reduce conntrack SYN timeouts to match TCP/IP stack

2024-04-24 10:45:02 -04:00 · 2024-04-24 10:45:02 -04:00 · f3ae109eac
parent ee62868a7b
commit f3ae109eac
1 changed files with 2 additions and 0 deletions
--- a/sysctl.d/local.conf
+++ b/sysctl.d/local.conf
@ -19,9 +19,11 @@ net.ipv4.tcp_max_syn_backlog = 65536

 # 31s with initial 1s RTO
 net.ipv4.tcp_syn_retries = 4
+net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 31

 # 15s with initial 1s RTO
 net.ipv4.tcp_synack_retries = 3
+net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 15

 # 102.2s with minimum 0.2s RTO
 net.ipv4.tcp_retries2 = 8