OpenBSD Implementation The TIME_WAIT problem Cont. Primarily affects very heavy users: Benchmarking tools and simulated traffic Reverse web proxies Busy nat systems users all connecting to the same destination Steve Bellovin proposes a solution in RFC 1948: ISN = timer + F(localhost, localport, remotehost, remoteport); where F is function that can not be computed from the outside ie. a keyed hash Rekeying is an issue, however