* High uptime linux router works for linux clients, windows clients act strange
@ 2015-01-19 16:33 Stephan Alz
2015-01-19 16:51 ` Stephan Alz
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Stephan Alz @ 2015-01-19 16:33 UTC (permalink / raw)
To: lartc
Hello
I working on finding out a strange networking problem with one of our linux gateways between the internal LAN and DMZ.
This machine runs: Debian6 with 2.6.32-5-amd64 kernel, have 2gb of mem from which 1 is free. It has near to 1 year uptime and has absolutely nothing changed on it. All it does is some natting and packet filtering with iptables.
Network diagram:
INET <> Router1 (BGP) --- DMZ --- Router2 (This One) <> LAN
So about 2 months ago windows machines (WinXP-Win8) started acting strange, connections got interrupted, webpages didn't load for users. After weeks of investigation into this and going through all the components on our network I finally determined that this machine is the problem so as a workaround I installed another linux box and all the windowses using that as a default gateway right now. It is a workaround what I wouldn't like to leave in place forever.
For example it was happening one morning when I plugged a new win7 laptop in and 1 of our bgp routes were disabled on a server prior to this gateway the laptop simply couldn't go out to the internet (while all the other linux machines had no problem whatsover), when I reenabled the bgp route on the first router it started working. This just doesn't make sense, the machines behind this gateway don't know anything of the outside network (DMZ) because they are natted out there.
I try to make sense of all this but can't and I'm hoping some networking gurus here can give me tips what is causing this error.
Here are the kernel values from the gateway (I don't think any other interface statistics like ifconfig are relevant, there are no errors:0 on the interfaces, the link is not flipflopping and as I said everything works just fine with linux clients) :
kernel.sched_child_runs_first = 0
kernel.sched_min_granularity_ns = 3000000
kernel.sched_latency_ns = 15000000
kernel.sched_wakeup_granularity_ns = 3000000
kernel.sched_shares_ratelimit = 750000
kernel.sched_shares_thresh = 4
kernel.sched_features = 32611451
kernel.sched_migration_cost = 500000
kernel.sched_nr_migrate = 32
kernel.sched_time_avg = 1000
kernel.timer_migration = 1
kernel.sched_rt_period_us = 1000000
kernel.sched_rt_runtime_us = 950000
kernel.sched_compat_yield = 0
kernel.panic = 0
kernel.core_uses_pid = 0
kernel.core_pattern = core
kernel.core_pipe_limit = 0
kernel.tainted = 1024
kernel.real-root-dev = 0
kernel.print-fatal-signals = 0
kernel.ctrl-alt-del = 0
kernel.ftrace_dump_on_oops = 0
kernel.modprobe = /sbin/modprobe
kernel.modules_disabled = 0
kernel.hotplug =
kernel.acct = 4 2 30
kernel.sysrq = 438
kernel.cad_pid = 1
kernel.threads-max = 32039
kernel.random.poolsize = 4096
kernel.random.entropy_avail = 145
kernel.random.read_wakeup_threshold = 64
kernel.random.write_wakeup_threshold = 128
kernel.overflowuid = 65534
kernel.overflowgid = 65534
kernel.pid_max = 32768
kernel.panic_on_oops = 0
kernel.printk = 4 4 1 7
kernel.printk_ratelimit = 5
kernel.printk_ratelimit_burst = 10
kernel.printk_delay = 0
kernel.ngroups_max = 65536
kernel.unknown_nmi_panic = 0
kernel.nmi_watchdog = 0
kernel.panic_on_unrecovered_nmi = 0
kernel.panic_on_io_nmi = 0
kernel.bootloader_type = 112
kernel.bootloader_version = 0
kernel.kstack_depth_to_print = 12
kernel.io_delay_type = 0
kernel.randomize_va_space = 2
kernel.acpi_video_flags = 0
kernel.softlockup_panic = 0
kernel.softlockup_thresh = 60
kernel.hung_task_panic = 0
kernel.hung_task_check_count = 4194304
kernel.hung_task_timeout_secs = 120
kernel.hung_task_warnings = 10
kernel.compat-log = 1
kernel.max_lock_depth = 1024
kernel.poweroff_cmd = /sbin/poweroff
kernel.keys.maxkeys = 200
kernel.keys.maxbytes = 20000
kernel.keys.root_maxkeys = 200
kernel.keys.root_maxbytes = 20000
kernel.keys.gc_delay = 300
kernel.slow-work.min-threads = 2
kernel.slow-work.max-threads = 4
kernel.slow-work.vslow-percentage = 50
kernel.perf_event_paranoid = 1
kernel.perf_event_mlock_kb = 516
kernel.perf_event_max_sample_rate = 100000
kernel.blk_iopoll = 1
kernel.sched_domain.cpu0.domain0.min_interval = 1
kernel.sched_domain.cpu0.domain0.max_interval = 2
kernel.sched_domain.cpu0.domain0.busy_idx = 0
kernel.sched_domain.cpu0.domain0.idle_idx = 0
kernel.sched_domain.cpu0.domain0.newidle_idx = 0
kernel.sched_domain.cpu0.domain0.wake_idx = 0
kernel.sched_domain.cpu0.domain0.forkexec_idx = 0
kernel.sched_domain.cpu0.domain0.busy_factor = 64
kernel.sched_domain.cpu0.domain0.imbalance_pct = 110
kernel.sched_domain.cpu0.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu0.domain0.flags = 687
kernel.sched_domain.cpu0.domain0.name = SIBLING
kernel.sched_domain.cpu0.domain1.min_interval = 1
kernel.sched_domain.cpu0.domain1.max_interval = 4
kernel.sched_domain.cpu0.domain1.busy_idx = 2
kernel.sched_domain.cpu0.domain1.idle_idx = 0
kernel.sched_domain.cpu0.domain1.newidle_idx = 0
kernel.sched_domain.cpu0.domain1.wake_idx = 0
kernel.sched_domain.cpu0.domain1.forkexec_idx = 0
kernel.sched_domain.cpu0.domain1.busy_factor = 64
kernel.sched_domain.cpu0.domain1.imbalance_pct = 125
kernel.sched_domain.cpu0.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu0.domain1.flags = 4655
kernel.sched_domain.cpu0.domain1.name = MC
kernel.sched_domain.cpu0.domain2.min_interval = 1
kernel.sched_domain.cpu0.domain2.max_interval = 4
kernel.sched_domain.cpu0.domain2.busy_idx = 2
kernel.sched_domain.cpu0.domain2.idle_idx = 1
kernel.sched_domain.cpu0.domain2.newidle_idx = 0
kernel.sched_domain.cpu0.domain2.wake_idx = 0
kernel.sched_domain.cpu0.domain2.forkexec_idx = 0
kernel.sched_domain.cpu0.domain2.busy_factor = 64
kernel.sched_domain.cpu0.domain2.imbalance_pct = 125
kernel.sched_domain.cpu0.domain2.cache_nice_tries = 1
kernel.sched_domain.cpu0.domain2.flags = 4143
kernel.sched_domain.cpu0.domain2.name = CPU
kernel.sched_domain.cpu1.domain0.min_interval = 1
kernel.sched_domain.cpu1.domain0.max_interval = 2
kernel.sched_domain.cpu1.domain0.busy_idx = 0
kernel.sched_domain.cpu1.domain0.idle_idx = 0
kernel.sched_domain.cpu1.domain0.newidle_idx = 0
kernel.sched_domain.cpu1.domain0.wake_idx = 0
kernel.sched_domain.cpu1.domain0.forkexec_idx = 0
kernel.sched_domain.cpu1.domain0.busy_factor = 64
kernel.sched_domain.cpu1.domain0.imbalance_pct = 110
kernel.sched_domain.cpu1.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu1.domain0.flags = 687
kernel.sched_domain.cpu1.domain0.name = SIBLING
kernel.sched_domain.cpu1.domain1.min_interval = 1
kernel.sched_domain.cpu1.domain1.max_interval = 4
kernel.sched_domain.cpu1.domain1.busy_idx = 2
kernel.sched_domain.cpu1.domain1.idle_idx = 0
kernel.sched_domain.cpu1.domain1.newidle_idx = 0
kernel.sched_domain.cpu1.domain1.wake_idx = 0
kernel.sched_domain.cpu1.domain1.forkexec_idx = 0
kernel.sched_domain.cpu1.domain1.busy_factor = 64
kernel.sched_domain.cpu1.domain1.imbalance_pct = 125
kernel.sched_domain.cpu1.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu1.domain1.flags = 4655
kernel.sched_domain.cpu1.domain1.name = MC
kernel.sched_domain.cpu1.domain2.min_interval = 1
kernel.sched_domain.cpu1.domain2.max_interval = 4
kernel.sched_domain.cpu1.domain2.busy_idx = 2
kernel.sched_domain.cpu1.domain2.idle_idx = 1
kernel.sched_domain.cpu1.domain2.newidle_idx = 0
kernel.sched_domain.cpu1.domain2.wake_idx = 0
kernel.sched_domain.cpu1.domain2.forkexec_idx = 0
kernel.sched_domain.cpu1.domain2.busy_factor = 64
kernel.sched_domain.cpu1.domain2.imbalance_pct = 125
kernel.sched_domain.cpu1.domain2.cache_nice_tries = 1
kernel.sched_domain.cpu1.domain2.flags = 4143
kernel.sched_domain.cpu1.domain2.name = CPU
kernel.sched_domain.cpu2.domain0.min_interval = 1
kernel.sched_domain.cpu2.domain0.max_interval = 2
kernel.sched_domain.cpu2.domain0.busy_idx = 0
kernel.sched_domain.cpu2.domain0.idle_idx = 0
kernel.sched_domain.cpu2.domain0.newidle_idx = 0
kernel.sched_domain.cpu2.domain0.wake_idx = 0
kernel.sched_domain.cpu2.domain0.forkexec_idx = 0
kernel.sched_domain.cpu2.domain0.busy_factor = 64
kernel.sched_domain.cpu2.domain0.imbalance_pct = 110
kernel.sched_domain.cpu2.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu2.domain0.flags = 687
kernel.sched_domain.cpu2.domain0.name = SIBLING
kernel.sched_domain.cpu2.domain1.min_interval = 1
kernel.sched_domain.cpu2.domain1.max_interval = 4
kernel.sched_domain.cpu2.domain1.busy_idx = 2
kernel.sched_domain.cpu2.domain1.idle_idx = 0
kernel.sched_domain.cpu2.domain1.newidle_idx = 0
kernel.sched_domain.cpu2.domain1.wake_idx = 0
kernel.sched_domain.cpu2.domain1.forkexec_idx = 0
kernel.sched_domain.cpu2.domain1.busy_factor = 64
kernel.sched_domain.cpu2.domain1.imbalance_pct = 125
kernel.sched_domain.cpu2.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu2.domain1.flags = 4655
kernel.sched_domain.cpu2.domain1.name = MC
kernel.sched_domain.cpu2.domain2.min_interval = 1
kernel.sched_domain.cpu2.domain2.max_interval = 4
kernel.sched_domain.cpu2.domain2.busy_idx = 2
kernel.sched_domain.cpu2.domain2.idle_idx = 1
kernel.sched_domain.cpu2.domain2.newidle_idx = 0
kernel.sched_domain.cpu2.domain2.wake_idx = 0
kernel.sched_domain.cpu2.domain2.forkexec_idx = 0
kernel.sched_domain.cpu2.domain2.busy_factor = 64
kernel.sched_domain.cpu2.domain2.imbalance_pct = 125
kernel.sched_domain.cpu2.domain2.cache_nice_tries = 1
kernel.sched_domain.cpu2.domain2.flags = 4143
kernel.sched_domain.cpu2.domain2.name = CPU
kernel.sched_domain.cpu3.domain0.min_interval = 1
kernel.sched_domain.cpu3.domain0.max_interval = 2
kernel.sched_domain.cpu3.domain0.busy_idx = 0
kernel.sched_domain.cpu3.domain0.idle_idx = 0
kernel.sched_domain.cpu3.domain0.newidle_idx = 0
kernel.sched_domain.cpu3.domain0.wake_idx = 0
kernel.sched_domain.cpu3.domain0.forkexec_idx = 0
kernel.sched_domain.cpu3.domain0.busy_factor = 64
kernel.sched_domain.cpu3.domain0.imbalance_pct = 110
kernel.sched_domain.cpu3.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu3.domain0.flags = 687
kernel.sched_domain.cpu3.domain0.name = SIBLING
kernel.sched_domain.cpu3.domain1.min_interval = 1
kernel.sched_domain.cpu3.domain1.max_interval = 4
kernel.sched_domain.cpu3.domain1.busy_idx = 2
kernel.sched_domain.cpu3.domain1.idle_idx = 0
kernel.sched_domain.cpu3.domain1.newidle_idx = 0
kernel.sched_domain.cpu3.domain1.wake_idx = 0
kernel.sched_domain.cpu3.domain1.forkexec_idx = 0
kernel.sched_domain.cpu3.domain1.busy_factor = 64
kernel.sched_domain.cpu3.domain1.imbalance_pct = 125
kernel.sched_domain.cpu3.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu3.domain1.flags = 4655
kernel.sched_domain.cpu3.domain1.name = MC
kernel.sched_domain.cpu3.domain2.min_interval = 1
kernel.sched_domain.cpu3.domain2.max_interval = 4
kernel.sched_domain.cpu3.domain2.busy_idx = 2
kernel.sched_domain.cpu3.domain2.idle_idx = 1
kernel.sched_domain.cpu3.domain2.newidle_idx = 0
kernel.sched_domain.cpu3.domain2.wake_idx = 0
kernel.sched_domain.cpu3.domain2.forkexec_idx = 0
kernel.sched_domain.cpu3.domain2.busy_factor = 64
kernel.sched_domain.cpu3.domain2.imbalance_pct = 125
kernel.sched_domain.cpu3.domain2.cache_nice_tries = 1
kernel.sched_domain.cpu3.domain2.flags = 4143
kernel.sched_domain.cpu3.domain2.name = CPU
kernel.vsyscall64 = 1
kernel.ostype = Linux
kernel.osrelease = 2.6.32-5-amd64
kernel.version = #1 SMP Sun Sep 23 10:07:46 UTC 2012
kernel.hostname = gw
