diff --git a/openmptcprouter/files/etc/sysctl.d/default.conf b/openmptcprouter/files/etc/sysctl.d/default.conf index a672d7ae8..187561d0e 100644 --- a/openmptcprouter/files/etc/sysctl.d/default.conf +++ b/openmptcprouter/files/etc/sysctl.d/default.conf @@ -1,6 +1,4 @@ -net.ipv4.tcp_ecn=1 net.netfilter.nf_conntrack_helper=1 -net.ipv4.tcp_slow_start_after_idle=30 -net.ipv4.tcp_no_metrics_save=1 net.ipv4.tcp_fack=1 -net.ipv4.tcp_retries2=3 +net.core.somaxconn=4096 +net.core.netdev_max_backlog=4096 diff --git a/shadowsocks-libev/files/shadowsocks.conf b/shadowsocks-libev/files/shadowsocks.conf index 84036f5a0..3fcba588b 100644 --- a/shadowsocks-libev/files/shadowsocks.conf +++ b/shadowsocks-libev/files/shadowsocks.conf @@ -12,7 +12,7 @@ net.core.wmem_default = 65536 # max processor input queue net.core.netdev_max_backlog = 4096 # max backlog -net.core.somaxconn = 4096 +#net.core.somaxconn = 4096 # resist SYN flood attacks net.ipv4.tcp_syncookies = 1 @@ -27,7 +27,7 @@ net.ipv4.tcp_fin_timeout = 30 # outbound port range net.ipv4.ip_local_port_range = 9999 65000 # max SYN backlog -net.ipv4.tcp_max_syn_backlog = 4096 +et.ipv4.tcp_max_syn_backlog = 10240 # max timewait sockets held by system simultaneously net.ipv4.tcp_max_tw_buckets = 10000 # turn on TCP Fast Open on both client and server side @@ -35,11 +35,11 @@ net.ipv4.tcp_fastopen = 3 # TCP receive buffer net.ipv4.tcp_rmem = 4096 87380 134217728 # TCP write buffer -net.ipv4.tcp_wmem = 4096 65536 134217728 +net.ipv4.tcp_wmem = 4096 87380 134217728 # TCP buffer -net.ipv4.tcp_mem = 25600 51200 102400 -# turn on path MTU discovery -net.ipv4.tcp_mtu_probing = 1 +#net.ipv4.tcp_mem = 25600 87380 102400 +# turn off path MTU discovery +net.ipv4.tcp_mtu_probing = 0 # for low-latency network, use cubic instead # net.ipv4.tcp_congestion_control = balia