Commit 6fbbef95 authored by David S. Miller's avatar David S. Miller

ip-sysctl.txt fixes

parent db5ac083
...@@ -43,23 +43,23 @@ inet_peer_minttl - INTEGER ...@@ -43,23 +43,23 @@ inet_peer_minttl - INTEGER
Minimum time-to-live of entries. Should be enough to cover fragment Minimum time-to-live of entries. Should be enough to cover fragment
time-to-live on the reassembling side. This minimum time-to-live is time-to-live on the reassembling side. This minimum time-to-live is
guaranteed if the pool size is less than inet_peer_threshold. guaranteed if the pool size is less than inet_peer_threshold.
Measured in jiffies. Measured in jiffies(1).
inet_peer_maxttl - INTEGER inet_peer_maxttl - INTEGER
Maximum time-to-live of entries. Unused entries will expire after Maximum time-to-live of entries. Unused entries will expire after
this period of time if there is no memory pressure on the pool (i.e. this period of time if there is no memory pressure on the pool (i.e.
when the number of entries in the pool is very small). when the number of entries in the pool is very small).
Measured in jiffies. Measured in jiffies(1).
inet_peer_gc_mintime - INTEGER inet_peer_gc_mintime - INTEGER
Minimum interval between garbage collection passes. This interval is Minimum interval between garbage collection passes. This interval is
in effect under high memory pressure on the pool. in effect under high memory pressure on the pool.
Measured in jiffies. Measured in jiffies(1).
inet_peer_gc_maxtime - INTEGER inet_peer_gc_maxtime - INTEGER
Minimum interval between garbage collection passes. This interval is Minimum interval between garbage collection passes. This interval is
in effect under low (or absent) memory pressure on the pool. in effect under low (or absent) memory pressure on the pool.
Measured in jiffies. Measured in jiffies(1).
TCP variables: TCP variables:
...@@ -81,7 +81,7 @@ tcp_keepalive_probes - INTEGER ...@@ -81,7 +81,7 @@ tcp_keepalive_probes - INTEGER
How many keepalive probes TCP sends out, until it decides that the How many keepalive probes TCP sends out, until it decides that the
connection is broken. Default value: 9. connection is broken. Default value: 9.
tcp_keepalive_interval - INTEGER tcp_keepalive_intvl - INTEGER
How frequently the probes are send out. Multiplied by How frequently the probes are send out. Multiplied by
tcp_keepalive_probes it is time to kill not responding connection, tcp_keepalive_probes it is time to kill not responding connection,
after probes started. Default value: 75sec i.e. connection after probes started. Default value: 75sec i.e. connection
...@@ -316,28 +316,37 @@ icmp_ratelimit - INTEGER ...@@ -316,28 +316,37 @@ icmp_ratelimit - INTEGER
Limit the maximal rates for sending ICMP packets whose type matches Limit the maximal rates for sending ICMP packets whose type matches
icmp_ratemask (see below) to specific targets. icmp_ratemask (see below) to specific targets.
0 to disable any limiting, otherwise the maximal rate in jiffies(1) 0 to disable any limiting, otherwise the maximal rate in jiffies(1)
Default: 1 Default: 100
icmp_ratemask - INTEGER icmp_ratemask - INTEGER
Mask made of ICMP types for which rates are being limited. Mask made of ICMP types for which rates are being limited.
Default: 6168 Significant bits: IHGFEDCBA9876543210
Note: 6168 = 0x1818 = 1<<ICMP_DEST_UNREACH + 1<<ICMP_SOURCE_QUENCH + Default mask: 0000001100000011000 (6168)
1<<ICMP_TIME_EXCEEDED + 1<<ICMP_PARAMETERPROB, which means
dest unreachable (3), source quench (4), time exceeded (11) Bit definitions (see include/linux/icmp.h):
and parameter problem (12) ICMP packets are rate limited 0 Echo Reply
(check values in icmp.h) 3 Destination Unreachable *
4 Source Quench *
5 Redirect
8 Echo Request
B Time Exceeded *
C Parameter Problem *
D Timestamp Request
E Timestamp Reply
F Info Request
G Info Reply
H Address Mask Request
I Address Mask Reply
* These are rate limited by default (see default mask above)
icmp_ignore_bogus_error_responses - BOOLEAN icmp_ignore_bogus_error_responses - BOOLEAN
Some routers violate RFC 1122 by sending bogus responses to broadcast Some routers violate RFC1122 by sending bogus responses to broadcast
frames. Such violations are normally logged via a kernel warning. frames. Such violations are normally logged via a kernel warning.
If this is set to TRUE, the kernel will not give such warnings, which If this is set to TRUE, the kernel will not give such warnings, which
will avoid log file clutter. will avoid log file clutter.
Default: FALSE Default: FALSE
(1) Jiffie: internal timeunit for the kernel. On the i386 1/100s, on the
Alpha 1/1024s. See the HZ define in /usr/include/asm/param.h for the exact
value on your system.
igmp_max_memberships - INTEGER igmp_max_memberships - INTEGER
Change the maximum number of multicast groups we can subscribe to. Change the maximum number of multicast groups we can subscribe to.
Default: 20 Default: 20
...@@ -411,7 +420,30 @@ rp_filter - BOOLEAN ...@@ -411,7 +420,30 @@ rp_filter - BOOLEAN
0 - No source validation. 0 - No source validation.
Default value is 0. Note that some distributions enable it Default value is 0. Note that some distributions enable it
in startip scripts. in startup scripts.
arp_filter - BOOLEAN
1 - Allows you to have multiple network interfaces on the same
subnet, and have the ARPs for each interface be answered
based on whether or not the kernel would route a packet from
the ARP'd IP out that interface (therefore you must use source
based routing for this to work). In other words it allows control
of which cards (usually 1) will respond to an arp request.
0 - (default) The kernel can respond to arp requests with addresses
from other interfaces. This may seem wrong but it usually makes
sense, because it increases the chance of successful communication.
IP addresses are owned by the complete host on Linux, not by
particular interfaces. Only for more complex setups like load-
balancing, does this behaviour cause problems.
tag - INTEGER
Allows you to write a number, which can be used as required.
Default value is 0.
(1) Jiffie: internal timeunit for the kernel. On the i386 1/100s, on the
Alpha 1/1024s. See the HZ define in /usr/include/asm/param.h for the exact
value on your system.
Alexey Kuznetsov. Alexey Kuznetsov.
kuznet@ms2.inr.ac.ru kuznet@ms2.inr.ac.ru
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment