#top sysctl¶

#top The System Control (sysctl)¶

#top kernel¶

Zobacz także: kernel | /proc/sys/kernel

Dokumentacja kernela: www.kernel.org / sysctl / kernel.txt

kernel.acct
kernel.acpi_video_flags
kernel.auto_msgmni
kernel.blk_iopoll
kernel.bootloader_type
kernel.bootloader_version
kernel.cad_pid
kernel.compat-log
kernel.core_pattern
kernel.core_pipe_limit
kernel.core_uses_pid
kernel.ctrl-alt-del
kernel.domainname
kernel.exec-shield
kernel.ftrace_dump_on_oops
kernel.ftrace_enabled
kernel.hostname
kernel.hotplug
kernel.hung_task_check_count
kernel.hung_task_panic
kernel.hung_task_timeout_secs
kernel.hung_task_warnings
kernel.io_delay_type
kernel.keys
kernel.kstack_depth_to_print
kernel.max_lock_depth
kernel.modprobe
kernel.modules_disabled
kernel.msgmax
kernel.msgmnb
kernel.msgmni
kernel.ngroups_max
kernel.nmi_watchdog
kernel.osrelease
kernel.ostype
kernel.overflowgid
kernel.overflowuid
kernel.panic
kernel.panic_on_io_nmi
kernel.panic_on_oops
kernel.panic_on_unrecovered_nmi
kernel.perf_event_max_sample_rate
kernel.perf_event_mlock_kb
kernel.perf_event_paranoid
kernel.pid_max
kernel.poweroff_cmd
kernel.print-fatal-signals
kernel.printk
kernel.printk_delay
kernel.printk_ratelimit
kernel.printk_ratelimit_burst
kernel.pty
kernel.random
kernel.randomize_va_space
kernel.real-root-dev
kernel.sched_child_runs_first
kernel.sched_compat_yield
kernel.sched_domain
kernel.sched_features
kernel.sched_latency_ns
kernel.sched_migration_cost
kernel.sched_min_granularity_ns
kernel.sched_nr_migrate
kernel.sched_rt_period_us
kernel.sched_rt_runtime_us
kernel.sched_shares_ratelimit
kernel.sched_shares_thresh
kernel.sched_time_avg
kernel.sched_tunable_scaling
kernel.sched_wakeup_granularity_ns
kernel.sem
kernel.shmall
kernel.shmmax
kernel.shmmni
kernel.slow-work
kernel.softlockup_panic
kernel.softlockup_thresh
kernel.stack_tracer_enabled
kernel.sysrq
kernel.tainted
kernel.threads-max
kernel.timer_migration
kernel.unknown_nmi_panic
kernel.version
kernel.vsyscall64

#top kernel shared memory¶

Zobacz także: kernel shared memory (sem,shmall,shmmax,shmmni) | kernel shared memory (sem,shmall,shmmax,shmmni)

kernel.shmall

Controls the maximum number of shared memory segments, in pages:
Rezultat:

kernel.shmall = 268435456

kernel.shmmax

Controls the maximum shared segment size, in bytes:
Rezultat:

kernel.shmmax = 4294967295

kernel.shmmni

Controls the minimum shared segment size, in bytes:
Rezultat:

kernel.shmmni = 4096

#top net¶

Zobacz także: net | /proc/sys/net

Dokumentacja kernela: www.kernel.org / sysctl / net.txt

#top net.core¶

Zobacz także: net.core | /proc/sys/net/core

net.core.dev_weight
net.core.message_burst
net.core.message_cost
net.core.netdev_budget
net.core.netdev_max_backlog
net.core.optmem_max
net.core.rmem_default
net.core.rmem_max
net.core.somaxconn
net.core.warnings
net.core.wmem_default
net.core.wmem_max
net.core.xfrm_acq_expires
net.core.xfrm_aevent_etime
net.core.xfrm_aevent_rseqth
net.core.xfrm_larval_drop

