IP Conntrack Max

Question:

How can I increase my ip_conntrack_max?

Environment

All OnApp versions

Answer:

To check the current ip_conntrack_max enter the following command:

# cat /proc/sys/net/ipv4/ip_conntrack_max 

655360

# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max

655360

To alter this value add the following line to '/etc/sysctl.conf':

net.ipv4.netfilter.ip_conntrack_max = "XXXXXX" (Replacing XXXXXX with the new value you wish to use)

Use 'sysctl -p' to set the new value or reboot the HV if there are no running VMs

For KVM Cloudboot HVs:

sysctl net.netfilter.nf_conntrack_max

sysctl net.netfilter.nf_conntrack_count

(Remember - such commands do not persist after reboot, to ensure the conntrack setting is correct on each boot of Cloudboot HV, the command must be added to custom config for the HV) 

To set the new value:

sysctl -w net.netfilter.nf_conntrack_max=xxxxxxx