|
| 1 | +fs.nr_open = 2097152 |
| 2 | +fs.suid_dumpable = 0 |
| 3 | +kernel.dmesg_restrict = 1 |
| 4 | +kernel.hung_task_warnings = -1 |
| 5 | +kernel.keys.maxkeys = 500 |
| 6 | +kernel.perf_event_mlock_kb = 2064 |
| 7 | +kernel.perf_event_paranoid = 2 |
| 8 | +kernel.randomize_va_space = 2 |
| 9 | +net.core.netdev_max_backlog = 40000 |
| 10 | +net.core.rmem_max = 16777216 |
| 11 | +net.core.somaxconn = 10240 |
| 12 | +net.core.wmem_max = 16777216 |
| 13 | +net.ipv4.conf.all.accept_redirects = 0 |
| 14 | +net.ipv4.conf.all.accept_source_route = 0 |
| 15 | +net.ipv4.conf.all.log_martians = 1 |
| 16 | +net.ipv4.conf.all.route_localnet = 1 |
| 17 | +net.ipv4.conf.all.rp_filter = 2 |
| 18 | +net.ipv4.conf.all.secure_redirects = 0 |
| 19 | +net.ipv4.conf.all.send_redirects = 0 |
| 20 | +net.ipv4.conf.default.accept_redirects = 0 |
| 21 | +net.ipv4.conf.default.accept_source_route = 0 |
| 22 | +net.ipv4.conf.default.log_martians = 1 |
| 23 | +net.ipv4.conf.default.rp_filter = 2 |
| 24 | +net.ipv4.conf.default.secure_redirects = 0 |
| 25 | +net.ipv4.conf.default.send_redirects = 0 |
| 26 | +net.ipv4.icmp_echo_ignore_broadcasts = 1 |
| 27 | +net.ipv4.icmp_ignore_bogus_error_responses = 1 |
| 28 | +net.ipv4.ip_forward = 1 |
| 29 | +net.ipv4.neigh.default.gc_thresh1 = 0 |
| 30 | +net.ipv4.neigh.default.gc_thresh2 = 8192 |
| 31 | +net.ipv4.neigh.default.gc_thresh3 = 16384 |
| 32 | +net.ipv4.tcp_max_syn_backlog = 10240 |
| 33 | +net.ipv4.tcp_max_tw_buckets = 2000000 |
| 34 | +net.ipv4.tcp_retries2 = 7 |
| 35 | +net.ipv4.tcp_rfc1337 = 1 |
| 36 | +net.ipv4.tcp_rmem = 4096 65536 16777216 |
| 37 | +net.ipv4.tcp_syn_retries = 2 |
| 38 | +net.ipv4.tcp_syncookies = 1 |
| 39 | +net.ipv4.tcp_wmem = 4096 65536 16777216 |
| 40 | +vm.max_map_count = 2147483647 |
0 commit comments