feat: add conntrack sysctl config for CVM guest (2M max)

kvinwang · kvinwang · commit 0d845320e1d9 · 2026-02-02T07:47:40.000Z
diff --git a/basefiles/sysctl.d/99-dstack.conf b/basefiles/sysctl.d/99-dstack.conf
@@ -0,0 +1,6 @@
+# SPDX-FileCopyrightText: 2025 Phala Network <dstack@phala.network>
+# SPDX-License-Identifier: Apache-2.0
+
+# Increase conntrack table for high-concurrency gateway/proxy workloads.
+# Default 262144 is insufficient when proxying >100K concurrent connections.
+net.netfilter.nf_conntrack_max = 2097152
