klaver/sysctl

Linux/BSD kernel tuning and network security hardening optimizations, improving the performance of server systems via optimized sysctl tweaks

sysctl.conf

Linux/BSD kernel tuning and network security hardening optimizations, improving the performance of server systems via optimized sysctl tweaks

This file should be saved as /etc/sysctl.conf and can be activated using the command: sysctl -e -p /etc/sysctl.conf

For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and sysctl.conf(5) for more details.

Intended use for dedicated server systems at high-speed networks with loads of RAM and bandwidth available Optimised and tuned for high-performance web/ftp/mail/dns servers with high connection-rates DO NOT USE at busy networks or xDSL/Cable connections where packetloss can be expected

Credits:
http://www.enigma.id.au/linux_tuning.txt
http://www.securityfocus.com/infocus/1729
http://fasterdata.es.net/TCP-tuning/linux.html
http://fedorahosted.org/ktune/browser/sysctl.ktune
http://www.cymru.com/Documents/ip-stack-tuning.html
http://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt
http://www.frozentux.net/ipsysctl-tutorial/chunkyhtml/index.html
http://knol.google.com/k/linux-performance-tuning-and-measurement
http://www.cyberciti.biz/faq/linux-kernel-tuning-virtual-memory-subsystem/
http://www.redbooks.ibm.com/abstracts/REDP4285.html
http://www.speedguide.net/read_articles.php?id=121
http://lartc.org/howto/lartc.kernel.obscure.html
http://en.wikipedia.org/wiki/Sysctl

sysctl's Issues

Any Updated Version?

Hello.
Is the sysctl.conf file updated after 2019? since then some of the settings may have changed/deprecated...

Oudated variables and improvements

Some variables are actually deprecated:

• kernel.maps_protect - was deprecated since kernel v2.6.28 more than 10 years ago.
• net.ipv4.tcp_tw_recycle - deprecated since v4.12
• kernel.exec-shield - No longer supported in sysctl settings.

Also I think in most recent linux versions "net.ipv4.tcp_congestion_control" BBR is better, instead of HTCP.

I like to add these variables to your configuration:

fs.nr_open=12000000
net.ipv4.tcp_sack=1
net.ipv4.tcp_mtu_probing = 1
net.ipv4.tcp_base_mss = 1024
net.ipv4.tcp_challenge_ack_limit = 999999999
net.ipv6.conf.default.router_solicitations = 0
net.ipv6.conf.default.accept_ra_rtr_pref = 0
net.ipv6.conf.default.accept_ra_pinfo = 0
net.ipv6.conf.default.accept_ra_defrtr = 0
net.ipv6.conf.default.dad_transmits = 0
net.ipv6.conf.default.max_addresses = 1

Out of date...

need to be updated FreeB 11 is here ;)