Site Tools


advanced-ctnf

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
advanced-ctnf [2025/12/05 18:53] – [Tracking/NAT Helpers] Resize screenshot to 300, delete outdate screenshot hogwildadvanced-ctnf [2025/12/05 19:31] (current) – [Connections] -Reorder Maximum Connections explanation hogwild
Line 9: Line 9:
  
 Generally, conntrack is used to search, list, inspect and maintain the Linux kernel's connection tracking. Conntrack does NOT manipulate packets, and works independently of NAT functions.\\   \\   \\ **Maximum Connections**: the maximum number of sessions handled by the router. Generally, conntrack is used to search, list, inspect and maintain the Linux kernel's connection tracking. Conntrack does NOT manipulate packets, and works independently of NAT functions.\\   \\   \\ **Maximum Connections**: the maximum number of sessions handled by the router.
- 
-("/proc/sys/net/ipv4/netfilter/ip_conntrack_max"). 
  
 Clicking the [// Count current ... //] link displays a real-time view of the current demand for connections. Clicking the [// Count current ... //] link displays a real-time view of the current demand for connections.
  
- \\+The number here reflects the value in: "/proc/sys/net/ipv4/netfilter/ip_conntrack_max"
 + 
 +\\
  
 **Hash Table Size**: this lets you tweak the kernel attribute: "/proc/sys/net/ipv4/netfilter/ip_conntrack_buckets" **Hash Table Size**: this lets you tweak the kernel attribute: "/proc/sys/net/ipv4/netfilter/ip_conntrack_buckets"
Line 56: Line 56:
 Be advised that on networks where VoIP is in use, the use of the SIP helper is //not// recommended. While it may seem counterintuitive, the SIP Helper often makes VoIP function worse, not better. You are advised not to use it. Be advised that on networks where VoIP is in use, the use of the SIP helper is //not// recommended. While it may seem counterintuitive, the SIP Helper often makes VoIP function worse, not better. You are advised not to use it.
  
- \\ {{::advanced-conntracknetfilter-ipsec_passthrough-2025.3.png?300}}+ \\ {{::advanced-conntracknetfilter-ipsec_passthrough-2025.3.png?286}}
  
  
advanced-ctnf.1764960797.txt.gz · Last modified: by hogwild