| 1 | kernel.panic=3 |
| 2 | net.ipv4.conf.default.arp_ignore=1 |
| 3 | net.ipv4.conf.all.arp_ignore=1 |
| 4 | net.ipv4.ip_forward=1 |
| 5 | net.ipv4.icmp_echo_ignore_broadcasts=1 |
| 6 | net.ipv4.icmp_ignore_bogus_error_responses=1 |
| 7 | net.ipv4.tcp_ecn=0 |
| 8 | net.ipv4.tcp_fin_timeout=30 |
| 9 | net.ipv4.tcp_keepalive_time=120 |
| 10 | net.ipv4.tcp_syncookies=1 |
| 11 | net.ipv4.tcp_timestamps=0 |
| 12 | net.core.netdev_max_backlog=30 |
| 13 | |
| 14 | net.ipv4.netfilter.ip_conntrack_checksum=0 |
| 15 | net.ipv4.netfilter.ip_conntrack_max=16384 |
| 16 | net.ipv4.netfilter.ip_conntrack_tcp_timeout_established=3600 |
| 17 | net.ipv4.netfilter.ip_conntrack_udp_timeout=60 |
| 18 | net.ipv4.netfilter.ip_conntrack_udp_timeout_stream=180 |
| 19 | net.ipv6.conf.all.forwarding=1 |
| 20 | |
| 21 | net.netfilter.nf_conntrack_checksum=0 |
| 22 | net.netfilter.nf_conntrack_max=16384 |
| 23 | net.netfilter.nf_conntrack_tcp_timeout_established=3600 |
| 24 | net.netfilter.nf_conntrack_udp_timeout=60 |
| 25 | net.netfilter.nf_conntrack_udp_timeout_stream=180 |
| 26 | |
| 27 | # disable bridge firewalling by default |
| 28 | net.bridge.bridge-nf-call-arptables=0 |
| 29 | net.bridge.bridge-nf-call-ip6tables=0 |
| 30 | net.bridge.bridge-nf-call-iptables=0 |
| 31 | |
