sysctl과 커널파라미터(kernel parameter) 이란?
작성자 정보
- 관리자 작성
- 작성일
컨텐츠 정보
- 4,246 조회
- 0 추천
- 목록
본문
sysctl과 커널파라미터(kernel parameter) 이란?
/proc 파일시스템의 디렉토리에 존재하는 파일들을 직접 수정및 변경하는 방법으로 커널옵션값을 조절한다.
이번에는 /proc/sys 파일시스템 내의 파일들을 직접 수정하지 않아도 커널옵션들을 변경할 수있는 명령어인 sysctl을 이용하여 지금까지의 작업을 동일하게 할 수 있는 방법에 대해서 알아볼 것이다.
sysctl의 man page를 확인해보면 sysctl은 “configure kernel parameters at runtime”이라고 정의되어있다.
즉 커널파라미터(kernel parameter)값을 설정하는 명령어란 것이다.
자, 그럼 sysctl을 이용하여 커널옵션들을 확인하고 수정하는 방법에 대해서 알아보도록 하겠다.
커널옵션값 전체 확인하는 방법
이제 커널파라미터(kernel parameter)라는 커널옵션값들이 어떤 것들이 있는가를 확인해보도록 하자. 먼저, “sysctl -a”라고 하면 커널설정값들을 모두 확인할 수 있다.
[root@RockyLinux ~]# sysctl -a abi.vsyscall32 = 1 crypto.fips_enabled = 0 crypto.fips_name = Rocky Linux 9 - Kernel Cryptographic API crypto.fips_version = 5.14.0-162.23.1.el9_1.x86_64 debug.exception-trace = 1 debug.kprobes-optimization = 1 dev.cdrom.autoclose = 1 dev.cdrom.autoeject = 0 dev.cdrom.check_media = 0 dev.cdrom.debug = 0 dev.cdrom.info = CD-ROM information, Id: cdrom.c 3.20 2003/12/17 dev.cdrom.info = dev.cdrom.info = drive name: sr1 sr0 dev.cdrom.info = drive speed: 32 32 dev.cdrom.info = drive # of slots: 1 1 dev.cdrom.info = Can close tray: 1 1 dev.cdrom.info = Can open tray: 1 1 dev.cdrom.info = Can lock tray: 1 1 dev.cdrom.info = Can change speed: 1 1 dev.cdrom.info = Can select disk: 0 0 dev.cdrom.info = Can read multisession: 1 1 dev.cdrom.info = Can read MCN: 1 1 dev.cdrom.info = Reports media changed: 1 1 dev.cdrom.info = Can play audio: 1 1 dev.cdrom.info = Can write CD-R: 0 0 dev.cdrom.info = Can write CD-RW: 0 0 dev.cdrom.info = Can read DVD: 1 1 dev.cdrom.info = Can write DVD-R: 0 0 dev.cdrom.info = Can write DVD-RAM: 0 0 dev.cdrom.info = Can read MRW: 1 1 dev.cdrom.info = Can write MRW: 1 1 dev.cdrom.info = Can write RAM: 1 1 dev.cdrom.info = dev.cdrom.info = dev.cdrom.lock = 1 dev.hpet.max-user-freq = 64 dev.raid.speed_limit_max = 200000 dev.raid.speed_limit_min = 1000 dev.scsi.logging_level = 0 dev.tty.ldisc_autoload = 1 fs.aio-max-nr = 1048576 fs.aio-nr = 0 fs.binfmt_misc.status = enabled fs.dentry-state = 76142 56450 45 0 5820 0 fs.dir-notify-enable = 1 fs.epoll.max_user_watches = 434376 fs.fanotify.max_queued_events = 16384 fs.fanotify.max_user_groups = 128 fs.fanotify.max_user_marks = 15416 fs.file-max = 6815744 fs.file-nr = 4512 0 6815744 fs.inode-nr = 70470 966 fs.inode-state = 70470 966 0 0 0 0 0 fs.inotify.max_queued_events = 16384 fs.inotify.max_user_instances = 128 fs.inotify.max_user_watches = 14520 fs.lease-break-time = 45 fs.leases-enable = 1 fs.mount-max = 100000 fs.mqueue.msg_default = 10 fs.mqueue.msg_max = 10 fs.mqueue.msgsize_default = 8192 fs.mqueue.msgsize_max = 8192 fs.mqueue.queues_max = 256 fs.nr_open = 1073741816 fs.overflowgid = 65534 fs.overflowuid = 65534 fs.pipe-max-size = 1048576 fs.pipe-user-pages-hard = 0 fs.pipe-user-pages-soft = 16384 fs.protected_fifos = 1 fs.protected_hardlinks = 1 fs.protected_regular = 1 fs.protected_symlinks = 1 fs.quota.allocated_dquots = 0 fs.quota.cache_hits = 0 fs.quota.drops = 0 fs.quota.free_dquots = 0 fs.quota.lookups = 0 fs.quota.reads = 0 fs.quota.syncs = 0 fs.quota.warnings = 1 fs.quota.writes = 0 fs.suid_dumpable = 2 fs.xfs.error_level = 3 fs.xfs.filestream_centisecs = 3000 fs.xfs.inherit_noatime = 1 fs.xfs.inherit_nodefrag = 1 fs.xfs.inherit_nodump = 1 fs.xfs.inherit_nosymlinks = 0 fs.xfs.inherit_sync = 1 fs.xfs.irix_sgid_inherit = 0 fs.xfs.irix_symlink_mode = 0 fs.xfs.panic_mask = 0 fs.xfs.rotorstep = 1 fs.xfs.speculative_cow_prealloc_lifetime = 300 fs.xfs.speculative_prealloc_lifetime = 300 fs.xfs.stats_clear = 0 fs.xfs.xfssyncd_centisecs = 3000 kernel.acct = 4 2 30 kernel.acpi_video_flags = 0 kernel.auto_msgmni = 0 kernel.bootloader_type = 6 kernel.bootloader_version = 38 kernel.bpf_stats_enabled = 0 kernel.cad_pid = 1 kernel.cap_last_cap = 40 kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h kernel.core_pipe_limit = 16 kernel.core_uses_pid = 1 kernel.ctrl-alt-del = 0 kernel.dmesg_restrict = 0 kernel.domainname = (none) kernel.firmware_config.force_sysfs_fallback = 0 kernel.firmware_config.ignore_sysfs_fallback = 0 kernel.ftrace_dump_on_oops = 0 kernel.ftrace_enabled = 1 kernel.hardlockup_all_cpu_backtrace = 0 kernel.hardlockup_panic = 1 kernel.hostname = RockyLinux kernel.hung_task_all_cpu_backtrace = 0 kernel.hung_task_check_count = 4194304 kernel.hung_task_check_interval_secs = 0 kernel.hung_task_panic = 0 kernel.hung_task_timeout_secs = 120 kernel.hung_task_warnings = 10 kernel.io_delay_type = 0 kernel.kexec_load_disabled = 0 kernel.keys.gc_delay = 300 kernel.keys.maxbytes = 20000 kernel.keys.maxkeys = 200 kernel.keys.persistent_keyring_expiry = 259200 kernel.keys.root_maxbytes = 25000000 kernel.keys.root_maxkeys = 1000000 kernel.kptr_restrict = 1 kernel.max_lock_depth = 1024 kernel.max_rcu_stall_to_panic = 0 kernel.modprobe = /usr/sbin/modprobe kernel.modules_disabled = 0 kernel.msg_next_id = -1 kernel.msgmax = 8192 kernel.msgmnb = 16384 kernel.msgmni = 32000 kernel.ngroups_max = 65536 kernel.nmi_watchdog = 0 kernel.ns_last_pid = 2291 kernel.numa_balancing = 0 kernel.oops_all_cpu_backtrace = 0 kernel.osrelease = 5.14.0-162.23.1.el9_1.x86_64 kernel.ostype = Linux kernel.overflowgid = 65534 kernel.overflowuid = 65534 kernel.panic = 0 kernel.panic_on_io_nmi = 0 kernel.panic_on_oops = 1 kernel.panic_on_rcu_stall = 0 kernel.panic_on_unrecovered_nmi = 0 kernel.panic_on_warn = 0 kernel.panic_print = 0 kernel.perf_cpu_time_max_percent = 25 kernel.perf_event_max_contexts_per_stack = 8 kernel.perf_event_max_sample_rate = 100000 kernel.perf_event_max_stack = 127 kernel.perf_event_mlock_kb = 516 kernel.perf_event_paranoid = 2 kernel.pid_max = 4194304 kernel.poweroff_cmd = /sbin/poweroff kernel.print-fatal-signals = 0 kernel.printk = 4 4 1 7 kernel.printk_delay = 0 kernel.printk_devkmsg = on kernel.printk_ratelimit = 5 kernel.printk_ratelimit_burst = 10 kernel.pty.max = 4096 kernel.pty.nr = 1 kernel.pty.reserve = 1024 kernel.random.boot_id = a6fa6ce2-d981-4ed7-813c-dcf437a0217c kernel.random.entropy_avail = 0 kernel.random.poolsize = 256 kernel.random.urandom_min_reseed_secs = 300 kernel.random.uuid = 1725a1ab-1395-40b7-8f4b-471be3e65724 