Disable nf_conntrack for VE0

[brijendrasial]

Hello,

I am getting messages as below.When connection packets are dropped we get network timeout issue. I want to know how I can disable it for VE0.

kernel: VE0: nf_conntrack: table full, dropping packet

 

[robhost]

You have to increase the kernel conntrack table size (see /proc/sys/net/ipv4/netfilter/ip_conntrack_max) or change your iptables settings to not use "state" rules.