search for: ip_conntrack_bucket

https://bugzilla.netfilter.org/show_bug.cgi?id=830 Summary: ??iptables????????? Product: iptables Version: unspecified Platform: All OS/Version: RedHat Linux Status: NEW Severity: major Priority: P5 Component: iptables AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy: higkoohk

...be I should put 131072 as CONNTRACK_MAX ? This server is a bridge that only do L7 QoS (filter + o - 70 Mbits for > 600 customers ). # cat /etc/sysctl.conf net.ipv4.netfilter.ip_conntrack_max = 131072 #cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max 131072 # cat /proc/sys/net/ipv4/netfilter/ip_conntrack_buckets 8192 #cat /etc/modprobe.d/arch/i386 alias eth0 tg3 alias eth1 tg3 alias eth2 e1000 options ipt_conntrack hashsize=65440 Many thanks for you help Regards

I was trying to do what the article at http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables <http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables%3C/blockquote%3E%3C/div%3E> suggested My iptables rules are ------------------------------------------------------------------------ #that's what the