ip_conntrack limit && stateless firewalls
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
I'm having a problem with my firewall where packets are being dropped due
to the ip_conntrack limit. I could up the limit, but my users need 30k+
connections simultaneously and with the minimum overhead. And I only have
1 firewall box. So I'd like to disable or by-pass ip_conntrack some how to
avoid dropped packets and reduce over head. How can I do this, and more
importantly, would it be helpful.
Kevin
[Index of Archives]
[Linux Netfilter Development]
[Linux Kernel Networking Development]
[Netem]
[Berkeley Packet Filter]
[Linux Kernel Development]
[Advanced Routing & Traffice Control]
[Bugtraq]