amadaluzia/alqueva
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sysctl.d, preparing for realtime support

Browse source
This commit is contained in:
xmm16 2024-12-13 22:58:03 -03:00
commit f51dfa1e90
No known key found for this signature in database
2 changed files with 13 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/micronix/config/sysctl.d/hardening.nix
View file

@ -30,7 +30,7 @@
"net.ipv4.tcp_rfc1337" = "1"; "net.ipv4.tcp_rfc1337" = "1";
"net.ipv4.tcp_sack" = "0"; "net.ipv4.tcp_sack" = "0";
"net.ipv4.tcp_syncookies" = "1"; "net.ipv4.tcp_syncookies" = "1";
"net.ipv4.tcp_timestamps" = "0"; "net.ipv4.tcp_timestamps" = "1";
"net.ipv6.conf.all.accept_ra" = "0"; "net.ipv6.conf.all.accept_ra" = "0";
"net.ipv6.conf.all.accept_redirects" = "0"; "net.ipv6.conf.all.accept_redirects" = "0";
"net.ipv6.conf.all.accept_source_route" = "0"; "net.ipv6.conf.all.accept_source_route" = "0";

17
hosts/micronix/config/sysctl.d/performance.nix
View file

@ -3,11 +3,13 @@
"vm.dirty_ratio" = 20; "vm.dirty_ratio" = 20;
"vm.dirty_background_ratio" = 10; "vm.dirty_background_ratio" = 10;
"vm.vfs_cache_pressure" = 25; "vm.vfs_cache_pressure" = 25;
"net.core.default_qdisc" = "cake"; "net.core.default_qdisc" = ''
"net.ipv4.tcp_congestion_control" = "bbr"; cake'';
"net.ipv4.tcp_congestion_control" = ''
bbr'';
"vm.page-cluster" = 1; "vm.page-cluster" = 1;
"kernel.nmi_watchdog" = 0; "kernel.nmi_watchdog" = 0;
"vm.swappiness" = 200; "vm.swappiness" = 10;
"vm.max_map_count" = 2147483642; "vm.max_map_count" = 2147483642;
"vm.watermark_boost_factor" = 1; "vm.watermark_boost_factor" = 1;
"vm.watermark_scale_factor" = 1000; "vm.watermark_scale_factor" = 1000;
@ -20,8 +22,10 @@
"net.core.wmem_default" = 1048576; "net.core.wmem_default" = 1048576;
"net.core.wmem_max" = 16777216; "net.core.wmem_max" = 16777216;
"net.core.optmem_max" = 65536; "net.core.optmem_max" = 65536;
"net.ipv4.tcp_rmem" = "4096 1048576 2097152"; "net.ipv4.tcp_rmem" = ''
"net.ipv4.tcp_wmem" = "4096 65536 16777216"; 4096 1048576 2097152'';
"net.ipv4.tcp_wmem" = ''
4096 65536 16777216'';
"net.ipv4.udp_rmem_min" = 16384; "net.ipv4.udp_rmem_min" = 16384;
"net.ipv4.udp_wmem_min" = 16384; "net.ipv4.udp_wmem_min" = 16384;
"net.ipv4.tcp_fastopen" = 3; "net.ipv4.tcp_fastopen" = 3;
@ -33,6 +37,7 @@
"net.ipv4.tcp_keepalive_intvl" = 10; "net.ipv4.tcp_keepalive_intvl" = 10;
"net.ipv4.tcp_keepalive_probes" = 6; "net.ipv4.tcp_keepalive_probes" = 6;
"net.ipv4.tcp_mtu_probing" = 1; "net.ipv4.tcp_mtu_probing" = 1;
"net.ipv4.ip_local_port_range" = "30000 65535"; "net.ipv4.ip_local_port_range" = ''
30000 65535'';
}; };
} }