Hi,
On 17-03-2021 11:53, W Templeton wrote:
1.your OS version
Sure:
$ cat /etc/debian_version
10.8
Basicly: Debian stable with current updates.
2.Debian kernel tweaking
Sure:
# cat 99-router.conf
# Enable IP forwarding for IPv4 and IPv6 AF.
net.ipv4.conf.all.forwarding = 1
net.ipv6.conf.all.forwarding = 1
# Send ICMP errors from receiving interface and be a nice netizen.
net.ipv4.icmp_errors_use_inbound_ifaddr = 1
# Disable reverse path filtering.
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.default.rp_filter = 0
# Allow more IPv6 routes.
net.ipv6.route.max_size = 2147483647
# Allow more network neighbours.
net.ipv4.neigh.default.gc_thresh1=16384
net.ipv4.neigh.default.gc_thresh2=32768
net.ipv4.neigh.default.gc_thresh3=65536
net.ipv6.neigh.default.gc_thresh1=16384
net.ipv6.neigh.default.gc_thresh2=32768
net.ipv6.neigh.default.gc_thresh3=65536
# cat 99-tengige.conf
# 10GB/54MB (56623104)
net.core.rmem_max = 56623104
net.core.wmem_max = 56623104
net.core.rmem_default = 56623104
net.core.wmem_default = 56623104
net.core.optmem_max = 40960
net.ipv4.tcp_rmem = 4096 87380 56623104
net.ipv4.tcp_wmem = 4096 65536 56623104
# Increase number of incoming connections. The value can be raised to
bursts of request, default is 128
net.core.somaxconn = 1024
# Increase number of incoming connections backlog, default is 1000
net.core.netdev_max_backlog = 50000
# Maximum number of remembered connection requests, default is 128
net.ipv4.tcp_max_syn_backlog = 30000
# Increase the tcp-time-wait buckets pool size to prevent simple DoS
attacks, default is 8192
net.ipv4.tcp_max_tw_buckets = 2000000
# Recycle and Reuse TIME_WAIT sockets faster, default is 0 for both
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
# Decrease TIME_WAIT seconds, default is 30 seconds
net.ipv4.tcp_fin_timeout = 10
# Tells the system whether it should start at the default window size
only for TCP connections
# that have been idle for too long, default is 1
net.ipv4.tcp_slow_start_after_idle = 0
# If your servers talk UDP, also up these limits, default is 4096
net.ipv4.udp_rmem_min = 8192
net.ipv4.udp_wmem_min = 8192
# cat 99-vrrp.conf
# For VRRP.
net.ipv4.ip_nonlocal_bind = 1
Cybertinus: maybe you can give insight in your kernel tweaks as well?
(Probably very overlapping.)
Cheers,
Kees
