Return to sysctl.conf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / elwix / config / etc / default

Annotation of elwix/config/etc/default/sysctl.conf, revision 1.9.2.1

1.1       misho       1: #!/bin/sh
                      2: #
                      3: # elwix sysctl.conf
                      4: #
1.9.2.1 ! misho       5: # $Id: sysctl.conf,v 1.9 2017/02/13 16:52:47 misho Exp $
1.1       misho       6: 
1.5       misho       7: sysctl -w kern.coredump=0
1.9.2.1 ! misho       8: # Enable Fastforwarding (man 4 inet) and BREAK IPsec (but TCP_MD5 stills works with fastforwarding):
        !             9: sysctl -w net.inet.ip.fastforwarding=1
        !            10: sysctl -w net.bpf.zerocopy_enable=1
1.8       misho      11: sysctl -w kern.ipc.somaxconn=1024
                     12: sysctl -w kern.eventtimer.periodic=1
1.9.2.1 ! misho      13: sysctl -w net.route.netisr_maxqlen=2048
        !            14: sysctl -w net.inet.ip.redirect=0
1.1       misho      15: sysctl -w net.inet.ip.forwarding=1
1.9.2.1 ! misho      16: sysctl -w net.inet.icmp.reply_from_interface=1
1.4       misho      17: sysctl -w net.inet.tcp.ecn.enable=1
1.5       misho      18: sysctl -w net.inet6.ip6.forwarding=1
                     19: sysctl -w net.inet6.ip6.accept_rtadv=0
                     20: sysctl -w net.inet6.ip6.no_radr=0
1.2       misho      21: sysctl -w kern.maxfilesperproc=4096
1.4       misho      22: sysctl -w kern.maxfiles=1024
                     23: #sysctl -w kern.ipc.maxsockets=16384
                     24: #sysctl -w kern.ipc.maxsockbuf=16777216
                     25: #sysctl -w kern.ipc.maxpipekva=16777216
1.9.2.1 ! misho      26: #sysctl -w net.graph.maxdgram=131072
        !            27: #sysctl -w net.graph.recvspace=131072
        !            28: # Sendmsg() cat't send messages more than maxdgram length.
        !            29: # Default value causes routing software to fail with OSPF if jumbo frames is turned on.
        !            30: sysctl -w net.inet.raw.maxdgram=16384
        !            31: sysctl -w net.inet.raw.recvspace=16384
        !            32: # Increasing bpf perfs (in -current only ?)
        !            33: #sysctl -w net.bpf.optimize_writers=1
        !            34: # Current CPU can manage a lot's more of interrupts than default (1000)
        !            35: # The 9000 value was found in /usr/src/sys/dev/ixgbe/README
        !            36: sysctl -w hw.intr_storm_threshold=9000
1.9       misho      37: 
1.9.2.1 ! misho      38: # Improve a lot's the polling performance
        !            39: # Enable idle_poll
        !            40: #sysctl -w kern.polling.idle_poll=1
        !            41: # The default value of 150 was for FastEthernet:
        !            42: #sysctl -w kern.polling.burst_max=20000
        !            43: #sysctl -w kern.polling.each_burst=50
        !            44: # For a router, don't need to share 50/50 with user process
        !            45: #sysctl -w kern.polling.user_frac=30
1.1       misho      46: 
1.9.2.1 ! misho      47: #sysctl -w hw.ath.bstuck=8
1.1       misho      48: #net.inet.tcp.mssdflt=1452
                     49: #net.inet.tcp.hostcache.expire=1
1.3       misho      50: #dev.ath.0.hal.ar5416_biasadj=1
1.9.2.1 ! misho      51: 
        !            52: #Power save: Disable power for device with no driver loaded
        !            53: sysctl -w hw.pci.do_power_nodriver=3
        !            54: 
        !            55: # blackhole(8)
        !            56: # Disable this feature because prevent traceroute to works correctly
        !            57: #sysctl -w net.inet.tcp.blackhole=2
        !            58: #sysctl -w net.inet.udp.blackhole=1
        !            59: # prevent users from seeing information about processes that
        !            60: # are being run under another UID.
        !            61: #sysctl -w security.bsd.see_other_uids=0
        !            62: #sysctl -w security.bsd.see_other_gids=0
        !            63: # Prevent some potential exploit
        !            64: #sysctl -w security.bsd.unprivileged_proc_debug=0