kernel.domainname = (none)
kernel.shmmax = 33554432
kernel.shmall = 2097152
kernel.shmmni = 4096
kernel.msgmax = 8192
kernel.msgmni = 4022
kernel.msgmnb = 16384
kernel.sem = 250 32000 32 128
kernel.auto_msgmni = 1
kernel.pty.max = 4096
kernel.pty.nr = 760
vm.overcommit_memory = 0
vm.panic_on_oom = 0
vm.oom_kill_allocating_task = 0
vm.oom_dump_tasks = 0
vm.overcommit_ratio = 50
vm.page-cluster = 3
vm.dirty_background_ratio = 10
vm.dirty_background_bytes = 0
vm.dirty_ratio = 20
vm.dirty_bytes = 0
vm.dirty_writeback_centisecs = 500
vm.dirty_expire_centisecs = 3000
vm.nr_pdflush_threads = 0
vm.swappiness = 60
vm.nr_hugepages = 0
vm.hugetlb_shm_group = 0
vm.hugepages_treat_as_movable = 0
vm.nr_overcommit_hugepages = 0
vm.lowmem_reserve_ratio = 256 256 32
vm.drop_caches = 0
vm.min_free_kbytes = 5750
vm.percpu_pagelist_fraction = 0
vm.max_map_count = 65530
vm.laptop_mode = 0
vm.block_dump = 0
vm.vfs_cache_pressure = 100
vm.legacy_va_layout = 0
vm.zone_reclaim_mode = 0
vm.min_unmapped_ratio = 1
vm.min_slab_ratio = 5
vm.stat_interval = 1
vm.mmap_min_addr = 65536
vm.numa_zonelist_order = default
vm.scan_unevictable_pages = 0
vm.memory_failure_early_kill = 0
vm.memory_failure_recovery = 1
fs.inode-nr = 46259 1
fs.inode-state = 46259 1 0 0 0 0 0
fs.file-nr = 1952 0 205022
fs.file-max = 205022
fs.nr_open = 1048576
fs.dentry-state = 61562 58747 45 0 0 0
fs.overflowuid = 65534
fs.overflowgid = 65534
fs.leases-enable = 1
fs.dir-notify-enable = 1
fs.lease-break-time = 45
fs.aio-nr = 0
fs.aio-max-nr = 65536
fs.inotify.max_user_instances = 128
fs.inotify.max_user_watches = 8192
fs.inotify.max_queued_events = 16384
fs.epoll.max_user_watches = 419942
fs.suid_dumpable = 0
fs.quota.lookups = 0
fs.quota.drops = 0
fs.quota.reads = 0
fs.quota.writes = 0
fs.quota.cache_hits = 0
fs.quota.allocated_dquots = 0
fs.quota.free_dquots = 0
fs.quota.syncs = 0
fs.quota.warnings = 1
fs.mqueue.queues_max = 256
fs.mqueue.msg_max = 10
fs.mqueue.msgsize_max = 8192
debug.exception-trace = 1
dev.hpet.max-user-freq = 64
dev.mac_hid.mouse_button_emulation = 0
dev.mac_hid.mouse_button2_keycode = 97
dev.mac_hid.mouse_button3_keycode = 100
dev.scsi.logging_level = 0
net.netfilter.nf_log.0 = NONE
net.netfilter.nf_log.1 = NONE
net.netfilter.nf_log.2 = NONE
net.netfilter.nf_log.3 = NONE
net.netfilter.nf_log.4 = NONE
net.netfilter.nf_log.5 = NONE
net.netfilter.nf_log.6 = NONE
net.netfilter.nf_log.7 = NONE
net.netfilter.nf_log.8 = NONE
net.netfilter.nf_log.9 = NONE
net.netfilter.nf_log.10 = NONE
net.netfilter.nf_log.11 = NONE
net.netfilter.nf_log.12 = NONE
net.netfilter.nf_conntrack_generic_timeout = 600
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60
net.netfilter.nf_conntrack_tcp_timeout_established = 432000
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300
net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300
net.netfilter.nf_conntrack_tcp_loose = 1
net.netfilter.nf_conntrack_tcp_be_liberal = 0
net.netfilter.nf_conntrack_tcp_max_retrans = 3
net.netfilter.nf_conntrack_udp_timeout = 30
net.netfilter.nf_conntrack_udp_timeout_stream = 180
net.netfilter.nf_conntrack_icmp_timeout = 30
net.netfilter.nf_conntrack_acct = 1
net.netfilter.nf_conntrack_events = 1
net.netfilter.nf_conntrack_events_retry_timeout = 15
net.netfilter.nf_conntrack_max = 65536
net.netfilter.nf_conntrack_count = 1709
net.netfilter.nf_conntrack_buckets = 16384
net.netfilter.nf_conntrack_checksum = 1
net.netfilter.nf_conntrack_log_invalid = 0
net.netfilter.nf_conntrack_expect_max = 256
net.core.somaxconn = 128
net.core.xfrm_aevent_etime = 10
net.core.xfrm_aevent_rseqth = 2
net.core.xfrm_larval_drop = 1
net.core.xfrm_acq_expires = 30
net.core.wmem_max = 131071
net.core.rmem_max = 131071
net.core.wmem_default = 124928
net.core.rmem_default = 124928
net.core.dev_weight = 64
net.core.netdev_max_backlog = 1000
net.core.message_cost = 5
net.core.message_burst = 10
net.core.optmem_max = 20480
net.core.netdev_budget = 300
net.core.warnings = 1
net.ipv4.route.gc_thresh = 65536
net.ipv4.route.max_size = 1048576
net.ipv4.route.gc_min_interval = 0
net.ipv4.route.gc_min_interval_ms = 500
net.ipv4.route.gc_timeout = 300
net.ipv4.route.gc_interval = 60
net.ipv4.route.redirect_load = 5
net.ipv4.route.redirect_number = 9
net.ipv4.route.redirect_silence = 5120
net.ipv4.route.error_cost = 250
net.ipv4.route.error_burst = 1250
net.ipv4.route.gc_elasticity = 8
net.ipv4.route.mtu_expires = 600
net.ipv4.route.min_pmtu = 552
net.ipv4.route.min_adv_mss = 256
net.ipv4.route.secret_interval = 600
net.ipv4.neigh.default.mcast_solicit = 3
net.ipv4.neigh.default.ucast_solicit = 3
net.ipv4.neigh.default.app_solicit = 0
net.ipv4.neigh.default.retrans_time = 100
net.ipv4.neigh.default.base_reachable_time = 30
net.ipv4.neigh.default.delay_first_probe_time = 5
net.ipv4.neigh.default.gc_stale_time = 60
net.ipv4.neigh.default.unres_qlen = 3
net.ipv4.neigh.default.proxy_qlen = 64
net.ipv4.neigh.default.anycast_delay = 100
net.ipv4.neigh.default.proxy_delay = 80
net.ipv4.neigh.default.locktime = 100
net.ipv4.neigh.default.retrans_time_ms = 1000
net.ipv4.neigh.default.base_reachable_time_ms = 30000
net.ipv4.neigh.default.gc_interval = 30
net.ipv4.neigh.default.gc_thresh1 = 128
net.ipv4.neigh.default.gc_thresh2 = 512
net.ipv4.neigh.default.gc_thresh3 = 1024
net.ipv4.neigh.lo.mcast_solicit = 3
net.ipv4.neigh.lo.ucast_solicit = 3
net.ipv4.neigh.lo.app_solicit = 0
net.ipv4.neigh.lo.retrans_time = 100
net.ipv4.neigh.lo.base_reachable_time = 30
net.ipv4.neigh.lo.delay_first_probe_time = 5
net.ipv4.neigh.lo.gc_stale_time = 60
net.ipv4.neigh.lo.unres_qlen = 3
net.ipv4.neigh.lo.proxy_qlen = 64
net.ipv4.neigh.lo.anycast_delay = 100
net.ipv4.neigh.lo.proxy_delay = 80
net.ipv4.neigh.lo.locktime = 100
net.ipv4.neigh.lo.retrans_time_ms = 1000
net.ipv4.neigh.lo.base_reachable_time_ms = 30000
net.ipv4.neigh.eth0.mcast_solicit = 3
net.ipv4.neigh.eth0.ucast_solicit = 3
net.ipv4.neigh.eth0.app_solicit = 0
net.ipv4.neigh.eth0.retrans_time = 100
net.ipv4.neigh.eth0.base_reachable_time = 30
net.ipv4.neigh.eth0.delay_first_probe_time = 5
net.ipv4.neigh.eth0.gc_stale_time = 60
net.ipv4.neigh.eth0.unres_qlen = 3
net.ipv4.neigh.eth0.proxy_qlen = 64
net.ipv4.neigh.eth0.anycast_delay = 100
net.ipv4.neigh.eth0.proxy_delay = 80
net.ipv4.neigh.eth0.locktime = 100
net.ipv4.neigh.eth0.retrans_time_ms = 1000
net.ipv4.neigh.eth0.base_reachable_time_ms = 30000
net.ipv4.neigh.eth1.mcast_solicit = 3
net.ipv4.neigh.eth1.ucast_solicit = 3
net.ipv4.neigh.eth1.app_solicit = 0
net.ipv4.neigh.eth1.retrans_time = 100
net.ipv4.neigh.eth1.base_reachable_time = 30
net.ipv4.neigh.eth1.delay_first_probe_time = 5
net.ipv4.neigh.eth1.gc_stale_time = 60
net.ipv4.neigh.eth1.unres_qlen = 3
net.ipv4.neigh.eth1.proxy_qlen = 64
net.ipv4.neigh.eth1.anycast_delay = 100
net.ipv4.neigh.eth1.proxy_delay = 80
net.ipv4.neigh.eth1.locktime = 100
net.ipv4.neigh.eth1.retrans_time_ms = 1000
net.ipv4.neigh.eth1.base_reachable_time_ms = 30000
net.ipv4.neigh.eth1/30.mcast_solicit = 3
net.ipv4.neigh.eth1/30.ucast_solicit = 3
net.ipv4.neigh.eth1/30.app_solicit = 0
net.ipv4.neigh.eth1/30.retrans_time = 100
net.ipv4.neigh.eth1/30.base_reachable_time = 30
net.ipv4.neigh.eth1/30.delay_first_probe_time = 5
net.ipv4.neigh.eth1/30.gc_stale_time = 60
net.ipv4.neigh.eth1/30.unres_qlen = 3
net.ipv4.neigh.eth1/30.proxy_qlen = 64
net.ipv4.neigh.eth1/30.anycast_delay = 100
net.ipv4.neigh.eth1/30.proxy_delay = 80
net.ipv4.neigh.eth1/30.locktime = 100
net.ipv4.neigh.eth1/30.retrans_time_ms = 1000
net.ipv4.neigh.eth1/30.base_reachable_time_ms = 30000
net.ipv4.neigh.eth1/31.mcast_solicit = 3
net.ipv4.neigh.eth1/31.ucast_solicit = 3
net.ipv4.neigh.eth1/31.app_solicit = 0
net.ipv4.neigh.eth1/31.retrans_time = 100
net.ipv4.neigh.eth1/31.base_reachable_time = 30
net.ipv4.neigh.eth1/31.delay_first_probe_time = 5
net.ipv4.neigh.eth1/31.gc_stale_time = 60
net.ipv4.neigh.eth1/31.unres_qlen = 3
net.ipv4.neigh.eth1/31.proxy_qlen = 64
net.ipv4.neigh.eth1/31.anycast_delay = 100
net.ipv4.neigh.eth1/31.proxy_delay = 80
net.ipv4.neigh.eth1/31.locktime = 100
net.ipv4.neigh.eth1/31.retrans_time_ms = 1000
net.ipv4.neigh.eth1/31.base_reachable_time_ms = 30000
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_sack = 1
net.ipv4.tcp_retrans_collapse = 1
net.ipv4.ip_default_ttl = 64
net.ipv4.ip_no_pmtu_disc = 0
net.ipv4.ip_nonlocal_bind = 0
net.ipv4.tcp_syn_retries = 5
net.ipv4.tcp_synack_retries = 5
net.ipv4.tcp_max_orphans = 131072
net.ipv4.tcp_max_tw_buckets = 131072
net.ipv4.ip_dynaddr = 0
net.ipv4.tcp_keepalive_time = 7200
net.ipv4.tcp_keepalive_probes = 9
net.ipv4.tcp_keepalive_intvl = 75
net.ipv4.tcp_retries1 = 3
net.ipv4.tcp_retries2 = 15
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_syncookies = 0
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_abort_on_overflow = 0
net.ipv4.tcp_stdurg = 0
net.ipv4.tcp_rfc1337 = 0
net.ipv4.tcp_max_syn_backlog = 1024
net.ipv4.ip_local_port_range = 32768 61000
net.ipv4.igmp_max_memberships = 20
net.ipv4.igmp_max_msf = 10
net.ipv4.inet_peer_threshold = 65664
net.ipv4.inet_peer_minttl = 120
net.ipv4.inet_peer_maxttl = 600
net.ipv4.inet_peer_gc_mintime = 10
net.ipv4.inet_peer_gc_maxtime = 120
net.ipv4.tcp_orphan_retries = 0
net.ipv4.tcp_fack = 1
net.ipv4.tcp_reordering = 3
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_dsack = 1
net.ipv4.tcp_mem = 192192 256256 384384
net.ipv4.tcp_wmem = 4096 16384 4194304
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_app_win = 31
net.ipv4.tcp_adv_win_scale = 2
net.ipv4.tcp_tw_reuse = 0
net.ipv4.tcp_frto = 2
net.ipv4.tcp_frto_response = 0
net.ipv4.tcp_low_latency = 0
net.ipv4.tcp_no_metrics_save = 0
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_tso_win_divisor = 3
net.ipv4.tcp_congestion_control = cubic
net.ipv4.tcp_abc = 0
net.ipv4.tcp_mtu_probing = 0
net.ipv4.tcp_base_mss = 512
net.ipv4.tcp_workaround_signed_windows = 0
net.ipv4.tcp_dma_copybreak = 4096
net.ipv4.tcp_slow_start_after_idle = 1
net.ipv4.tcp_available_congestion_control = cubic reno
net.ipv4.tcp_allowed_congestion_control = cubic reno
net.ipv4.tcp_max_ssthresh = 0
net.ipv4.udp_mem = 192192 256256 384384
net.ipv4.udp_rmem_min = 4096
net.ipv4.udp_wmem_min = 4096
net.ipv4.netfilter.ip_conntrack_generic_timeout = 600
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent2 = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_recv = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 432000
net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_last_ack = 30
net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close = 10
net.ipv4.netfilter.ip_conntrack_tcp_timeout_max_retrans = 300
net.ipv4.netfilter.ip_conntrack_tcp_loose = 1
net.ipv4.netfilter.ip_conntrack_tcp_be_liberal = 0
net.ipv4.netfilter.ip_conntrack_tcp_max_retrans = 3
net.ipv4.netfilter.ip_conntrack_udp_timeout = 30
net.ipv4.netfilter.ip_conntrack_udp_timeout_stream = 180
net.ipv4.netfilter.ip_conntrack_icmp_timeout = 30
net.ipv4.netfilter.ip_conntrack_max = 65536
net.ipv4.netfilter.ip_conntrack_count = 1709
net.ipv4.netfilter.ip_conntrack_buckets = 16384
net.ipv4.netfilter.ip_conntrack_checksum = 1
net.ipv4.netfilter.ip_conntrack_log_invalid = 0
net.ipv4.conf.all.forwarding = 1
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.secure_redirects = 1
net.ipv4.conf.all.shared_media = 1
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.src_valid_mark = 0
net.ipv4.conf.all.proxy_arp = 0
net.ipv4.conf.all.medium_id = 0
net.ipv4.conf.all.bootp_relay = 0
net.ipv4.conf.all.log_martians = 0
net.ipv4.conf.all.tag = 0
net.ipv4.conf.all.arp_filter = 0
net.ipv4.conf.all.arp_announce = 0
net.ipv4.conf.all.arp_ignore = 0
net.ipv4.conf.all.arp_accept = 0
net.ipv4.conf.all.arp_notify = 0
net.ipv4.conf.all.disable_xfrm = 0
net.ipv4.conf.all.disable_policy = 0
net.ipv4.conf.all.force_igmp_version = 0
net.ipv4.conf.all.promote_secondaries = 0
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.default.accept_redirects = 1
net.ipv4.conf.default.secure_redirects = 1
net.ipv4.conf.default.shared_media = 1
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.default.accept_source_route = 1
net.ipv4.conf.default.src_valid_mark = 0
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.default.medium_id = 0
net.ipv4.conf.default.bootp_relay = 0
net.ipv4.conf.default.log_martians = 0
net.ipv4.conf.default.tag = 0
net.ipv4.conf.default.arp_filter = 0
net.ipv4.conf.default.arp_announce = 0
net.ipv4.conf.default.arp_ignore = 0
net.ipv4.conf.default.arp_accept = 0
net.ipv4.conf.default.arp_notify = 0
net.ipv4.conf.default.disable_xfrm = 0
net.ipv4.conf.default.disable_policy = 0
net.ipv4.conf.default.force_igmp_version = 0
net.ipv4.conf.default.promote_secondaries = 0
net.ipv4.conf.lo.forwarding = 1
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.lo.accept_redirects = 1
net.ipv4.conf.lo.secure_redirects = 1
net.ipv4.conf.lo.shared_media = 1
net.ipv4.conf.lo.rp_filter = 0
net.ipv4.conf.lo.send_redirects = 1
net.ipv4.conf.lo.accept_source_route = 1
net.ipv4.conf.lo.src_valid_mark = 0
net.ipv4.conf.lo.proxy_arp = 0
net.ipv4.conf.lo.medium_id = 0
net.ipv4.conf.lo.bootp_relay = 0
net.ipv4.conf.lo.log_martians = 0
net.ipv4.conf.lo.tag = 0
net.ipv4.conf.lo.arp_filter = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.lo.arp_accept = 0
net.ipv4.conf.lo.arp_notify = 0
net.ipv4.conf.lo.disable_xfrm = 1
net.ipv4.conf.lo.disable_policy = 1
net.ipv4.conf.lo.force_igmp_version = 0
net.ipv4.conf.lo.promote_secondaries = 0
net.ipv4.conf.eth0.forwarding = 1
net.ipv4.conf.eth0.mc_forwarding = 0
net.ipv4.conf.eth0.accept_redirects = 1
net.ipv4.conf.eth0.secure_redirects = 1
net.ipv4.conf.eth0.shared_media = 1
net.ipv4.conf.eth0.rp_filter = 0
net.ipv4.conf.eth0.send_redirects = 1
net.ipv4.conf.eth0.accept_source_route = 1
net.ipv4.conf.eth0.src_valid_mark = 0
net.ipv4.conf.eth0.proxy_arp = 0
net.ipv4.conf.eth0.medium_id = 0
net.ipv4.conf.eth0.bootp_relay = 0
net.ipv4.conf.eth0.log_martians = 0
net.ipv4.conf.eth0.tag = 0
net.ipv4.conf.eth0.arp_filter = 0
net.ipv4.conf.eth0.arp_announce = 0
net.ipv4.conf.eth0.arp_ignore = 0
net.ipv4.conf.eth0.arp_accept = 0
net.ipv4.conf.eth0.arp_notify = 0
net.ipv4.conf.eth0.disable_xfrm = 0
net.ipv4.conf.eth0.disable_policy = 0
net.ipv4.conf.eth0.force_igmp_version = 0
net.ipv4.conf.eth0.promote_secondaries = 0
net.ipv4.conf.eth1.forwarding = 1
net.ipv4.conf.eth1.mc_forwarding = 0
net.ipv4.conf.eth1.accept_redirects = 1
net.ipv4.conf.eth1.secure_redirects = 1
net.ipv4.conf.eth1.shared_media = 1
net.ipv4.conf.eth1.rp_filter = 0
net.ipv4.conf.eth1.send_redirects = 1
net.ipv4.conf.eth1.accept_source_route = 1
net.ipv4.conf.eth1.src_valid_mark = 0
net.ipv4.conf.eth1.proxy_arp = 0
net.ipv4.conf.eth1.medium_id = 0
net.ipv4.conf.eth1.bootp_relay = 0
net.ipv4.conf.eth1.log_martians = 0
net.ipv4.conf.eth1.tag = 0
net.ipv4.conf.eth1.arp_filter = 0
net.ipv4.conf.eth1.arp_announce = 0
net.ipv4.conf.eth1.arp_ignore = 0
net.ipv4.conf.eth1.arp_accept = 0
net.ipv4.conf.eth1.arp_notify = 0
net.ipv4.conf.eth1.disable_xfrm = 0
net.ipv4.conf.eth1.disable_policy = 0
net.ipv4.conf.eth1.force_igmp_version = 0
net.ipv4.conf.eth1.promote_secondaries = 0
net.ipv4.conf.eth1/30.forwarding = 1
net.ipv4.conf.eth1/30.mc_forwarding = 0
net.ipv4.conf.eth1/30.accept_redirects = 1
net.ipv4.conf.eth1/30.secure_redirects = 1
net.ipv4.conf.eth1/30.shared_media = 1
net.ipv4.conf.eth1/30.rp_filter = 0
net.ipv4.conf.eth1/30.send_redirects = 1
net.ipv4.conf.eth1/30.accept_source_route = 1
net.ipv4.conf.eth1/30.src_valid_mark = 0
net.ipv4.conf.eth1/30.proxy_arp = 0
net.ipv4.conf.eth1/30.medium_id = 0
net.ipv4.conf.eth1/30.bootp_relay = 0
net.ipv4.conf.eth1/30.log_martians = 0
net.ipv4.conf.eth1/30.tag = 0
net.ipv4.conf.eth1/30.arp_filter = 0
net.ipv4.conf.eth1/30.arp_announce = 0
net.ipv4.conf.eth1/30.arp_ignore = 0
net.ipv4.conf.eth1/30.arp_accept = 0
net.ipv4.conf.eth1/30.arp_notify = 0
net.ipv4.conf.eth1/30.disable_xfrm = 0
net.ipv4.conf.eth1/30.disable_policy = 0
net.ipv4.conf.eth1/30.force_igmp_version = 0
net.ipv4.conf.eth1/30.promote_secondaries = 0
net.ipv4.conf.eth1/31.forwarding = 1
net.ipv4.conf.eth1/31.mc_forwarding = 0
net.ipv4.conf.eth1/31.accept_redirects = 1
net.ipv4.conf.eth1/31.secure_redirects = 1
net.ipv4.conf.eth1/31.shared_media = 1
net.ipv4.conf.eth1/31.rp_filter = 0
net.ipv4.conf.eth1/31.send_redirects = 1
net.ipv4.conf.eth1/31.accept_source_route = 1
net.ipv4.conf.eth1/31.src_valid_mark = 0
net.ipv4.conf.eth1/31.proxy_arp = 0
net.ipv4.conf.eth1/31.medium_id = 0
net.ipv4.conf.eth1/31.bootp_relay = 0
net.ipv4.conf.eth1/31.log_martians = 0
net.ipv4.conf.eth1/31.tag = 0
net.ipv4.conf.eth1/31.arp_filter = 0
net.ipv4.conf.eth1/31.arp_announce = 0
net.ipv4.conf.eth1/31.arp_ignore = 0
net.ipv4.conf.eth1/31.arp_accept = 0
net.ipv4.conf.eth1/31.arp_notify = 0
net.ipv4.conf.eth1/31.disable_xfrm = 0
net.ipv4.conf.eth1/31.disable_policy = 0
net.ipv4.conf.eth1/31.force_igmp_version = 0
net.ipv4.conf.eth1/31.promote_secondaries = 0
net.ipv4.ip_forward = 1
net.ipv4.xfrm4_gc_thresh = 524288
net.ipv4.ipfrag_high_thresh = 262144
net.ipv4.ipfrag_low_thresh = 196608
net.ipv4.ipfrag_time = 30
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.icmp_errors_use_inbound_ifaddr = 0
net.ipv4.icmp_ratelimit = 1000
net.ipv4.icmp_ratemask = 6168
net.ipv4.rt_cache_rebuild_count = 4
net.ipv4.ipfrag_secret_interval = 600
net.ipv4.ipfrag_max_dist = 64
net.token-ring.rif_timeout = 150000
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.retrans_time = 250
net.ipv6.neigh.default.base_reachable_time = 30
net.ipv6.neigh.default.delay_first_probe_time = 5
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.unres_qlen = 3
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.anycast_delay = 100
net.ipv6.neigh.default.proxy_delay = 80
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.retrans_time_ms = 1000
net.ipv6.neigh.default.base_reachable_time_ms = 30000
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_thresh1 = 128
net.ipv6.neigh.default.gc_thresh2 = 512
net.ipv6.neigh.default.gc_thresh3 = 1024
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.retrans_time = 250
net.ipv6.neigh.lo.base_reachable_time = 30
net.ipv6.neigh.lo.delay_first_probe_time = 5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.unres_qlen = 3
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.anycast_delay = 100
net.ipv6.neigh.lo.proxy_delay = 80
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.base_reachable_time_ms = 30000
net.ipv6.neigh.eth0.mcast_solicit = 3
net.ipv6.neigh.eth0.ucast_solicit = 3
net.ipv6.neigh.eth0.app_solicit = 0
net.ipv6.neigh.eth0.retrans_time = 250
net.ipv6.neigh.eth0.base_reachable_time = 30
net.ipv6.neigh.eth0.delay_first_probe_time = 5
net.ipv6.neigh.eth0.gc_stale_time = 60
net.ipv6.neigh.eth0.unres_qlen = 3
net.ipv6.neigh.eth0.proxy_qlen = 64
net.ipv6.neigh.eth0.anycast_delay = 100
net.ipv6.neigh.eth0.proxy_delay = 80
net.ipv6.neigh.eth0.locktime = 0
net.ipv6.neigh.eth0.retrans_time_ms = 1000
net.ipv6.neigh.eth0.base_reachable_time_ms = 30000
net.ipv6.neigh.eth1.mcast_solicit = 3
net.ipv6.neigh.eth1.ucast_solicit = 3
net.ipv6.neigh.eth1.app_solicit = 0
net.ipv6.neigh.eth1.retrans_time = 250
net.ipv6.neigh.eth1.base_reachable_time = 30
net.ipv6.neigh.eth1.delay_first_probe_time = 5
net.ipv6.neigh.eth1.gc_stale_time = 60
net.ipv6.neigh.eth1.unres_qlen = 3
net.ipv6.neigh.eth1.proxy_qlen = 64
net.ipv6.neigh.eth1.anycast_delay = 100
net.ipv6.neigh.eth1.proxy_delay = 80
net.ipv6.neigh.eth1.locktime = 0
net.ipv6.neigh.eth1.retrans_time_ms = 1000
net.ipv6.neigh.eth1.base_reachable_time_ms = 30000
net.ipv6.neigh.eth1/30.mcast_solicit = 3
net.ipv6.neigh.eth1/30.ucast_solicit = 3
net.ipv6.neigh.eth1/30.app_solicit = 0
net.ipv6.neigh.eth1/30.retrans_time = 250
net.ipv6.neigh.eth1/30.base_reachable_time = 30
net.ipv6.neigh.eth1/30.delay_first_probe_time = 5
net.ipv6.neigh.eth1/30.gc_stale_time = 60
net.ipv6.neigh.eth1/30.unres_qlen = 3
net.ipv6.neigh.eth1/30.proxy_qlen = 64
net.ipv6.neigh.eth1/30.anycast_delay = 100
net.ipv6.neigh.eth1/30.proxy_delay = 80
net.ipv6.neigh.eth1/30.locktime = 0
net.ipv6.neigh.eth1/30.retrans_time_ms = 1000
net.ipv6.neigh.eth1/30.base_reachable_time_ms = 30000
net.ipv6.neigh.eth1/31.mcast_solicit = 3
net.ipv6.neigh.eth1/31.ucast_solicit = 3
net.ipv6.neigh.eth1/31.app_solicit = 0
net.ipv6.neigh.eth1/31.retrans_time = 250
net.ipv6.neigh.eth1/31.base_reachable_time = 30
net.ipv6.neigh.eth1/31.delay_first_probe_time = 5
net.ipv6.neigh.eth1/31.gc_stale_time = 60
net.ipv6.neigh.eth1/31.unres_qlen = 3
net.ipv6.neigh.eth1/31.proxy_qlen = 64
net.ipv6.neigh.eth1/31.anycast_delay = 100
net.ipv6.neigh.eth1/31.proxy_delay = 80
net.ipv6.neigh.eth1/31.locktime = 0
net.ipv6.neigh.eth1/31.retrans_time_ms = 1000
net.ipv6.neigh.eth1/31.base_reachable_time_ms = 30000
net.ipv6.xfrm6_gc_thresh = 2048
net.ipv6.conf.all.forwarding = 0
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.accept_ra = 1
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.autoconf = 1
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.router_solicitations = 3
net.ipv6.conf.all.router_solicitation_interval = 4
net.ipv6.conf.all.router_solicitation_delay = 1
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.regen_max_retry = 5
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.accept_ra_defrtr = 1
net.ipv6.conf.all.accept_ra_pinfo = 1
net.ipv6.conf.all.accept_ra_rtr_pref = 1
net.ipv6.conf.all.router_probe_interval = 60
net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.optimistic_dad = 0
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.all.accept_dad = 1
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.accept_ra = 1
net.ipv6.conf.default.accept_redirects = 1
net.ipv6.conf.default.autoconf = 1
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.router_solicitations = 3
net.ipv6.conf.default.router_solicitation_interval = 4
net.ipv6.conf.default.router_solicitation_delay = 1
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.default.temp_valid_lft = 604800
net.ipv6.conf.default.temp_prefered_lft = 86400
net.ipv6.conf.default.regen_max_retry = 5
net.ipv6.conf.default.max_desync_factor = 600
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.accept_ra_defrtr = 1
net.ipv6.conf.default.accept_ra_pinfo = 1
net.ipv6.conf.default.accept_ra_rtr_pref = 1
net.ipv6.conf.default.router_probe_interval = 60
net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.accept_source_route = 0
net.ipv6.conf.default.optimistic_dad = 0
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.default.accept_dad = 1
net.ipv6.conf.lo.forwarding = 0
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.mtu = 16436
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.router_solicitations = 3
net.ipv6.conf.lo.router_solicitation_interval = 4
net.ipv6.conf.lo.router_solicitation_delay = 1
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.regen_max_retry = 5