kernel.random.write_wakeup_threshold = 256 kernel.randomize_va_space = 2 kernel.real-root-dev = 0 kernel.sched_autogroup_enabled = 1 kernel.sched_cfs_bandwidth_slice_us = 5000 kernel.sched_child_runs_first = 0 kernel.sched_deadline_period_max_us = 4194304 kernel.sched_deadline_period_min_us = 100 kernel.sched_energy_aware = 1 kernel.sched_rr_timeslice_ms = 100 kernel.sched_rt_period_us = 1000000 kernel.sched_rt_runtime_us = 950000 kernel.sched_schedstats = 0 kernel.seccomp.actions_avail = kill_process kill_thread trap errno user_notif trace log allow kernel.seccomp.actions_logged = kill_process kill_thread trap errno user_notif trace log kernel.sem = 250 32000 100 128 kernel.sem_next_id = -1 kernel.shm_next_id = -1 kernel.shm_rmid_forced = 0 kernel.shmall = 4294967296 kernel.shmmax = 68719476736 kernel.shmmni = 4096 kernel.soft_watchdog = 1 kernel.softlockup_all_cpu_backtrace = 0 kernel.softlockup_panic = 0 kernel.stack_tracer_enabled = 0 kernel.sysctl_writes_strict = 1 kernel.sysrq = 16 kernel.tainted = 0 kernel.task_delayacct = 0 kernel.threads-max = 15244 kernel.timer_migration = 1 kernel.traceoff_on_warning = 0 kernel.tracepoint_printk = 0 kernel.unknown_nmi_panic = 0 kernel.unprivileged_bpf_disabled = 2 kernel.usermodehelper.bset = 4294967295 511 kernel.usermodehelper.inheritable = 4294967295 511 kernel.version = #1 SMP PREEMPT_DYNAMIC Tue Apr 11 19:09:37 UTC 2023 kernel.watchdog = 1 kernel.watchdog_cpumask = 0 kernel.watchdog_thresh = 10 kernel.yama.ptrace_scope = 0 net.bridge.bridge-nf-call-arptables = 1 net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-iptables = 1 net.bridge.bridge-nf-filter-pppoe-tagged = 0 net.bridge.bridge-nf-filter-vlan-tagged = 0 net.bridge.bridge-nf-pass-vlan-input-dev = 0 net.core.bpf_jit_enable = 1 net.core.bpf_jit_harden = 1 net.core.bpf_jit_kallsyms = 1 net.core.bpf_jit_limit = 264241152 net.core.busy_poll = 0 net.core.busy_read = 0 net.core.default_qdisc = fq_codel net.core.dev_weight = 64 net.core.dev_weight_rx_bias = 1 net.core.dev_weight_tx_bias = 1 net.core.devconf_inherit_init_net = 0 net.core.fb_tunnels_only_for_init_net = 0 net.core.flow_limit_cpu_bitmap = 0 net.core.flow_limit_table_len = 4096 net.core.gro_normal_batch = 8 net.core.high_order_alloc_disable = 0 net.core.max_skb_frags = 17 net.core.message_burst = 10 net.core.message_cost = 5 net.core.netdev_budget = 300 net.core.netdev_budget_usecs = 2000 net.core.netdev_max_backlog = 1000 net.core.netdev_rss_key = 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 net.core.netdev_tstamp_prequeue = 1 net.core.netdev_unregister_timeout_secs = 10 net.core.optmem_max = 81920 net.core.rmem_default = 262144 net.core.rmem_max = 4194304 net.core.rps_sock_flow_entries = 0 net.core.somaxconn = 4096 net.core.tstamp_allow_data = 1 net.core.warnings = 0 net.core.wmem_default = 262144 net.core.wmem_max = 1048576 net.core.xfrm_acq_expires = 30 net.core.xfrm_aevent_etime = 10 net.core.xfrm_aevent_rseqth = 2 net.core.xfrm_larval_drop = 1 net.ipv4.cipso_cache_bucket_size = 10 net.ipv4.cipso_cache_enable = 1 net.ipv4.cipso_rbm_optfmt = 0 net.ipv4.cipso_rbm_strictvalid = 1 net.ipv4.conf.all.accept_local = 0 net.ipv4.conf.all.accept_redirects = 0 net.ipv4.conf.all.accept_source_route = 0 net.ipv4.conf.all.arp_accept = 0 net.ipv4.conf.all.arp_announce = 0 net.ipv4.conf.all.arp_filter = 0 net.ipv4.conf.all.arp_ignore = 0 net.ipv4.conf.all.arp_notify = 0 net.ipv4.conf.all.bc_forwarding = 0 net.ipv4.conf.all.bootp_relay = 0 net.ipv4.conf.all.disable_policy = 0 net.ipv4.conf.all.disable_xfrm = 0 net.ipv4.conf.all.drop_gratuitous_arp = 0 net.ipv4.conf.all.drop_unicast_in_l2_multicast = 0 net.ipv4.conf.all.force_igmp_version = 0 net.ipv4.conf.all.forwarding = 1 net.ipv4.conf.all.igmpv2_unsolicited_report_interval = 10000 net.ipv4.conf.all.igmpv3_unsolicited_report_interval = 1000 net.ipv4.conf.all.ignore_routes_with_linkdown = 0 net.ipv4.conf.all.log_martians = 0 net.ipv4.conf.all.mc_forwarding = 0 net.ipv4.conf.all.medium_id = 0 net.ipv4.conf.all.promote_secondaries = 0 net.ipv4.conf.all.proxy_arp = 0 net.ipv4.conf.all.proxy_arp_pvlan = 0 net.ipv4.conf.all.route_localnet = 0 net.ipv4.conf.all.rp_filter = 0 net.ipv4.conf.all.secure_redirects = 1 net.ipv4.conf.all.send_redirects = 0 net.ipv4.conf.all.shared_media = 1 net.ipv4.conf.all.src_valid_mark = 0 net.ipv4.conf.all.tag = 0 net.ipv4.conf.default.accept_local = 0 net.ipv4.conf.default.accept_redirects = 0 net.ipv4.conf.default.accept_source_route = 0 net.ipv4.conf.default.arp_accept = 0 net.ipv4.conf.default.arp_announce = 0 net.ipv4.conf.default.arp_filter = 0 net.ipv4.conf.default.arp_ignore = 0 net.ipv4.conf.default.arp_notify = 0 net.ipv4.conf.default.bc_forwarding = 0 net.ipv4.conf.default.bootp_relay = 0 net.ipv4.conf.default.disable_policy = 0 net.ipv4.conf.default.disable_xfrm = 0 net.ipv4.conf.default.drop_gratuitous_arp = 0 net.ipv4.conf.default.drop_unicast_in_l2_multicast = 0 net.ipv4.conf.default.force_igmp_version = 0 net.ipv4.conf.default.forwarding = 1 net.ipv4.conf.default.igmpv2_unsolicited_report_interval = 10000 net.ipv4.conf.default.igmpv3_unsolicited_report_interval = 1000 net.ipv4.conf.default.ignore_routes_with_linkdown = 0 net.ipv4.conf.default.log_martians = 0 net.ipv4.conf.default.mc_forwarding = 0 net.ipv4.conf.default.medium_id = 0 net.ipv4.conf.default.promote_secondaries = 1 net.ipv4.conf.default.proxy_arp = 0 net.ipv4.conf.default.proxy_arp_pvlan = 0 net.ipv4.conf.default.route_localnet = 0 net.ipv4.conf.default.rp_filter = 1 net.ipv4.conf.default.secure_redirects = 1 net.ipv4.conf.default.send_redirects = 0 net.ipv4.conf.default.shared_media = 1 net.ipv4.conf.default.src_valid_mark = 0 net.ipv4.conf.default.tag = 0 net.ipv4.conf.docker0.accept_local = 0 net.ipv4.conf.docker0.accept_redirects = 0 net.ipv4.conf.docker0.accept_source_route = 0 net.ipv4.conf.docker0.arp_accept = 0 net.ipv4.conf.docker0.arp_announce = 0 net.ipv4.conf.docker0.arp_filter = 0 net.ipv4.conf.docker0.arp_ignore = 0 net.ipv4.conf.docker0.arp_notify = 0 net.ipv4.conf.docker0.bc_forwarding = 0 net.ipv4.conf.docker0.bootp_relay = 0 net.ipv4.conf.docker0.disable_policy = 0 net.ipv4.conf.docker0.disable_xfrm = 0 net.ipv4.conf.docker0.drop_gratuitous_arp = 0 net.ipv4.conf.docker0.drop_unicast_in_l2_multicast = 0 net.ipv4.conf.docker0.force_igmp_version = 0 net.ipv4.conf.docker0.forwarding = 1 net.ipv4.conf.docker0.igmpv2_unsolicited_report_interval = 10000 net.ipv4.conf.docker0.igmpv3_unsolicited_report_interval = 1000 net.ipv4.conf.docker0.ignore_routes_with_linkdown = 0 net.ipv4.conf.docker0.log_martians = 0 net.ipv4.conf.docker0.mc_forwarding = 0 net.ipv4.conf.docker0.medium_id = 0 net.ipv4.conf.docker0.promote_secondaries = 1 net.ipv4.conf.docker0.proxy_arp = 0 net.ipv4.conf.docker0.proxy_arp_pvlan = 0 net.ipv4.conf.docker0.route_localnet = 0 net.ipv4.conf.docker0.rp_filter = 1 net.ipv4.conf.docker0.secure_redirects = 1 net.ipv4.conf.docker0.send_redirects = 0 net.ipv4.conf.docker0.shared_media = 1 net.ipv4.conf.docker0.src_valid_mark = 0 net.ipv4.conf.docker0.tag = 0 net.ipv4.conf.enp0s3.accept_local = 0 net.ipv4.conf.enp0s3.accept_redirects = 0 net.ipv4.conf.enp0s3.accept_source_route = 0 net.ipv4.conf.enp0s3.arp_accept = 0 net.ipv4.conf.enp0s3.arp_announce = 0 net.ipv4.conf.enp0s3.arp_filter = 0 net.ipv4.conf.enp0s3.arp_ignore = 0 net.ipv4.conf.enp0s3.arp_notify = 0 net.ipv4.conf.enp0s3.bc_forwarding = 0 net.ipv4.conf.enp0s3.bootp_relay = 0 net.ipv4.conf.enp0s3.disable_policy = 0 net.ipv4.conf.enp0s3.disable_xfrm = 0 net.ipv4.conf.enp0s3.drop_gratuitous_arp = 0 net.ipv4.conf.enp0s3.drop_unicast_in_l2_multicast = 0 net.ipv4.conf.enp0s3.force_igmp_version = 0 net.ipv4.conf.enp0s3.forwarding = 1 net.ipv4.conf.enp0s3.igmpv2_unsolicited_report_interval = 10000 net.ipv4.conf.enp0s3.igmpv3_unsolicited_report_interval = 1000 net.ipv4.conf.enp0s3.ignore_routes_with_linkdown = 0 net.ipv4.conf.enp0s3.log_martians = 0 net.ipv4.conf.enp0s3.mc_forwarding = 0 net.ipv4.conf.enp0s3.medium_id = 0 net.ipv4.conf.enp0s3.promote_secondaries = 1 net.ipv4.conf.enp0s3.proxy_arp = 0 net.ipv4.conf.enp0s3.proxy_arp_pvlan = 0 net.ipv4.conf.enp0s3.route_localnet = 0 net.ipv4.conf.enp0s3.rp_filter = 1 net.ipv4.conf.enp0s3.secure_redirects = 1 net.ipv4.conf.enp0s3.send_redirects = 0 net.ipv4.conf.enp0s3.shared_media = 1 net.ipv4.conf.enp0s3.src_valid_mark = 0 net.ipv4.conf.enp0s3.tag = 0 net.ipv4.conf.lo.accept_local = 0 net.ipv4.conf.lo.accept_redirects = 1 net.ipv4.conf.lo.accept_source_route = 0 net.ipv4.conf.lo.arp_accept = 0 net.ipv4.conf.lo.arp_announce = 0 net.ipv4.conf.lo.arp_filter = 0 net.ipv4.conf.lo.arp_ignore = 0 net.ipv4.conf.lo.arp_notify = 0 net.ipv4.conf.lo.bc_forwarding = 0 net.ipv4.conf.lo.bootp_relay = 0 net.ipv4.conf.lo.disable_policy = 1 net.ipv4.conf.lo.disable_xfrm = 1 net.ipv4.conf.lo.drop_gratuitous_arp = 0 net.ipv4.conf.lo.drop_unicast_in_l2_multicast = 0 net.ipv4.conf.lo.force_igmp_version = 0 net.ipv4.conf.lo.forwarding = 1 net.ipv4.conf.lo.igmpv2_unsolicited_report_interval = 10000 net.ipv4.conf.lo.igmpv3_unsolicited_report_interval = 1000 net.ipv4.conf.lo.ignore_routes_with_linkdown = 0 net.ipv4.conf.lo.log_martians = 0 net.ipv4.conf.lo.mc_forwarding = 0 net.ipv4.conf.lo.medium_id = 0 net.ipv4.conf.lo.promote_secondaries = 1 net.ipv4.conf.lo.proxy_arp = 0 net.ipv4.conf.lo.proxy_arp_pvlan = 0 net.ipv4.conf.lo.route_localnet = 0 net.ipv4.conf.lo.rp_filter = 1 net.ipv4.conf.lo.secure_redirects = 1 net.ipv4.conf.lo.send_redirects = 1 net.ipv4.conf.lo.shared_media = 1 net.ipv4.conf.lo.src_valid_mark = 0 net.ipv4.conf.lo.tag = 0 net.ipv4.fib_multipath_hash_fields = 7 net.ipv4.fib_multipath_hash_policy = 0 net.ipv4.fib_multipath_use_neigh = 0 net.ipv4.fib_notify_on_flag_change = 0 net.ipv4.fib_sync_mem = 524288 net.ipv4.fwmark_reflect = 0 net.ipv4.icmp_echo_enable_probe = 0 net.ipv4.icmp_echo_ignore_all = 0 net.ipv4.icmp_echo_ignore_broadcasts = 1 net.ipv4.icmp_errors_use_inbound_ifaddr = 0 net.ipv4.icmp_ignore_bogus_error_responses = 1 net.ipv4.icmp_msgs_burst = 50 net.ipv4.icmp_msgs_per_sec = 1000 net.ipv4.icmp_ratelimit = 1000 net.ipv4.icmp_ratemask = 6168 net.ipv4.igmp_link_local_mcast_reports = 1 net.ipv4.igmp_max_memberships = 20 net.ipv4.igmp_max_msf = 10 net.ipv4.igmp_qrv = 2 net.ipv4.inet_peer_maxttl = 600 net.ipv4.inet_peer_minttl = 120 net.ipv4.inet_peer_threshold = 65664 net.ipv4.ip_autobind_reuse = 0 net.ipv4.ip_default_ttl = 64 net.ipv4.ip_dynaddr = 0 net.ipv4.ip_early_demux = 1 net.ipv4.ip_forward = 1 net.ipv4.ip_forward_update_priority = 1 net.ipv4.ip_forward_use_pmtu = 0 net.ipv4.ip_local_port_range = 9000 65500 net.ipv4.ip_local_reserved_ports = net.ipv4.ip_no_pmtu_disc = 0 net.ipv4.ip_nonlocal_bind = 0 net.ipv4.ip_unprivileged_port_start = 1024 net.ipv4.ipfrag_high_thresh = 4194304 net.ipv4.ipfrag_low_thresh = 3145728 net.ipv4.ipfrag_max_dist = 64 net.ipv4.ipfrag_secret_interval = 0 net.ipv4.ipfrag_time = 30 net.ipv4.neigh.default.anycast_delay = 100 net.ipv4.neigh.default.app_solicit = 0 net.ipv4.neigh.default.base_reachable_time_ms = 30000 net.ipv4.neigh.default.delay_first_probe_time = 5 net.ipv4.neigh.default.gc_interval = 30 net.ipv4.neigh.default.gc_stale_time = 60 net.ipv4.neigh.default.gc_thresh1 = 128 net.ipv4.neigh.default.gc_thresh2 = 512 net.ipv4.neigh.default.gc_thresh3 = 1024 net.ipv4.neigh.default.locktime = 100 net.ipv4.neigh.default.mcast_resolicit = 0 net.ipv4.neigh.default.mcast_solicit = 3 net.ipv4.neigh.default.proxy_delay = 80 net.ipv4.neigh.default.proxy_qlen = 64 net.ipv4.neigh.default.retrans_time_ms = 1000 net.ipv4.neigh.default.ucast_solicit = 3 net.ipv4.neigh.default.unres_qlen = 101 net.ipv4.neigh.default.unres_qlen_bytes = 212992 net.ipv4.neigh.docker0.anycast_delay = 100 net.ipv4.neigh.docker0.app_solicit = 0 net.ipv4.neigh.docker0.base_reachable_time_ms = 30000 net.ipv4.neigh.docker0.delay_first_probe_time = 5 net.ipv4.neigh.docker0.gc_stale_time = 60 net.ipv4.neigh.docker0.locktime = 100 net.ipv4.neigh.docker0.mcast_resolicit = 0 net.ipv4.neigh.docker0.mcast_solicit = 3 net.ipv4.neigh.docker0.proxy_delay = 80 net.ipv4.neigh.docker0.proxy_qlen = 64 net.ipv4.neigh.docker0.retrans_time_ms = 1000 net.ipv4.neigh.docker0.ucast_solicit = 3 net.ipv4.neigh.docker0.unres_qlen = 101 net.ipv4.neigh.docker0.unres_qlen_bytes = 212992 net.ipv4.neigh.enp0s3.anycast_delay = 100 