a question about ip_conntrack_max

a question about ip_conntrack_max

[jump lee]

i am hacking ip_conntrack.
in function ip_conntrack_init (ip_conntrack_core.c), i can not understand 
this statement:

ip_conntrack_max=8*ip_conntrack_htable_size;

what's the reason of multiplying ip_conntrack_htable_size by 8?



_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* 
http://join.msn.com/?page=features/virus

Re: a question about ip_conntrack_max

[Patrick Schaaf]

Hello,

(removed Harald Welte from Cc: - I'm sure he's reading the list, anyway)

> i am hacking ip_conntrack.

What is your goal?

> ip_conntrack_max=8*ip_conntrack_htable_size;
> 
> what's the reason of multiplying ip_conntrack_htable_size by 8?

It gives you 8 times as much conntrack entries as you have
conntrack hash buckets.  Isn't 8 a nice number?  What number
would you prefer, and why?  The kernel has to derive ip_conntrack_max
SOMEHOW, and that's the way it does it now. There is another equally
arbitrary choice of ip_conntrack_htable_size, which is calculated
from the amount of memory in your machine. Again, the kernel has to do
SOMETHING in the absence of configuration information.

best regards
  Patrick

Re: a question about ip_conntrack_max

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 819 bytes --]

On Thu, Dec 12, 2002 at 02:35:56PM +0800, jump lee wrote:
> 
> i am hacking ip_conntrack.
> in function ip_conntrack_init (ip_conntrack_core.c), i can not understand 
> this statement:
> 
> ip_conntrack_max=8*ip_conntrack_htable_size;
> 
> what's the reason of multiplying ip_conntrack_htable_size by 8?

please read the mailinglist archive.  There have been discussions about
this subject going on all the time.  You can greatly improve performance
by using different values (higher prime numbers, ...) here.

-- 
- Harald Welte / laforge@gnumonks.org               http://www.gnumonks.org/
============================================================================
"If this were a dictatorship, it'd be a heck of a lot easier, just so long
 as I'm the dictator."  --  George W. Bush Dec 18, 2000

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]