diff options
Diffstat (limited to 'doc/sync/ftfw')
| -rw-r--r-- | doc/sync/ftfw/conntrackd.conf | 16 |
1 files changed, 12 insertions, 4 deletions
diff --git a/doc/sync/ftfw/conntrackd.conf b/doc/sync/ftfw/conntrackd.conf index 868ee5a..d415fcd 100644 --- a/doc/sync/ftfw/conntrackd.conf +++ b/doc/sync/ftfw/conntrackd.conf @@ -149,14 +149,22 @@ General { } # - # Netlink socket buffer size + # Netlink event socket buffer size. If you do not specify this clause, + # the default buffer size value in /proc/net/core/rmem_default is + # used. This default value is usually around 100 Kbytes which is + # fairly small for busy firewalls. This leads to event message dropping + # and high CPU consumption. This example configuration file sets the + # size to 2 MBytes to avoid this sort of problems. # - SocketBufferSize 262142 + SocketBufferSize 2097152 # - # Increase the socket buffer up to maximum if required + # The daemon doubles the size of the netlink event socket buffer size + # if it detects netlink event message dropping. This clause sets the + # maximum buffer size growth that can be reached. This example file + # sets the size to 8 MBytes. # - SocketBufferSizeMaxGrowth 655355 + SocketBufferSizeMaxGrowth 8388608 # # Event filtering: This clause allows you to filter certain traffic, |