diff options
author | Mohit Mehta <mohit.mehta@vyatta.com> | 2010-05-17 15:23:22 -0700 |
---|---|---|
committer | Mohit Mehta <mohit.mehta@vyatta.com> | 2010-05-17 15:23:22 -0700 |
commit | bf09fe16cc778746c9636c7dd3e596e2c790a7fe (patch) | |
tree | a54f18fb641ad8add24652df4acc778628cdd44a /templates/firewall/conntrack-expect-table-size | |
parent | b9fe6eed4288c8bcb82edf7af0badefe6deb3a04 (diff) | |
download | vyatta-cfg-firewall-bf09fe16cc778746c9636c7dd3e596e2c790a7fe.tar.gz vyatta-cfg-firewall-bf09fe16cc778746c9636c7dd3e596e2c790a7fe.zip |
Fix Bug 5588 Add ability to modify conntrack expectation table size
* added 'firewall conntrack-expect-table-size' to modify expect table's size
* added 'firewall conntrack-hash-size' to set hash size for conntrack table
Diffstat (limited to 'templates/firewall/conntrack-expect-table-size')
-rw-r--r-- | templates/firewall/conntrack-expect-table-size/node.def | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/templates/firewall/conntrack-expect-table-size/node.def b/templates/firewall/conntrack-expect-table-size/node.def new file mode 100644 index 0000000..12d7884 --- /dev/null +++ b/templates/firewall/conntrack-expect-table-size/node.def @@ -0,0 +1,34 @@ +# +# Config template for: firewall conntrack-expect-table-size +# +# This is the table of expectations. Connection tracking expectations are +# the mechanism used to "expect" RELATED connections to existing ones. +# Expectations are generally used by "connection tracking helpers" (sometimes +# called application level gateways [ALGs]) for more complex protocols such as +# FTP, SIP, H.323. +# +# default value when firewall is not set - 2048 +# default value when firewall is set - 4096 +# + +type: u32 + +help: Set size of netfilter connection tracking expect table + +default: 4096 + +comp_help:Possible completions: + <1 - 50000000>\tNumber of entries allowed in connection tracking expect table + +syntax:expression: ($VAR(@) >= 1 && $VAR(@) <= 50000000) ; "Value must be between 1 and 50,000,000" + +update: + sudo sh -c "echo $VAR(@) > \ + /proc/sys/net/netfilter/nf_conntrack_expect_max" + + + + + + + |