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.optimistic_dad = 0
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.disable_ipv6 = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.eth0.forwarding = 0
net.ipv6.conf.eth0.hop_limit = 64
net.ipv6.conf.eth0.mtu = 1500
net.ipv6.conf.eth0.accept_ra = 1
net.ipv6.conf.eth0.accept_redirects = 1
net.ipv6.conf.eth0.autoconf = 1
net.ipv6.conf.eth0.dad_transmits = 1
net.ipv6.conf.eth0.router_solicitations = 3
net.ipv6.conf.eth0.router_solicitation_interval = 4
net.ipv6.conf.eth0.router_solicitation_delay = 1
net.ipv6.conf.eth0.force_mld_version = 0
net.ipv6.conf.eth0.use_tempaddr = 0
net.ipv6.conf.eth0.temp_valid_lft = 604800
net.ipv6.conf.eth0.temp_prefered_lft = 86400
net.ipv6.conf.eth0.regen_max_retry = 5
net.ipv6.conf.eth0.max_desync_factor = 600
net.ipv6.conf.eth0.max_addresses = 16
net.ipv6.conf.eth0.accept_ra_defrtr = 1
net.ipv6.conf.eth0.accept_ra_pinfo = 1
net.ipv6.conf.eth0.accept_ra_rtr_pref = 1
net.ipv6.conf.eth0.router_probe_interval = 60
net.ipv6.conf.eth0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth0.proxy_ndp = 0
net.ipv6.conf.eth0.accept_source_route = 0
net.ipv6.conf.eth0.optimistic_dad = 0
net.ipv6.conf.eth0.mc_forwarding = 0
net.ipv6.conf.eth0.disable_ipv6 = 0
net.ipv6.conf.eth0.accept_dad = 1
net.ipv6.conf.eth1.forwarding = 0
net.ipv6.conf.eth1.hop_limit = 64
net.ipv6.conf.eth1.mtu = 1500
net.ipv6.conf.eth1.accept_ra = 1
net.ipv6.conf.eth1.accept_redirects = 1
net.ipv6.conf.eth1.autoconf = 1
net.ipv6.conf.eth1.dad_transmits = 1
net.ipv6.conf.eth1.router_solicitations = 3
net.ipv6.conf.eth1.router_solicitation_interval = 4
net.ipv6.conf.eth1.router_solicitation_delay = 1
net.ipv6.conf.eth1.force_mld_version = 0
net.ipv6.conf.eth1.use_tempaddr = 0
net.ipv6.conf.eth1.temp_valid_lft = 604800
net.ipv6.conf.eth1.temp_prefered_lft = 86400
net.ipv6.conf.eth1.regen_max_retry = 5
net.ipv6.conf.eth1.max_desync_factor = 600
net.ipv6.conf.eth1.max_addresses = 16
net.ipv6.conf.eth1.accept_ra_defrtr = 1
net.ipv6.conf.eth1.accept_ra_pinfo = 1
net.ipv6.conf.eth1.accept_ra_rtr_pref = 1
net.ipv6.conf.eth1.router_probe_interval = 60
net.ipv6.conf.eth1.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth1.proxy_ndp = 0
net.ipv6.conf.eth1.accept_source_route = 0
net.ipv6.conf.eth1.optimistic_dad = 0
net.ipv6.conf.eth1.mc_forwarding = 0
net.ipv6.conf.eth1.disable_ipv6 = 0
net.ipv6.conf.eth1.accept_dad = 1
net.ipv6.conf.eth1/30.forwarding = 0
net.ipv6.conf.eth1/30.hop_limit = 64
net.ipv6.conf.eth1/30.mtu = 1500
net.ipv6.conf.eth1/30.accept_ra = 1
net.ipv6.conf.eth1/30.accept_redirects = 1
net.ipv6.conf.eth1/30.autoconf = 1
net.ipv6.conf.eth1/30.dad_transmits = 1
net.ipv6.conf.eth1/30.router_solicitations = 3
net.ipv6.conf.eth1/30.router_solicitation_interval = 4
net.ipv6.conf.eth1/30.router_solicitation_delay = 1
net.ipv6.conf.eth1/30.force_mld_version = 0
net.ipv6.conf.eth1/30.use_tempaddr = 0
net.ipv6.conf.eth1/30.temp_valid_lft = 604800
net.ipv6.conf.eth1/30.temp_prefered_lft = 86400
net.ipv6.conf.eth1/30.regen_max_retry = 5
net.ipv6.conf.eth1/30.max_desync_factor = 600
net.ipv6.conf.eth1/30.max_addresses = 16
net.ipv6.conf.eth1/30.accept_ra_defrtr = 1
net.ipv6.conf.eth1/30.accept_ra_pinfo = 1
net.ipv6.conf.eth1/30.accept_ra_rtr_pref = 1
net.ipv6.conf.eth1/30.router_probe_interval = 60
net.ipv6.conf.eth1/30.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth1/30.proxy_ndp = 0
net.ipv6.conf.eth1/30.accept_source_route = 0
net.ipv6.conf.eth1/30.optimistic_dad = 0
net.ipv6.conf.eth1/30.mc_forwarding = 0
net.ipv6.conf.eth1/30.disable_ipv6 = 0
net.ipv6.conf.eth1/30.accept_dad = 1
net.ipv6.conf.eth1/31.forwarding = 0
net.ipv6.conf.eth1/31.hop_limit = 64
net.ipv6.conf.eth1/31.mtu = 1500
net.ipv6.conf.eth1/31.accept_ra = 1
net.ipv6.conf.eth1/31.accept_redirects = 1
net.ipv6.conf.eth1/31.autoconf = 1
net.ipv6.conf.eth1/31.dad_transmits = 1
net.ipv6.conf.eth1/31.router_solicitations = 3
net.ipv6.conf.eth1/31.router_solicitation_interval = 4
net.ipv6.conf.eth1/31.router_solicitation_delay = 1
net.ipv6.conf.eth1/31.force_mld_version = 0
net.ipv6.conf.eth1/31.use_tempaddr = 0
net.ipv6.conf.eth1/31.temp_valid_lft = 604800
net.ipv6.conf.eth1/31.temp_prefered_lft = 86400
net.ipv6.conf.eth1/31.regen_max_retry = 5
net.ipv6.conf.eth1/31.max_desync_factor = 600
net.ipv6.conf.eth1/31.max_addresses = 16
net.ipv6.conf.eth1/31.accept_ra_defrtr = 1
net.ipv6.conf.eth1/31.accept_ra_pinfo = 1
net.ipv6.conf.eth1/31.accept_ra_rtr_pref = 1
net.ipv6.conf.eth1/31.router_probe_interval = 60
net.ipv6.conf.eth1/31.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth1/31.proxy_ndp = 0
net.ipv6.conf.eth1/31.accept_source_route = 0
net.ipv6.conf.eth1/31.optimistic_dad = 0
net.ipv6.conf.eth1/31.mc_forwarding = 0
net.ipv6.conf.eth1/31.disable_ipv6 = 0
net.ipv6.conf.eth1/31.accept_dad = 1
net.ipv6.ip6frag_high_thresh = 262144
net.ipv6.ip6frag_low_thresh = 196608
net.ipv6.ip6frag_time = 60
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.max_size = 4096
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_timeout = 60
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_elasticity = 0
net.ipv6.route.mtu_expires = 600
net.ipv6.route.min_adv_mss = 4
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.icmp.ratelimit = 1000
net.ipv6.bindv6only = 0
net.ipv6.ip6frag_secret_interval = 600
net.ipv6.mld_max_msf = 64
net.nf_conntrack_max = 65536
net.unix.max_dgram_qlen = 10
abi.vsyscall32 = 1
crypto.fips_enabled = 0
Netstat statistics
------------------
Ip:
1763000575 total packets received
251 with invalid headers
66 with invalid addresses
2318126280 forwarded
13 with unknown protocol
0 incoming packets discarded
3721267868 incoming packets delivered
190803185 requests sent out
2167 outgoing packets dropped
275662 reassemblies required
131197 packets reassembled ok
131045 fragments received ok
1 fragments failed
275358 fragments created
Icmp:
37067524 ICMP messages received
30260 input ICMP message failed.
ICMP input histogram:
destination unreachable: 346507
timeout in transit: 2126
echo requests: 36712740
echo replies: 715
timestamp request: 8
36900256 ICMP messages sent
0 ICMP messages failed
ICMP output histogram:
destination unreachable: 184815
time exceeded: 246
redirect: 2141
echo request: 327
echo replies: 36712727
IcmpMsg:
InType0: 715
InType3: 346507
InType8: 36712740
InType11: 2126
InType13: 8
OutType0: 36712727
OutType3: 184815
OutType5: 2141
OutType8: 327
OutType11: 246
Tcp:
17348791 active connections openings
25404431 passive connection openings
65735 failed connection attempts
1670159 connection resets received
63 connections established
3655732639 segments received
2095736411 segments send out
15855006 segments retransmited
6198 bad segments received.
1501933 resets sent
Udp:
28433293 packets received
3667 packets to unknown port received.
3 packet receive errors
28870673 packets sent
UdpLite:
TcpExt:
63988 resets received for embryonic SYN_RECV sockets
3508 packets pruned from receive queue because of socket buffer overrun
2447 ICMP packets dropped because they were out-of-window
9961016 TCP sockets finished time wait in fast timer
51567 time wait sockets recycled by time stamp
484327 packets rejects in established connections because of timestamp
64281083 delayed acks sent
44489 delayed acks further delayed because of locked socket
Quick ack mode was activated 1050130 times
1247 times the listen queue of a socket overflowed
1247 SYNs to LISTEN sockets dropped
5661978 packets directly queued to recvmsg prequeue.
566923 bytes directly in process context from backlog
598297894 bytes directly received in process context from prequeue
1967372881 packet headers predicted
3920781 packets header predicted and directly queued to user
576427258 acknowledgments not containing data payload received
652086140 predicted acknowledgments
19297 times recovered from packet loss due to fast retransmit
2480055 times recovered from packet loss by selective acknowledgements
19607 bad SACK blocks received
Detected reordering 26115 times using FACK
Detected reordering 32453 times using SACK
Detected reordering 656 times using reno fast retransmit
Detected reordering 33171 times using time stamp
50168 congestion windows fully recovered without slow start
228617 congestion windows partially recovered using Hoe heuristic
179251 congestion windows recovered without slow start by DSACK
220303 congestion windows recovered without slow start after partial ack
8698235 TCP data loss events
TCPLostRetransmit: 217605
6569 timeouts after reno fast retransmit
226610 timeouts after SACK recovery
97826 timeouts in loss state
9927360 fast retransmits
719182 forward retransmits
2469343 retransmits in slow start
1379428 other TCP timeouts
11511 classic Reno fast retransmits failed
168451 SACK retransmits failed
315297 packets collapsed in receive queue due to low socket buffer
1080527 DSACKs sent for old packets
3542 DSACKs sent for out of order packets
1303693 DSACKs received
9420 DSACKs for out of order packets received
8910 connections reset due to unexpected data
713209 connections reset due to early user close
94981 connections aborted due to timeout
TCPSACKDiscard: 11364
TCPDSACKIgnoredOld: 292954
TCPDSACKIgnoredNoUndo: 282828
TCPSpuriousRTOs: 65609
TCPSackShifted: 21736473
TCPSackMerged: 13551255
TCPSackShiftFallback: 10421846
IpExt:
InMcastPkts: 4407724
InBcastPkts: 8131914
InOctets: 1437208334
OutOctets: 727676907
InMcastOctets: 185216436
InBcastOctets: 708023411
Thanks!
^ permalink raw reply [flat|nested] 4+ messages in thread
* High uptime linux router works for linux clients, windows clients act strange
2015-01-19 16:33 High uptime linux router works for linux clients, windows clients act strange Stephan Alz
@ 2015-01-19 16:51 ` Stephan Alz
2015-01-19 18:28 ` Alan Goodman
2015-01-20 10:04 ` Stephan Alz
2 siblings, 0 replies; 4+ messages in thread
From: Stephan Alz @ 2015-01-19 16:51 UTC (permalink / raw)
To: lartc
Hello
I working on finding out a strange networking problem with one of our linux gateways between the internal LAN and DMZ.
This machine runs: Debian6 with 2.6.32-5-amd64 kernel, have 2gb of mem from which 1 is free. It has near to 1 year uptime and has absolutely nothing changed on it. All it does is some natting and packet filtering with iptables.
Network diagram:
INET <> Router1 (BGP) --- DMZ --- Router2 (This One) <> LAN
So about 2 months ago windows machines (WinXP-Win8) started acting strange, connections got interrupted, webpages didn't load for users. After weeks of investigation into this and going through all the components on our network I finally determined that this machine is the problem so as a workaround I installed another linux box and all the windowses using that as a default gateway right now. It is a workaround what I wouldn't like to leave in place forever.
For example it was happening one morning when I plugged a new win7 laptop in and 1 of our bgp routes were disabled on a server prior to this gateway the laptop simply couldn't go out to the internet (while all the other linux machines had no problem whatsover), when I reenabled the bgp route on the first router it started working. This just doesn't make sense, the machines behind this gateway don't know anything of the outside network (DMZ) because they are natted out there.
I try to make sense of all this but can't and I'm hoping some networking gurus here can give me tips what is causing this error.
