set net.netfilter.nf_conntrack_tcp_timeout_established later

7 years ago · f81e146f6c
parent 8cd5685755
commit f81e146f6c
1 changed files with 1 additions and 1 deletions
--- a/roles/configure_sysctl/files/ff.conf
+++ b/roles/configure_sysctl/files/ff.conf
@ -18,9 +18,9 @@ net.ipv6.neigh.default.gc_interval=3600
 net.ipv6.neigh.default.gc_stale_time=3600

 # decrease nf_conntrack_tcp_timeout_established - default=432000
-net.netfilter.nf_conntrack_tcp_timeout_established=86400
 net.netfilter.nf_conntrack_max=1048576
 net.netfilter.nf_conntrack_buckets=131072
+net.netfilter.nf_conntrack_tcp_timeout_established=86400

 # reboot after kernel panic
 kernel.panic=1