summaryrefslogtreecommitdiff
path: root/data/templates/conntrack/sysctl.conf.j2
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-05-01 18:36:34 +0200
committerChristian Poessinger <christian@poessinger.com>2022-05-01 18:36:34 +0200
commit2f507669fd7f7fc9c00ae2302c4f062c48e24706 (patch)
treecf2d6803318b2e6245f60ae94cea9b2e49b082bc /data/templates/conntrack/sysctl.conf.j2
parent578ce55e56882062953e37d51e2c1cbebd437e35 (diff)
downloadvyos-1x-2f507669fd7f7fc9c00ae2302c4f062c48e24706.tar.gz
vyos-1x-2f507669fd7f7fc9c00ae2302c4f062c48e24706.zip
conntrack: T4353: fix Jinja2 linting errors
Diffstat (limited to 'data/templates/conntrack/sysctl.conf.j2')
-rw-r--r--data/templates/conntrack/sysctl.conf.j226
1 files changed, 26 insertions, 0 deletions
diff --git a/data/templates/conntrack/sysctl.conf.j2 b/data/templates/conntrack/sysctl.conf.j2
new file mode 100644
index 000000000..075402c04
--- /dev/null
+++ b/data/templates/conntrack/sysctl.conf.j2
@@ -0,0 +1,26 @@
+# Autogenerated by conntrack.py
+{# all values have defaults - thus no checking required #}
+
+net.netfilter.nf_conntrack_expect_max = {{ expect_table_size }}
+net.netfilter.nf_conntrack_max = {{ table_size }}
+
+net.ipv4.tcp_max_syn_backlog = {{ tcp.half_open_connections }}
+
+net.netfilter.nf_conntrack_tcp_loose = {{ '1' if tcp.loose is vyos_defined('enable') else '0' }}
+net.netfilter.nf_conntrack_tcp_max_retrans = {{ tcp.max_retrans }}
+
+net.netfilter.nf_conntrack_icmp_timeout = {{ timeout.icmp }}
+net.netfilter.nf_conntrack_generic_timeout = {{ timeout.other }}
+
+net.netfilter.nf_conntrack_tcp_timeout_close_wait = {{ timeout.tcp.close_wait }}
+net.netfilter.nf_conntrack_tcp_timeout_close = {{ timeout.tcp.close }}
+net.netfilter.nf_conntrack_tcp_timeout_established = {{ timeout.tcp.established }}
+net.netfilter.nf_conntrack_tcp_timeout_fin_wait = {{ timeout.tcp.fin_wait }}
+net.netfilter.nf_conntrack_tcp_timeout_last_ack = {{ timeout.tcp.last_ack }}
+net.netfilter.nf_conntrack_tcp_timeout_syn_recv = {{ timeout.tcp.syn_recv }}
+net.netfilter.nf_conntrack_tcp_timeout_syn_sent = {{ timeout.tcp.syn_sent }}
+net.netfilter.nf_conntrack_tcp_timeout_time_wait = {{ timeout.tcp.time_wait }}
+
+net.netfilter.nf_conntrack_udp_timeout = {{ timeout.udp.other }}
+net.netfilter.nf_conntrack_udp_timeout_stream = {{ timeout.udp.stream }}
+