gitproxy/pve_toss_notes
1
0
Fork 0
mirror of https://gitee.com/callmer/pve_toss_notes.git synced 2026-08-31 14:02:53 +08:00
Code Issues Packages Projects Releases Wiki Activity

更新 TS 服务器参数

Browse Source
This commit is contained in:
CallMeR
2025-01-16 17:57:50 +08:00
parent c1c6282713
commit 2c22ba9212
3 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/debian/debian_ts_99_sysctl.conf
+3
View File
@@ -34,6 +34,9 @@ net.ipv4.conf.default.arp_ignore = 1
net.ipv4.conf.all.rp_filter = 2
net.ipv4.conf.default.rp_filter = 2
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.igmp_max_memberships = 256
net.ipv4.route.error_burst = 500
src/debian/debian_ts_nftables.conf
+15
View File
@@ -128,5 +128,20 @@ table inet router {
meta nfproto ipv4 counter masquerade comment "defconf: masquerade LAN IPv4 traffic"
}
#
# Mangle rules
#
chain mangle_postrouting {
type filter hook postrouting priority mangle; policy accept;
ct packets < 20 oifname "eth0" tcp flags syn / fin,syn,rst tcp option maxseg size set rt mtu comment "defconf: zone LAN IPv4 / IPv6 egress MTU fixing"
}
chain mangle_forward {
type filter hook forward priority mangle; policy accept;
ct packets < 20 iifname "eth0" tcp flags syn / fin,syn,rst tcp option maxseg size set rt mtu comment "defconf: zone LAN IPv4 / IPv6 ingress MTU fixing"
}
}