reduce tcp_timeout_established to 1 hour

7 years ago · aff767a31f
parent 2c1d3f36eb
commit aff767a31f
1 changed files with 1 additions and 1 deletions
--- a/roles/configure_sysctl/files/ff.conf
+++ b/roles/configure_sysctl/files/ff.conf
@ -20,7 +20,7 @@ net.ipv6.neigh.default.gc_stale_time=3600
 # decrease nf_conntrack_tcp_timeout_established - default=432000
 net.netfilter.nf_conntrack_max=1048576
 net.netfilter.nf_conntrack_buckets=131072
-net.netfilter.nf_conntrack_tcp_timeout_established=86400
+net.netfilter.nf_conntrack_tcp_timeout_established=3600

 # reboot after kernel panic
 kernel.panic=1