Learn about Centmin Mod LEMP Stack today
Register Now

Beta Branch revised TCP tuning for nf_conntrack max and hash size in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Jul 17, 2016.

  1. eva2000

    eva2000 Administrator Staff Member

    55,796
    12,271
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,857
    Local Time:
    1:16 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  2. tjk

    tjk Member

    76
    16
    8
    Jun 27, 2015
    Ratings:
    +27
    Local Time:
    11:16 PM
    Does upgrading beta code go back and update csf for these changes?
     
  3. eva2000

    eva2000 Administrator Staff Member

    55,796
    12,271
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,857
    Local Time:
    1:16 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    these changes don't effect csf settings

    But right now, updating 123.09beta01 won't sync the changes with your existing install. You could trigger these changes by doing either of the following

    for CentOS 7
    1. save locally a backup copy of /etc/sysctl.d/101-sysctl.conf
    2. delete /etc/sysctl.d/101-sysctl.conf
    3. edit /etc/rc.local and remove hardcoded lined if it exists
      Code (Text):
      echo 65536 > /sys/module/nf_conntrack/parameters/hashsize
    4. re-run updated 123.09beta01's centmin.sh
    5. verify that /etc/sysctl.d/101-sysctl.conf is re-created and you can compare with backup copy with updated /etc/sysctl.d/101-sysctl.conf
    6. verify /etc/rc.local has new updated line for /sys/module/nf_conntrack/parameters/hashsize (note it's only added if /sys/module/nf_conntrack/parameters/hashsize actually exists)
    7. if you added any custom settings in /etc/sysctl.d/101-sysctl.conf or /etc/sysctl.conf, re-add them back from backup copy to system /etc/sysctl.d/101-sysctl.conf
    for CentOS 6
    1. save locally a backup copy of /etc/sysctl.conf
    2. edit /etc/sysctl.conf and remove lines starting and inclusive from centminmod added line
    3. edit /etc/rc.local and remove hardcoded lined if it exists
      Code (Text):
      echo 65536 > /sys/module/nf_conntrack/parameters/hashsize

    4. re-run updated 123.09beta01's centmin.sh
    5. verify in /etc/sysctl.conf that new lines have been added and compare to backup /etc/sysctl.conf
    6. verify /etc/rc.local has new updated line for /sys/module/nf_conntrack/parameters/hashsize (note it's only added if /sys/module/nf_conntrack/parameters/hashsize actually exists)
    7. if you added any custom settings in /etc/sysctl.conf, re-add them back from backup copy to system /etc/sysctl.conf
     
    Last edited: Jul 17, 2016