1
0
Fork 0

raise the netfilter hash table size in openshift/atomic-{host,guest}

to match the max netfilter conntrack entries, reducing such hash
table load.

Signed-off-by: Paolo Abeni <pabeni@redhat.com>
This commit is contained in:
Paolo Abeni 2022-02-09 17:15:46 +01:00
parent 682c47c0a9
commit e1b21f23c9
3 changed files with 3 additions and 3 deletions

View file

@ -10,7 +10,7 @@ include=virtual-guest
avc_cache_threshold=65536
[net]
nf_conntrack_hashsize=131072
nf_conntrack_hashsize=1048576
[sysctl]
kernel.pid_max=131072

View file

@ -10,7 +10,7 @@ include=throughput-performance
avc_cache_threshold=65536
[net]
nf_conntrack_hashsize=131072
nf_conntrack_hashsize=1048576
[sysctl]
kernel.pid_max=131072

View file

@ -10,7 +10,7 @@ include=${f:virt_check:virtual-guest:throughput-performance}
avc_cache_threshold=8192
[net]
nf_conntrack_hashsize=131072
nf_conntrack_hashsize=1048576
[sysctl]
net.ipv4.ip_forward=1