강좌
클라우드/리눅스에 관한 강좌입니다.
리눅스 분류

sysctl과 커널파라미터(kernel parameter) 이란?

작성자 정보

  • 관리자 작성
  • 작성일

컨텐츠 정보

본문

sysctl과 커널파라미터(kernel parameter) 이란?

 

 

 

 

/proc 파일시스템의 디렉토리에 존재하는 파일들을 직접 수정및 변경하는 방법으로 커널옵션값을 조절한다.

 

 

 

 

 

 

이번에는 /proc/sys 파일시스템 내의 파일들을 직접 수정하지 않아도 커널옵션들을 변경할 수있는 명령어인 sysctl을 이용하여 지금까지의 작업을 동일하게 할 수 있는 방법에 대해서 알아볼 것이다.

 

 

 

 

 

 

sysctl man page를 확인해보면 sysctl“configure kernel parameters at runtime”이라고 정의되어있다.

 

 

 

 

즉 커널파라미터(kernel parameter)값을 설정하는 명령어란 것이다.

 

 

 

 

 

 

, 그럼 sysctl을 이용하여 커널옵션들을 확인하고 수정하는 방법에 대해서 알아보도록 하겠다.

 

 

 

 

 

 

 

커널옵션값 전체 확인하는 방법

 

 

 

 

이제 커널파라미터(kernel parameter)라는 커널옵션값들이 어떤 것들이 있는가를 확인해보도록 하자. 먼저, “sysctl -a”라고 하면 커널설정값들을 모두 확인할 수 있다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a

abi.vsyscall32 = 1

crypto.fips_enabled = 0

crypto.fips_name = Rocky Linux 9 - Kernel Cryptographic API

crypto.fips_version = 5.14.0-162.23.1.el9_1.x86_64

debug.exception-trace = 1

debug.kprobes-optimization = 1

dev.cdrom.autoclose = 1

dev.cdrom.autoeject = 0

dev.cdrom.check_media = 0

dev.cdrom.debug = 0

dev.cdrom.info = CD-ROM information, Id: cdrom.c 3.20 2003/12/17

dev.cdrom.info =

dev.cdrom.info = drive name:            sr1     sr0

dev.cdrom.info = drive speed:           32      32

dev.cdrom.info = drive # of slots:      1       1

dev.cdrom.info = Can close tray:                1       1

dev.cdrom.info = Can open tray:         1       1

dev.cdrom.info = Can lock tray:         1       1

dev.cdrom.info = Can change speed:      1       1

dev.cdrom.info = Can select disk:       0       0

dev.cdrom.info = Can read multisession: 1       1

dev.cdrom.info = Can read MCN:          1       1

dev.cdrom.info = Reports media changed: 1       1

dev.cdrom.info = Can play audio:                1       1

dev.cdrom.info = Can write CD-R:                0       0

dev.cdrom.info = Can write CD-RW:       0       0

dev.cdrom.info = Can read DVD:          1       1

dev.cdrom.info = Can write DVD-R:       0       0

dev.cdrom.info = Can write DVD-RAM:     0       0

dev.cdrom.info = Can read MRW:          1       1

dev.cdrom.info = Can write MRW:         1       1

dev.cdrom.info = Can write RAM:         1       1

dev.cdrom.info =

dev.cdrom.info =

dev.cdrom.lock = 1

dev.hpet.max-user-freq = 64

dev.raid.speed_limit_max = 200000

dev.raid.speed_limit_min = 1000

dev.scsi.logging_level = 0

dev.tty.ldisc_autoload = 1

fs.aio-max-nr = 1048576

fs.aio-nr = 0

fs.binfmt_misc.status = enabled

fs.dentry-state = 76142 56450   45      0       5820    0

fs.dir-notify-enable = 1

fs.epoll.max_user_watches = 434376

fs.fanotify.max_queued_events = 16384

fs.fanotify.max_user_groups = 128

fs.fanotify.max_user_marks = 15416

fs.file-max = 6815744

fs.file-nr = 4512       0       6815744

fs.inode-nr = 70470     966

fs.inode-state = 70470  966     0       0       0       0       0

fs.inotify.max_queued_events = 16384

fs.inotify.max_user_instances = 128

fs.inotify.max_user_watches = 14520

fs.lease-break-time = 45

fs.leases-enable = 1

fs.mount-max = 100000

fs.mqueue.msg_default = 10

fs.mqueue.msg_max = 10

fs.mqueue.msgsize_default = 8192

fs.mqueue.msgsize_max = 8192

fs.mqueue.queues_max = 256

fs.nr_open = 1073741816

fs.overflowgid = 65534

fs.overflowuid = 65534

fs.pipe-max-size = 1048576

fs.pipe-user-pages-hard = 0

fs.pipe-user-pages-soft = 16384

fs.protected_fifos = 1

fs.protected_hardlinks = 1

fs.protected_regular = 1

fs.protected_symlinks = 1

fs.quota.allocated_dquots = 0

fs.quota.cache_hits = 0

fs.quota.drops = 0

fs.quota.free_dquots = 0

fs.quota.lookups = 0

fs.quota.reads = 0

fs.quota.syncs = 0

fs.quota.warnings = 1

fs.quota.writes = 0

fs.suid_dumpable = 2

fs.xfs.error_level = 3

fs.xfs.filestream_centisecs = 3000

fs.xfs.inherit_noatime = 1

fs.xfs.inherit_nodefrag = 1

fs.xfs.inherit_nodump = 1

fs.xfs.inherit_nosymlinks = 0

fs.xfs.inherit_sync = 1

fs.xfs.irix_sgid_inherit = 0

fs.xfs.irix_symlink_mode = 0

fs.xfs.panic_mask = 0

fs.xfs.rotorstep = 1

fs.xfs.speculative_cow_prealloc_lifetime = 300

fs.xfs.speculative_prealloc_lifetime = 300

fs.xfs.stats_clear = 0

fs.xfs.xfssyncd_centisecs = 3000

kernel.acct = 4 2       30

kernel.acpi_video_flags = 0

kernel.auto_msgmni = 0

kernel.bootloader_type = 6

kernel.bootloader_version = 38

kernel.bpf_stats_enabled = 0

kernel.cad_pid = 1

kernel.cap_last_cap = 40

kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h

kernel.core_pipe_limit = 16

kernel.core_uses_pid = 1

kernel.ctrl-alt-del = 0

kernel.dmesg_restrict = 0

kernel.domainname = (none)

kernel.firmware_config.force_sysfs_fallback = 0

kernel.firmware_config.ignore_sysfs_fallback = 0

kernel.ftrace_dump_on_oops = 0

kernel.ftrace_enabled = 1

kernel.hardlockup_all_cpu_backtrace = 0

kernel.hardlockup_panic = 1

kernel.hostname = RockyLinux

kernel.hung_task_all_cpu_backtrace = 0

kernel.hung_task_check_count = 4194304

kernel.hung_task_check_interval_secs = 0

kernel.hung_task_panic = 0

kernel.hung_task_timeout_secs = 120

kernel.hung_task_warnings = 10

kernel.io_delay_type = 0

kernel.kexec_load_disabled = 0

kernel.keys.gc_delay = 300

kernel.keys.maxbytes = 20000

kernel.keys.maxkeys = 200

kernel.keys.persistent_keyring_expiry = 259200

kernel.keys.root_maxbytes = 25000000

kernel.keys.root_maxkeys = 1000000

kernel.kptr_restrict = 1

kernel.max_lock_depth = 1024

kernel.max_rcu_stall_to_panic = 0

kernel.modprobe = /usr/sbin/modprobe

kernel.modules_disabled = 0

kernel.msg_next_id = -1

kernel.msgmax = 8192

kernel.msgmnb = 16384

kernel.msgmni = 32000

kernel.ngroups_max = 65536

kernel.nmi_watchdog = 0

kernel.ns_last_pid = 2291

kernel.numa_balancing = 0

kernel.oops_all_cpu_backtrace = 0

kernel.osrelease = 5.14.0-162.23.1.el9_1.x86_64

kernel.ostype = Linux

kernel.overflowgid = 65534

kernel.overflowuid = 65534

kernel.panic = 0

kernel.panic_on_io_nmi = 0

kernel.panic_on_oops = 1

kernel.panic_on_rcu_stall = 0

kernel.panic_on_unrecovered_nmi = 0

kernel.panic_on_warn = 0

kernel.panic_print = 0

kernel.perf_cpu_time_max_percent = 25

kernel.perf_event_max_contexts_per_stack = 8

kernel.perf_event_max_sample_rate = 100000

kernel.perf_event_max_stack = 127

kernel.perf_event_mlock_kb = 516

kernel.perf_event_paranoid = 2

kernel.pid_max = 4194304

kernel.poweroff_cmd = /sbin/poweroff

kernel.print-fatal-signals = 0

kernel.printk = 4       4       1       7

kernel.printk_delay = 0

kernel.printk_devkmsg = on

kernel.printk_ratelimit = 5

kernel.printk_ratelimit_burst = 10

kernel.pty.max = 4096

kernel.pty.nr = 1

kernel.pty.reserve = 1024

kernel.random.boot_id = a6fa6ce2-d981-4ed7-813c-dcf437a0217c

kernel.random.entropy_avail = 0

kernel.random.poolsize = 256

kernel.random.urandom_min_reseed_secs = 300

kernel.random.uuid = 1725a1ab-1395-40b7-8f4b-471be3e65724

kernel.random.write_wakeup_threshold = 256

kernel.randomize_va_space = 2

kernel.real-root-dev = 0

kernel.sched_autogroup_enabled = 1

kernel.sched_cfs_bandwidth_slice_us = 5000

kernel.sched_child_runs_first = 0

kernel.sched_deadline_period_max_us = 4194304

kernel.sched_deadline_period_min_us = 100

kernel.sched_energy_aware = 1

kernel.sched_rr_timeslice_ms = 100

kernel.sched_rt_period_us = 1000000

kernel.sched_rt_runtime_us = 950000

kernel.sched_schedstats = 0

kernel.seccomp.actions_avail = kill_process kill_thread trap errno user_notif trace log allow

kernel.seccomp.actions_logged = kill_process kill_thread trap errno user_notif trace log

kernel.sem = 250        32000   100     128

kernel.sem_next_id = -1

kernel.shm_next_id = -1

kernel.shm_rmid_forced = 0

kernel.shmall = 4294967296

kernel.shmmax = 68719476736

kernel.shmmni = 4096

kernel.soft_watchdog = 1

kernel.softlockup_all_cpu_backtrace = 0

kernel.softlockup_panic = 0

kernel.stack_tracer_enabled = 0

kernel.sysctl_writes_strict = 1

kernel.sysrq = 16

kernel.tainted = 0

kernel.task_delayacct = 0

kernel.threads-max = 15244

kernel.timer_migration = 1

kernel.traceoff_on_warning = 0

kernel.tracepoint_printk = 0

kernel.unknown_nmi_panic = 0

kernel.unprivileged_bpf_disabled = 2

kernel.usermodehelper.bset = 4294967295 511

kernel.usermodehelper.inheritable = 4294967295  511

kernel.version = #1 SMP PREEMPT_DYNAMIC Tue Apr 11 19:09:37 UTC 2023

kernel.watchdog = 1

kernel.watchdog_cpumask = 0

kernel.watchdog_thresh = 10

kernel.yama.ptrace_scope = 0

net.bridge.bridge-nf-call-arptables = 1

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-iptables = 1

net.bridge.bridge-nf-filter-pppoe-tagged = 0

net.bridge.bridge-nf-filter-vlan-tagged = 0

net.bridge.bridge-nf-pass-vlan-input-dev = 0

net.core.bpf_jit_enable = 1

net.core.bpf_jit_harden = 1

net.core.bpf_jit_kallsyms = 1

net.core.bpf_jit_limit = 264241152

net.core.busy_poll = 0

net.core.busy_read = 0

net.core.default_qdisc = fq_codel

net.core.dev_weight = 64

net.core.dev_weight_rx_bias = 1

net.core.dev_weight_tx_bias = 1

net.core.devconf_inherit_init_net = 0

net.core.fb_tunnels_only_for_init_net = 0

net.core.flow_limit_cpu_bitmap = 0

net.core.flow_limit_table_len = 4096

net.core.gro_normal_batch = 8

net.core.high_order_alloc_disable = 0

net.core.max_skb_frags = 17

net.core.message_burst = 10

net.core.message_cost = 5

net.core.netdev_budget = 300

net.core.netdev_budget_usecs = 2000

net.core.netdev_max_backlog = 1000

net.core.netdev_rss_key = 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00

net.core.netdev_tstamp_prequeue = 1

net.core.netdev_unregister_timeout_secs = 10

net.core.optmem_max = 81920

net.core.rmem_default = 262144

net.core.rmem_max = 4194304

net.core.rps_sock_flow_entries = 0

net.core.somaxconn = 4096

net.core.tstamp_allow_data = 1

net.core.warnings = 0

net.core.wmem_default = 262144

net.core.wmem_max = 1048576

net.core.xfrm_acq_expires = 30

net.core.xfrm_aevent_etime = 10

net.core.xfrm_aevent_rseqth = 2

net.core.xfrm_larval_drop = 1

net.ipv4.cipso_cache_bucket_size = 10

net.ipv4.cipso_cache_enable = 1

net.ipv4.cipso_rbm_optfmt = 0

net.ipv4.cipso_rbm_strictvalid = 1

net.ipv4.conf.all.accept_local = 0

net.ipv4.conf.all.accept_redirects = 0

net.ipv4.conf.all.accept_source_route = 0

net.ipv4.conf.all.arp_accept = 0

net.ipv4.conf.all.arp_announce = 0

net.ipv4.conf.all.arp_filter = 0

net.ipv4.conf.all.arp_ignore = 0

net.ipv4.conf.all.arp_notify = 0

net.ipv4.conf.all.bc_forwarding = 0

net.ipv4.conf.all.bootp_relay = 0

net.ipv4.conf.all.disable_policy = 0

net.ipv4.conf.all.disable_xfrm = 0

net.ipv4.conf.all.drop_gratuitous_arp = 0

net.ipv4.conf.all.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.all.force_igmp_version = 0

net.ipv4.conf.all.forwarding = 1

net.ipv4.conf.all.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.all.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.all.ignore_routes_with_linkdown = 0

net.ipv4.conf.all.log_martians = 0

net.ipv4.conf.all.mc_forwarding = 0

net.ipv4.conf.all.medium_id = 0

net.ipv4.conf.all.promote_secondaries = 0

net.ipv4.conf.all.proxy_arp = 0

net.ipv4.conf.all.proxy_arp_pvlan = 0

net.ipv4.conf.all.route_localnet = 0

net.ipv4.conf.all.rp_filter = 0

net.ipv4.conf.all.secure_redirects = 1

net.ipv4.conf.all.send_redirects = 0

net.ipv4.conf.all.shared_media = 1

net.ipv4.conf.all.src_valid_mark = 0

net.ipv4.conf.all.tag = 0

net.ipv4.conf.default.accept_local = 0

net.ipv4.conf.default.accept_redirects = 0

net.ipv4.conf.default.accept_source_route = 0

net.ipv4.conf.default.arp_accept = 0

net.ipv4.conf.default.arp_announce = 0

net.ipv4.conf.default.arp_filter = 0

net.ipv4.conf.default.arp_ignore = 0

net.ipv4.conf.default.arp_notify = 0

net.ipv4.conf.default.bc_forwarding = 0

net.ipv4.conf.default.bootp_relay = 0

net.ipv4.conf.default.disable_policy = 0

net.ipv4.conf.default.disable_xfrm = 0

net.ipv4.conf.default.drop_gratuitous_arp = 0

net.ipv4.conf.default.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.default.force_igmp_version = 0

net.ipv4.conf.default.forwarding = 1

net.ipv4.conf.default.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.default.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.default.ignore_routes_with_linkdown = 0

net.ipv4.conf.default.log_martians = 0

net.ipv4.conf.default.mc_forwarding = 0

net.ipv4.conf.default.medium_id = 0

net.ipv4.conf.default.promote_secondaries = 1

net.ipv4.conf.default.proxy_arp = 0

net.ipv4.conf.default.proxy_arp_pvlan = 0

net.ipv4.conf.default.route_localnet = 0

net.ipv4.conf.default.rp_filter = 1

net.ipv4.conf.default.secure_redirects = 1

net.ipv4.conf.default.send_redirects = 0

net.ipv4.conf.default.shared_media = 1

net.ipv4.conf.default.src_valid_mark = 0

net.ipv4.conf.default.tag = 0

net.ipv4.conf.docker0.accept_local = 0

net.ipv4.conf.docker0.accept_redirects = 0

net.ipv4.conf.docker0.accept_source_route = 0

net.ipv4.conf.docker0.arp_accept = 0

net.ipv4.conf.docker0.arp_announce = 0

net.ipv4.conf.docker0.arp_filter = 0

net.ipv4.conf.docker0.arp_ignore = 0

net.ipv4.conf.docker0.arp_notify = 0

net.ipv4.conf.docker0.bc_forwarding = 0

net.ipv4.conf.docker0.bootp_relay = 0

net.ipv4.conf.docker0.disable_policy = 0

net.ipv4.conf.docker0.disable_xfrm = 0

net.ipv4.conf.docker0.drop_gratuitous_arp = 0

net.ipv4.conf.docker0.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.docker0.force_igmp_version = 0

net.ipv4.conf.docker0.forwarding = 1

net.ipv4.conf.docker0.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.docker0.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.docker0.ignore_routes_with_linkdown = 0

net.ipv4.conf.docker0.log_martians = 0

net.ipv4.conf.docker0.mc_forwarding = 0

net.ipv4.conf.docker0.medium_id = 0

net.ipv4.conf.docker0.promote_secondaries = 1

net.ipv4.conf.docker0.proxy_arp = 0

net.ipv4.conf.docker0.proxy_arp_pvlan = 0

net.ipv4.conf.docker0.route_localnet = 0

net.ipv4.conf.docker0.rp_filter = 1

net.ipv4.conf.docker0.secure_redirects = 1

net.ipv4.conf.docker0.send_redirects = 0

net.ipv4.conf.docker0.shared_media = 1

net.ipv4.conf.docker0.src_valid_mark = 0

net.ipv4.conf.docker0.tag = 0

net.ipv4.conf.enp0s3.accept_local = 0

net.ipv4.conf.enp0s3.accept_redirects = 0

net.ipv4.conf.enp0s3.accept_source_route = 0

net.ipv4.conf.enp0s3.arp_accept = 0

net.ipv4.conf.enp0s3.arp_announce = 0

net.ipv4.conf.enp0s3.arp_filter = 0

net.ipv4.conf.enp0s3.arp_ignore = 0

net.ipv4.conf.enp0s3.arp_notify = 0

net.ipv4.conf.enp0s3.bc_forwarding = 0

net.ipv4.conf.enp0s3.bootp_relay = 0

net.ipv4.conf.enp0s3.disable_policy = 0

net.ipv4.conf.enp0s3.disable_xfrm = 0

net.ipv4.conf.enp0s3.drop_gratuitous_arp = 0

net.ipv4.conf.enp0s3.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.enp0s3.force_igmp_version = 0

net.ipv4.conf.enp0s3.forwarding = 1

net.ipv4.conf.enp0s3.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.enp0s3.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.enp0s3.ignore_routes_with_linkdown = 0

net.ipv4.conf.enp0s3.log_martians = 0

net.ipv4.conf.enp0s3.mc_forwarding = 0

net.ipv4.conf.enp0s3.medium_id = 0

net.ipv4.conf.enp0s3.promote_secondaries = 1

net.ipv4.conf.enp0s3.proxy_arp = 0

net.ipv4.conf.enp0s3.proxy_arp_pvlan = 0

net.ipv4.conf.enp0s3.route_localnet = 0

net.ipv4.conf.enp0s3.rp_filter = 1

net.ipv4.conf.enp0s3.secure_redirects = 1

net.ipv4.conf.enp0s3.send_redirects = 0

net.ipv4.conf.enp0s3.shared_media = 1

net.ipv4.conf.enp0s3.src_valid_mark = 0

net.ipv4.conf.enp0s3.tag = 0

net.ipv4.conf.lo.accept_local = 0

net.ipv4.conf.lo.accept_redirects = 1

net.ipv4.conf.lo.accept_source_route = 0

net.ipv4.conf.lo.arp_accept = 0

net.ipv4.conf.lo.arp_announce = 0

net.ipv4.conf.lo.arp_filter = 0

net.ipv4.conf.lo.arp_ignore = 0

net.ipv4.conf.lo.arp_notify = 0

net.ipv4.conf.lo.bc_forwarding = 0

net.ipv4.conf.lo.bootp_relay = 0

net.ipv4.conf.lo.disable_policy = 1

net.ipv4.conf.lo.disable_xfrm = 1

net.ipv4.conf.lo.drop_gratuitous_arp = 0

net.ipv4.conf.lo.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.lo.force_igmp_version = 0

net.ipv4.conf.lo.forwarding = 1

net.ipv4.conf.lo.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.lo.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.lo.ignore_routes_with_linkdown = 0

