Commit 2762210
committed
docs: add blog post on nf_conntrack overflow with Docker UDP tracker
Documents the mechanism, diagnosis, fix, and alternatives for the
nf_conntrack table exhaustion problem that caused UDP tracker downtime
on both the DigitalOcean and Hetzner demos.
Covers:
- How Docker bridge DNAT forces connection tracking for UDP
- The three-parameter sysctl fix (nf_conntrack_max, udp_timeout,
udp_timeout_stream) and module pre-load for reboot persistence
- Hash table sizing (nf_conntrack_buckets / hashsize)
- Alternative approaches: host networking, NOTRACK, macvlan
- Real-world NOTRACK failure on torrust/torrust-demo#72
- Monitoring commands (conntrack -S, early_drop, 80% alert)
- Links to independent documentation (Aquatic tracker guide)
Fixes confirmed: post-fix UDP uptime 99.9% on Hetzner demo.1 parent 0eee240 commit 2762210
5 files changed
Lines changed: 1105 additions & 94 deletions
File tree
- src/routes/blog/nf-conntrack-overflow-docker-udp-tracker
- static
- images/posts/nf-conntrack-overflow-docker-udp-tracker
Lines changed: 14 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
0 commit comments