From eed3db88516eb3fc8e4c0dba85f403d3d8f7130d Mon Sep 17 00:00:00 2001 From: Rohit Yadav Date: Mon, 9 Mar 2015 17:10:13 +0530 Subject: [PATCH] systemvm: avoid tcp responses with timestamp Signed-off-by: Rohit Yadav (cherry picked from commit f3f47f25bab8661f31e5d470995f6f24cc08310e) Signed-off-by: Rohit Yadav --- systemvm/patches/debian/config/etc/sysctl.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/systemvm/patches/debian/config/etc/sysctl.conf b/systemvm/patches/debian/config/etc/sysctl.conf index f5b10864176..15648b35760 100644 --- a/systemvm/patches/debian/config/etc/sysctl.conf +++ b/systemvm/patches/debian/config/etc/sysctl.conf @@ -45,6 +45,9 @@ vm.panic_on_oom = 1 # Controls the use of TCP syncookies net.ipv4.tcp_syncookies = 1 +# disable tcp time stamps +net.ipv4.tcp_timestamps = 0 + net.ipv4.netfilter.ip_conntrack_max = 1000000 net.ipv4.tcp_tw_reuse = 1 net.ipv4.tcp_max_tw_buckets = 1000000