Networking Forums

Networking Forums > Computer Networking > Linux Networking > how to modify the SNAT 16383 connection limit

Reply
Thread Tools Display Modes

how to modify the SNAT 16383 connection limit

 
 
kyoguan@gmail.com
Guest
Posts: n/a

 
      11-25-2005, 02:13 AM
I setup a linux box to do the DNAT and the SNAT.

ipnat rule is
-A PREROUTING -i eth0 -p tcp -m tcp --dport 8888 -j DNAT
--to-destination 202.9.123.123:8888
-A POSTROUTING -o eth0 -p tcp -j SNAT --to-source 202.10.6.4

it works well, but I found the connection count can't go more then
16383, even
the machine has lots of RAM free and idle cpu. And this is the setting.

kernel.pid_max=65536
net.ipv4.tcp_max_syn_backlog=4096
net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.tcp_tw_recycle=1
net.ipv4.tcp_tw_reuse=1

net.core.rmem_max=16777216
net.core.wmem_max=1048576
net.core.wmem_default=1048576

net.ipv4.ip_conntrack_max = 10458520
net.ipv4.netfilter.ip_conntrack_generic_timeout = 600
net.ipv4.netfilter.ip_conntrack_icmp_timeout = 30
net.ipv4.netfilter.ip_conntrack_udp_timeout_stream = 180
net.ipv4.netfilter.ip_conntrack_udp_timeout = 30
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close = 10
net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_w ait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_last_a ck = 30
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_ wait = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wa it = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_establ ished = 432000
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_re cv = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_se nt = 120
net.ipv4.netfilter.ip_conntrack_buckets = 1307315
net.ipv4.netfilter.ip_conntrack_max = 10458520

can anybody help me, how to tune the netfiler to support over 16383
connection without using another machine. Thank you.

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
how to modify the contents of a TCP/IP packet before it is delivered? Can this be done with ip helper api, can it be done with sockets? I can't seem to find any documentation on how to modify packets before they are delivered. dr Windows Networking 0 07-18-2007 04:36 AM
IIS6 / Connection Limit Phil Lang Windows Networking 1 04-16-2007 01:01 PM
Limit User VPN Connection bushnell Windows Networking 0 10-31-2006 12:48 PM
Limit maximum TCP connections for NAT connection Frank Linux Networking 1 08-23-2006 07:17 PM
Limit Bandwidth on Wired Connection stl Ken Broadband Hardware 1 02-16-2004 10:44 PM



1 2 3 4 5 6 7 8 9 10 11