Here are the kernel values from the gateway (I don't think any other interface statistics like ifconfig are relevant, there are no errors:0 on the interfaces, the link is not flipflopping and as I said everything works just fine with linux clients) :
kernel.sched_child_runs_first = 0
kernel.sched_min_granularity_ns = 3000000
kernel.sched_latency_ns = 15000000
kernel.sched_wakeup_granularity_ns = 3000000
kernel.sched_shares_ratelimit = 750000
kernel.sched_shares_thresh = 4
kernel.sched_features = 32611451
kernel.sched_migration_cost = 500000
kernel.sched_nr_migrate = 32
kernel.sched_time_avg = 1000
kernel.timer_migration = 1
kernel.sched_rt_period_us = 1000000
kernel.sched_rt_runtime_us = 950000
kernel.sched_compat_yield = 0
kernel.panic = 0
kernel.core_uses_pid = 0
kernel.core_pattern = core
kernel.core_pipe_limit = 0
kernel.tainted = 1024
kernel.real-root-dev = 0
kernel.print-fatal-signals = 0
kernel.ctrl-alt-del = 0
kernel.ftrace_dump_on_oops = 0
kernel.modprobe = /sbin/modprobe
kernel.modules_disabled = 0
kernel.hotplug kernel.acct = 4 2 30
kernel.sysrq = 438
kernel.cad_pid = 1
kernel.threads-max = 32039
kernel.random.poolsize = 4096
kernel.random.entropy_avail = 145
kernel.random.read_wakeup_threshold = 64
kernel.random.write_wakeup_threshold = 128
kernel.overflowuid = 65534
kernel.overflowgid = 65534
kernel.pid_max = 32768
kernel.panic_on_oops = 0
kernel.printk = 4 4 1 7
kernel.printk_ratelimit = 5
kernel.printk_ratelimit_burst = 10
kernel.printk_delay = 0
kernel.ngroups_max = 65536
kernel.unknown_nmi_panic = 0
kernel.nmi_watchdog = 0
kernel.panic_on_unrecovered_nmi = 0
kernel.panic_on_io_nmi = 0
kernel.bootloader_type = 112
kernel.bootloader_version = 0
kernel.kstack_depth_to_print = 12
kernel.io_delay_type = 0
kernel.randomize_va_space = 2
kernel.acpi_video_flags = 0
kernel.softlockup_panic = 0
kernel.softlockup_thresh = 60
kernel.hung_task_panic = 0
kernel.hung_task_check_count = 4194304
kernel.hung_task_timeout_secs = 120
kernel.hung_task_warnings = 10
kernel.compat-log = 1
kernel.max_lock_depth = 1024
kernel.poweroff_cmd = /sbin/poweroff
kernel.keys.maxkeys = 200
kernel.keys.maxbytes = 20000
kernel.keys.root_maxkeys = 200
kernel.keys.root_maxbytes = 20000
kernel.keys.gc_delay = 300
kernel.slow-work.min-threads = 2
kernel.slow-work.max-threads = 4
kernel.slow-work.vslow-percentage = 50
kernel.perf_event_paranoid = 1
kernel.perf_event_mlock_kb = 516
kernel.perf_event_max_sample_rate = 100000
kernel.blk_iopoll = 1
kernel.sched_domain.cpu0.domain0.min_interval = 1
kernel.sched_domain.cpu0.domain0.max_interval = 2
kernel.sched_domain.cpu0.domain0.busy_idx = 0
kernel.sched_domain.cpu0.domain0.idle_idx = 0
kernel.sched_domain.cpu0.domain0.newidle_idx = 0
kernel.sched_domain.cpu0.domain0.wake_idx = 0
kernel.sched_domain.cpu0.domain0.forkexec_idx = 0
kernel.sched_domain.cpu0.domain0.busy_factor = 64
kernel.sched_domain.cpu0.domain0.imbalance_pct = 110
kernel.sched_domain.cpu0.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu0.domain0.flags = 687
kernel.sched_domain.cpu0.domain0.name = SIBLING
kernel.sched_domain.cpu0.domain1.min_interval = 1
kernel.sched_domain.cpu0.domain1.max_interval = 4
kernel.sched_domain.cpu0.domain1.busy_idx = 2
kernel.sched_domain.cpu0.domain1.idle_idx = 0
kernel.sched_domain.cpu0.domain1.newidle_idx = 0
kernel.sched_domain.cpu0.domain1.wake_idx = 0
kernel.sched_domain.cpu0.domain1.forkexec_idx = 0
kernel.sched_domain.cpu0.domain1.busy_factor = 64
kernel.sched_domain.cpu0.domain1.imbalance_pct = 125
kernel.sched_domain.cpu0.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu0.domain1.flags = 4655
kernel.sched_domain.cpu0.domain1.name = MC
kernel.sched_domain.cpu0.domain2.min_interval = 1
kernel.sched_domain.cpu0.domain2.max_interval = 4
kernel.sched_domain.cpu0.domain2.busy_idx = 2
kernel.sched_domain.cpu0.domain2.idle_idx = 1
kernel.sched_domain.cpu0.domain2.newidle_idx = 0
kernel.sched_domain.cpu0.domain2.wake_idx = 0
kernel.sched_domain.cpu0.domain2.forkexec_idx = 0
kernel.sched_domain.cpu0.domain2.busy_factor = 64
kernel.sched_domain.cpu0.domain2.imbalance_pct = 125
kernel.sched_domain.cpu0.domain2.cache_nice_tries = 1
kernel.sched_domain.cpu0.domain2.flags = 4143
kernel.sched_domain.cpu0.domain2.name = CPU
kernel.sched_domain.cpu1.domain0.min_interval = 1
kernel.sched_domain.cpu1.domain0.max_interval = 2
kernel.sched_domain.cpu1.domain0.busy_idx = 0
kernel.sched_domain.cpu1.domain0.idle_idx = 0
kernel.sched_domain.cpu1.domain0.newidle_idx = 0
kernel.sched_domain.cpu1.domain0.wake_idx = 0
kernel.sched_domain.cpu1.domain0.forkexec_idx = 0
kernel.sched_domain.cpu1.domain0.busy_factor = 64
kernel.sched_domain.cpu1.domain0.imbalance_pct = 110
kernel.sched_domain.cpu1.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu1.domain0.flags = 687
kernel.sched_domain.cpu1.domain0.name = SIBLING
kernel.sched_domain.cpu1.domain1.min_interval = 1
kernel.sched_domain.cpu1.domain1.max_interval = 4
kernel.sched_domain.cpu1.domain1.busy_idx = 2
kernel.sched_domain.cpu1.domain1.idle_idx = 0
kernel.sched_domain.cpu1.domain1.newidle_idx = 0
kernel.sched_domain.cpu1.domain1.wake_idx = 0
kernel.sched_domain.cpu1.domain1.forkexec_idx = 0
kernel.sched_domain.cpu1.domain1.busy_factor = 64
kernel.sched_domain.cpu1.domain1.imbalance_pct = 125
kernel.sched_domain.cpu1.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu1.domain1.flags = 4655
kernel.sched_domain.cpu1.domain1.name = MC
kernel.sched_domain.cpu1.domain2.min_interval = 1
kernel.sched_domain.cpu1.domain2.max_interval = 4
kernel.sched_domain.cpu1.domain2.busy_idx = 2
kernel.sched_domain.cpu1.domain2.idle_idx = 1
kernel.sched_domain.cpu1.domain2.newidle_idx = 0
kernel.sched_domain.cpu1.domain2.wake_idx = 0
kernel.sched_domain.cpu1.domain2.forkexec_idx = 0
kernel.sched_domain.cpu1.domain2.busy_factor = 64
kernel.sched_domain.cpu1.domain2.imbalance_pct = 125
kernel.sched_domain.cpu1.domain2.cache_nice_tries = 1
kernel.sched_domain.cpu1.domain2.flags = 4143
kernel.sched_domain.cpu1.domain2.name = CPU
kernel.sched_domain.cpu2.domain0.min_interval = 1
kernel.sched_domain.cpu2.domain0.max_interval = 2
kernel.sched_domain.cpu2.domain0.busy_idx = 0
kernel.sched_domain.cpu2.domain0.idle_idx = 0
kernel.sched_domain.cpu2.domain0.newidle_idx = 0
kernel.sched_domain.cpu2.domain0.wake_idx = 0
kernel.sched_domain.cpu2.domain0.forkexec_idx = 0
kernel.sched_domain.cpu2.domain0.busy_factor = 64
kernel.sched_domain.cpu2.domain0.imbalance_pct = 110
kernel.sched_domain.cpu2.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu2.domain0.flags = 687
kernel.sched_domain.cpu2.domain0.name = SIBLING
kernel.sched_domain.cpu2.domain1.min_interval = 1
kernel.sched_domain.cpu2.domain1.max_interval = 4
kernel.sched_domain.cpu2.domain1.busy_idx = 2
kernel.sched_domain.cpu2.domain1.idle_idx = 0
kernel.sched_domain.cpu2.domain1.newidle_idx = 0
kernel.sched_domain.cpu2.domain1.wake_idx = 0
kernel.sched_domain.cpu2.domain1.forkexec_idx = 0
kernel.sched_domain.cpu2.domain1.busy_factor = 64
kernel.sched_domain.cpu2.domain1.imbalance_pct = 125
kernel.sched_domain.cpu2.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu2.domain1.flags = 4655
kernel.sched_domain.cpu2.domain1.name = MC
kernel.sched_domain.cpu2.domain2.min_interval = 1
kernel.sched_domain.cpu2.domain2.max_interval = 4
kernel.sched_domain.cpu2.domain2.busy_idx = 2
kernel.sched_domain.cpu2.domain2.idle_idx = 1
kernel.sched_domain.cpu2.domain2.newidle_idx = 0
kernel.sched_domain.cpu2.domain2.wake_idx = 0
kernel.sched_domain.cpu2.domain2.forkexec_idx = 0
kernel.sched_domain.cpu2.domain2.busy_factor = 64
kernel.sched_domain.cpu2.domain2.imbalance_pct = 125
kernel.sched_domain.cpu2.domain2.cache_nice_tries = 1
kernel.sched_domain.cpu2.domain2.flags = 4143
kernel.sched_domain.cpu2.domain2.name = CPU
kernel.sched_domain.cpu3.domain0.min_interval = 1
kernel.sched_domain.cpu3.domain0.max_interval = 2
kernel.sched_domain.cpu3.domain0.busy_idx = 0
kernel.sched_domain.cpu3.domain0.idle_idx = 0
kernel.sched_domain.cpu3.domain0.newidle_idx = 0
kernel.sched_domain.cpu3.domain0.wake_idx = 0
kernel.sched_domain.cpu3.domain0.forkexec_idx = 0
kernel.sched_domain.cpu3.domain0.busy_factor = 64
kernel.sched_domain.cpu3.domain0.imbalance_pct = 110
kernel.sched_domain.cpu3.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu3.domain0.flags = 687
kernel.sched_domain.cpu3.domain0.name = SIBLING
kernel.sched_domain.cpu3.domain1.min_interval = 1
kernel.sched_domain.cpu3.domain1.max_interval = 4
kernel.sched_domain.cpu3.domain1.busy_idx = 2
kernel.sched_domain.cpu3.domain1.idle_idx = 0
kernel.sched_domain.cpu3.domain1.newidle_idx = 0
kernel.sched_domain.cpu3.domain1.wake_idx = 0
kernel.sched_domain.cpu3.domain1.forkexec_idx = 0
kernel.sched_domain.cpu3.domain1.busy_factor = 64
kernel.sched_domain.cpu3.domain1.imbalance_pct = 125
kernel.sched_domain.cpu3.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu3.domain1.flags = 4655
kernel.sched_domain.cpu3.domain1.name = MC
kernel.sched_domain.cpu3.domain2.min_interval = 1
kernel.sched_domain.cpu3.domain2.max_interval = 4
kernel.sched_domain.cpu3.domain2.busy_idx = 2
kernel.sched_domain.cpu3.domain2.idle_idx = 1
kernel.sched_domain.cpu3.domain2.newidle_idx = 0
kernel.sched_domain.cpu3.domain2.wake_idx = 0
kernel.sched_domain.cpu3.domain2.forkexec_idx = 0
kernel.sched_domain.cpu3.domain2.busy_factor = 64
kernel.sched_domain.cpu3.domain2.imbalance_pct = 125
kernel.sched_domain.cpu3.domain2.cache_nice_tries = 1
kernel.sched_domain.cpu3.domain2.flags = 4143
kernel.sched_domain.cpu3.domain2.name = CPU
kernel.vsyscall64 = 1
kernel.ostype = Linux
kernel.osrelease = 2.6.32-5-amd64
kernel.version = #1 SMP Sun Sep 23 10:07:46 UTC 2012
kernel.hostname = gw
kernel.domainname = (none)
kernel.shmmax = 33554432
kernel.shmall = 2097152
kernel.shmmni = 4096
kernel.msgmax = 8192
kernel.msgmni = 4022
kernel.msgmnb = 16384
kernel.sem = 250 32000 32 128
kernel.auto_msgmni = 1
kernel.pty.max = 4096
kernel.pty.nr = 760
vm.overcommit_memory = 0
vm.panic_on_oom = 0
vm.oom_kill_allocating_task = 0
vm.oom_dump_tasks = 0
vm.overcommit_ratio = 50
vm.page-cluster = 3
vm.dirty_background_ratio = 10
vm.dirty_background_bytes = 0
vm.dirty_ratio = 20
vm.dirty_bytes = 0
vm.dirty_writeback_centisecs = 500
vm.dirty_expire_centisecs = 3000
vm.nr_pdflush_threads = 0
vm.swappiness = 60
vm.nr_hugepages = 0
vm.hugetlb_shm_group = 0
vm.hugepages_treat_as_movable = 0
vm.nr_overcommit_hugepages = 0
vm.lowmem_reserve_ratio = 256 256 32
vm.drop_caches = 0
vm.min_free_kbytes = 5750
vm.percpu_pagelist_fraction = 0
vm.max_map_count = 65530
vm.laptop_mode = 0
vm.block_dump = 0
vm.vfs_cache_pressure = 100
vm.legacy_va_layout = 0
vm.zone_reclaim_mode = 0
vm.min_unmapped_ratio = 1
vm.min_slab_ratio = 5
vm.stat_interval = 1
vm.mmap_min_addr = 65536
vm.numa_zonelist_order = default
vm.scan_unevictable_pages = 0
vm.memory_failure_early_kill = 0
vm.memory_failure_recovery = 1
fs.inode-nr = 46259 1
fs.inode-state = 46259 1 0 0 0 0 0
fs.file-nr = 1952 0 205022
fs.file-max = 205022
fs.nr_open = 1048576
fs.dentry-state = 61562 58747 45 0 0 0
fs.overflowuid = 65534
fs.overflowgid = 65534
fs.leases-enable = 1
fs.dir-notify-enable = 1
fs.lease-break-time = 45
fs.aio-nr = 0
fs.aio-max-nr = 65536
fs.inotify.max_user_instances = 128
fs.inotify.max_user_watches = 8192
fs.inotify.max_queued_events = 16384
fs.epoll.max_user_watches = 419942
fs.suid_dumpable = 0
fs.quota.lookups = 0
fs.quota.drops = 0
fs.quota.reads = 0
fs.quota.writes = 0
fs.quota.cache_hits = 0
fs.quota.allocated_dquots = 0
fs.quota.free_dquots = 0
fs.quota.syncs = 0
fs.quota.warnings = 1
fs.mqueue.queues_max = 256
fs.mqueue.msg_max = 10
fs.mqueue.msgsize_max = 8192
debug.exception-trace = 1
dev.hpet.max-user-freq = 64