#top net.ipv4¶

Zobacz także: net.ipv4 | /proc/sys/net/ipv4

Dokumentacja kernela: www.kernel.org / ip-sysctl.txt

net.ipv4.cipso_cache_bucket_size
net.ipv4.cipso_cache_enable
net.ipv4.cipso_rbm_optfmt
net.ipv4.cipso_rbm_strictvalid

net.ipv4.conf
net.ipv4.conf.all
net.ipv4.conf.all.accept_redirects
net.ipv4.conf.all.accept_source_route
net.ipv4.conf.all.arp_accept
net.ipv4.conf.all.arp_announce
net.ipv4.conf.all.arp_filter
net.ipv4.conf.all.arp_ignore
net.ipv4.conf.all.arp_notify
net.ipv4.conf.all.bootp_relay
net.ipv4.conf.all.disable_policy
net.ipv4.conf.all.disable_xfrm
net.ipv4.conf.all.force_igmp_version
net.ipv4.conf.all.forwarding
net.ipv4.conf.all.log_martians
net.ipv4.conf.all.mc_forwarding
net.ipv4.conf.all.medium_id
net.ipv4.conf.all.promote_secondaries
net.ipv4.conf.all.proxy_arp
net.ipv4.conf.all.rp_filter
net.ipv4.conf.all.secure_redirects
net.ipv4.conf.all.send_redirects
net.ipv4.conf.all.shared_media
net.ipv4.conf.all.src_valid_mark
net.ipv4.conf.all.tag

net.ipv4.conf.default
net.ipv4.conf.eth0
net.ipv4.conf.lo

net.ipv4.icmp_echo_ignore_all
net.ipv4.icmp_echo_ignore_broadcasts
net.ipv4.icmp_errors_use_inbound_ifaddr
net.ipv4.icmp_ignore_bogus_error_responses
net.ipv4.icmp_ratelimit
net.ipv4.icmp_ratemask
net.ipv4.igmp_max_memberships
net.ipv4.igmp_max_msf
net.ipv4.inet_peer_gc_maxtime
net.ipv4.inet_peer_gc_mintime
net.ipv4.inet_peer_maxttl
net.ipv4.inet_peer_minttl
net.ipv4.inet_peer_threshold
net.ipv4.ip_default_ttl
net.ipv4.ip_dynaddr
net.ipv4.ip_forward
net.ipv4.ipfrag_high_thresh
net.ipv4.ipfrag_low_thresh
net.ipv4.ipfrag_max_dist
net.ipv4.ipfrag_secret_interval
net.ipv4.ipfrag_time
net.ipv4.ip_local_port_range
net.ipv4.ip_local_reserved_ports
net.ipv4.ip_nonlocal_bind
net.ipv4.ip_no_pmtu_disc

net.ipv4.neigh
net.ipv4.neigh.default.anycast_delay
net.ipv4.neigh.default.app_solicit
net.ipv4.neigh.default.base_reachable_time
net.ipv4.neigh.default.base_reachable_time_ms
net.ipv4.neigh.default.delay_first_probe_time
net.ipv4.neigh.default.gc_interval
net.ipv4.neigh.default.gc_stale_time
net.ipv4.neigh.default.gc_thresh1
net.ipv4.neigh.default.gc_thresh2
net.ipv4.neigh.default.gc_thresh3
net.ipv4.neigh.default.locktime
net.ipv4.neigh.default.mcast_solicit
net.ipv4.neigh.default.proxy_delay
net.ipv4.neigh.default.proxy_qlen
net.ipv4.neigh.default.retrans_time
net.ipv4.neigh.default.retrans_time_ms
net.ipv4.neigh.default.ucast_solicit
net.ipv4.neigh.default.unres_qlen

