From: Thomas Jacob <jacob@internet24.de>
To: netfilter@lists.netfilter.org
Subject: Re: need advice for high traffic network
Date: Fri, 20 Jul 2007 00:59:31 +0200 [thread overview]
Message-ID: <20070719225931.GA17114@internet24.de> (raw)
In-Reply-To: <469FE85B.3010502@relevad.com>
[-- Attachment #1: Type: text/plain, Size: 647 bytes --]
On Thu, Jul 19, 2007 at 03:40:27PM -0700, Konstantin Svist wrote:
> # cat /proc/sys/net/netfilter/nf_conntrack_max
> 65536
>
> somehow I doubt I have THAT many connections :)
>
> highest load right now is around 600 requests per second, and ~60%
> complete within 10ms - the rest complete within 200ms (unless the
> firewall is turned on - then some start timing out 3s and up)
600s * 120s ip_conntrack_tcp_timeout_time_wait = 72000 entries
( => http://www.isi.edu/touch/pubs/infocomm99/infocomm99-web/ )
You might want to try to reduce those timers or just push
up your hash bucket = max entry values to maybe twice that.
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 191 bytes --]
next prev parent reply other threads:[~2007-07-19 22:59 UTC|newest]
Thread overview: 24+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-07-19 22:17 need advice for high traffic network Konstantin Svist
2007-07-19 22:17 ` David Lang
2007-07-19 22:40 ` Konstantin Svist
2007-07-19 22:59 ` Thomas Jacob [this message]
2007-07-19 23:17 ` Konstantin Svist
2007-07-19 23:28 ` Thomas Jacob
2007-07-19 23:35 ` Konstantin Svist
2007-07-19 23:44 ` Thomas Jacob
2007-07-20 0:18 ` Konstantin Svist
2007-07-20 7:48 ` Thomas Jacob
2007-07-20 17:51 ` David Lang
2007-07-20 23:14 ` Thomas Jacob
2007-07-19 23:47 ` even hash tables sizes, FAQ entry Thomas Jacob
2007-07-20 0:13 ` David Lang
2007-07-20 7:41 ` Thomas Jacob
2007-07-20 17:44 ` David Lang
2007-07-20 17:50 ` Patrick McHardy
2007-07-20 18:08 ` David Lang
2007-07-21 3:44 ` Patrick McHardy
2007-08-06 18:50 ` need advice for high traffic network R. DuFresne
2007-07-19 22:49 ` Thomas Jacob
2007-07-19 22:53 ` Konstantin Svist
2007-07-19 23:16 ` David Lang
2007-07-20 14:16 ` Gregory Carter
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20070719225931.GA17114@internet24.de \
--to=jacob@internet24.de \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.