# Disables packet forwarding net.ipv4.ip_forward= 0 # Enables source route verification net.ipv4.conf.all.rp_filter = 1 # Disables the magic-sysrq key kernel.sysrq = 0 net.ipv4.tcp_ecn = 0 fs.file-max = 8192 vm.buffermem = 2 10 60 net.core.netdev_max_backlog = 1024 #128 512 1024 net.ipv4.neigh.default.gc_thresh1 = 1024 net.ipv4.neigh.default.gc_thresh2 = 4092 net.ipv4.neigh.default.gc_thresh3 = 8192 net.ipv4.tcp_max_syn_backlog = 1024 net.ipv4.ip_local_port_range = 32768 61000 net.core.rmem_max = 9174960 net.core.rmem_default = 9174960 net.core.wmem_max = 9174960 net.core.wmem_default = 9174960 net.core.optmem_max = 921600 net.ipv4.tcp_rmem = 92160 6000000 17476000 net.ipv4.tcp_wmem = 92160 5000000 13107200 vm.bdflush = 100 5000 640 2560 150 30000 5000 1884 2 net.ipv4.ipfrag_high_thresh = 5242880 net.ipv4.ipfrag_low_thresh = 2932160