Skip to content

Commit f2021e5

Browse files
committed
Harmonise sysctl between host and guest
1 parent 1286f8b commit f2021e5

1 file changed

Lines changed: 40 additions & 0 deletions

File tree

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
fs.nr_open = 2097152
2+
fs.suid_dumpable = 0
3+
kernel.dmesg_restrict = 1
4+
kernel.hung_task_warnings = -1
5+
kernel.keys.maxkeys = 500
6+
kernel.perf_event_mlock_kb = 2064
7+
kernel.perf_event_paranoid = 2
8+
kernel.randomize_va_space = 2
9+
net.core.netdev_max_backlog = 40000
10+
net.core.rmem_max = 16777216
11+
net.core.somaxconn = 10240
12+
net.core.wmem_max = 16777216
13+
net.ipv4.conf.all.accept_redirects = 0
14+
net.ipv4.conf.all.accept_source_route = 0
15+
net.ipv4.conf.all.log_martians = 1
16+
net.ipv4.conf.all.route_localnet = 1
17+
net.ipv4.conf.all.rp_filter = 2
18+
net.ipv4.conf.all.secure_redirects = 0
19+
net.ipv4.conf.all.send_redirects = 0
20+
net.ipv4.conf.default.accept_redirects = 0
21+
net.ipv4.conf.default.accept_source_route = 0
22+
net.ipv4.conf.default.log_martians = 1
23+
net.ipv4.conf.default.rp_filter = 2
24+
net.ipv4.conf.default.secure_redirects = 0
25+
net.ipv4.conf.default.send_redirects = 0
26+
net.ipv4.icmp_echo_ignore_broadcasts = 1
27+
net.ipv4.icmp_ignore_bogus_error_responses = 1
28+
net.ipv4.ip_forward = 1
29+
net.ipv4.neigh.default.gc_thresh1 = 0
30+
net.ipv4.neigh.default.gc_thresh2 = 8192
31+
net.ipv4.neigh.default.gc_thresh3 = 16384
32+
net.ipv4.tcp_max_syn_backlog = 10240
33+
net.ipv4.tcp_max_tw_buckets = 2000000
34+
net.ipv4.tcp_retries2 = 7
35+
net.ipv4.tcp_rfc1337 = 1
36+
net.ipv4.tcp_rmem = 4096 65536 16777216
37+
net.ipv4.tcp_syn_retries = 2
38+
net.ipv4.tcp_syncookies = 1
39+
net.ipv4.tcp_wmem = 4096 65536 16777216
40+
vm.max_map_count = 2147483647

0 commit comments

Comments
 (0)