- Conntrack changes (net.netfilter.nf_conntrack_max=262144 and 65536 hashsize)

- Disabled no_rebroadcast-option.patch
This commit is contained in:
Ansible Admin 2016-02-28 14:14:14 +01:00
parent d02f11434f
commit c23adcc664
2 changed files with 6 additions and 6 deletions

View File

@ -56,8 +56,8 @@ sleep 5
# Fixing the nf_conntrack … dropping packets error
# hashsize = nf_conntrack_max / 4
sysctl -w net.netfilter.nf_conntrack_max=131072
echo 32768 > /sys/module/nf_conntrack/parameters/hashsize
sysctl -w net.netfilter.nf_conntrack_max=262144
echo 65536 > /sys/module/nf_conntrack/parameters/hashsize
# Against Denial of Service attacks from internal network
# Check with: sysctl -a | grep conntrack | grep timeout

View File

@ -9,7 +9,7 @@
user: root
gather_facts: False
vars:
snversion: master_v3.0.0
snversion: master_v3.0.1
batmanversion: v2015.2
common_required_packages:
- git
@ -130,9 +130,9 @@
dest=/tmp/batman-adv
when: aptupdates.changed
register: getbatman
- name: Get batman-adv no rebrotcast patch
get_url: url=http://map.freifunk-moehne.de/stuff/1001-batman-adv-introduce-no_rebroadcast-option.patch dest=/tmp/batman-adv/1001-batman-adv-introduce-no_rebroadcast-option.patch
when: getbatman.changed
# - name: Get batman-adv no rebrotcast patch
# get_url: url=http://map.freifunk-moehne.de/stuff/1001-batman-adv-introduce-no_rebroadcast-option.patch dest=/tmp/batman-adv/1001-batman-adv-introduce-no_rebroadcast-option.patch
# when: getbatman.changed
- name: Install batman-adv
shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && make && make install
# shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && git apply 1001-batman-adv-introduce-no_rebroadcast-option.patch && make && make install