conntrack
-
G
persistent nf_conntrack sysctl
Hello. I am trying to modify nf_conntrack options in /etc/sysctl.conf i have : net.netfilter.nf_conntrack_generic_timeout=60 net.netfilter.nf_conntrack_icmp_timeout=10 #net.netfilter.nf_conntrack_tcp_timeout_close=10 net.netfilter.nf_conntrack_tcp_timeout_close_wait=20...- gernazdasch
- Thread
- conntrack firewall sysctl
- Replies: 2
- Forum: Proxmox VE: Networking and Firewall
-
A
preconfigured firewall rules and overrun conntrack table
I am encountering a problem on busy servers were the nodes "inexplicably" lost connectivity with cluster partners and fence themselves off. Some investigation shows that when this happens, pve-firewall is enabled and conntrack table is full. a quick look at "virgin" iptables rules has entries...- alexskysilk
- Thread
- conntrack firewall
- Replies: 1
- Forum: Proxmox VE: Installation and configuration