From 2381f5a670ed0387401ebe94dbfbda983cc76011 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Tue, 23 Dec 2014 08:40:12 +0000 Subject: [PATCH] Tune firewall connection tracking for nominatim --- roles/nominatim.rb | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/roles/nominatim.rb b/roles/nominatim.rb index 5ab242997..e6afd469f 100644 --- a/roles/nominatim.rb +++ b/roles/nominatim.rb @@ -54,6 +54,18 @@ default_attributes( :parameters => { "vm.swappiness" => 10 } + }, + :network_conntrack_time_wait => { + :comment => "Only track completed connections for 30 seconds", + :parameters => { + "net.netfilter.nf_conntrack_tcp_timeout_time_wait" => "30" + } + }, + :network_conntrack_max => { + :comment => "Increase max number of connections tracked", + :parameters => { + "net.netfilter.nf_conntrack_max" => "131072" + } } }, :nominatim => { -- 2.43.2