net.ipv4.conf.lo.log_martians = 0

net.ipv4.conf.lo.mc_forwarding = 0

net.ipv4.conf.lo.medium_id = 0

net.ipv4.conf.lo.promote_secondaries = 1

net.ipv4.conf.lo.proxy_arp = 0

net.ipv4.conf.lo.proxy_arp_pvlan = 0

net.ipv4.conf.lo.route_localnet = 0

net.ipv4.conf.lo.rp_filter = 1

net.ipv4.conf.lo.secure_redirects = 1

net.ipv4.conf.lo.send_redirects = 1

net.ipv4.conf.lo.shared_media = 1

net.ipv4.conf.lo.src_valid_mark = 0

net.ipv4.conf.lo.tag = 0

net.ipv4.fib_multipath_hash_fields = 7

net.ipv4.fib_multipath_hash_policy = 0

net.ipv4.fib_multipath_use_neigh = 0

net.ipv4.fib_notify_on_flag_change = 0

net.ipv4.fib_sync_mem = 524288

net.ipv4.fwmark_reflect = 0

net.ipv4.icmp_echo_enable_probe = 0

net.ipv4.icmp_echo_ignore_all = 0

net.ipv4.icmp_echo_ignore_broadcasts = 1

net.ipv4.icmp_errors_use_inbound_ifaddr = 0

net.ipv4.icmp_ignore_bogus_error_responses = 1

net.ipv4.icmp_msgs_burst = 50

net.ipv4.icmp_msgs_per_sec = 1000

net.ipv4.icmp_ratelimit = 1000

net.ipv4.icmp_ratemask = 6168

net.ipv4.igmp_link_local_mcast_reports = 1

net.ipv4.igmp_max_memberships = 20

net.ipv4.igmp_max_msf = 10

net.ipv4.igmp_qrv = 2

net.ipv4.inet_peer_maxttl = 600

net.ipv4.inet_peer_minttl = 120

net.ipv4.inet_peer_threshold = 65664

net.ipv4.ip_autobind_reuse = 0

net.ipv4.ip_default_ttl = 64

net.ipv4.ip_dynaddr = 0

net.ipv4.ip_early_demux = 1

net.ipv4.ip_forward = 1

net.ipv4.ip_forward_update_priority = 1

net.ipv4.ip_forward_use_pmtu = 0

net.ipv4.ip_local_port_range = 9000     65500

net.ipv4.ip_local_reserved_ports =

net.ipv4.ip_no_pmtu_disc = 0

net.ipv4.ip_nonlocal_bind = 0

net.ipv4.ip_unprivileged_port_start = 1024

net.ipv4.ipfrag_high_thresh = 4194304

net.ipv4.ipfrag_low_thresh = 3145728

net.ipv4.ipfrag_max_dist = 64

net.ipv4.ipfrag_secret_interval = 0

net.ipv4.ipfrag_time = 30

net.ipv4.neigh.default.anycast_delay = 100

net.ipv4.neigh.default.app_solicit = 0

net.ipv4.neigh.default.base_reachable_time_ms = 30000

net.ipv4.neigh.default.delay_first_probe_time = 5

net.ipv4.neigh.default.gc_interval = 30

net.ipv4.neigh.default.gc_stale_time = 60

net.ipv4.neigh.default.gc_thresh1 = 128

net.ipv4.neigh.default.gc_thresh2 = 512

net.ipv4.neigh.default.gc_thresh3 = 1024

net.ipv4.neigh.default.locktime = 100

net.ipv4.neigh.default.mcast_resolicit = 0

net.ipv4.neigh.default.mcast_solicit = 3

net.ipv4.neigh.default.proxy_delay = 80

net.ipv4.neigh.default.proxy_qlen = 64

net.ipv4.neigh.default.retrans_time_ms = 1000

net.ipv4.neigh.default.ucast_solicit = 3

net.ipv4.neigh.default.unres_qlen = 101

net.ipv4.neigh.default.unres_qlen_bytes = 212992

net.ipv4.neigh.docker0.anycast_delay = 100

net.ipv4.neigh.docker0.app_solicit = 0

net.ipv4.neigh.docker0.base_reachable_time_ms = 30000

net.ipv4.neigh.docker0.delay_first_probe_time = 5

net.ipv4.neigh.docker0.gc_stale_time = 60

net.ipv4.neigh.docker0.locktime = 100

net.ipv4.neigh.docker0.mcast_resolicit = 0

net.ipv4.neigh.docker0.mcast_solicit = 3

net.ipv4.neigh.docker0.proxy_delay = 80

net.ipv4.neigh.docker0.proxy_qlen = 64

net.ipv4.neigh.docker0.retrans_time_ms = 1000

net.ipv4.neigh.docker0.ucast_solicit = 3

net.ipv4.neigh.docker0.unres_qlen = 101

net.ipv4.neigh.docker0.unres_qlen_bytes = 212992

net.ipv4.neigh.enp0s3.anycast_delay = 100

net.ipv4.neigh.enp0s3.app_solicit = 0

net.ipv4.neigh.enp0s3.base_reachable_time_ms = 30000

net.ipv4.neigh.enp0s3.delay_first_probe_time = 5

net.ipv4.neigh.enp0s3.gc_stale_time = 60

net.ipv4.neigh.enp0s3.locktime = 100

net.ipv4.neigh.enp0s3.mcast_resolicit = 0

net.ipv4.neigh.enp0s3.mcast_solicit = 3

net.ipv4.neigh.enp0s3.proxy_delay = 80

net.ipv4.neigh.enp0s3.proxy_qlen = 64

net.ipv4.neigh.enp0s3.retrans_time_ms = 1000

net.ipv4.neigh.enp0s3.ucast_solicit = 3

net.ipv4.neigh.enp0s3.unres_qlen = 101

net.ipv4.neigh.enp0s3.unres_qlen_bytes = 212992

net.ipv4.neigh.lo.anycast_delay = 100

net.ipv4.neigh.lo.app_solicit = 0

net.ipv4.neigh.lo.base_reachable_time_ms = 30000

net.ipv4.neigh.lo.delay_first_probe_time = 5

net.ipv4.neigh.lo.gc_stale_time = 60

net.ipv4.neigh.lo.locktime = 100

net.ipv4.neigh.lo.mcast_resolicit = 0

net.ipv4.neigh.lo.mcast_solicit = 3

net.ipv4.neigh.lo.proxy_delay = 80

net.ipv4.neigh.lo.proxy_qlen = 64

net.ipv4.neigh.lo.retrans_time_ms = 1000

net.ipv4.neigh.lo.ucast_solicit = 3

net.ipv4.neigh.lo.unres_qlen = 101

net.ipv4.neigh.lo.unres_qlen_bytes = 212992

net.ipv4.nexthop_compat_mode = 1

net.ipv4.ping_group_range = 0   2147483647

net.ipv4.raw_l3mdev_accept = 1

net.ipv4.route.error_burst = 5000

net.ipv4.route.error_cost = 1000

net.ipv4.route.gc_elasticity = 8

net.ipv4.route.gc_interval = 60

net.ipv4.route.gc_min_interval = 0

net.ipv4.route.gc_min_interval_ms = 500

net.ipv4.route.gc_thresh = -1

net.ipv4.route.gc_timeout = 300

net.ipv4.route.max_size = 2147483647

net.ipv4.route.min_adv_mss = 256

net.ipv4.route.min_pmtu = 552

net.ipv4.route.mtu_expires = 600

net.ipv4.route.redirect_load = 20

net.ipv4.route.redirect_number = 9

net.ipv4.route.redirect_silence = 20480

net.ipv4.tcp_abort_on_overflow = 0

net.ipv4.tcp_adv_win_scale = 1

net.ipv4.tcp_allowed_congestion_control = reno cubic

net.ipv4.tcp_app_win = 31

net.ipv4.tcp_autocorking = 1

net.ipv4.tcp_available_congestion_control = reno cubic

net.ipv4.tcp_available_ulp = espintcp mptcp tls

net.ipv4.tcp_base_mss = 1024

net.ipv4.tcp_challenge_ack_limit = 1000

net.ipv4.tcp_comp_sack_delay_ns = 1000000

net.ipv4.tcp_comp_sack_nr = 44

net.ipv4.tcp_comp_sack_slack_ns = 100000

net.ipv4.tcp_congestion_control = cubic

net.ipv4.tcp_dsack = 1

net.ipv4.tcp_early_demux = 1

net.ipv4.tcp_early_retrans = 3

net.ipv4.tcp_ecn = 2

net.ipv4.tcp_ecn_fallback = 1

net.ipv4.tcp_fack = 0

net.ipv4.tcp_fastopen = 1027

net.ipv4.tcp_fastopen_blackhole_timeout_sec = 0

net.ipv4.tcp_fastopen_key = 45debd64-0fdd5285-1e7c6c53-666f8649

net.ipv4.tcp_fin_timeout = 60

net.ipv4.tcp_frto = 2

net.ipv4.tcp_fwmark_accept = 0

net.ipv4.tcp_invalid_ratelimit = 500

net.ipv4.tcp_keepalive_intvl = 75

net.ipv4.tcp_keepalive_probes = 9

net.ipv4.tcp_keepalive_time = 7200

net.ipv4.tcp_l3mdev_accept = 0

net.ipv4.tcp_limit_output_bytes = 1048576

net.ipv4.tcp_low_latency = 0

net.ipv4.tcp_max_orphans = 8192

net.ipv4.tcp_max_reordering = 300

net.ipv4.tcp_max_syn_backlog = 4096

net.ipv4.tcp_max_tw_buckets = 262144

net.ipv4.tcp_mem = 21783        29045   43566

net.ipv4.tcp_migrate_req = 0

net.ipv4.tcp_min_rtt_wlen = 300

net.ipv4.tcp_min_snd_mss = 48

net.ipv4.tcp_min_tso_segs = 2

net.ipv4.tcp_moderate_rcvbuf = 1

net.ipv4.tcp_mtu_probe_floor = 48

net.ipv4.tcp_mtu_probing = 0

net.ipv4.tcp_no_metrics_save = 0

net.ipv4.tcp_no_ssthresh_metrics_save = 1

net.ipv4.tcp_notsent_lowat = 4294967295

net.ipv4.tcp_orphan_retries = 0

net.ipv4.tcp_pacing_ca_ratio = 120

net.ipv4.tcp_pacing_ss_ratio = 200

net.ipv4.tcp_probe_interval = 600

net.ipv4.tcp_probe_threshold = 8

net.ipv4.tcp_recovery = 1

net.ipv4.tcp_reflect_tos = 0

net.ipv4.tcp_reordering = 3

net.ipv4.tcp_retrans_collapse = 1

net.ipv4.tcp_retries1 = 3

net.ipv4.tcp_retries2 = 15

net.ipv4.tcp_rfc1337 = 0

net.ipv4.tcp_rmem = 4096        131072  6291456

net.ipv4.tcp_sack = 1

net.ipv4.tcp_slow_start_after_idle = 0

