iptables conntrack Table Full Causes Slow Website Access

Symptom: Suddenly found website access very slow, but server CPU, memory and disk usage are normal.

/var/log/message“ip_conntrack table full dropping packet”。kernel ip_conntrack iptables , table ( table ),,, table , table ,table table IP RST ,、、/、, IP RST , table ,, iptables ,。 Iptablesbucketsconntrack_max:

304MB1048576,。ip_conntrack_maxhashsize1)  ip_conntrack_max(Settings 2^20, 2^16=65536)# vi /etc/sysctl.confnet.ipv4.ip_conntrack_max = 10485762)  hashsize (i386,HASHSIZE = CONNTRACK_MAX / 8)# vi /etc/modprobe.confoptions ip_conntrack hashsize=131072 iptables , messages:# service iptables restart

Leave a Comment

Your email address will not be published.