net.ipv4.route
net.ipv4.route.error_burst
net.ipv4.route.error_cost
net.ipv4.route.flush
net.ipv4.route.gc_elasticity
net.ipv4.route.gc_interval
net.ipv4.route.gc_min_interval
net.ipv4.route.gc_min_interval_ms
net.ipv4.route.gc_thresh
net.ipv4.route.gc_timeout
net.ipv4.route.max_size
net.ipv4.route.min_adv_mss
net.ipv4.route.min_pmtu
net.ipv4.route.mtu_expires
net.ipv4.route.redirect_load
net.ipv4.route.redirect_number
net.ipv4.route.redirect_silence
net.ipv4.route.secret_interval

net.ipv4.rt_cache_rebuild_count
net.ipv4.tcp_abc
net.ipv4.tcp_abort_on_overflow
net.ipv4.tcp_adv_win_scale
net.ipv4.tcp_allowed_congestion_control
net.ipv4.tcp_app_win
net.ipv4.tcp_available_congestion_control
net.ipv4.tcp_base_mss
net.ipv4.tcp_congestion_control
net.ipv4.tcp_dma_copybreak
net.ipv4.tcp_dsack
net.ipv4.tcp_ecn
net.ipv4.tcp_fack
net.ipv4.tcp_fin_timeout
net.ipv4.tcp_frto
net.ipv4.tcp_frto_response
net.ipv4.tcp_keepalive_intvl
net.ipv4.tcp_keepalive_probes
net.ipv4.tcp_keepalive_time
net.ipv4.tcp_low_latency
net.ipv4.tcp_max_orphans
net.ipv4.tcp_max_ssthresh
net.ipv4.tcp_max_syn_backlog
net.ipv4.tcp_max_tw_buckets
net.ipv4.tcp_mem
net.ipv4.tcp_moderate_rcvbuf
net.ipv4.tcp_mtu_probing
net.ipv4.tcp_no_metrics_save
net.ipv4.tcp_orphan_retries
net.ipv4.tcp_reordering
net.ipv4.tcp_retrans_collapse
net.ipv4.tcp_retries1
net.ipv4.tcp_retries2
net.ipv4.tcp_rfc1337
net.ipv4.tcp_rmem
net.ipv4.tcp_sack
net.ipv4.tcp_slow_start_after_idle
net.ipv4.tcp_stdurg
net.ipv4.tcp_synack_retries
net.ipv4.tcp_syncookies
net.ipv4.tcp_syn_retries
net.ipv4.tcp_timestamps
net.ipv4.tcp_tso_win_divisor
net.ipv4.tcp_tw_recycle
net.ipv4.tcp_tw_reuse
net.ipv4.tcp_window_scaling
net.ipv4.tcp_wmem
net.ipv4.tcp_workaround_signed_windows
net.ipv4.udp_mem
net.ipv4.udp_rmem_min
net.ipv4.udp_wmem_min
net.ipv4.xfrm4_gc_thresh

#top networking ipv4 ip_default_ttl¶

Zobacz także: net.ipv4.ip_default_ttl | /proc/sys/net/ipv4/ip_default_ttl

Sprawdzenie wartości:
Rezultat:

net.ipv4.ip_default_ttl = 64

Zmiana wartości TTL (metoda run-time):
Sprawdzenie widocznego rezultatu wprowadzonej zmiany:
Rezultat:

PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=72 time=0.067 ms
64 bytes from 127.0.0.1: icmp_seq=2 ttl=72 time=0.065 ms
64 bytes from 127.0.0.1: icmp_seq=3 ttl=72 time=0.065 ms

--- 127.0.0.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2000ms
rtt min/avg/max/mdev = 0.065/0.065/0.067/0.009 ms

Zmiana wartości TTL (persistent - trwała), dostępna również po ponownym uruchomieniu systemu wymaga dodania poniższej linii do pliku /etc/sysctl.conf:

sysctl net.ipv4.ip_forward=72

#top network IPv4 packet forwarding¶

Zobacz także: network IPv4 packet forwarding (net.ipv4.ip_forward) | network IPv4 packet forwarding (/proc/sys/net/ipv4/ip_forward)

Sprawdzenie statusu:
Rezultat:

net.ipv4.ip_forward = 1

Włączenie przekazywania pakietów (metoda run-time):

Włączenie przekazywania pakietów (persistent - trwała), dostępna również po ponownym uruchomieniu systemu wymaga dodania poniższej linii do pliku /etc/sysctl.conf:

net.ipv4.ip_forward=1

#top network IPv4 ip_local_port_range parameters¶

Zobacz także: network IPv4 ip_local_port_range parameters (ip_local_port_range) | network IPv4 ip_local_port_range parameters (ip_local_port_range)

Sprawdzenie zakresu numerów portów:
Rezultat:

32768   61000

Zmiana zakresu numerów portów dla połączeń wychodzących (run-time):

Zmiana zakresu numerów portów dla połączeń wychodzących (persistent - trwała), dostępna również po ponownym uruchomieniu systemu wymaga dodania poniższej linii do pliku /etc/sysctl.conf:

net.ipv4.ip_local_port_range="16384 64000"

#top network IPv4 bind non local IP address ip_nonlocal_bind¶

Zobacz także: network IPv4 bind non local IP address ip_nonlocal_bind | network IPv4 bind non local IP address ip_nonlocal_bind

Sprawdzenie statusu:
Rezultat:

0

Włączenie bindowania (bind()) aplikacji do adresów IP nie znajdujących się na maszynie (metoda run-time):

Włączenie bindowania (bind()) aplikacji do adresów IP nie znajdujących się na maszynie (persistent - trwała), dostępna również po ponownym uruchomieniu systemu wymaga dodania poniższej linii do pliku /etc/sysctl.conf:

net.ipv4.ip_nonlocal_bind=1

#top net.ipv6¶

Zobacz także: net.ipv6 | /proc/sys/net/ipv6

Dokumentacja kernela: www.kernel.org / networking / ipv6.txt

net.ipv6.bindv6only

net.ipv6.conf
net.ipv6.conf.all
net.ipv6.conf.all.accept_dad
net.ipv6.conf.all.accept_ra
net.ipv6.conf.all.accept_ra_defrtr
net.ipv6.conf.all.accept_ra_pinfo
net.ipv6.conf.all.accept_ra_rt_info_max_plen
net.ipv6.conf.all.accept_ra_rtr_pref
net.ipv6.conf.all.accept_redirects
net.ipv6.conf.all.accept_source_route
net.ipv6.conf.all.autoconf
net.ipv6.conf.all.dad_transmits
net.ipv6.conf.all.disable_ipv6
net.ipv6.conf.all.force_mld_version
net.ipv6.conf.all.forwarding
net.ipv6.conf.all.hop_limit
net.ipv6.conf.all.max_addresses
net.ipv6.conf.all.max_desync_factor
net.ipv6.conf.all.mc_forwarding
net.ipv6.conf.all.mtu
net.ipv6.conf.all.optimistic_dad
net.ipv6.conf.all.proxy_ndp
net.ipv6.conf.all.regen_max_retry
net.ipv6.conf.all.router_probe_interval
net.ipv6.conf.all.router_solicitation_delay
net.ipv6.conf.all.router_solicitation_interval
net.ipv6.conf.all.router_solicitations
net.ipv6.conf.all.temp_prefered_lft
net.ipv6.conf.all.temp_valid_lft
net.ipv6.conf.all.use_tempaddr

net.ipv6.icmp
net.ipv6.ip6frag_high_thresh
net.ipv6.ip6frag_low_thresh
net.ipv6.ip6frag_secret_interval
net.ipv6.ip6frag_time
net.ipv6.mld_max_msf

net.ipv6.neigh
net.ipv6.neigh.default.anycast_delay
net.ipv6.neigh.default.app_solicit
net.ipv6.neigh.default.base_reachable_time
net.ipv6.neigh.default.base_reachable_time_ms
net.ipv6.neigh.default.delay_first_probe_time
net.ipv6.neigh.default.gc_interval
net.ipv6.neigh.default.gc_stale_time
net.ipv6.neigh.default.gc_thresh1
net.ipv6.neigh.default.gc_thresh2
net.ipv6.neigh.default.gc_thresh3
net.ipv6.neigh.default.locktime
net.ipv6.neigh.default.mcast_solicit
net.ipv6.neigh.default.proxy_delay
net.ipv6.neigh.default.proxy_qlen
net.ipv6.neigh.default.retrans_time
net.ipv6.neigh.default.retrans_time_ms
net.ipv6.neigh.default.ucast_solicit
net.ipv6.neigh.default.unres_qlen

net.ipv6.route
net.ipv6.route.flush
net.ipv6.route.gc_elasticity
net.ipv6.route.gc_interval
net.ipv6.route.gc_min_interval
net.ipv6.route.gc_min_interval_ms
net.ipv6.route.gc_thresh
net.ipv6.route.gc_timeout
net.ipv6.route.max_size
net.ipv6.route.min_adv_mss
net.ipv6.route.mtu_expires

net.ipv6.xfrm6_gc_thresh

#top network IPv6 packet forwarding¶

Zobacz także: network IPv6 packet forwarding | network IPv6 packet forwarding

Sprawdzenie statusu:
Rezultat:

net.ipv6.conf.all.forwarding = 1
net.ipv6.conf.default.forwarding = 1

Włączenie przekazywania pakietów (dla wszystkich interfejsów) (metoda run-time):

Włączenie przekazywania pakietów (persistent - trwała), dostępna również po ponownym uruchomieniu systemu wymaga dodania poniższej linii do pliku /etc/sysctl.conf:

net.ipv6.conf.all.forwarding=1
net.ipv6.conf.default.forwarding=1

#top net.ipv4.netfilter¶

Zobacz także: net.ipv4.netfilter | /proc/sys/net/ipv4/netfilter


net.ipv4.netfilter.ip_conntrack_buckets
net.ipv4.netfilter.ip_conntrack_checksum
net.ipv4.netfilter.ip_conntrack_count
net.ipv4.netfilter.ip_conntrack_generic_timeout
net.ipv4.netfilter.ip_conntrack_icmp_timeout
net.ipv4.netfilter.ip_conntrack_log_invalid
net.ipv4.netfilter.ip_conntrack_max
net.ipv4.netfilter.ip_conntrack_tcp_be_liberal
net.ipv4.netfilter.ip_conntrack_tcp_loose
net.ipv4.netfilter.ip_conntrack_tcp_max_retrans
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established
net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait
net.ipv4.netfilter.ip_conntrack_tcp_timeout_last_ack
net.ipv4.netfilter.ip_conntrack_tcp_timeout_max_retrans
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_recv
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent
net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait
net.ipv4.netfilter.ip_conntrack_udp_timeout
net.ipv4.netfilter.ip_conntrack_udp_timeout_stream

#top network IPv4 netfilter connection tracking ip_conntrack_max¶

Zobacz także: network IPv4 netfilter connection tracking ip_conntrack_max | network IPv4 netfilter connection tracking ip_conntrack_max


Sprawdzenie statusu:
Rezultat:

65536

Zwiększenie wielkości tablicy zawierającej status połączeń (metoda run-time):

Zwiększenie wielkości tablicy zawierającej status połączeń (persistent - trwała), dostępna również po ponownym uruchomieniu systemu wymaga dodania poniższej linii do pliku /etc/sysctl.conf:

#top net.netfilter¶

Zobacz także: net.netfilter | /proc/sys/net/netfilter

Dokumentacja kernela: www.kernel.org / networking / nf_conntrack-sysctl.txt
Dokumentacja kernela: www.kernel.org / networking / netfilter-sysctl.txt


net.netfilter.nf_conntrack_acct
net.netfilter.nf_conntrack_buckets
net.netfilter.nf_conntrack_checksum
net.netfilter.nf_conntrack_count
net.netfilter.nf_conntrack_events
net.netfilter.nf_conntrack_events_retry_timeout
net.netfilter.nf_conntrack_expect_max
net.netfilter.nf_conntrack_frag6_high_thresh
net.netfilter.nf_conntrack_frag6_low_thresh
net.netfilter.nf_conntrack_frag6_timeout
net.netfilter.nf_conntrack_generic_timeout
net.netfilter.nf_conntrack_icmp_timeout
net.netfilter.nf_conntrack_icmpv6_timeout
net.netfilter.nf_conntrack_log_invalid
net.netfilter.nf_conntrack_max
net.netfilter.nf_conntrack_tcp_be_liberal
net.netfilter.nf_conntrack_tcp_loose
net.netfilter.nf_conntrack_tcp_max_retrans
net.netfilter.nf_conntrack_tcp_timeout_close
net.netfilter.nf_conntrack_tcp_timeout_close_wait
net.netfilter.nf_conntrack_tcp_timeout_established
net.netfilter.nf_conntrack_tcp_timeout_fin_wait
net.netfilter.nf_conntrack_tcp_timeout_last_ack
net.netfilter.nf_conntrack_tcp_timeout_max_retrans
net.netfilter.nf_conntrack_tcp_timeout_syn_recv
net.netfilter.nf_conntrack_tcp_timeout_syn_sent
net.netfilter.nf_conntrack_tcp_timeout_time_wait
net.netfilter.nf_conntrack_tcp_timeout_unacknowledged
net.netfilter.nf_conntrack_udp_timeout
net.netfilter.nf_conntrack_udp_timeout_stream
net.netfilter.nf_log

#top network netfilter connection tracking nf_conntrack_max¶

Zobacz także: network netfilter connection tracking nf_conntrack_max | network netfilter connection tracking nf_conntrack_max

Dokumentacja kernela: www.kernel.org / networking / nf_conntrack-sysctl.txt


Sprawdzenie statusu:
Rezultat:

65536

Zwiększenie wielkości tablicy zawierającej status połączeń (metoda run-time):

Zwiększenie wielkości tablicy zawierającej status połączeń (persistent - trwała), dostępna również po ponownym uruchomieniu systemu wymaga dodania poniższej linii do pliku /etc/sysctl.conf:

sysctl net.netfilter.nf_conntrack_max=1048576

#top vm¶

Zobacz także: vm | /proc/sys/vm

Dokumentacja kernela: www.kernel.org / sysctl / vm.txt

vm.block_dump
vm.compact_memory
vm.dirty_background_bytes
vm.dirty_background_ratio
vm.dirty_bytes
vm.dirty_expire_centisecs
vm.dirty_ratio
vm.dirty_writeback_centisecs
vm.drop_caches
vm.extfrag_threshold
vm.hugepages_treat_as_movable
vm.hugetlb_shm_group
vm.laptop_mode
vm.legacy_va_layout
vm.lowmem_reserve_ratio
vm.max_map_count
vm.memory_failure_early_kill
vm.memory_failure_recovery
vm.min_free_kbytes
vm.min_slab_ratio
vm.min_unmapped_ratio
vm.mmap_min_addr
vm.nr_hugepages
vm.nr_overcommit_hugepages
vm.nr_pdflush_threads
vm.numa_zonelist_order
vm.oom_dump_tasks
vm.oom_kill_allocating_task
vm.overcommit_memory
vm.overcommit_ratio
vm.page-cluster
vm.panic_on_oom
vm.percpu_pagelist_fraction
vm.scan_unevictable_pages
vm.stat_interval
vm.swappiness
vm.vfs_cache_pressure
vm.would_have_oomkilled
vm.zone_reclaim_mode

#top clear cache by drop_caches¶

Zobacz także: clear cache by drop_caches | clear cache by drop_caches

#top memory overcommitment overcommit_memory¶

Zobacz także: memory overcommitment overcommit_memory | memory overcommitment overcommit_memory