mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2024-06-13 00:12:18 +00:00
Compare commits
3 Commits
43ec3244f4
...
2c2943cc3e
Author | SHA1 | Date | |
---|---|---|---|
|
2c2943cc3e | ||
|
fb40773157 | ||
|
82cc1beccb |
31
hosts.sh
31
hosts.sh
|
@ -20,6 +20,37 @@ declare -Ar hosts_tcp_wmem_max=(
|
||||||
[matrix.grapheneos.org]=16777216
|
[matrix.grapheneos.org]=16777216
|
||||||
)
|
)
|
||||||
|
|
||||||
|
declare -Ar hosts_conntrack_size=(
|
||||||
|
[ns1.staging.grapheneos.org]=65536
|
||||||
|
[ns1.grapheneos.org]=131072
|
||||||
|
[0.ns2.grapheneos.org]=65536
|
||||||
|
[1.ns2.grapheneos.org]=65536
|
||||||
|
[2.ns2.grapheneos.org]=65536
|
||||||
|
[mail.grapheneos.org]=131072
|
||||||
|
[staging.grapheneos.org]=65536
|
||||||
|
[0.grapheneos.org]=131072
|
||||||
|
[1.grapheneos.org]=131072
|
||||||
|
[2.grapheneos.org]=131072
|
||||||
|
[3.grapheneos.org]=131072
|
||||||
|
[0.grapheneos.network]=131072
|
||||||
|
[1.grapheneos.network]=131072
|
||||||
|
[2.grapheneos.network]=131072
|
||||||
|
[3.grapheneos.network]=131072
|
||||||
|
[0.releases.grapheneos.org]=262144
|
||||||
|
[1.releases.grapheneos.org]=262144
|
||||||
|
[2.releases.grapheneos.org]=262144
|
||||||
|
[3.releases.grapheneos.org]=262144
|
||||||
|
[4.releases.grapheneos.org]=262144
|
||||||
|
[5.releases.grapheneos.org]=262144
|
||||||
|
[6.releases.grapheneos.org]=262144
|
||||||
|
[7.releases.grapheneos.org]=262144
|
||||||
|
[staging.attestation.app]=65536
|
||||||
|
[attestation.app]=131072
|
||||||
|
[matrix.grapheneos.org]=131072
|
||||||
|
[discuss.grapheneos.org]=131072
|
||||||
|
[grapheneos.social]=131072
|
||||||
|
)
|
||||||
|
|
||||||
declare -Ar hosts_ssh_users=(
|
declare -Ar hosts_ssh_users=(
|
||||||
[staging.attestation.app]="root attestation"
|
[staging.attestation.app]="root attestation"
|
||||||
[attestation.app]="root attestation"
|
[attestation.app]="root attestation"
|
||||||
|
|
|
@ -15,7 +15,6 @@ net.ipv4.tcp_notsent_lowat = 131072
|
||||||
net.ipv4.tcp_fin_timeout = 30
|
net.ipv4.tcp_fin_timeout = 30
|
||||||
net.ipv4.tcp_rfc1337 = 1
|
net.ipv4.tcp_rfc1337 = 1
|
||||||
net.ipv4.tcp_tw_reuse = 1
|
net.ipv4.tcp_tw_reuse = 1
|
||||||
net.ipv4.tcp_max_syn_backlog = 65536
|
|
||||||
|
|
||||||
# 31s with initial 1s RTO
|
# 31s with initial 1s RTO
|
||||||
net.ipv4.tcp_syn_retries = 4
|
net.ipv4.tcp_syn_retries = 4
|
||||||
|
@ -35,6 +34,7 @@ net.mptcp.enabled = 0
|
||||||
|
|
||||||
net.netfilter.nf_conntrack_tcp_loose = 0
|
net.netfilter.nf_conntrack_tcp_loose = 0
|
||||||
net.netfilter.nf_conntrack_tcp_timeout_established = 14400
|
net.netfilter.nf_conntrack_tcp_timeout_established = 14400
|
||||||
|
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 60
|
||||||
|
|
||||||
kernel.yama.ptrace_scope = 2
|
kernel.yama.ptrace_scope = 2
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user