net.ipv4.neigh.enp0s3.app_solicit = 0 net.ipv4.neigh.enp0s3.base_reachable_time_ms = 30000 net.ipv4.neigh.enp0s3.delay_first_probe_time = 5 net.ipv4.neigh.enp0s3.gc_stale_time = 60 net.ipv4.neigh.enp0s3.locktime = 100 net.ipv4.neigh.enp0s3.mcast_resolicit = 0 net.ipv4.neigh.enp0s3.mcast_solicit = 3 net.ipv4.neigh.enp0s3.proxy_delay = 80 net.ipv4.neigh.enp0s3.proxy_qlen = 64 net.ipv4.neigh.enp0s3.retrans_time_ms = 1000 net.ipv4.neigh.enp0s3.ucast_solicit = 3 net.ipv4.neigh.enp0s3.unres_qlen = 101 net.ipv4.neigh.enp0s3.unres_qlen_bytes = 212992 net.ipv4.neigh.lo.anycast_delay = 100 net.ipv4.neigh.lo.app_solicit = 0 net.ipv4.neigh.lo.base_reachable_time_ms = 30000 net.ipv4.neigh.lo.delay_first_probe_time = 5 net.ipv4.neigh.lo.gc_stale_time = 60 net.ipv4.neigh.lo.locktime = 100 net.ipv4.neigh.lo.mcast_resolicit = 0 net.ipv4.neigh.lo.mcast_solicit = 3 net.ipv4.neigh.lo.proxy_delay = 80 net.ipv4.neigh.lo.proxy_qlen = 64 net.ipv4.neigh.lo.retrans_time_ms = 1000 net.ipv4.neigh.lo.ucast_solicit = 3 net.ipv4.neigh.lo.unres_qlen = 101 net.ipv4.neigh.lo.unres_qlen_bytes = 212992 net.ipv4.nexthop_compat_mode = 1 net.ipv4.ping_group_range = 0 2147483647 net.ipv4.raw_l3mdev_accept = 1 net.ipv4.route.error_burst = 5000 net.ipv4.route.error_cost = 1000 net.ipv4.route.gc_elasticity = 8 net.ipv4.route.gc_interval = 60 net.ipv4.route.gc_min_interval = 0 net.ipv4.route.gc_min_interval_ms = 500 net.ipv4.route.gc_thresh = -1 net.ipv4.route.gc_timeout = 300 net.ipv4.route.max_size = 2147483647 net.ipv4.route.min_adv_mss = 256 net.ipv4.route.min_pmtu = 552 net.ipv4.route.mtu_expires = 600 net.ipv4.route.redirect_load = 20 net.ipv4.route.redirect_number = 9 net.ipv4.route.redirect_silence = 20480 net.ipv4.tcp_abort_on_overflow = 0 net.ipv4.tcp_adv_win_scale = 1 net.ipv4.tcp_allowed_congestion_control = reno cubic net.ipv4.tcp_app_win = 31 net.ipv4.tcp_autocorking = 1 net.ipv4.tcp_available_congestion_control = reno cubic net.ipv4.tcp_available_ulp = espintcp mptcp tls net.ipv4.tcp_base_mss = 1024 net.ipv4.tcp_challenge_ack_limit = 1000 net.ipv4.tcp_comp_sack_delay_ns = 1000000 net.ipv4.tcp_comp_sack_nr = 44 net.ipv4.tcp_comp_sack_slack_ns = 100000 net.ipv4.tcp_congestion_control = cubic net.ipv4.tcp_dsack = 1 net.ipv4.tcp_early_demux = 1 net.ipv4.tcp_early_retrans = 3 net.ipv4.tcp_ecn = 2 net.ipv4.tcp_ecn_fallback = 1 net.ipv4.tcp_fack = 0 net.ipv4.tcp_fastopen = 1027 net.ipv4.tcp_fastopen_blackhole_timeout_sec = 0 net.ipv4.tcp_fastopen_key = 45debd64-0fdd5285-1e7c6c53-666f8649 net.ipv4.tcp_fin_timeout = 60 net.ipv4.tcp_frto = 2 net.ipv4.tcp_fwmark_accept = 0 net.ipv4.tcp_invalid_ratelimit = 500 net.ipv4.tcp_keepalive_intvl = 75 net.ipv4.tcp_keepalive_probes = 9 net.ipv4.tcp_keepalive_time = 7200 net.ipv4.tcp_l3mdev_accept = 0 net.ipv4.tcp_limit_output_bytes = 1048576 net.ipv4.tcp_low_latency = 0 net.ipv4.tcp_max_orphans = 8192 net.ipv4.tcp_max_reordering = 300 net.ipv4.tcp_max_syn_backlog = 4096 net.ipv4.tcp_max_tw_buckets = 262144 net.ipv4.tcp_mem = 21783 29045 43566 net.ipv4.tcp_migrate_req = 0 net.ipv4.tcp_min_rtt_wlen = 300 net.ipv4.tcp_min_snd_mss = 48 net.ipv4.tcp_min_tso_segs = 2 net.ipv4.tcp_moderate_rcvbuf = 1 net.ipv4.tcp_mtu_probe_floor = 48 net.ipv4.tcp_mtu_probing = 0 net.ipv4.tcp_no_metrics_save = 0 net.ipv4.tcp_no_ssthresh_metrics_save = 1 net.ipv4.tcp_notsent_lowat = 4294967295 net.ipv4.tcp_orphan_retries = 0 net.ipv4.tcp_pacing_ca_ratio = 120 net.ipv4.tcp_pacing_ss_ratio = 200 net.ipv4.tcp_probe_interval = 600 net.ipv4.tcp_probe_threshold = 8 net.ipv4.tcp_recovery = 1 net.ipv4.tcp_reflect_tos = 0 net.ipv4.tcp_reordering = 3 net.ipv4.tcp_retrans_collapse = 1 net.ipv4.tcp_retries1 = 3 net.ipv4.tcp_retries2 = 15 net.ipv4.tcp_rfc1337 = 0 net.ipv4.tcp_rmem = 4096 131072 6291456 net.ipv4.tcp_sack = 1 net.ipv4.tcp_slow_start_after_idle = 0 net.ipv4.tcp_stdurg = 0 net.ipv4.tcp_syn_retries = 6 net.ipv4.tcp_synack_retries = 5 net.ipv4.tcp_syncookies = 1 net.ipv4.tcp_thin_linear_timeouts = 0 net.ipv4.tcp_timestamps = 1 net.ipv4.tcp_tso_win_divisor = 3 net.ipv4.tcp_tw_reuse = 2 net.ipv4.tcp_window_scaling = 1 net.ipv4.tcp_wmem = 4096 16384 4194304 net.ipv4.tcp_workaround_signed_windows = 0 net.ipv4.udp_early_demux = 1 net.ipv4.udp_l3mdev_accept = 0 net.ipv4.udp_mem = 43566 58091 87132 net.ipv4.udp_rmem_min = 4096 net.ipv4.udp_wmem_min = 4096 net.ipv4.xfrm4_gc_thresh = 32768 net.ipv6.anycast_src_echo_reply = 0 net.ipv6.auto_flowlabels = 1 net.ipv6.bindv6only = 0 net.ipv6.calipso_cache_bucket_size = 10 net.ipv6.calipso_cache_enable = 1 net.ipv6.conf.all.accept_dad = 0 net.ipv6.conf.all.accept_ra = 1 net.ipv6.conf.all.accept_ra_defrtr = 1 net.ipv6.conf.all.accept_ra_from_local = 0 net.ipv6.conf.all.accept_ra_min_hop_limit = 1 net.ipv6.conf.all.accept_ra_mtu = 1 net.ipv6.conf.all.accept_ra_pinfo = 1 net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0 net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0 net.ipv6.conf.all.accept_ra_rtr_pref = 1 net.ipv6.conf.all.accept_redirects = 0 net.ipv6.conf.all.accept_source_route = 0 net.ipv6.conf.all.addr_gen_mode = 0 net.ipv6.conf.all.autoconf = 1 net.ipv6.conf.all.dad_transmits = 1 net.ipv6.conf.all.disable_ipv6 = 0 net.ipv6.conf.all.disable_policy = 0 net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0 net.ipv6.conf.all.drop_unsolicited_na = 0 net.ipv6.conf.all.enhanced_dad = 1 net.ipv6.conf.all.force_mld_version = 0 net.ipv6.conf.all.force_tllao = 0 net.ipv6.conf.all.forwarding = 0 net.ipv6.conf.all.hop_limit = 64 net.ipv6.conf.all.ignore_routes_with_linkdown = 0 net.ipv6.conf.all.keep_addr_on_down = 0 net.ipv6.conf.all.max_addresses = 16 net.ipv6.conf.all.max_desync_factor = 600 net.ipv6.conf.all.mc_forwarding = 0 net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000 net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000 net.ipv6.conf.all.mtu = 1280 net.ipv6.conf.all.ndisc_notify = 0 net.ipv6.conf.all.ndisc_tclass = 0 net.ipv6.conf.all.optimistic_dad = 0 net.ipv6.conf.all.proxy_ndp = 0 net.ipv6.conf.all.ra_defrtr_metric = 1024 net.ipv6.conf.all.regen_max_retry = 3 net.ipv6.conf.all.router_probe_interval = 60 net.ipv6.conf.all.router_solicitation_delay = 1 net.ipv6.conf.all.router_solicitation_interval = 4 net.ipv6.conf.all.router_solicitation_max_interval = 3600 net.ipv6.conf.all.router_solicitations = -1 net.ipv6.conf.all.rpl_seg_enabled = 0 net.ipv6.conf.all.seg6_enabled = 0 net.ipv6.conf.all.suppress_frag_ndisc = 1 net.ipv6.conf.all.temp_prefered_lft = 86400 net.ipv6.conf.all.temp_valid_lft = 604800 net.ipv6.conf.all.use_oif_addrs_only = 0 net.ipv6.conf.all.use_optimistic = 0 net.ipv6.conf.all.use_tempaddr = 0 net.ipv6.conf.default.accept_dad = 1 net.ipv6.conf.default.accept_ra = 1 net.ipv6.conf.default.accept_ra_defrtr = 1 net.ipv6.conf.default.accept_ra_from_local = 0 net.ipv6.conf.default.accept_ra_min_hop_limit = 1 net.ipv6.conf.default.accept_ra_mtu = 1 net.ipv6.conf.default.accept_ra_pinfo = 1 net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0 net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0 net.ipv6.conf.default.accept_ra_rtr_pref = 1 net.ipv6.conf.default.accept_redirects = 0 net.ipv6.conf.default.accept_source_route = 0 net.ipv6.conf.default.addr_gen_mode = 0 net.ipv6.conf.default.autoconf = 1 net.ipv6.conf.default.dad_transmits = 1 net.ipv6.conf.default.disable_ipv6 = 0 net.ipv6.conf.default.disable_policy = 0 net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0 net.ipv6.conf.default.drop_unsolicited_na = 0 net.ipv6.conf.default.enhanced_dad = 1 net.ipv6.conf.default.force_mld_version = 0 net.ipv6.conf.default.force_tllao = 0 net.ipv6.conf.default.forwarding = 0 net.ipv6.conf.default.hop_limit = 64 net.ipv6.conf.default.ignore_routes_with_linkdown = 0 net.ipv6.conf.default.keep_addr_on_down = 0 net.ipv6.conf.default.max_addresses = 16 net.ipv6.conf.default.max_desync_factor = 600 net.ipv6.conf.default.mc_forwarding = 0 net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000 net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000 net.ipv6.conf.default.mtu = 1280 net.ipv6.conf.default.ndisc_notify = 0 net.ipv6.conf.default.ndisc_tclass = 0 net.ipv6.conf.default.optimistic_dad = 0 net.ipv6.conf.default.proxy_ndp = 0 net.ipv6.conf.default.ra_defrtr_metric = 1024 net.ipv6.conf.default.regen_max_retry = 3 net.ipv6.conf.default.router_probe_interval = 60 net.ipv6.conf.default.router_solicitation_delay = 1 net.ipv6.conf.default.router_solicitation_interval = 4 net.ipv6.conf.default.router_solicitation_max_interval = 3600 net.ipv6.conf.default.router_solicitations = -1 net.ipv6.conf.default.rpl_seg_enabled = 0 net.ipv6.conf.default.seg6_enabled = 0 net.ipv6.conf.default.suppress_frag_ndisc = 1 net.ipv6.conf.default.temp_prefered_lft = 86400 net.ipv6.conf.default.temp_valid_lft = 604800 net.ipv6.conf.default.use_oif_addrs_only = 0 net.ipv6.conf.default.use_optimistic = 0 net.ipv6.conf.default.use_tempaddr = 0 net.ipv6.conf.docker0.accept_dad = 1 net.ipv6.conf.docker0.accept_ra = 0 net.ipv6.conf.docker0.accept_ra_defrtr = 1 net.ipv6.conf.docker0.accept_ra_from_local = 0 net.ipv6.conf.docker0.accept_ra_min_hop_limit = 1 net.ipv6.conf.docker0.accept_ra_mtu = 1 net.ipv6.conf.docker0.accept_ra_pinfo = 1 net.ipv6.conf.docker0.accept_ra_rt_info_max_plen = 0 net.ipv6.conf.docker0.accept_ra_rt_info_min_plen = 0 net.ipv6.conf.docker0.accept_ra_rtr_pref = 1 net.ipv6.conf.docker0.accept_redirects = 0 net.ipv6.conf.docker0.accept_source_route = 0 net.ipv6.conf.docker0.addr_gen_mode = 0 net.ipv6.conf.docker0.autoconf = 1 net.ipv6.conf.docker0.dad_transmits = 1 net.ipv6.conf.docker0.disable_ipv6 = 0 net.ipv6.conf.docker0.disable_policy = 0 net.ipv6.conf.docker0.drop_unicast_in_l2_multicast = 0 net.ipv6.conf.docker0.drop_unsolicited_na = 0 net.ipv6.conf.docker0.enhanced_dad = 1 net.ipv6.conf.docker0.force_mld_version = 0 net.ipv6.conf.docker0.force_tllao = 0 net.ipv6.conf.docker0.forwarding = 0 net.ipv6.conf.docker0.hop_limit = 64 net.ipv6.conf.docker0.ignore_routes_with_linkdown = 0 net.ipv6.conf.docker0.keep_addr_on_down = 0 net.ipv6.conf.docker0.max_addresses = 16 net.ipv6.conf.docker0.max_desync_factor = 600 net.ipv6.conf.docker0.mc_forwarding = 0 net.ipv6.conf.docker0.mldv1_unsolicited_report_interval = 10000 net.ipv6.conf.docker0.mldv2_unsolicited_report_interval = 1000 net.ipv6.conf.docker0.mtu = 1500 net.ipv6.conf.docker0.ndisc_notify = 0 net.ipv6.conf.docker0.ndisc_tclass = 0 net.ipv6.conf.docker0.optimistic_dad = 0 net.ipv6.conf.docker0.proxy_ndp = 0 net.ipv6.conf.docker0.ra_defrtr_metric = 1024 net.ipv6.conf.docker0.regen_max_retry = 3 net.ipv6.conf.docker0.router_probe_interval = 60 net.ipv6.conf.docker0.router_solicitation_delay = 1 net.ipv6.conf.docker0.router_solicitation_interval = 4 net.ipv6.conf.docker0.router_solicitation_max_interval = 3600 net.ipv6.conf.docker0.router_solicitations = -1 net.ipv6.conf.docker0.rpl_seg_enabled = 0 net.ipv6.conf.docker0.seg6_enabled = 0 net.ipv6.conf.docker0.suppress_frag_ndisc = 1 net.ipv6.conf.docker0.temp_prefered_lft = 86400 net.ipv6.conf.docker0.temp_valid_lft = 604800 net.ipv6.conf.docker0.use_oif_addrs_only = 0 net.ipv6.conf.docker0.use_optimistic = 0 net.ipv6.conf.docker0.use_tempaddr = 0 net.ipv6.conf.enp0s3.accept_dad = 1 net.ipv6.conf.enp0s3.accept_ra = 0 net.ipv6.conf.enp0s3.accept_ra_defrtr = 1 net.ipv6.conf.enp0s3.accept_ra_from_local = 0 net.ipv6.conf.enp0s3.accept_ra_min_hop_limit = 1 net.ipv6.conf.enp0s3.accept_ra_mtu = 1 net.ipv6.conf.enp0s3.accept_ra_pinfo = 1 net.ipv6.conf.enp0s3.accept_ra_rt_info_max_plen = 0 net.ipv6.conf.enp0s3.accept_ra_rt_info_min_plen = 0 net.ipv6.conf.enp0s3.accept_ra_rtr_pref = 1 net.ipv6.conf.enp0s3.accept_redirects = 0 net.ipv6.conf.enp0s3.accept_source_route = 0 net.ipv6.conf.enp0s3.addr_gen_mode = 1 net.ipv6.conf.enp0s3.autoconf = 1 net.ipv6.conf.enp0s3.dad_transmits = 1 net.ipv6.conf.enp0s3.disable_ipv6 = 1 net.ipv6.conf.enp0s3.disable_policy = 0 net.ipv6.conf.enp0s3.drop_unicast_in_l2_multicast = 0 net.ipv6.conf.enp0s3.drop_unsolicited_na = 0 net.ipv6.conf.enp0s3.enhanced_dad = 1 net.ipv6.conf.enp0s3.force_mld_version = 0 net.ipv6.conf.enp0s3.force_tllao = 0 net.ipv6.conf.enp0s3.forwarding = 0 net.ipv6.conf.enp0s3.hop_limit = 64 net.ipv6.conf.enp0s3.ignore_routes_with_linkdown = 0 net.ipv6.conf.enp0s3.keep_addr_on_down = 0 net.ipv6.conf.enp0s3.max_addresses = 16 net.ipv6.conf.enp0s3.max_desync_factor = 600 net.ipv6.conf.enp0s3.mc_forwarding = 0 net.ipv6.conf.enp0s3.mldv1_unsolicited_report_interval = 10000 net.ipv6.conf.enp0s3.mldv2_unsolicited_report_interval = 1000 net.ipv6.conf.enp0s3.mtu = 1500 net.ipv6.conf.enp0s3.ndisc_notify = 0 net.ipv6.conf.enp0s3.ndisc_tclass = 0 net.ipv6.conf.enp0s3.optimistic_dad = 0 net.ipv6.conf.enp0s3.proxy_ndp = 0 net.ipv6.conf.enp0s3.ra_defrtr_metric = 1024 net.ipv6.conf.enp0s3.regen_max_retry = 3 net.ipv6.conf.enp0s3.router_probe_interval = 60 net.ipv6.conf.enp0s3.router_solicitation_delay = 1 net.ipv6.conf.enp0s3.router_solicitation_interval = 4 net.ipv6.conf.enp0s3.router_solicitation_max_interval = 3600 net.ipv6.conf.enp0s3.router_solicitations = -1 net.ipv6.conf.enp0s3.rpl_seg_enabled = 0 net.ipv6.conf.enp0s3.seg6_enabled = 0 net.ipv6.conf.enp0s3.suppress_frag_ndisc = 1 net.ipv6.conf.enp0s3.temp_prefered_lft = 86400 net.ipv6.conf.enp0s3.temp_valid_lft = 604800 net.ipv6.conf.enp0s3.use_oif_addrs_only = 0 net.ipv6.conf.enp0s3.use_optimistic = 0 net.ipv6.conf.enp0s3.use_tempaddr = 0 net.ipv6.conf.lo.accept_dad = -1 net.ipv6.conf.lo.accept_ra = 1 net.ipv6.conf.lo.accept_ra_defrtr = 1 net.ipv6.conf.lo.accept_ra_from_local = 0 net.ipv6.conf.lo.accept_ra_min_hop_limit = 1 net.ipv6.conf.lo.accept_ra_mtu = 1 net.ipv6.conf.lo.accept_ra_pinfo = 1 net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0 net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0 net.ipv6.conf.lo.accept_ra_rtr_pref = 1 net.ipv6.conf.lo.accept_redirects = 1 net.ipv6.conf.lo.accept_source_route = 0 net.ipv6.conf.lo.addr_gen_mode = 0 net.ipv6.conf.lo.autoconf = 1 net.ipv6.conf.lo.dad_transmits = 1 net.ipv6.conf.lo.disable_ipv6 = 0 net.ipv6.conf.lo.disable_policy = 0 net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0 net.ipv6.conf.lo.drop_unsolicited_na = 0 net.ipv6.conf.lo.enhanced_dad = 1 net.ipv6.conf.lo.force_mld_version = 0 net.ipv6.conf.lo.force_tllao = 0 net.ipv6.conf.lo.forwarding = 0 net.ipv6.conf.lo.hop_limit = 64 net.ipv6.conf.lo.ignore_routes_with_linkdown = 0 net.ipv6.conf.lo.keep_addr_on_down = 0 net.ipv6.conf.lo.max_addresses = 16 net.ipv6.conf.lo.max_desync_factor = 600 net.ipv6.conf.lo.mc_forwarding = 0 net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000 net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000 net.ipv6.conf.lo.mtu = 65536 net.ipv6.conf.lo.ndisc_notify = 0 net.ipv6.conf.lo.ndisc_tclass = 0 net.ipv6.conf.lo.optimistic_dad = 0 net.ipv6.conf.lo.proxy_ndp = 0 net.ipv6.conf.lo.ra_defrtr_metric = 1024 net.ipv6.conf.lo.regen_max_retry = 3 net.ipv6.conf.lo.router_probe_interval = 60 net.ipv6.conf.lo.router_solicitation_delay = 1 net.ipv6.conf.lo.router_solicitation_interval = 4 net.ipv6.conf.lo.router_solicitation_max_interval = 3600 net.ipv6.conf.lo.router_solicitations = -1 net.ipv6.conf.lo.rpl_seg_enabled = 0 net.ipv6.conf.lo.seg6_enabled = 0 net.ipv6.conf.lo.suppress_frag_ndisc = 1 net.ipv6.conf.lo.temp_prefered_lft = 86400 net.ipv6.conf.lo.temp_valid_lft = 604800 net.ipv6.conf.lo.use_oif_addrs_only = 0 net.ipv6.conf.lo.use_optimistic = 0 net.ipv6.conf.lo.use_tempaddr = -1 net.ipv6.fib_multipath_hash_fields = 7 net.ipv6.fib_multipath_hash_policy = 0 net.ipv6.fib_notify_on_flag_change = 0 net.ipv6.flowlabel_consistency = 1 net.ipv6.flowlabel_reflect = 0 net.ipv6.flowlabel_state_ranges = 0 net.ipv6.fwmark_reflect = 0 net.ipv6.icmp.echo_ignore_all = 0 net.ipv6.icmp.echo_ignore_anycast = 0 net.ipv6.icmp.echo_ignore_multicast = 0 net.ipv6.icmp.ratelimit = 1000 net.ipv6.icmp.ratemask = 0-1,3-127 net.ipv6.idgen_delay = 1 net.ipv6.idgen_retries = 3 net.ipv6.ip6frag_high_thresh = 4194304 net.ipv6.ip6frag_low_thresh = 3145728 net.ipv6.ip6frag_secret_interval = 0 net.ipv6.ip6frag_time = 60 net.ipv6.ip_nonlocal_bind = 0 net.ipv6.max_dst_opts_length = 2147483647 net.ipv6.max_dst_opts_number = 8 net.ipv6.max_hbh_length = 2147483647 net.ipv6.max_hbh_opts_number = 8 net.ipv6.mld_max_msf = 64 net.ipv6.mld_qrv = 2 net.ipv6.neigh.default.anycast_delay = 100 net.ipv6.neigh.default.app_solicit = 0 net.ipv6.neigh.default.base_reachable_time_ms = 30000 net.ipv6.neigh.default.delay_first_probe_time = 5 net.ipv6.neigh.default.gc_interval = 30 net.ipv6.neigh.default.gc_stale_time = 60 net.ipv6.neigh.default.gc_thresh1 = 128 net.ipv6.neigh.default.gc_thresh2 = 512 net.ipv6.neigh.default.gc_thresh3 = 1024 net.ipv6.neigh.default.locktime = 0 net.ipv6.neigh.default.mcast_resolicit = 0 net.ipv6.neigh.default.mcast_solicit = 3 net.ipv6.neigh.default.proxy_delay = 80 net.ipv6.neigh.default.proxy_qlen = 64 net.ipv6.neigh.default.retrans_time_ms = 1000 net.ipv6.neigh.default.ucast_solicit = 3 net.ipv6.neigh.default.unres_qlen = 101 net.ipv6.neigh.default.unres_qlen_bytes = 212992 net.ipv6.neigh.docker0.anycast_delay = 100 net.ipv6.neigh.docker0.app_solicit = 0 net.ipv6.neigh.docker0.base_reachable_time_ms = 30000 net.ipv6.neigh.docker0.delay_first_probe_time = 5 net.ipv6.neigh.docker0.gc_stale_time = 60 net.ipv6.neigh.docker0.locktime = 0 net.ipv6.neigh.docker0.mcast_resolicit = 0 net.ipv6.neigh.docker0.mcast_solicit = 3 net.ipv6.neigh.docker0.proxy_delay = 80 net.ipv6.neigh.docker0.proxy_qlen = 64 net.ipv6.neigh.docker0.retrans_time_ms = 1000 net.ipv6.neigh.docker0.ucast_solicit = 3 net.ipv6.neigh.docker0.unres_qlen = 101 net.ipv6.neigh.docker0.unres_qlen_bytes = 212992 net.ipv6.neigh.enp0s3.anycast_delay = 100 net.ipv6.neigh.enp0s3.app_solicit = 0 net.ipv6.neigh.enp0s3.base_reachable_time_ms = 30000 net.ipv6.neigh.enp0s3.delay_first_probe_time = 5 net.ipv6.neigh.enp0s3.gc_stale_time = 60 net.ipv6.neigh.enp0s3.locktime = 0 net.ipv6.neigh.enp0s3.mcast_resolicit = 0 net.ipv6.neigh.enp0s3.mcast_solicit = 3 net.ipv6.neigh.enp0s3.proxy_delay = 80 net.ipv6.neigh.enp0s3.proxy_qlen = 64 net.ipv6.neigh.enp0s3.retrans_time_ms = 1000 net.ipv6.neigh.enp0s3.ucast_solicit = 3 net.ipv6.neigh.enp0s3.unres_qlen = 101 net.ipv6.neigh.enp0s3.unres_qlen_bytes = 212992 net.ipv6.neigh.lo.anycast_delay = 100 net.ipv6.neigh.lo.app_solicit = 0 net.ipv6.neigh.lo.base_reachable_time_ms = 30000 net.ipv6.neigh.lo.delay_first_probe_time = 5 net.ipv6.neigh.lo.gc_stale_time = 60 net.ipv6.neigh.lo.locktime = 0 net.ipv6.neigh.lo.mcast_resolicit = 0 net.ipv6.neigh.lo.mcast_solicit = 3 net.ipv6.neigh.lo.proxy_delay = 80 net.ipv6.neigh.lo.proxy_qlen = 64 net.ipv6.neigh.lo.retrans_time_ms = 1000 net.ipv6.neigh.lo.ucast_solicit = 3 net.ipv6.neigh.lo.unres_qlen = 101 net.ipv6.neigh.lo.unres_qlen_bytes = 212992 net.ipv6.route.gc_elasticity = 9 net.ipv6.route.gc_interval = 30 net.ipv6.route.gc_min_interval = 0 net.ipv6.route.gc_min_interval_ms = 500 net.ipv6.route.gc_thresh = 1024 net.ipv6.route.gc_timeout = 60 net.ipv6.route.max_size = 4096 net.ipv6.route.min_adv_mss = 1220 net.ipv6.route.mtu_expires = 600 net.ipv6.route.skip_notify_on_dev_down = 0 net.ipv6.seg6_flowlabel = 0 net.ipv6.xfrm6_gc_thresh = 32768 net.mptcp.add_addr_timeout = 120 net.mptcp.allow_join_initial_addr_port = 1 net.mptcp.checksum_enabled = 0 net.mptcp.enabled = 0 net.mptcp.pm_type = 0 net.mptcp.stale_loss_cnt = 4 net.netfilter.nf_conntrack_acct = 0 net.netfilter.nf_conntrack_buckets = 65536 net.netfilter.nf_conntrack_checksum = 1 net.netfilter.nf_conntrack_count = 13 net.netfilter.nf_conntrack_dccp_loose = 1 net.netfilter.nf_conntrack_dccp_timeout_closereq = 64 net.netfilter.nf_conntrack_dccp_timeout_closing = 64 net.netfilter.nf_conntrack_dccp_timeout_open = 43200 net.netfilter.nf_conntrack_dccp_timeout_partopen = 480 net.netfilter.nf_conntrack_dccp_timeout_request = 240 net.netfilter.nf_conntrack_dccp_timeout_respond = 480 net.netfilter.nf_conntrack_dccp_timeout_timewait = 240 net.netfilter.nf_conntrack_events = 2 net.netfilter.nf_conntrack_expect_max = 1024 net.netfilter.nf_conntrack_frag6_high_thresh = 4194304 net.netfilter.nf_conntrack_frag6_low_thresh = 3145728 net.netfilter.nf_conntrack_frag6_timeout = 60 net.netfilter.nf_conntrack_generic_timeout = 600 net.netfilter.nf_conntrack_gre_timeout = 30 net.netfilter.nf_conntrack_gre_timeout_stream = 180 net.netfilter.nf_conntrack_helper = 0 net.netfilter.nf_conntrack_icmp_timeout = 30 net.netfilter.nf_conntrack_icmpv6_timeout = 30 net.netfilter.nf_conntrack_log_invalid = 0 net.netfilter.nf_conntrack_max = 65536 net.netfilter.nf_conntrack_sctp_timeout_closed = 10 net.netfilter.nf_conntrack_sctp_timeout_cookie_echoed = 3 net.netfilter.nf_conntrack_sctp_timeout_cookie_wait = 3 net.netfilter.nf_conntrack_sctp_timeout_established = 432000 net.netfilter.nf_conntrack_sctp_timeout_heartbeat_acked = 210 net.netfilter.nf_conntrack_sctp_timeout_heartbeat_sent = 30 net.netfilter.nf_conntrack_sctp_timeout_shutdown_ack_sent = 3 net.netfilter.nf_conntrack_sctp_timeout_shutdown_recd = 0 net.netfilter.nf_conntrack_sctp_timeout_shutdown_sent = 0 net.netfilter.nf_conntrack_tcp_be_liberal = 0 net.netfilter.nf_conntrack_tcp_ignore_invalid_rst = 0 net.netfilter.nf_conntrack_tcp_loose = 1 net.netfilter.nf_conntrack_tcp_max_retrans = 3 net.netfilter.nf_conntrack_tcp_timeout_close = 10 net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60 net.netfilter.nf_conntrack_tcp_timeout_established = 432000 net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120 net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30 net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300 net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60 net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120 net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120 net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300 net.netfilter.nf_conntrack_timestamp = 0 net.netfilter.nf_conntrack_udp_timeout = 30 net.netfilter.nf_conntrack_udp_timeout_stream = 120 net.netfilter.nf_flowtable_tcp_timeout = 30 net.netfilter.nf_flowtable_udp_timeout = 30 net.netfilter.nf_log.0 = NONE net.netfilter.nf_log.1 = NONE net.netfilter.nf_log.10 = NONE net.netfilter.nf_log.11 = NONE net.netfilter.nf_log.12 = NONE net.netfilter.nf_log.2 = NONE net.netfilter.nf_log.3 = NONE net.netfilter.nf_log.4 = NONE net.netfilter.nf_log.5 = NONE net.netfilter.nf_log.6 = NONE net.netfilter.nf_log.7 = NONE net.netfilter.nf_log.8 = NONE net.netfilter.nf_log.9 = NONE net.netfilter.nf_log_all_netns = 0 net.nf_conntrack_max = 65536 net.unix.max_dgram_qlen = 512 sunrpc.max_resvport = 1023 sunrpc.min_resvport = 665 sunrpc.nfs_debug = 0x0000 sunrpc.nfsd_debug = 0x0000 sunrpc.nlm_debug = 0x0000 sunrpc.rpc_debug = 0x0000 sunrpc.tcp_fin_timeout = 15 sunrpc.tcp_max_slot_table_entries = 65536 sunrpc.tcp_slot_table_entries = 2 sunrpc.transports = tcp 1048576 sunrpc.transports = udp 32768 sunrpc.udp_slot_table_entries = 16 user.max_cgroup_namespaces = 7622 user.max_fanotify_groups = 128 user.max_fanotify_marks = 15416 user.max_inotify_instances = 128 user.max_inotify_watches = 14520 user.max_ipc_namespaces = 7622 user.max_mnt_namespaces = 7622 user.max_net_namespaces = 7622 user.max_pid_namespaces = 7622 user.max_time_namespaces = 7622 user.max_user_namespaces = 7622 user.max_uts_namespaces = 7622 vm.admin_reserve_kbytes = 8192 vm.compact_unevictable_allowed = 1 vm.compaction_proactiveness = 20 vm.dirty_background_bytes = 0 vm.dirty_background_ratio = 10 vm.dirty_bytes = 0 vm.dirty_expire_centisecs = 3000 vm.dirty_ratio = 20 vm.dirty_writeback_centisecs = 500 vm.dirtytime_expire_seconds = 43200 vm.extfrag_threshold = 500 vm.hugetlb_shm_group = 0 vm.laptop_mode = 0 vm.legacy_va_layout = 0 vm.lowmem_reserve_ratio = 256 256 32 0 0 vm.max_map_count = 65530 vm.memory_failure_early_kill = 0 vm.memory_failure_recovery = 1 vm.min_free_kbytes = 45056 vm.min_slab_ratio = 5 vm.min_unmapped_ratio = 1 vm.mmap_min_addr = 65536 vm.mmap_rnd_bits = 28 vm.mmap_rnd_compat_bits = 8 vm.nr_hugepages = 0 vm.nr_hugepages_mempolicy = 0 vm.nr_overcommit_hugepages = 0 vm.numa_stat = 1 vm.numa_zonelist_order = Node vm.oom_dump_tasks = 1 vm.oom_kill_allocating_task = 0 vm.overcommit_kbytes = 0 vm.overcommit_memory = 0 vm.overcommit_ratio = 50 vm.page-cluster = 3 vm.page_lock_unfairness = 5 vm.panic_on_oom = 0 vm.percpu_pagelist_high_fraction = 0 vm.stat_interval = 1 vm.swappiness = 20 vm.unprivileged_userfaultfd = 1 vm.user_reserve_kbytes = 60033 vm.vfs_cache_pressure = 100 vm.watermark_boost_factor = 15000 vm.watermark_scale_factor = 10 vm.zone_reclaim_mode = 0 [root@RockyLinux ~]# |
이 명령의 결과가 너무 길어서 그 결과를 모두 한꺼번에 나타내지는 못했지만 설정된 모든 값들의 의미를 확인해보기 바란다.
