Re: conntrack table limits

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



/etc/modules
nf_conntrack acct=1 hashsize=1048576

Hashsize calc;

HASHSIZE = CONNTRACK_MAX / 8 = RAMSIZE (in bytes) / 131072 = RAMSIZE (in MegaBytes) * 8
HASHSIZE = CONNTRACK_MAX / 8 = RAMSIZE (in bytes) / 131072 / (x / 32)
x= 32 or 64

CONNTRACK_MAX = HASHSIZE * 8


you can see this
http://antmeetspenguin.blogspot.com/2011/01/high-performance-linux-router.html
page.

On 01/25/2011 01:45 PM, Dennis Jacobfeuerborn wrote:
Hi,
I'm trying to find out how high I can set conntrack_max on a 2GB 64 bit system. On the net I found different ways of calculating this but they seem to end up with different results. One forumla tells me that I can fit a maximum of 65535 connections into 2GB of RAM but the other says that with 304 bytes per connection (plus a bit of slab allocation overhead) I can easily fit more than a million connections into the table. Also even with the current limit 65535 and the table having ca. 30.000 entries I've almost 1.8GB ram free/cached which leads me to believe the second way of calculating this is more accurate.
What is the proper way to calculate this?

Regards,
  Dennis
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux