3 ms·
Does anyone know why nf_conntrack_tcp_timeout_established is set to such a high value? Five days seems like an awful long time.
by dfc 14y ago
Does anyone know why nf_conntrack_tcp_timeout_established is set to such a high value? Five days seems like an awful long time.
- ck2 14y agoYeah that was a good take-away from the article. I was not aware of that either. I would guess it's to allow long connections for ssh or similar without timeouts, but there are other ways to prevent timeouts without it eating all those resources. I set it to 1800 myself, we'll see how that goes. I noticed memory use went down after that.