다음은 이 실행의 결과과 몇 개인가를 wc로 확인해 본 것이다.
참고하기 바란다.
[root@RockyLinux ~]# sysctl -a | wc -l 1130 [root@RockyLinux ~]# |
현재 이 리눅스시스템에서 “sysctl -a”의 결과는 모두 1130행이며 이것은 sysctl로 설정할 수 있는 값이 1130가지임을 의미한다.
결론적으로 우리는 이 결과를 통해 1130가지의 설정들을 함으로서 각 상황에 맞는 시스템튜닝을 할 수 있다는 것을 알아야 한다.
그리고 이번에 이 방법들에 대해서 배우게 될 것이다.
앞의 예는 커널파라미터(kernel parameter)의 값들을 모두 확인하였지만 이번에는 조금 응용하여 특정파라미터값을 확인하는 방법을 설명하겠다.
다음과 같이 특정파라미터값만을 확인하고자 할 때에는 다음 예와 같이 “sysctl -a”의 결과를 특정문자열에 해당하는 패턴행만을 grep으로 잡아서 확인하면 된다.
다음의 예는 kernel.max라는 파라미터의 값만을 확인한 것이다.
[root@RockyLinux ~]# sysctl -a | grep kernel.max kernel.max_lock_depth = 1024 kernel.max_rcu_stall_to_panic = 0 [root@RockyLinux ~]# |
그리고 다음은 sysrq, file-max, 그리고 mem에 관한 커널파라미터(kernel parameter)값을 확인한 것이다.
[root@RockyLinux ~]# sysctl -a | grep sysrq kernel.sysrq = 16 [root@RockyLinux ~]# [root@RockyLinux ~]# [root@RockyLinux ~]# sysctl -a | grep file-max fs.file-max = 6815744 [root@RockyLinux ~]# [root@RockyLinux ~]# sysctl -a | grep mem net.core.optmem_max = 81920 net.core.rmem_default = 262144 net.core.rmem_max = 4194304 net.core.wmem_default = 262144 net.core.wmem_max = 1048576 net.ipv4.fib_sync_mem = 524288 net.ipv4.igmp_max_memberships = 20 net.ipv4.tcp_mem = 21783 29045 43566 net.ipv4.tcp_rmem = 4096 131072 6291456 net.ipv4.tcp_wmem = 4096 16384 4194304 net.ipv4.udp_mem = 43566 58091 87132 net.ipv4.udp_rmem_min = 4096 net.ipv4.udp_wmem_min = 4096 vm.lowmem_reserve_ratio = 256 256 32 0 0 vm.memory_failure_early_kill = 0 vm.memory_failure_recovery = 1 vm.nr_hugepages_mempolicy = 0 vm.overcommit_memory = 0 [root@RockyLinux ~]# |
위의 예에서 실행된 3가지 명령들의 의미는 다음과 같다.
sysctl -a | grep sysrq
커널파라미터(kernel parameter)중 sysrq(매직키)에 관한 설정 값을 확인한 것이며,
sysctl -a | grep file-max
두번째 예는 file-max(오픈가능한 최대파일수)에 관한 설정값을 확인한 것이며,
sysctl -a | grep mem
셋번째 예는 mem(메모리)에 관한 설정값을 확인한 것이다.
물론, 다음과 같이 grep을 이용하여 커널파라미터(kernel parameter)의 설정값들 중 원하는 값들만을 확인할 수 있다.
다음은 kernel.panic와 관련된 커널파라미터(kernel parameter)값만을 확인한 것이다.
[root@RockyLinux ~]# sysctl -a | grep kernel.panic kernel.panic = 0 kernel.panic_on_io_nmi = 0 kernel.panic_on_oops = 1 kernel.panic_on_rcu_stall = 0 kernel.panic_on_unrecovered_nmi = 0 kernel.panic_on_warn = 0 kernel.panic_print = 0 [root@RockyLinux ~]# |
그리고 다음은 파일시스템과 관련된 “fs.”에 해당하는 파라미터값들만 확인한 것이다.
[root@RockyLinux ~]# sysctl -a | grep fs. fs.aio-max-nr = 1048576 fs.aio-nr = 0 fs.binfmt_misc.status = enabled fs.dentry-state = 78388 58698 45 0 6745 0 fs.dir-notify-enable = 1 fs.epoll.max_user_watches = 434376 fs.fanotify.max_queued_events = 16384 fs.fanotify.max_user_groups = 128 fs.fanotify.max_user_marks = 15416 fs.file-max = 6815744 fs.file-nr = 4512 0 6815744 fs.inode-nr = 71787 966 fs.inode-state = 71787 966 0 0 0 0 0 fs.inotify.max_queued_events = 16384 fs.inotify.max_user_instances = 128 fs.inotify.max_user_watches = 14520 fs.lease-break-time = 45 fs.leases-enable = 1 fs.mount-max = 100000 fs.mqueue.msg_default = 10 fs.mqueue.msg_max = 10 fs.mqueue.msgsize_default = 8192 fs.mqueue.msgsize_max = 8192 fs.mqueue.queues_max = 256 fs.nr_open = 1073741816 fs.overflowgid = 65534 fs.overflowuid = 65534 fs.pipe-max-size = 1048576 fs.pipe-user-pages-hard = 0 fs.pipe-user-pages-soft = 16384 fs.protected_fifos = 1 fs.protected_hardlinks = 1 fs.protected_regular = 1 fs.protected_symlinks = 1 fs.quota.allocated_dquots = 0 fs.quota.cache_hits = 0 fs.quota.drops = 0 fs.quota.free_dquots = 0 fs.quota.lookups = 0 fs.quota.reads = 0 fs.quota.syncs = 0 fs.quota.warnings = 1 fs.quota.writes = 0 fs.suid_dumpable = 2 fs.xfs.error_level = 3 fs.xfs.filestream_centisecs = 3000 fs.xfs.inherit_noatime = 1 fs.xfs.inherit_nodefrag = 1 fs.xfs.inherit_nodump = 1 fs.xfs.inherit_nosymlinks = 0 fs.xfs.inherit_sync = 1 fs.xfs.irix_sgid_inherit = 0 fs.xfs.irix_symlink_mode = 0 fs.xfs.panic_mask = 0 fs.xfs.rotorstep = 1 fs.xfs.speculative_cow_prealloc_lifetime = 300 fs.xfs.speculative_prealloc_lifetime = 300 fs.xfs.stats_clear = 0 fs.xfs.xfssyncd_centisecs = 3000 kernel.firmware_config.force_sysfs_fallback = 0 kernel.firmware_config.ignore_sysfs_fallback = 0 kernel.sched_cfs_bandwidth_slice_us = 5000 sunrpc.nfs_debug = 0x0000 sunrpc.nfsd_debug = 0x0000 vm.vfs_cache_pressure = 100 [root@RockyLinux ~]# |
이렇게 수많은 커널파라미터(kernel parameter)값들 가운데 우리가 원하는 파라미터값만을 확인할 수 있다.
관련자료
-
이전
-
다음