resize max conntrack

6 years ago · c5ed917c8e
parent a85999dbac
commit c5ed917c8e
1 changed files with 2 additions and 2 deletions
--- a/roles/configure_sysctl/files/ff.conf
+++ b/roles/configure_sysctl/files/ff.conf
@ -19,8 +19,8 @@ net.ipv6.neigh.default.gc_stale_time=3600

 # decrease nf_conntrack_tcp_timeout_established - default=432000
 net.netfilter.nf_conntrack_tcp_timeout_established=86400
-net.netfilter.nf_conntrack_max=65536
-net.netfilter.nf_conntrack_buckets=16384
+net.netfilter.nf_conntrack_max=1048576
+net.netfilter.nf_conntrack_buckets=131072

 # reboot after kernel panic
 kernel.panic=1