Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-01-03 11:00:49 -05:00
Code Issues Packages Projects Releases Wiki Activity

reduce conntrack SYN timeouts to match TCP/IP stack

Browse Source
This commit is contained in:
Daniel Micay 2024-04-24 10:45:02 -04:00
parent ee62868a7b
commit f3ae109eac
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sysctl.d/local.conf
View File

@ -19,9 +19,11 @@ net.ipv4.tcp_max_syn_backlog = 65536
# 31s with initial 1s RTO # 31s with initial 1s RTO
net.ipv4.tcp_syn_retries = 4 net.ipv4.tcp_syn_retries = 4
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 31
# 15s with initial 1s RTO # 15s with initial 1s RTO
net.ipv4.tcp_synack_retries = 3 net.ipv4.tcp_synack_retries = 3
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 15
# 102.2s with minimum 0.2s RTO # 102.2s with minimum 0.2s RTO
net.ipv4.tcp_retries2 = 8 net.ipv4.tcp_retries2 = 8