dev.mac_hid.mouse_button_emulation = 0
dev.mac_hid.mouse_button2_keycode = 97
dev.mac_hid.mouse_button3_keycode = 100
dev.scsi.logging_level = 0
net.netfilter.nf_log.0 = NONE
net.netfilter.nf_log.1 = NONE
net.netfilter.nf_log.2 = NONE
net.netfilter.nf_log.3 = NONE
net.netfilter.nf_log.4 = NONE
net.netfilter.nf_log.5 = NONE
net.netfilter.nf_log.6 = NONE
net.netfilter.nf_log.7 = NONE
net.netfilter.nf_log.8 = NONE
net.netfilter.nf_log.9 = NONE
net.netfilter.nf_log.10 = NONE
net.netfilter.nf_log.11 = NONE
net.netfilter.nf_log.12 = NONE
net.netfilter.nf_conntrack_generic_timeout = 600
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60
net.netfilter.nf_conntrack_tcp_timeout_established = 432000
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300
net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300
net.netfilter.nf_conntrack_tcp_loose = 1
net.netfilter.nf_conntrack_tcp_be_liberal = 0
net.netfilter.nf_conntrack_tcp_max_retrans = 3
net.netfilter.nf_conntrack_udp_timeout = 30
net.netfilter.nf_conntrack_udp_timeout_stream = 180
net.netfilter.nf_conntrack_icmp_timeout = 30
net.netfilter.nf_conntrack_acct = 1
net.netfilter.nf_conntrack_events = 1
net.netfilter.nf_conntrack_events_retry_timeout = 15
net.netfilter.nf_conntrack_max = 65536
net.netfilter.nf_conntrack_count = 1709
net.netfilter.nf_conntrack_buckets = 16384
net.netfilter.nf_conntrack_checksum = 1
net.netfilter.nf_conntrack_log_invalid = 0
net.netfilter.nf_conntrack_expect_max = 256
net.core.somaxconn = 128
net.core.xfrm_aevent_etime = 10
net.core.xfrm_aevent_rseqth = 2
net.core.xfrm_larval_drop = 1
net.core.xfrm_acq_expires = 30
net.core.wmem_max = 131071
net.core.rmem_max = 131071
net.core.wmem_default = 124928
net.core.rmem_default = 124928
net.core.dev_weight = 64
net.core.netdev_max_backlog = 1000
net.core.message_cost = 5
net.core.message_burst = 10
net.core.optmem_max = 20480
net.core.netdev_budget = 300
net.core.warnings = 1
net.ipv4.route.gc_thresh = 65536
net.ipv4.route.max_size = 1048576
net.ipv4.route.gc_min_interval = 0
net.ipv4.route.gc_min_interval_ms = 500
net.ipv4.route.gc_timeout = 300
net.ipv4.route.gc_interval = 60
net.ipv4.route.redirect_load = 5
net.ipv4.route.redirect_number = 9
net.ipv4.route.redirect_silence = 5120
net.ipv4.route.error_cost = 250
net.ipv4.route.error_burst = 1250
net.ipv4.route.gc_elasticity = 8
net.ipv4.route.mtu_expires = 600
net.ipv4.route.min_pmtu = 552
net.ipv4.route.min_adv_mss = 256
net.ipv4.route.secret_interval = 600
net.ipv4.neigh.default.mcast_solicit = 3
net.ipv4.neigh.default.ucast_solicit = 3
net.ipv4.neigh.default.app_solicit = 0
net.ipv4.neigh.default.retrans_time = 100
net.ipv4.neigh.default.base_reachable_time = 30
net.ipv4.neigh.default.delay_first_probe_time = 5
net.ipv4.neigh.default.gc_stale_time = 60
net.ipv4.neigh.default.unres_qlen = 3
net.ipv4.neigh.default.proxy_qlen = 64
net.ipv4.neigh.default.anycast_delay = 100
net.ipv4.neigh.default.proxy_delay = 80
net.ipv4.neigh.default.locktime = 100
net.ipv4.neigh.default.retrans_time_ms = 1000
net.ipv4.neigh.default.base_reachable_time_ms = 30000
net.ipv4.neigh.default.gc_interval = 30
net.ipv4.neigh.default.gc_thresh1 = 128
net.ipv4.neigh.default.gc_thresh2 = 512
net.ipv4.neigh.default.gc_thresh3 = 1024
net.ipv4.neigh.lo.mcast_solicit = 3
net.ipv4.neigh.lo.ucast_solicit = 3
net.ipv4.neigh.lo.app_solicit = 0
net.ipv4.neigh.lo.retrans_time = 100
net.ipv4.neigh.lo.base_reachable_time = 30
net.ipv4.neigh.lo.delay_first_probe_time = 5
net.ipv4.neigh.lo.gc_stale_time = 60
net.ipv4.neigh.lo.unres_qlen = 3
net.ipv4.neigh.lo.proxy_qlen = 64
net.ipv4.neigh.lo.anycast_delay = 100
net.ipv4.neigh.lo.proxy_delay = 80
net.ipv4.neigh.lo.locktime = 100
net.ipv4.neigh.lo.retrans_time_ms = 1000
net.ipv4.neigh.lo.base_reachable_time_ms = 30000
net.ipv4.neigh.eth0.mcast_solicit = 3
net.ipv4.neigh.eth0.ucast_solicit = 3
net.ipv4.neigh.eth0.app_solicit = 0
net.ipv4.neigh.eth0.retrans_time = 100
net.ipv4.neigh.eth0.base_reachable_time = 30
net.ipv4.neigh.eth0.delay_first_probe_time = 5
net.ipv4.neigh.eth0.gc_stale_time = 60
net.ipv4.neigh.eth0.unres_qlen = 3
net.ipv4.neigh.eth0.proxy_qlen = 64
net.ipv4.neigh.eth0.anycast_delay = 100
net.ipv4.neigh.eth0.proxy_delay = 80
net.ipv4.neigh.eth0.locktime = 100
net.ipv4.neigh.eth0.retrans_time_ms = 1000
net.ipv4.neigh.eth0.base_reachable_time_ms = 30000
net.ipv4.neigh.eth1.mcast_solicit = 3
net.ipv4.neigh.eth1.ucast_solicit = 3
net.ipv4.neigh.eth1.app_solicit = 0
net.ipv4.neigh.eth1.retrans_time = 100
net.ipv4.neigh.eth1.base_reachable_time = 30
net.ipv4.neigh.eth1.delay_first_probe_time = 5
net.ipv4.neigh.eth1.gc_stale_time = 60
net.ipv4.neigh.eth1.unres_qlen = 3
net.ipv4.neigh.eth1.proxy_qlen = 64
net.ipv4.neigh.eth1.anycast_delay = 100
net.ipv4.neigh.eth1.proxy_delay = 80
net.ipv4.neigh.eth1.locktime = 100
net.ipv4.neigh.eth1.retrans_time_ms = 1000
net.ipv4.neigh.eth1.base_reachable_time_ms = 30000
net.ipv4.neigh.eth1/30.mcast_solicit = 3
net.ipv4.neigh.eth1/30.ucast_solicit = 3
net.ipv4.neigh.eth1/30.app_solicit = 0
net.ipv4.neigh.eth1/30.retrans_time = 100
net.ipv4.neigh.eth1/30.base_reachable_time = 30
net.ipv4.neigh.eth1/30.delay_first_probe_time = 5
net.ipv4.neigh.eth1/30.gc_stale_time = 60
net.ipv4.neigh.eth1/30.unres_qlen = 3
net.ipv4.neigh.eth1/30.proxy_qlen = 64
net.ipv4.neigh.eth1/30.anycast_delay = 100
net.ipv4.neigh.eth1/30.proxy_delay = 80
net.ipv4.neigh.eth1/30.locktime = 100
net.ipv4.neigh.eth1/30.retrans_time_ms = 1000
net.ipv4.neigh.eth1/30.base_reachable_time_ms = 30000
net.ipv4.neigh.eth1/31.mcast_solicit = 3
net.ipv4.neigh.eth1/31.ucast_solicit = 3
net.ipv4.neigh.eth1/31.app_solicit = 0
net.ipv4.neigh.eth1/31.retrans_time = 100
net.ipv4.neigh.eth1/31.base_reachable_time = 30
net.ipv4.neigh.eth1/31.delay_first_probe_time = 5
net.ipv4.neigh.eth1/31.gc_stale_time = 60
net.ipv4.neigh.eth1/31.unres_qlen = 3
net.ipv4.neigh.eth1/31.proxy_qlen = 64
net.ipv4.neigh.eth1/31.anycast_delay = 100
net.ipv4.neigh.eth1/31.proxy_delay = 80
net.ipv4.neigh.eth1/31.locktime = 100
net.ipv4.neigh.eth1/31.retrans_time_ms = 1000
net.ipv4.neigh.eth1/31.base_reachable_time_ms = 30000
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_sack = 1
net.ipv4.tcp_retrans_collapse = 1
net.ipv4.ip_default_ttl = 64
net.ipv4.ip_no_pmtu_disc = 0
net.ipv4.ip_nonlocal_bind = 0
net.ipv4.tcp_syn_retries = 5
net.ipv4.tcp_synack_retries = 5
net.ipv4.tcp_max_orphans = 131072
net.ipv4.tcp_max_tw_buckets = 131072
net.ipv4.ip_dynaddr = 0
net.ipv4.tcp_keepalive_time = 7200
net.ipv4.tcp_keepalive_probes = 9
net.ipv4.tcp_keepalive_intvl = 75
net.ipv4.tcp_retries1 = 3
net.ipv4.tcp_retries2 = 15
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_syncookies = 0
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_abort_on_overflow = 0
net.ipv4.tcp_stdurg = 0
net.ipv4.tcp_rfc1337 = 0
net.ipv4.tcp_max_syn_backlog = 1024
net.ipv4.ip_local_port_range = 32768 61000
net.ipv4.igmp_max_memberships = 20
net.ipv4.igmp_max_msf = 10
net.ipv4.inet_peer_threshold = 65664
net.ipv4.inet_peer_minttl = 120
net.ipv4.inet_peer_maxttl = 600
net.ipv4.inet_peer_gc_mintime = 10
net.ipv4.inet_peer_gc_maxtime = 120
net.ipv4.tcp_orphan_retries = 0
net.ipv4.tcp_fack = 1
net.ipv4.tcp_reordering = 3
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_dsack = 1
net.ipv4.tcp_mem = 192192 256256 384384
net.ipv4.tcp_wmem = 4096 16384 4194304
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_app_win = 31
net.ipv4.tcp_adv_win_scale = 2
net.ipv4.tcp_tw_reuse = 0
net.ipv4.tcp_frto = 2
net.ipv4.tcp_frto_response = 0
net.ipv4.tcp_low_latency = 0
net.ipv4.tcp_no_metrics_save = 0
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_tso_win_divisor = 3
net.ipv4.tcp_congestion_control = cubic
net.ipv4.tcp_abc = 0
net.ipv4.tcp_mtu_probing = 0
net.ipv4.tcp_base_mss = 512
net.ipv4.tcp_workaround_signed_windows = 0
net.ipv4.tcp_dma_copybreak = 4096
net.ipv4.tcp_slow_start_after_idle = 1
net.ipv4.tcp_available_congestion_control = cubic reno
net.ipv4.tcp_allowed_congestion_control = cubic reno
net.ipv4.tcp_max_ssthresh = 0
net.ipv4.udp_mem = 192192 256256 384384
net.ipv4.udp_rmem_min = 4096
net.ipv4.udp_wmem_min = 4096
net.ipv4.netfilter.ip_conntrack_generic_timeout = 600
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent2 = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_recv = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 432000
net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_last_ack = 30
net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close = 10
net.ipv4.netfilter.ip_conntrack_tcp_timeout_max_retrans = 300
net.ipv4.netfilter.ip_conntrack_tcp_loose = 1
net.ipv4.netfilter.ip_conntrack_tcp_be_liberal = 0
net.ipv4.netfilter.ip_conntrack_tcp_max_retrans = 3
net.ipv4.netfilter.ip_conntrack_udp_timeout = 30
net.ipv4.netfilter.ip_conntrack_udp_timeout_stream = 180
net.ipv4.netfilter.ip_conntrack_icmp_timeout = 30
net.ipv4.netfilter.ip_conntrack_max = 65536
net.ipv4.netfilter.ip_conntrack_count = 1709
net.ipv4.netfilter.ip_conntrack_buckets = 16384
net.ipv4.netfilter.ip_conntrack_checksum = 1
net.ipv4.netfilter.ip_conntrack_log_invalid = 0
net.ipv4.conf.all.forwarding = 1
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.secure_redirects = 1
net.ipv4.conf.all.shared_media = 1
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.src_valid_mark = 0
net.ipv4.conf.all.proxy_arp = 0
net.ipv4.conf.all.medium_id = 0
net.ipv4.conf.all.bootp_relay = 0
net.ipv4.conf.all.log_martians = 0
net.ipv4.conf.all.tag = 0
net.ipv4.conf.all.arp_filter = 0
net.ipv4.conf.all.arp_announce = 0
net.ipv4.conf.all.arp_ignore = 0
net.ipv4.conf.all.arp_accept = 0
net.ipv4.conf.all.arp_notify = 0
net.ipv4.conf.all.disable_xfrm = 0
net.ipv4.conf.all.disable_policy = 0
net.ipv4.conf.all.force_igmp_version = 0
net.ipv4.conf.all.promote_secondaries = 0
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.default.accept_redirects = 1
net.ipv4.conf.default.secure_redirects = 1
net.ipv4.conf.default.shared_media = 1
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.default.accept_source_route = 1
net.ipv4.conf.default.src_valid_mark = 0
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.default.medium_id = 0
net.ipv4.conf.default.bootp_relay = 0
net.ipv4.conf.default.log_martians = 0
net.ipv4.conf.default.tag = 0
net.ipv4.conf.default.arp_filter = 0
net.ipv4.conf.default.arp_announce = 0
net.ipv4.conf.default.arp_ignore = 0
net.ipv4.conf.default.arp_accept = 0
net.ipv4.conf.default.arp_notify = 0
net.ipv4.conf.default.disable_xfrm = 0
net.ipv4.conf.default.disable_policy = 0
net.ipv4.conf.default.force_igmp_version = 0
net.ipv4.conf.default.promote_secondaries = 0
net.ipv4.conf.lo.forwarding = 1
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.lo.accept_redirects = 1
net.ipv4.conf.lo.secure_redirects = 1
net.ipv4.conf.lo.shared_media = 1
net.ipv4.conf.lo.rp_filter = 0
net.ipv4.conf.lo.send_redirects = 1
net.ipv4.conf.lo.accept_source_route = 1
net.ipv4.conf.lo.src_valid_mark = 0
net.ipv4.conf.lo.proxy_arp = 0
net.ipv4.conf.lo.medium_id = 0
net.ipv4.conf.lo.bootp_relay = 0
net.ipv4.conf.lo.log_martians = 0
net.ipv4.conf.lo.tag = 0
net.ipv4.conf.lo.arp_filter = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.lo.arp_accept = 0
net.ipv4.conf.lo.arp_notify = 0
net.ipv4.conf.lo.disable_xfrm = 1
net.ipv4.conf.lo.disable_policy = 1
net.ipv4.conf.lo.force_igmp_version = 0
net.ipv4.conf.lo.promote_secondaries = 0
net.ipv4.conf.eth0.forwarding = 1
net.ipv4.conf.eth0.mc_forwarding = 0
net.ipv4.conf.eth0.accept_redirects = 1
net.ipv4.conf.eth0.secure_redirects = 1
net.ipv4.conf.eth0.shared_media = 1
net.ipv4.conf.eth0.rp_filter = 0
net.ipv4.conf.eth0.send_redirects = 1
net.ipv4.conf.eth0.accept_source_route = 1
net.ipv4.conf.eth0.src_valid_mark = 0
