/usr/lib/sysctl.d/70-dirsrv.conf is in 389-ds-base 1.3.7.10-1ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 | # This file is for sysctl tuning of linux machines
# It should be placed in:
# /usr/lib/sysctl.d
# /etc/sysctl.d
#
#
# Kernel numa balancing moves tasks / memory to stay within a numa region
# This HUGELY improves performance.
# Does nothing on machines with a single numa region.
# kernel.numa_balancing = 1
# The swappiness parameter controls the tendency of the kernel to move
# processes out of physical memory and onto the swap disk.
# 0 tells the kernel to avoid swapping processes out of physical memory
# for as long as possible
# 100 tells the kernel to aggressively swap processes out of physical memory
# and move them to swap cache
vm.swappiness = 20
# Min free kbytes is how much the kernel keeps for "must work" allocations.
# This affects OOM, because as we approach, we'll threaten this space and we'll be
# booted.
# In some cases, adjusting this *may* help prevent oom.
# vm.min_free_kbytes=1024
# https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt
# Changes tcp window behavour to not reset window size after idle
# setting this to 0, so that resumed connections are "snappier".
net.ipv4.tcp_slow_start_after_idle = 0
# Allows sending data in the first SYN packet from connections we initiate and receive
# 1027 == 0x400 + 0x2 + 0x1
net.ipv4.tcp_fastopen=1027
# Decrease the time default value for tcp_fin_timeout connection
net.ipv4.tcp_fin_timeout = 30
# Decrease the time default value for tcp_keepalive_time connection
# this means we find "dead" connections faster.
net.ipv4.tcp_keepalive_time = 300
# Provide more ports and timewait buckets to increase connectivity
net.ipv4.tcp_max_tw_buckets = 262144
## Network Hardening ##
net.ipv4.tcp_max_syn_backlog = 4096
# https://www.bufferbloat.net/projects/codel/wiki/
net.core.default_qdisc = fq_codel
|