From 654e1a1335f10cf9af83a0c6e0a47bcaff9c62a4 Mon Sep 17 00:00:00 2001 From: "Ycarus (Yannick Chabanois)" Date: Wed, 31 Jul 2024 11:02:21 +0000 Subject: [PATCH] Change in kernel settings --- shadowsocks.6.1.conf | 30 ++++++++++++++++++++---------- 1 file changed, 20 insertions(+), 10 deletions(-) diff --git a/shadowsocks.6.1.conf b/shadowsocks.6.1.conf index d3cd55a..7828850 100644 --- a/shadowsocks.6.1.conf +++ b/shadowsocks.6.1.conf @@ -2,18 +2,18 @@ # max open files fs.file-max = 512000 # max read buffer -net.core.rmem_max = 16777216 +net.core.rmem_max = 7500000 # max write buffer -net.core.wmem_max = 16777216 +net.core.wmem_max = 7500000 #net.core.optmem_max = 33554432 # default read buffer #net.core.rmem_default = 16777216 # default write buffer #net.core.wmem_default = 16777216 # max processor input queue -net.core.netdev_max_backlog = 4096 +net.core.netdev_max_backlog = 10000 # max backlog -net.core.somaxconn = 4096 +net.core.somaxconn = 16384 # resist SYN flood attacks net.ipv4.tcp_syncookies = 1 @@ -30,24 +30,27 @@ net.ipv4.tcp_keepalive_time = 7200 # outbound port range net.ipv4.ip_local_port_range = 9999 65000 # max SYN backlog -net.ipv4.tcp_max_syn_backlog = 10240 +net.ipv4.tcp_max_syn_backlog = 4096 # max timewait sockets held by system simultaneously -net.ipv4.tcp_max_tw_buckets = 10000 +net.ipv4.tcp_max_tw_buckets = 16384 # turn on TCP Fast Open on both client and server side net.ipv4.tcp_fastopen = 3 # TCP buffer -net.ipv4.tcp_mem = 1638400 1638400 1638400 +net.ipv4.tcp_mem = 409600 819200 1638400 # UDP buffer -#net.ipv4.udp_mem = 4096 87380 16777216 +net.ipv4.udp_mem = 4096 87380 16777216 # TCP receive buffer net.ipv4.tcp_rmem = 4096 87380 16777216 # TCP write buffer net.ipv4.tcp_wmem = 4096 87380 16777216 # turn on path MTU discovery net.ipv4.tcp_mtu_probing = 0 +# 1/8 * available memory in receive buffer +net.ipv4.tcp_adv_win_scale=-3 +# limits the size of unsent bytes in the write queue +net.ipv4.tcp_notsent_lowat = 131072 # for low-latency network, use cubic instead -net.ipv4.tcp_congestion_control = bbr net.core.default_qdisc = fq # Default conntrack is too small net.netfilter.nf_conntrack_max = 524288 @@ -58,10 +61,17 @@ net.ipv4.conf.all.log_martians = 0 net.ipv4.conf.default.log_martians = 0 # MPTCP settings +net.ipv4.tcp_ecn = 2 net.mptcp.checksum_enabled = 0 net.mptcp.add_addr_timeout = 120 net.mptcp.allow_join_initial_addr_port = 1 net.mptcp.enabled = 1 net.mptcp.pm_type = 0 net.mptcp.stale_loss_cnt = 4 -net.ipv4.tcp_ecn = 2 +net.mptcp.mptcp_checksum=0 +net.mptcp.mptcp_path_manager=fullmesh +net.mptcp.mptcp_scheduler=mptcp_burst +net.mptcp.mptcp_syn_retries=4 +net.mptcp.mptcp_version=1 +net.mptcp.checksum_enabled=0 +net.ipv4.tcp_congestion_control=bbr \ No newline at end of file