net.ipv4.conf.eth0.proxy_arp = 0
net.ipv4.conf.eth0.medium_id = 0
net.ipv4.conf.eth0.bootp_relay = 0
net.ipv4.conf.eth0.log_martians = 0
net.ipv4.conf.eth0.tag = 0
net.ipv4.conf.eth0.arp_filter = 0
net.ipv4.conf.eth0.arp_announce = 0
net.ipv4.conf.eth0.arp_ignore = 0
net.ipv4.conf.eth0.arp_accept = 0
net.ipv4.conf.eth0.arp_notify = 0
net.ipv4.conf.eth0.disable_xfrm = 0
net.ipv4.conf.eth0.disable_policy = 0
net.ipv4.conf.eth0.force_igmp_version = 0
net.ipv4.conf.eth0.promote_secondaries = 0
net.ipv4.conf.eth1.forwarding = 1
net.ipv4.conf.eth1.mc_forwarding = 0
net.ipv4.conf.eth1.accept_redirects = 1
net.ipv4.conf.eth1.secure_redirects = 1
net.ipv4.conf.eth1.shared_media = 1
net.ipv4.conf.eth1.rp_filter = 0
net.ipv4.conf.eth1.send_redirects = 1
net.ipv4.conf.eth1.accept_source_route = 1
net.ipv4.conf.eth1.src_valid_mark = 0
net.ipv4.conf.eth1.proxy_arp = 0
net.ipv4.conf.eth1.medium_id = 0
net.ipv4.conf.eth1.bootp_relay = 0
net.ipv4.conf.eth1.log_martians = 0
net.ipv4.conf.eth1.tag = 0
net.ipv4.conf.eth1.arp_filter = 0
net.ipv4.conf.eth1.arp_announce = 0
net.ipv4.conf.eth1.arp_ignore = 0
net.ipv4.conf.eth1.arp_accept = 0
net.ipv4.conf.eth1.arp_notify = 0
net.ipv4.conf.eth1.disable_xfrm = 0
net.ipv4.conf.eth1.disable_policy = 0
net.ipv4.conf.eth1.force_igmp_version = 0
net.ipv4.conf.eth1.promote_secondaries = 0
net.ipv4.conf.eth1/30.forwarding = 1
net.ipv4.conf.eth1/30.mc_forwarding = 0
net.ipv4.conf.eth1/30.accept_redirects = 1
net.ipv4.conf.eth1/30.secure_redirects = 1
net.ipv4.conf.eth1/30.shared_media = 1
net.ipv4.conf.eth1/30.rp_filter = 0
net.ipv4.conf.eth1/30.send_redirects = 1
net.ipv4.conf.eth1/30.accept_source_route = 1
net.ipv4.conf.eth1/30.src_valid_mark = 0
net.ipv4.conf.eth1/30.proxy_arp = 0
net.ipv4.conf.eth1/30.medium_id = 0
net.ipv4.conf.eth1/30.bootp_relay = 0
net.ipv4.conf.eth1/30.log_martians = 0
net.ipv4.conf.eth1/30.tag = 0
net.ipv4.conf.eth1/30.arp_filter = 0
net.ipv4.conf.eth1/30.arp_announce = 0
net.ipv4.conf.eth1/30.arp_ignore = 0
net.ipv4.conf.eth1/30.arp_accept = 0
net.ipv4.conf.eth1/30.arp_notify = 0
net.ipv4.conf.eth1/30.disable_xfrm = 0
net.ipv4.conf.eth1/30.disable_policy = 0
net.ipv4.conf.eth1/30.force_igmp_version = 0
net.ipv4.conf.eth1/30.promote_secondaries = 0
net.ipv4.conf.eth1/31.forwarding = 1
net.ipv4.conf.eth1/31.mc_forwarding = 0
net.ipv4.conf.eth1/31.accept_redirects = 1
net.ipv4.conf.eth1/31.secure_redirects = 1
net.ipv4.conf.eth1/31.shared_media = 1
net.ipv4.conf.eth1/31.rp_filter = 0
net.ipv4.conf.eth1/31.send_redirects = 1
net.ipv4.conf.eth1/31.accept_source_route = 1
net.ipv4.conf.eth1/31.src_valid_mark = 0
net.ipv4.conf.eth1/31.proxy_arp = 0
net.ipv4.conf.eth1/31.medium_id = 0
net.ipv4.conf.eth1/31.bootp_relay = 0
net.ipv4.conf.eth1/31.log_martians = 0
net.ipv4.conf.eth1/31.tag = 0
net.ipv4.conf.eth1/31.arp_filter = 0
net.ipv4.conf.eth1/31.arp_announce = 0
net.ipv4.conf.eth1/31.arp_ignore = 0
net.ipv4.conf.eth1/31.arp_accept = 0
net.ipv4.conf.eth1/31.arp_notify = 0
net.ipv4.conf.eth1/31.disable_xfrm = 0
net.ipv4.conf.eth1/31.disable_policy = 0
net.ipv4.conf.eth1/31.force_igmp_version = 0
net.ipv4.conf.eth1/31.promote_secondaries = 0
net.ipv4.ip_forward = 1
net.ipv4.xfrm4_gc_thresh = 524288
net.ipv4.ipfrag_high_thresh = 262144
net.ipv4.ipfrag_low_thresh = 196608
net.ipv4.ipfrag_time = 30
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.icmp_errors_use_inbound_ifaddr = 0
net.ipv4.icmp_ratelimit = 1000
net.ipv4.icmp_ratemask = 6168
net.ipv4.rt_cache_rebuild_count = 4
net.ipv4.ipfrag_secret_interval = 600
net.ipv4.ipfrag_max_dist = 64
net.token-ring.rif_timeout = 150000
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.retrans_time = 250
net.ipv6.neigh.default.base_reachable_time = 30
net.ipv6.neigh.default.delay_first_probe_time = 5
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.unres_qlen = 3
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.anycast_delay = 100
net.ipv6.neigh.default.proxy_delay = 80
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.retrans_time_ms = 1000
net.ipv6.neigh.default.base_reachable_time_ms = 30000
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_thresh1 = 128
net.ipv6.neigh.default.gc_thresh2 = 512
net.ipv6.neigh.default.gc_thresh3 = 1024
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.retrans_time = 250
net.ipv6.neigh.lo.base_reachable_time = 30
net.ipv6.neigh.lo.delay_first_probe_time = 5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.unres_qlen = 3
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.anycast_delay = 100
net.ipv6.neigh.lo.proxy_delay = 80
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.base_reachable_time_ms = 30000
net.ipv6.neigh.eth0.mcast_solicit = 3
net.ipv6.neigh.eth0.ucast_solicit = 3
net.ipv6.neigh.eth0.app_solicit = 0
net.ipv6.neigh.eth0.retrans_time = 250
net.ipv6.neigh.eth0.base_reachable_time = 30
net.ipv6.neigh.eth0.delay_first_probe_time = 5
net.ipv6.neigh.eth0.gc_stale_time = 60
net.ipv6.neigh.eth0.unres_qlen = 3
net.ipv6.neigh.eth0.proxy_qlen = 64
net.ipv6.neigh.eth0.anycast_delay = 100
net.ipv6.neigh.eth0.proxy_delay = 80
net.ipv6.neigh.eth0.locktime = 0
net.ipv6.neigh.eth0.retrans_time_ms = 1000
net.ipv6.neigh.eth0.base_reachable_time_ms = 30000
net.ipv6.neigh.eth1.mcast_solicit = 3
net.ipv6.neigh.eth1.ucast_solicit = 3
net.ipv6.neigh.eth1.app_solicit = 0
net.ipv6.neigh.eth1.retrans_time = 250
net.ipv6.neigh.eth1.base_reachable_time = 30
net.ipv6.neigh.eth1.delay_first_probe_time = 5
net.ipv6.neigh.eth1.gc_stale_time = 60
net.ipv6.neigh.eth1.unres_qlen = 3
net.ipv6.neigh.eth1.proxy_qlen = 64
net.ipv6.neigh.eth1.anycast_delay = 100
net.ipv6.neigh.eth1.proxy_delay = 80
net.ipv6.neigh.eth1.locktime = 0
net.ipv6.neigh.eth1.retrans_time_ms = 1000
net.ipv6.neigh.eth1.base_reachable_time_ms = 30000
net.ipv6.neigh.eth1/30.mcast_solicit = 3
net.ipv6.neigh.eth1/30.ucast_solicit = 3
net.ipv6.neigh.eth1/30.app_solicit = 0
net.ipv6.neigh.eth1/30.retrans_time = 250
net.ipv6.neigh.eth1/30.base_reachable_time = 30
net.ipv6.neigh.eth1/30.delay_first_probe_time = 5
net.ipv6.neigh.eth1/30.gc_stale_time = 60
net.ipv6.neigh.eth1/30.unres_qlen = 3
net.ipv6.neigh.eth1/30.proxy_qlen = 64
net.ipv6.neigh.eth1/30.anycast_delay = 100
net.ipv6.neigh.eth1/30.proxy_delay = 80
net.ipv6.neigh.eth1/30.locktime = 0
net.ipv6.neigh.eth1/30.retrans_time_ms = 1000
net.ipv6.neigh.eth1/30.base_reachable_time_ms = 30000
net.ipv6.neigh.eth1/31.mcast_solicit = 3
net.ipv6.neigh.eth1/31.ucast_solicit = 3
net.ipv6.neigh.eth1/31.app_solicit = 0
net.ipv6.neigh.eth1/31.retrans_time = 250
net.ipv6.neigh.eth1/31.base_reachable_time = 30
net.ipv6.neigh.eth1/31.delay_first_probe_time = 5
net.ipv6.neigh.eth1/31.gc_stale_time = 60
net.ipv6.neigh.eth1/31.unres_qlen = 3
net.ipv6.neigh.eth1/31.proxy_qlen = 64
net.ipv6.neigh.eth1/31.anycast_delay = 100
net.ipv6.neigh.eth1/31.proxy_delay = 80
net.ipv6.neigh.eth1/31.locktime = 0
net.ipv6.neigh.eth1/31.retrans_time_ms = 1000
net.ipv6.neigh.eth1/31.base_reachable_time_ms = 30000
net.ipv6.xfrm6_gc_thresh = 2048
net.ipv6.conf.all.forwarding = 0
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.accept_ra = 1
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.autoconf = 1
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.router_solicitations = 3
net.ipv6.conf.all.router_solicitation_interval = 4
net.ipv6.conf.all.router_solicitation_delay = 1
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.regen_max_retry = 5
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.accept_ra_defrtr = 1
net.ipv6.conf.all.accept_ra_pinfo = 1
net.ipv6.conf.all.accept_ra_rtr_pref = 1
net.ipv6.conf.all.router_probe_interval = 60
net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.optimistic_dad = 0
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.all.accept_dad = 1
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.accept_ra = 1
net.ipv6.conf.default.accept_redirects = 1
net.ipv6.conf.default.autoconf = 1
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.router_solicitations = 3
net.ipv6.conf.default.router_solicitation_interval = 4
net.ipv6.conf.default.router_solicitation_delay = 1
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.default.temp_valid_lft = 604800
net.ipv6.conf.default.temp_prefered_lft = 86400
net.ipv6.conf.default.regen_max_retry = 5
net.ipv6.conf.default.max_desync_factor = 600
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.accept_ra_defrtr = 1
net.ipv6.conf.default.accept_ra_pinfo = 1
net.ipv6.conf.default.accept_ra_rtr_pref = 1
net.ipv6.conf.default.router_probe_interval = 60
net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.accept_source_route = 0
net.ipv6.conf.default.optimistic_dad = 0
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.default.accept_dad = 1
net.ipv6.conf.lo.forwarding = 0
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.mtu = 16436
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.router_solicitations = 3
net.ipv6.conf.lo.router_solicitation_interval = 4
net.ipv6.conf.lo.router_solicitation_delay = 1
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.regen_max_retry = 5
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.optimistic_dad = 0
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.disable_ipv6 = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.eth0.forwarding = 0
net.ipv6.conf.eth0.hop_limit = 64
net.ipv6.conf.eth0.mtu = 1500
net.ipv6.conf.eth0.accept_ra = 1
net.ipv6.conf.eth0.accept_redirects = 1
net.ipv6.conf.eth0.autoconf = 1
net.ipv6.conf.eth0.dad_transmits = 1
net.ipv6.conf.eth0.router_solicitations = 3
net.ipv6.conf.eth0.router_solicitation_interval = 4
net.ipv6.conf.eth0.router_solicitation_delay = 1
net.ipv6.conf.eth0.force_mld_version = 0
net.ipv6.conf.eth0.use_tempaddr = 0
net.ipv6.conf.eth0.temp_valid_lft = 604800
net.ipv6.conf.eth0.temp_prefered_lft = 86400
net.ipv6.conf.eth0.regen_max_retry = 5
net.ipv6.conf.eth0.max_desync_factor = 600
net.ipv6.conf.eth0.max_addresses = 16
net.ipv6.conf.eth0.accept_ra_defrtr = 1
net.ipv6.conf.eth0.accept_ra_pinfo = 1
net.ipv6.conf.eth0.accept_ra_rtr_pref = 1
net.ipv6.conf.eth0.router_probe_interval = 60
net.ipv6.conf.eth0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth0.proxy_ndp = 0
net.ipv6.conf.eth0.accept_source_route = 0
net.ipv6.conf.eth0.optimistic_dad = 0
net.ipv6.conf.eth0.mc_forwarding = 0
net.ipv6.conf.eth0.disable_ipv6 = 0
net.ipv6.conf.eth0.accept_dad = 1
net.ipv6.conf.eth1.forwarding = 0
net.ipv6.conf.eth1.hop_limit = 64
net.ipv6.conf.eth1.mtu = 1500
net.ipv6.conf.eth1.accept_ra = 1
net.ipv6.conf.eth1.accept_redirects = 1
net.ipv6.conf.eth1.autoconf = 1
net.ipv6.conf.eth1.dad_transmits = 1
net.ipv6.conf.eth1.router_solicitations = 3
net.ipv6.conf.eth1.router_solicitation_interval = 4
net.ipv6.conf.eth1.router_solicitation_delay = 1
net.ipv6.conf.eth1.force_mld_version = 0
net.ipv6.conf.eth1.use_tempaddr = 0
net.ipv6.conf.eth1.temp_valid_lft = 604800
net.ipv6.conf.eth1.temp_prefered_lft = 86400
net.ipv6.conf.eth1.regen_max_retry = 5
net.ipv6.conf.eth1.max_desync_factor = 600
net.ipv6.conf.eth1.max_addresses = 16
net.ipv6.conf.eth1.accept_ra_defrtr = 1
net.ipv6.conf.eth1.accept_ra_pinfo = 1
net.ipv6.conf.eth1.accept_ra_rtr_pref = 1
net.ipv6.conf.eth1.router_probe_interval = 60
net.ipv6.conf.eth1.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth1.proxy_ndp = 0
net.ipv6.conf.eth1.accept_source_route = 0
net.ipv6.conf.eth1.optimistic_dad = 0
net.ipv6.conf.eth1.mc_forwarding = 0
net.ipv6.conf.eth1.disable_ipv6 = 0
net.ipv6.conf.eth1.accept_dad = 1
net.ipv6.conf.eth1/30.forwarding = 0
net.ipv6.conf.eth1/30.hop_limit = 64
net.ipv6.conf.eth1/30.mtu = 1500
net.ipv6.conf.eth1/30.accept_ra = 1
net.ipv6.conf.eth1/30.accept_redirects = 1
