Server Configuration

Max4Tech7 years ago

Hello everyone, thank you for all your information that you share here at the forum. Right now I have 5000 assets working on a virtual server with 4 cpus and 15 gb of RAM, this is my configuration of the sysctl.conf file:

# Increase number of incoming connections that can queue up
# before dropping
net.core.somaxconn=1024
# Handle SYN floods and large numbers of valid HTTPS connections
net.ipv4.tcp_max_syn_backlog=4096
# Increase the length of the network device input queue
net.core.netdev_max_backlog = 4096
# Widen the port range used for outgoing connections
net.ipv4.ip_local_port_range = 10000 65000
# Increase Linux autotuning TCP buffer limits
# Set max to 16MB for 1GE and 32M (33554432) or 54M (56623104) for 10GE
# Don't set tcp_mem itself! Let the kernel scale it based on RAM.
net.core.rmem_max = 33554432
net.core.wmem_max = 33554432
# Disable TCP slow start on idle connections
net.ipv4.tcp_slow_start_after_idle = 0
# Wait a maximum of 5 * 2 = 10 seconds in the TIME_WAIT state after a FIN, to handle
# any remaining packets in the network.
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 1
net.ipv4.tcp_rmem = 4096 87380 33554432
net.ipv4.tcp_wmem = 4096 65536 33554432
#no sabemos
net.nf_conntrack_max = 196608
net.ipv4.tcp_no_metrics_save = 1
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 10
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 10
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 10
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 10
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 10
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 10
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 10
# How long to keep ESTABLISHED connections in conntrack table
# Should be higher than tcp_keepalive_time + tcp_keepalive_probes * tcp_keepalive_intvl )
net.netfilter.nf_conntrack_tcp_timeout_established = 300
# Timeout broken connections faster (amount of time to wait for FIN)
net.ipv4.tcp_fin_timeout = 1
# Determines the wait time between isAlive interval probes (reduce from 75 sec to 15)
net.ipv4.tcp_keepalive_intvl = 60
# Determines the number of probes before timing out (reduce from 9 sec to 5 sec)
# Increase the length of the network device input queue
net.core.netdev_max_backlog = 4096
# Disconnect dead TCP connections after 1 minute
net.ipv4.tcp_keepalive_time = 60
net.ipv4.tcp_keepalive_probes = 5

and i want to know if theres is the correct configuration for 10,000 assets or what do i have to change, thanks for your help....

Anton Tananaev7 years ago

What you provided is just a network configuration. I don't think you need to do anything there.