| 🟢 Listen backlog queue |
net.core.somaxconn |
4096 |
128 |
1024-4096 |
Tuned |
| 🟢 Max socket receive buffer |
net.core.rmem_max |
16777216 |
212992 |
1048576-16777216 |
Tuned |
| 🟢 Max socket send buffer |
net.core.wmem_max |
16777216 |
212992 |
1048576-16777216 |
Tuned |
| 🟡 Default socket receive buffer |
net.core.rmem_default |
212992 |
212992 |
1048576 |
Default |
| 🟡 Default socket send buffer |
net.core.wmem_default |
212992 |
212992 |
1048576 |
Default |
| 🟡 Incoming packet backlog |
net.core.netdev_max_backlog |
4096 |
1000 |
5000-10000 |
Default |
| 🟢 Max socket option memory |
net.core.optmem_max |
131072 |
20480 |
20480+ |
Tuned |
| 🟢 SYN queue length |
net.ipv4.tcp_max_syn_backlog |
4096 |
256 |
1024-4096 |
Tuned |
| 🟡 TIME_WAIT timeout (seconds) |
net.ipv4.tcp_fin_timeout |
60 |
60 |
15-30 |
Default |
| 🟡 Reuse TIME_WAIT sockets (safe for outbound) |
net.ipv4.tcp_tw_reuse |
2 |
0 |
1 |
Default |
| 🟡 Keepalive interval (seconds) |
net.ipv4.tcp_keepalive_time |
7200 |
7200 |
600-1800 |
Default |
| 🟡 Keepalive probe interval |
net.ipv4.tcp_keepalive_intvl |
75 |
75 |
10-15 |
Default |
| 🟡 Max keepalive probes |
net.ipv4.tcp_keepalive_probes |
9 |
9 |
5 |
Default |
| 🟡 Max TIME_WAIT sockets |
net.ipv4.tcp_max_tw_buckets |
262144 |
409600 |
80000-200000 |
Default |
| 🟡 TCP receive buffer (min/default/max) |
net.ipv4.tcp_rmem |
4096 131072 33554432 |
4096 131072 6291456 |
4096 87380 16777216 |
Default |
| 🟡 TCP send buffer (min/default/max) |
net.ipv4.tcp_wmem |
4096 16384 4194304 |
4096 16384 4194304 |
4096 16384 16777216 |
Default |
| 🟡 Ephemeral port range |
net.ipv4.ip_local_port_range |
32768 60999 |
32768 60999 |
1024 65535 |
Default |
| 🟡 TCP congestion algorithm |
net.ipv4.tcp_congestion_control |
cubic |
cubic |
bbr (Linux 5.x+) |
Default |
| 🟡 TCP Fast Open (0=off, 3=both) |
net.ipv4.tcp_fastopen |
1 |
0 |
3 |
Default |
| 🟡 Min UDP receive buffer |
net.ipv4.udp_rmem_min |
4096 |
4096 |
4096+ |
Default |
| 🟡 Min UDP send buffer |
net.ipv4.udp_wmem_min |
4096 |
4096 |
4096+ |
Default |
| 🟢 Max connection tracking entries |
net.netfilter.nf_conntrack_max |
262144 |
65536 |
262144+ |
Tuned |