[tproxy] tproxy Digest, Vol 64, Issue 1

hugo at gigared.com hugo at gigared.com
Wed Nov 10 19:51:02 CET 2010


Dear Mr Biazus:
i tested Tproxy patch under linux (2.6.31.6-166) up to 180Mbps.
pay attention on the amount of sockets permitted by your tcp config.

in linux are under the sysctl.conf , to reach a reasonable
bandwith , i have these settings:

net.ipv4.netfilter.nf_conntrack_max = 131070
net.ipv4.netfilter.nf_conntrack_expect_max = 131070
net.ipv4.netfilter.ip_conntrack_tcp_timeout_estabilished=600
net.ipv4.netfilter.ip_conntrack_udp_timeout=60
net.ipv4.netfilter.ip_conntrack_udp_timeout_stream=180
net.netfilter.nf_conntrack_max = 131070
net.netfilter.nf_conntrack_expect_max = 131070
net.netfilter.ip_conntrack_tcp_timeout_estabilished=600
net.netfilter.ip_conntrack_udp_timeout=60
net.netfilter.ip_conntrack_udp_timeout_stream=180




More information about the tproxy mailing list