FreshTomato Wiki

User Tools

Site Tools

Trace:
advanced-ctnf

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
advanced-ctnf [2024/11/27 00:17] – [Connections] -Condense, formatting hogwildadvanced-ctnf [2025/12/05 19:31] (current) – [Connections] -Reorder Maximum Connections explanation hogwild
Line 9: Line 9:
  
 Generally, conntrack is used to search, list, inspect and maintain the Linux kernel's connection tracking. Conntrack does NOT manipulate packets, and works independently of NAT functions.\\   \\   \\ **Maximum Connections**: the maximum number of sessions handled by the router. Generally, conntrack is used to search, list, inspect and maintain the Linux kernel's connection tracking. Conntrack does NOT manipulate packets, and works independently of NAT functions.\\   \\   \\ **Maximum Connections**: the maximum number of sessions handled by the router.
- 
-("/proc/sys/net/ipv4/netfilter/ip_conntrack_max"). 
  
 Clicking the [// Count current ... //] link displays a real-time view of the current demand for connections. Clicking the [// Count current ... //] link displays a real-time view of the current demand for connections.
  
- \\+The number here reflects the value in: "/proc/sys/net/ipv4/netfilter/ip_conntrack_max". 
 + 
 +\\
  
-**Hash Table Size**: this lets you tweak the following kernel attribute: "/proc/sys/net/ipv4/netfilter/ip_conntrack_buckets"+**Hash Table Size**: this lets you tweak the kernel attribute: "/proc/sys/net/ipv4/netfilter/ip_conntrack_buckets"
  
  \\  \\
Line 56: Line 56:
 Be advised that on networks where VoIP is in use, the use of the SIP helper is //not// recommended. While it may seem counterintuitive, the SIP Helper often makes VoIP function worse, not better. You are advised not to use it. Be advised that on networks where VoIP is in use, the use of the SIP helper is //not// recommended. While it may seem counterintuitive, the SIP Helper often makes VoIP function worse, not better. You are advised not to use it.
  
- \\+ \\ {{::advanced-conntracknetfilter-ipsec_passthrough-2025.3.png?286}}
  
-{{:pasted:20220110-185610.png}} 
  
 +===== Miscellaneous =====
  
-===== Miscellaneous =====+**TCP/UDP Buffers**: defines the number of TCP/UDP buffers allowed (to/from the router).
  
-**TCP/UDP Buffers**: This defines the number of TCP/UDP buffers allowed (to/from the router). This setting needs to be tweaked carefully. A large buffer will facilitate higher throughput, but too large a buffer might create //bufferbloat. //Bloated buffers lead to network-crippling latency spikes.+This needs to be tweaked carefully. A large buffer will facilitate higher throughput, but if too large, might create //bufferbloat. //Bloated buffers lead to network-crippling latency spikes.
  
  \\  \\
  
-**TTL Adjust**: This option increases or decreases the packet Time-To-Live value crossing the router.+**TTL Adjust**: lets you increase or decrease the packet Time-To-Live value crossing the router.
  
  \\  \\
  
-**Inbound Layer 7**: This enables inbound Layer 7 traffic matching, caches the results, and marks the traffic outbound.+**Inbound Layer 7**: enables inbound Layer 7 traffic matching, caches the results, and marks the traffic outbound.
  
  \\  \\
advanced-ctnf.1732666658.txt.gz · Last modified: by hogwild

Page Tools

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki