The nf-conntrack tag has no wiki summary.
0
votes
0answers
16 views
java rmi conntrack module for iptables
I was looking on the Internet, but it seems nobody has written iptables conntrack module for Java RMI connections. It would be great, if all connections for JMX monitoring could be matched by --state ...
0
votes
1answer
104 views
What is the difference between nf_conntrack_max and nf_conntrack_expect_max?
I understand what nf_conntrack_max is, but what does nf_conntrack_expect_max actually do? I haven't been able to find an explanation on this anywhere.
5
votes
2answers
214 views
Where is the correct place to set net.netfilter.nf_conntrack_buckets?
I'm currently trying to set net.netfilter.nf_conntrack_buckets on boot. I initially assumed that this could be done through sysctl.conf, but net.netfilter.nf_conntrack_buckets (and other ...
1
vote
0answers
198 views
A minmal iptables ruleset for a high volume Nginx reverse proxy (or: how to use NOTRACK for http and https)?
I'm looking for a minimal iptables ruleset for a rather high volume Nginx/Varnish reverse proxy. I'd like to close down the server, so that only ports 80 and 22 are open at all for connections from ...
2
votes
2answers
424 views
nf_conntrack complaints in dmesg
While investigating complains on bad HTTP server performance, I've discovered these lines in dmesg of my Xen XCP host that contains a guest OS with said server:
[11458852.811070] net_ratelimit: 321 ...
