From: "S?ébastien Cramatte" <scramatte@zensoluciones.com>
To: netfilter@vger.kernel.org
Subject: nf_conntrack vs ip_conntrack ...
Date: Wed, 19 Dec 2007 17:47:32 +0100 [thread overview]
Message-ID: <47694B24.7050003@zensoluciones.com> (raw)
Hello
I'm running 2.6.22.12 kernel
I would like to tweak netfilter parameters in sysctl.conf (I'm running
debian Etch)
My server is a traffic manager setuped as a bridge. We filter P2P
(ipp2p, l7filter) and SIP/RTP for an amount 60Mbits
I must tweak conntrack default values to use most of available memory
and to try to avoid overhead ...
How can apply these sysctl.conf values to the new nf_conntrack style :
net.ipv4.netfilter.ip_conntrack_max = 8388608
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established= 57600
net.ipv4.netfilter.ip_conntrack_udp_timeout = 57600
net.ipv4.netfilter.ip_conntrack_udp_timeout_stream = 57600
By default I've got theses values :
net.netfilter.nf_conntrack_generic_timeout = 50
net.netfilter.nf_conntrack_max = 65536
net.netfilter.nf_conntrack_count = 0
net.netfilter.nf_conntrack_buckets = 8192
net.netfilter.nf_conntrack_checksum = 1
net.netfilter.nf_conntrack_log_invalid = 0
Which value can I put for tcp and udp timeout ?
I found some example but small wireless router not 60Mbits traffic
shapper ;)
So I'm not sure what should be the best values
We have something as 2000 customers (I'm working for a cable provider)
that going through this server,
Many thanks for your help
reply other threads:[~2007-12-19 16:47 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=47694B24.7050003@zensoluciones.com \
--to=scramatte@zensoluciones.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox