diff options
| author | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-11-04 05:55:45 +0700 |
|---|---|---|
| committer | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-11-04 05:55:45 +0700 |
| commit | e59537545e40756a893134c25eff533ccce3adb8 (patch) | |
| tree | 85110d89d4ea23c2650b0d0f42b3cbd32a150dd9 /templates-cfg/system/conntrack/node.def | |
| parent | 174565005c06c4b7cc6f64b977f63f87b9bd75df (diff) | |
| download | vyatta-conntrack-e59537545e40756a893134c25eff533ccce3adb8.tar.gz vyatta-conntrack-e59537545e40756a893134c25eff533ccce3adb8.zip | |
Move templates t templates-cfg to let op mode templates also exist.
Diffstat (limited to 'templates-cfg/system/conntrack/node.def')
| -rw-r--r-- | templates-cfg/system/conntrack/node.def | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/templates-cfg/system/conntrack/node.def b/templates-cfg/system/conntrack/node.def new file mode 100644 index 0000000..53488ae --- /dev/null +++ b/templates-cfg/system/conntrack/node.def @@ -0,0 +1,24 @@ +help: Connection tracking engine options + +priority: 218 # before NAT and conntrack-sync are configured + +delete: # set conntrack table size to standard 16384 entries if conntrack settings are removed + sudo sysctl -q -w net/nf_conntrack_max=16384 + + # set conntrack expect table size to standard 2048 entries if conntrack settings are removed + sudo sysctl -q -w net/netfilter/nf_conntrack_expect_max=2048 + + # set conntrack hash size to standard 4096 + if ! grep -q "nf_conntrack hashsize=4096$" /etc/modprobe.d/vyatta_nf_conntrack.conf + then + sudo sh -c "sed -i -e '/options nf_conntrack hashsize/d' \ + /etc/modprobe.d/vyatta_nf_conntrack.conf" + sudo sh -c "echo options nf_conntrack hashsize=4096 >> \ + /etc/modprobe.d/vyatta_nf_conntrack.conf" + echo "Conntrack hash size set to default 4096. This change will take effect when the system is rebooted." + fi + + # need to restart conntrackd with updated conntrack table size + if cli-shell-api existsActive service conntrack-sync; then + sudo /opt/vyatta/sbin/vyatta-conntrack-sync.pl --action=enable + fi |