6

You can change the number of queues at runtime. So, check the limit of queues with ethtool --show-channels ens192, and then change the number with ethtool --set-channels ens192 rx N tx N. Note: the way above isn't applicable to the vmxnet3 driver due by lack of this feature support. UPDATE: after inspecting of source code of the vmxnet3_driver I've found, ...


3

There are two kinds of targets in IPTables chains: Terminating and Non-terminating targets. ACCEPT, REJECT, DROP are terminating targets. They terminate processing of the packet in the current Netfilter hook. MARK, LOG and many others are non-terminating targets. They create some action based on the packet, and then proceed to the next rule. In your example, ...


2

Thanks to a comment @A.B made, I found the solution. I believe the main issue was that the br_netfilter module was not loaded: $ lsmod | grep br_netfilter $ On another CentOS 7 Docker host (that does not have this problem), the module was loaded: $ lsmod | grep br_netfilter br_netfilter 22256 0 bridge 146976 1 br_netfilter ...


2

Implement IPv6. Give each site a generous allocation, in an address plan that fits your organization. At least a /56, which is a couple hundred /64 subnets. Every device gets public IPs. Yes, you will still have to maintain IPv4 for things. And there are ways design this with v4. But why share a meager count of IP addresses and deal with NAT, when you can ...


2

From the symptoms you've described ("stuck at Connecting to..."; can ping from one source, but not from others), my primary suspicion is that a firewall DENY rule is causing the target server to ignore data coming from the non-working servers or, if the firewall rule is on an intermediate router, the data may not even be reaching the target server ...


1

After having given numerous excuses to my coworkers, tested a pile of hardware (including a stack of recently purchased, but somewhat cheap Realtek NICs), looked through MBs of log files and read up on kernel parameters, I've found the culprit. Deciding that this probably was software related, I booted my system in single user mode and ran the command line ...


1

Every queue discipline must have unique handle. Also, the graph of queue disciplines and classes should be non-cyclic: every node should have only one parent. So, there isn't way to achieve what you want.


1

Nearly arbitrary. Someone picked a value for a recommendation, and many others copied it. Defaults in the single-digit thousand range might be too small for a few hundred database files, or a few thousand mail spools. So 5 or 6 decimal digits may be an appropriate order of magnitude. 65535 happens to be 64k, also known as the largest 16 bit number. And then ...


1

I asked this problem in open-vm-tools mailinglist you'll need newer ESXi version (7.0), and virtual machine using hardware version 17 to have vmxnet3 device that supports more than 8 queues. Then you'll need newer guest driver to be able to use the feature - currently driver in the Linux kernel does not support extended queues.


1

iptables happens way too late to be useful. ebtables lacks too many features to be used and would anyway be subject to the same limits as nftables' bridge family as described below. One possible way to do this is to use nftables in the netdev family and a set with its size set to the maximum number of allowed MAC addresses to store them, and if needed set ...


1

This turned out to be due to a routing problem. The master node was unable to properly route to the worker nodes because flannel was using the wrong interface. The Helm chart as written is correct. Once we fixed the routing issue everything worked. If you find yourself in a similar situation where the master node doesn't work but the worker nodes do, the ...


1

Rules are processed in order. By using the -I flag when adding your rules you actually insert each new rule as the first rule in the chain and push all existing rules 1 position down in the order they are processed. Thus the last rule you add with -I gets evaluated first. Typically to add the rules and ensure they are processed in a more intuitive order, ...


Only top voted, non community-wiki answers of a minimum length are eligible