Increasing ip_conntrack_max

[BERES Laszlo]

Yoloits wrote:

> What is the limit on ip_conntrack_max?  Can I increase it more?  How can I resolve teh problem of the table being full?

You can increase it easily (echo a-huge-number > 
/proc/sys/net/ipv4/netfilter/ip_conntrack_max), but a better way using 
the almost-unknown hashsize option of ip_conntrack module:

http://www.wallfire.org/misc/netfilter_conntrack_perf.txt

We had the same issue and the solutions above helped.

-- 
BÉRES László	 RHCE, RHCX
senior IT engineer, trainer