6 Commits

Author	SHA1	Message	Date
Vincent Pelletier	206b60a003	kernel: scale nf_conntrack_max more reasonably ... Use the kernel's built-in formula for computing this value. The value applied by OpenWRT's sysctl configuration file does not scale with the available memory, under-using hardware capabilities. Also, that formula also influences net.netfilter.nf_conntrack_buckets, which should improve conntrack performance in average (fewer connections per hashtable bucket). Backport upstream commit for its effect on the number of connections per hashtable bucket. Apply a hack patch to set the RAM size divisor to a more reasonable value (2048, down from 16384) for our use case, a typical router handling several thousands of connections. Signed-off-by: Vincent Pelletier <plr.vincent@gmail.com> Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com> (cherry picked from commit 15fbb916669dcdfcc706e9e75263ab63f9f27c00)	2022-12-06 05:25:53 +08:00
hanwckf	5014dc07ea	kernel: sysctl: update nf_ct_expect settings for fullcone nat ... Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>	2022-12-05 03:54:38 +08:00
hanwckf	907d94bd61	kernel: sysctl: update nf_ct settings for fullcone nat ... Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>	2022-12-05 03:53:45 +08:00
Tianling Shen	c5fc507435	kernel: sysctl: enable nf_conntrack_helper by default ... Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>	2021-05-09 20:00:24 +08:00
CN_SZTL	b126b2a8aa	kernel/linux: increase max connections to 65535	2020-04-06 07:06:04 +08:00
Matthias Schiffer	445682c07d	base-files: move netfilter sysctl defaults to specific kmod packages ... Avoid warnings when applying settings for uninstalled kmods. See also FS#1073. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>	2018-04-13 10:16:45 +02:00