net.ipv6.conf.eth1/30.autoconf = 1
net.ipv6.conf.eth1/30.dad_transmits = 1
net.ipv6.conf.eth1/30.router_solicitations = 3
net.ipv6.conf.eth1/30.router_solicitation_interval = 4
net.ipv6.conf.eth1/30.router_solicitation_delay = 1
net.ipv6.conf.eth1/30.force_mld_version = 0
net.ipv6.conf.eth1/30.use_tempaddr = 0
net.ipv6.conf.eth1/30.temp_valid_lft = 604800
net.ipv6.conf.eth1/30.temp_prefered_lft = 86400
net.ipv6.conf.eth1/30.regen_max_retry = 5
net.ipv6.conf.eth1/30.max_desync_factor = 600
net.ipv6.conf.eth1/30.max_addresses = 16
net.ipv6.conf.eth1/30.accept_ra_defrtr = 1
net.ipv6.conf.eth1/30.accept_ra_pinfo = 1
net.ipv6.conf.eth1/30.accept_ra_rtr_pref = 1
net.ipv6.conf.eth1/30.router_probe_interval = 60
net.ipv6.conf.eth1/30.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth1/30.proxy_ndp = 0
net.ipv6.conf.eth1/30.accept_source_route = 0
net.ipv6.conf.eth1/30.optimistic_dad = 0
net.ipv6.conf.eth1/30.mc_forwarding = 0
net.ipv6.conf.eth1/30.disable_ipv6 = 0
net.ipv6.conf.eth1/30.accept_dad = 1
net.ipv6.conf.eth1/31.forwarding = 0
net.ipv6.conf.eth1/31.hop_limit = 64
net.ipv6.conf.eth1/31.mtu = 1500
net.ipv6.conf.eth1/31.accept_ra = 1
net.ipv6.conf.eth1/31.accept_redirects = 1
net.ipv6.conf.eth1/31.autoconf = 1
net.ipv6.conf.eth1/31.dad_transmits = 1
net.ipv6.conf.eth1/31.router_solicitations = 3
net.ipv6.conf.eth1/31.router_solicitation_interval = 4
net.ipv6.conf.eth1/31.router_solicitation_delay = 1
net.ipv6.conf.eth1/31.force_mld_version = 0
net.ipv6.conf.eth1/31.use_tempaddr = 0
net.ipv6.conf.eth1/31.temp_valid_lft = 604800
net.ipv6.conf.eth1/31.temp_prefered_lft = 86400
net.ipv6.conf.eth1/31.regen_max_retry = 5
net.ipv6.conf.eth1/31.max_desync_factor = 600
net.ipv6.conf.eth1/31.max_addresses = 16
net.ipv6.conf.eth1/31.accept_ra_defrtr = 1
net.ipv6.conf.eth1/31.accept_ra_pinfo = 1
net.ipv6.conf.eth1/31.accept_ra_rtr_pref = 1
net.ipv6.conf.eth1/31.router_probe_interval = 60
net.ipv6.conf.eth1/31.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth1/31.proxy_ndp = 0
net.ipv6.conf.eth1/31.accept_source_route = 0
net.ipv6.conf.eth1/31.optimistic_dad = 0
net.ipv6.conf.eth1/31.mc_forwarding = 0
net.ipv6.conf.eth1/31.disable_ipv6 = 0
net.ipv6.conf.eth1/31.accept_dad = 1
net.ipv6.ip6frag_high_thresh = 262144
net.ipv6.ip6frag_low_thresh = 196608
net.ipv6.ip6frag_time = 60
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.max_size = 4096
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_timeout = 60
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_elasticity = 0
net.ipv6.route.mtu_expires = 600
net.ipv6.route.min_adv_mss = 4
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.icmp.ratelimit = 1000
net.ipv6.bindv6only = 0
net.ipv6.ip6frag_secret_interval = 600
net.ipv6.mld_max_msf = 64
net.nf_conntrack_max = 65536
net.unix.max_dgram_qlen = 10
abi.vsyscall32 = 1
crypto.fips_enabled = 0
Netstat statistics
------------------
Ip:
1763000575 total packets received
251 with invalid headers
66 with invalid addresses
2318126280 forwarded
13 with unknown protocol
0 incoming packets discarded
3721267868 incoming packets delivered
190803185 requests sent out
2167 outgoing packets dropped
275662 reassemblies required
131197 packets reassembled ok
131045 fragments received ok
1 fragments failed
275358 fragments created
Icmp:
37067524 ICMP messages received
30260 input ICMP message failed.
ICMP input histogram:
destination unreachable: 346507
timeout in transit: 2126
echo requests: 36712740
echo replies: 715
timestamp request: 8
36900256 ICMP messages sent
0 ICMP messages failed
ICMP output histogram:
destination unreachable: 184815
time exceeded: 246
redirect: 2141
echo request: 327
echo replies: 36712727
IcmpMsg:
InType0: 715
InType3: 346507
InType8: 36712740
InType11: 2126
InType13: 8
OutType0: 36712727
OutType3: 184815
OutType5: 2141
OutType8: 327
OutType11: 246
Tcp:
17348791 active connections openings
25404431 passive connection openings
65735 failed connection attempts
1670159 connection resets received
63 connections established
3655732639 segments received
2095736411 segments send out
15855006 segments retransmited
6198 bad segments received.
1501933 resets sent
Udp:
28433293 packets received
3667 packets to unknown port received.
3 packet receive errors
28870673 packets sent
UdpLite:
TcpExt:
63988 resets received for embryonic SYN_RECV sockets
3508 packets pruned from receive queue because of socket buffer overrun
2447 ICMP packets dropped because they were out-of-window
9961016 TCP sockets finished time wait in fast timer
51567 time wait sockets recycled by time stamp
484327 packets rejects in established connections because of timestamp
64281083 delayed acks sent
44489 delayed acks further delayed because of locked socket
Quick ack mode was activated 1050130 times
1247 times the listen queue of a socket overflowed
1247 SYNs to LISTEN sockets dropped
5661978 packets directly queued to recvmsg prequeue.
566923 bytes directly in process context from backlog
598297894 bytes directly received in process context from prequeue
1967372881 packet headers predicted
3920781 packets header predicted and directly queued to user
576427258 acknowledgments not containing data payload received
652086140 predicted acknowledgments
19297 times recovered from packet loss due to fast retransmit
2480055 times recovered from packet loss by selective acknowledgements
19607 bad SACK blocks received
Detected reordering 26115 times using FACK
Detected reordering 32453 times using SACK
Detected reordering 656 times using reno fast retransmit
Detected reordering 33171 times using time stamp
50168 congestion windows fully recovered without slow start
228617 congestion windows partially recovered using Hoe heuristic
179251 congestion windows recovered without slow start by DSACK
220303 congestion windows recovered without slow start after partial ack
8698235 TCP data loss events
TCPLostRetransmit: 217605
6569 timeouts after reno fast retransmit
226610 timeouts after SACK recovery
97826 timeouts in loss state
9927360 fast retransmits
719182 forward retransmits
2469343 retransmits in slow start
1379428 other TCP timeouts
11511 classic Reno fast retransmits failed
168451 SACK retransmits failed
315297 packets collapsed in receive queue due to low socket buffer
1080527 DSACKs sent for old packets
3542 DSACKs sent for out of order packets
1303693 DSACKs received
9420 DSACKs for out of order packets received
8910 connections reset due to unexpected data
713209 connections reset due to early user close
94981 connections aborted due to timeout
TCPSACKDiscard: 11364
TCPDSACKIgnoredOld: 292954
TCPDSACKIgnoredNoUndo: 282828
TCPSpuriousRTOs: 65609
TCPSackShifted: 21736473
TCPSackMerged: 13551255
TCPSackShiftFallback: 10421846
IpExt:
InMcastPkts: 4407724
InBcastPkts: 8131914
InOctets: 1437208334
OutOctets: 727676907
InMcastOctets: 185216436
InBcastOctets: 708023411
Thanks!
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: High uptime linux router works for linux clients, windows clients act strange
2015-01-19 16:33 High uptime linux router works for linux clients, windows clients act strange Stephan Alz
2015-01-19 16:51 ` Stephan Alz
@ 2015-01-19 18:28 ` Alan Goodman
2015-01-20 10:04 ` Stephan Alz
2 siblings, 0 replies; 4+ messages in thread
From: Alan Goodman @ 2015-01-19 18:28 UTC (permalink / raw)
To: lartc
Hi Steven
It would be useful for you to explain why you feel that the first router
was causing issues.
To me this sounds like a MTU related issue at the moment. Theoretically
BGP route 1 allowed larger packets than BGP route 2. Linux boxes
manages to do PMTU discovery but something prevented the Windows boxes
from doing this and therefore their packets were dropped. Or something
like this...
Alan
On 19/01/15 16:51, Stephan Alz wrote:
<snip>
> So about 2 months ago windows machines (WinXP-Win8) started acting strange, connections got interrupted, webpages didn't load for users. After weeks of investigation into this and going through all the components on our network I finally determined that this machine is the problem so as a workaround I installed another linux box and all the windowses using that as a default gateway right now. It is a workaround what I wouldn't like to leave in place forever.
<snip>
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: High uptime linux router works for linux clients, windows clients act strange
2015-01-19 16:33 High uptime linux router works for linux clients, windows clients act strange Stephan Alz
2015-01-19 16:51 ` Stephan Alz
2015-01-19 18:28 ` Alan Goodman
@ 2015-01-20 10:04 ` Stephan Alz
2 siblings, 0 replies; 4+ messages in thread
From: Stephan Alz @ 2015-01-20 10:04 UTC (permalink / raw)
To: lartc
Hello
That would explain the error what I had one morning with the windows laptop (seems to be a separate issue). The reason why I think it's not a BGP related issue and it's happening on the 2.nd gateway is that most users were complaining about their mail access is not working, and the mail server is located in the DMZ between the 2. So the users from the LAN only have to go through this second gateway to get there. We rebooted the mail server many times, didn't really helped anything. All the users say they had no problem whatsoever using it from the internet.
Fortunately when this was going on in november I made some packet dumps, by setting up port mirroring to the windows users port on the switch but I couldn't see anything strange. Here is a communication for example from a windows machine from the LAN with our mail server in the DMZ through SSL (webmail):
http://tinypic.com/view.php?pic.204y0&s=8#.VL4ktd2Vvok
Well I saw it myself when I sat there at their computer that roundcube just shows connection errors and interrupted messages beyond that their whole internet connection was cut off for minutes than suddenly come back. We looked everything like disabling power management on the nics, replacing the nics, plugging them to different switches, even replacing the whole pc didn't help. Also I tried to proxy them through a linux SQUID box which were in the same DMZ area as the mail server, that didn't help either.
Sent: Monday, January 19, 2015 at 7:28 PM
From: "Alan Goodman" <notifications@yescomputersolutions.com>
To: "Stephan Alz" <stephan008@gmx.com>, lartc@vger.kernel.org
Subject: Re: High uptime linux router works for linux clients, windows clients act strange
Hi Steven
It would be useful for you to explain why you feel that the first router
was causing issues.
To me this sounds like a MTU related issue at the moment. Theoretically
BGP route 1 allowed larger packets than BGP route 2. Linux boxes
manages to do PMTU discovery but something prevented the Windows boxes
from doing this and therefore their packets were dropped. Or something
like this...
Alan
On 19/01/15 16:51, Stephan Alz wrote:
<snip>
> So about 2 months ago windows machines (WinXP-Win8) started acting strange, connections got interrupted, webpages didn't load for users. After weeks of investigation into this and going through all the components on our network I finally determined that this machine is the problem so as a workaround I installed another linux box and all the windowses using that as a default gateway right now. It is a workaround what I wouldn't like to leave in place forever.
<snip>
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2015-01-20 10:04 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-01-19 16:33 High uptime linux router works for linux clients, windows clients act strange Stephan Alz
2015-01-19 16:51 ` Stephan Alz
2015-01-19 18:28 ` Alan Goodman
2015-01-20 10:04 ` Stephan Alz
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.