diff options
| author | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-11-04 05:55:45 +0700 |
|---|---|---|
| committer | Daniil Baturin <daniil.baturin@vyatta.com> | 2011-11-04 05:55:45 +0700 |
| commit | e59537545e40756a893134c25eff533ccce3adb8 (patch) | |
| tree | 85110d89d4ea23c2650b0d0f42b3cbd32a150dd9 /templates/system/conntrack/table-size | |
| parent | 174565005c06c4b7cc6f64b977f63f87b9bd75df (diff) | |
| download | vyatta-conntrack-e59537545e40756a893134c25eff533ccce3adb8.tar.gz vyatta-conntrack-e59537545e40756a893134c25eff533ccce3adb8.zip | |
Move templates t templates-cfg to let op mode templates also exist.
Diffstat (limited to 'templates/system/conntrack/table-size')
| -rw-r--r-- | templates/system/conntrack/table-size/node.def | 39 |
1 files changed, 0 insertions, 39 deletions
diff --git a/templates/system/conntrack/table-size/node.def b/templates/system/conntrack/table-size/node.def deleted file mode 100644 index f91b101..0000000 --- a/templates/system/conntrack/table-size/node.def +++ /dev/null @@ -1,39 +0,0 @@ -# -# Config template for: system conntrack table-size -# -# Sets the size of the TCP connection tracking table in the netfilter -# nf_conntrack module, which is used by firewall and NAT. The size of -# this table determines how many TCP connections can be simultaneously -# tracked. If new connections arrive and the table is full, older -# connections will be dropped out of the table. System administrators -# must set the connection tracking table size based on the number of -# connections they expect their system to track. The connection -# tracking table consumes kernel memory, so the size selected should -# be no larger than necessary. -# -# default value when contrack is not set - 16384 -# default value when conntrack is set - 32768 -# - -type: u32 - -help: Size of connection tracking table - -default: 32768 - -val_help: u32:1-50000000; Number of entries allowed in connection tracking table - -syntax:expression: ($VAR(@) >= 1 && $VAR(@) <= 50000000) ; "Value must be between 1 and 50000000" - -update: - sudo sysctl -q -w net/nf_conntrack_max=$VAR(@) - # need to restart conntrackd with updated conntrack table size - if cli-shell-api existsActive service conntrack-sync; then - sudo /opt/vyatta/sbin/vyatta-conntrack-sync.pl --action=enable - fi - - - - - - |