Find a file
Daniel Micay 45b8e80e31 switch congestion control back to BBRv1 from CUBIC
BBRv1 provides much better throughput in many cases and is particularly
useful for our update servers. The fairness issues based on round trip
time are not a major issue for us. The fairness issues for competing
with traditional loss-based congestion control are relevant to us but it
seems to benefit it more than it hurts us. BBRv3 will fix most of this
while preserving nearly all the benefits and will likely be shipped as a
replacement for BBRv1 in the Linux kernel rather than another option.

The reason we rolled it back last time was seeing cases of the initial
bandwidth estimate being overly low combined with a very bad interaction
with synproxy causing low bandwidth initially. We've partially addressed
the synproxy issue by raising the synproxy threshold based on conntrack
table size which we're now fully scaling based on available memory. If
we decide this is still a significant issue, we can limit using BBRv1 to
our update servers where it has massive benefits and the least downside
due to initial bandwidth not being as important. BBRv3 will help with
this by probing Round Trip Time every 5 seconds instead of 10 seconds
but still has similar issues.
2025-07-01 10:13:05 -04:00
.github add GitHub funding metadata 2021-07-19 23:02:29 -04:00
boot/loader disable timeout for systemd-boot by default 2025-05-21 21:48:54 -04:00
certbot certbot: switch to --required-profile 2025-06-21 18:16:58 -04:00
etc switch congestion control back to BBRv1 from CUBIC 2025-07-01 10:13:05 -04:00
guide add nftables dscp counter config to guide 2023-08-19 00:46:21 -04:00
home/.config fish: add vi keybinding setup 2024-11-29 14:03:58 -05:00
packages remove unused firmware packages 2025-06-26 15:24:03 -04:00
.gitignore gitignore: ignore /tmp 2025-06-26 16:49:08 -04:00
connection-stats clean up stats scripts 2023-07-16 01:25:27 -04:00
count count: add Pixel 9a 2025-06-17 13:06:58 -04:00
create-session-ticket-keys add unified session ticket keys file for dnsdist 2025-05-27 15:40:54 -04:00
deploy-initial scale synproxy threshold based on conntrack max 2025-06-22 22:27:48 -04:00
disconnect add disconnect script 2024-09-25 17:44:13 -04:00
dns-stats dns-stats: show total TCP and UDP queries 2024-03-28 11:38:06 -04:00
fetch-info extend info fetching to sysctl values 2024-07-24 16:58:11 -04:00
for add batch command script 2024-11-17 10:38:51 -05:00
hosts.sh adjust conntrack max based on available memory 2025-06-22 22:08:34 -04:00
LICENSE migrate to new tlsserver Let's Encrypt profile 2025-05-08 22:26:43 -04:00
nginx-stats clean up stats scripts 2023-07-16 01:25:27 -04:00
ovh-mitigation rename OVH mitigation script 2023-07-03 18:35:43 -04:00
ovh-mitigation.py ovh-mitigation: add checking/toggling firewall 2024-07-05 00:40:20 -04:00
README.md Fix readme 2021-12-16 12:43:34 -05:00
reboot improve reboot script confirmation message 2024-12-12 15:27:57 -05:00
requirements.in add OVH mitigation control script 2023-02-22 16:22:47 -05:00
requirements.txt update python dependencies 2025-06-22 14:19:57 -04:00
rotate-session-ticket-keys rotate-session-ticket-keys: split up code with newlines 2025-05-27 15:40:54 -04:00
setup specify python3 in setup script 2023-07-06 22:12:26 -04:00

Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.