.

Number of RTO's after which a connection should be freed.

Allow subflows to close immediately on FIN before the DATA_FIN exchange is completed at mptcp level.

Allow to send DATA FIN or FAST CLOSE on mptcp connection while sending FIN or RST on the last subflow.

Allow MPTCP subflows to send TCP RST Reason (MP_TCPRST) Option while sending TCP RST.

Allow to select option ACK or RESET to force the closure of an MPTCP connection abruptly.

If enabled, Citrix ADC retransmits MPTCP ADD-ADDR option if echo response is not received within the timeout interval. The retransmission is attempted only once.

Timeout in seconds after which a new TFO Key is computed for generating TFO Cookie. If zero, the same key is used always. If timeout is less than 120seconds, NS defaults to 120seconds timeout.

Flag to determine if the tcp param is built-in or not

Timeout for the server to function in syncookie mode after the synattack. This is valid if TCP syncookie is disabled on the profile and server acts in non syncookie mode by default.

The amount of time in seconds, after which a TCP connnection in the TCP TIME-WAIT state is flushed.

If enabled, non-negotiated TCP options are removed from the received packet while proxying it. By default, non-negotiated TCP options would be replaced by NOPs in the proxied packets. This option is not applicable for Citrix ADC generated packets.

If enabled, Delink client and server connection, when there is outstanding data to be sent to the other side.

Limits number of Challenge ACK sent per second, as recommended in RFC 5961(Improving TCP's Robustness to Blind In-Window Attacks)

If enabled, increase the ISN variation in SYN-ACKs sent by the NetScaler

If enabled, Sends reset reason code will be sent by the NetScaler