1: #!/bin/sh
2: #
3: # elwix sysctl.conf
4: #
5: # $Id: sysctl.conf,v 1.9.2.3 2017/06/13 17:39:31 misho Exp $
6:
7: sysctl -w kern.coredump=0
8: sysctl -w net.bpf.zerocopy_enable=1
9: sysctl -w net.bpf.optimize_writers=1
10: sysctl -w kern.ipc.somaxconn=1024
11: sysctl -w kern.eventtimer.periodic=1
12: sysctl -w net.route.netisr_maxqlen=2048
13: sysctl -w net.inet.ip.redirect=0
14: sysctl -w net.inet.ip.forwarding=1
15: sysctl -w net.inet.icmp.reply_from_interface=1
16: sysctl -w net.inet.tcp.rfc1323=1
17: sysctl -w net.inet.tcp.ecn.enable=1
18: sysctl -w net.inet6.ip6.forwarding=1
19: sysctl -w net.inet6.ip6.accept_rtadv=0
20: sysctl -w net.inet6.ip6.no_radr=0
21: sysctl -w kern.maxfilesperproc=4096
22: #sysctl -w kern.maxfiles=65536
23: #sysctl -w kern.ipc.maxsockets=65536
24: #sysctl -w kern.ipc.maxsockbuf=16777216
25: #sysctl -w kern.ipc.maxpipekva=16777216
26: #sysctl -w net.graph.maxdgram=131072
27: #sysctl -w net.graph.recvspace=131072
28: # Sendmsg() cat't send messages more than maxdgram length.
29: # Default value causes routing software to fail with OSPF if jumbo frames is turned on.
30: sysctl -w net.inet.raw.maxdgram=16384
31: sysctl -w net.inet.raw.recvspace=16384
32: # Current CPU can manage a lot's more of interrupts than default (1000)
33: # The 9000 value was found in /usr/src/sys/dev/ixgbe/README
34: sysctl -w hw.intr_storm_threshold=9000
35:
36: sysctl -w kern.random.harvest.mask=351
37:
38: # Improve a lot's the polling performance
39: # Enable idle_poll
40: #sysctl -w kern.polling.idle_poll=1
41: # The default value of 150 was for FastEthernet:
42: #sysctl -w kern.polling.burst_max=20000
43: #sysctl -w kern.polling.each_burst=50
44: # For a router, don't need to share 50/50 with user process
45: #sysctl -w kern.polling.user_frac=30
46:
47: #sysctl -w hw.ath.bstuck=8
48: #net.inet.tcp.mssdflt=1452
49: #net.inet.tcp.hostcache.expire=1
50: #dev.ath.0.hal.ar5416_biasadj=1
51:
52: #Power save: Disable power for device with no driver loaded
53: sysctl -w hw.pci.do_power_nodriver=3
54:
55: # blackhole(8)
56: # Disable this feature because prevent traceroute to works correctly
57: #sysctl -w net.inet.tcp.blackhole=2
58: #sysctl -w net.inet.udp.blackhole=1
59: # prevent users from seeing information about processes that
60: # are being run under another UID.
61: #sysctl -w security.bsd.see_other_uids=0
62: #sysctl -w security.bsd.see_other_gids=0
63: # Prevent some potential exploit
64: #sysctl -w security.bsd.unprivileged_proc_debug=0
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>