[LARTC] ip_conntrack: falling back to vmalloc.

[LARTC] ip_conntrack: falling back to vmalloc.

[Sébastien CRAMATTE]

Hello

I've got  a server with 3Gb of ram and I want to keep 256 for the system
and allocate  the rest to conntrack ...

I've tried to change the HASHSIZE of the  ip_conntrack  but  dmesg
return me this error !

ip_conntrack version 2.4 (2097152 buckets, 16777216 max) - 236 bytes per
conntrack
ip_conntrack: falling back to vmalloc.

....

I've use this "math"  to calculate it :


(3072 - 256)  x 1024^2  -  236 = 12511822,1027

The near "power of 2"  seems to be 2^23 = 8388608

With this result I've change my "sysctl.conf" file  

net.ipv4.netfilter.ip_conntrack_max = 8388608
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established= 28800

and  I've to change the HASHSIZE to  ip_conntrack_max / 4 ...


What is wrong ! How can I solve the problem ...
I'm waiting for a server with 8Gb (8192) of ram  most of available to
use with conntrack !

Regards




_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc