raise the netfilter hash table size in openshift/atomic-{host,guest}
to match the max netfilter conntrack entries, reducing such hash table load. Signed-off-by: Paolo Abeni <pabeni@redhat.com>
This commit is contained in:
parent
682c47c0a9
commit
e1b21f23c9
3 changed files with 3 additions and 3 deletions
|
|
@ -10,7 +10,7 @@ include=virtual-guest
|
|||
avc_cache_threshold=65536
|
||||
|
||||
[net]
|
||||
nf_conntrack_hashsize=131072
|
||||
nf_conntrack_hashsize=1048576
|
||||
|
||||
[sysctl]
|
||||
kernel.pid_max=131072
|
||||
|
|
|
|||
|
|
@ -10,7 +10,7 @@ include=throughput-performance
|
|||
avc_cache_threshold=65536
|
||||
|
||||
[net]
|
||||
nf_conntrack_hashsize=131072
|
||||
nf_conntrack_hashsize=1048576
|
||||
|
||||
[sysctl]
|
||||
kernel.pid_max=131072
|
||||
|
|
|
|||
|
|
@ -10,7 +10,7 @@ include=${f:virt_check:virtual-guest:throughput-performance}
|
|||
avc_cache_threshold=8192
|
||||
|
||||
[net]
|
||||
nf_conntrack_hashsize=131072
|
||||
nf_conntrack_hashsize=1048576
|
||||
|
||||
[sysctl]
|
||||
net.ipv4.ip_forward=1
|
||||
|
|
|
|||
Loading…
Reference in a new issue