net.ipv4.tcp_stdurg = 0

net.ipv4.tcp_syn_retries = 6

net.ipv4.tcp_synack_retries = 5

net.ipv4.tcp_syncookies = 1

net.ipv4.tcp_thin_linear_timeouts = 0

net.ipv4.tcp_timestamps = 1

net.ipv4.tcp_tso_win_divisor = 3

net.ipv4.tcp_tw_reuse = 2

net.ipv4.tcp_window_scaling = 1

net.ipv4.tcp_wmem = 4096        16384   4194304

net.ipv4.tcp_workaround_signed_windows = 0

net.ipv4.udp_early_demux = 1

net.ipv4.udp_l3mdev_accept = 0

net.ipv4.udp_mem = 43566        58091   87132

net.ipv4.udp_rmem_min = 4096

net.ipv4.udp_wmem_min = 4096

net.ipv4.xfrm4_gc_thresh = 32768

net.ipv6.anycast_src_echo_reply = 0

net.ipv6.auto_flowlabels = 1

net.ipv6.bindv6only = 0

net.ipv6.calipso_cache_bucket_size = 10

net.ipv6.calipso_cache_enable = 1

net.ipv6.conf.all.accept_dad = 0

net.ipv6.conf.all.accept_ra = 1

net.ipv6.conf.all.accept_ra_defrtr = 1

net.ipv6.conf.all.accept_ra_from_local = 0

net.ipv6.conf.all.accept_ra_min_hop_limit = 1

net.ipv6.conf.all.accept_ra_mtu = 1

net.ipv6.conf.all.accept_ra_pinfo = 1

net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.all.accept_ra_rtr_pref = 1

net.ipv6.conf.all.accept_redirects = 0

net.ipv6.conf.all.accept_source_route = 0

net.ipv6.conf.all.addr_gen_mode = 0

net.ipv6.conf.all.autoconf = 1

net.ipv6.conf.all.dad_transmits = 1

net.ipv6.conf.all.disable_ipv6 = 0

net.ipv6.conf.all.disable_policy = 0

net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.all.drop_unsolicited_na = 0

net.ipv6.conf.all.enhanced_dad = 1

net.ipv6.conf.all.force_mld_version = 0

net.ipv6.conf.all.force_tllao = 0

net.ipv6.conf.all.forwarding = 0

net.ipv6.conf.all.hop_limit = 64

net.ipv6.conf.all.ignore_routes_with_linkdown = 0

net.ipv6.conf.all.keep_addr_on_down = 0

net.ipv6.conf.all.max_addresses = 16

net.ipv6.conf.all.max_desync_factor = 600

net.ipv6.conf.all.mc_forwarding = 0

net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.all.mtu = 1280

net.ipv6.conf.all.ndisc_notify = 0

net.ipv6.conf.all.ndisc_tclass = 0

net.ipv6.conf.all.optimistic_dad = 0

net.ipv6.conf.all.proxy_ndp = 0

net.ipv6.conf.all.ra_defrtr_metric = 1024

net.ipv6.conf.all.regen_max_retry = 3

net.ipv6.conf.all.router_probe_interval = 60

net.ipv6.conf.all.router_solicitation_delay = 1

net.ipv6.conf.all.router_solicitation_interval = 4

net.ipv6.conf.all.router_solicitation_max_interval = 3600

net.ipv6.conf.all.router_solicitations = -1

net.ipv6.conf.all.rpl_seg_enabled = 0

net.ipv6.conf.all.seg6_enabled = 0

net.ipv6.conf.all.suppress_frag_ndisc = 1

net.ipv6.conf.all.temp_prefered_lft = 86400

net.ipv6.conf.all.temp_valid_lft = 604800

net.ipv6.conf.all.use_oif_addrs_only = 0

net.ipv6.conf.all.use_optimistic = 0

net.ipv6.conf.all.use_tempaddr = 0

net.ipv6.conf.default.accept_dad = 1

net.ipv6.conf.default.accept_ra = 1

net.ipv6.conf.default.accept_ra_defrtr = 1

net.ipv6.conf.default.accept_ra_from_local = 0

net.ipv6.conf.default.accept_ra_min_hop_limit = 1

net.ipv6.conf.default.accept_ra_mtu = 1

net.ipv6.conf.default.accept_ra_pinfo = 1

net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.default.accept_ra_rtr_pref = 1

net.ipv6.conf.default.accept_redirects = 0

net.ipv6.conf.default.accept_source_route = 0

net.ipv6.conf.default.addr_gen_mode = 0

net.ipv6.conf.default.autoconf = 1

net.ipv6.conf.default.dad_transmits = 1

net.ipv6.conf.default.disable_ipv6 = 0

net.ipv6.conf.default.disable_policy = 0

net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.default.drop_unsolicited_na = 0

net.ipv6.conf.default.enhanced_dad = 1

net.ipv6.conf.default.force_mld_version = 0

net.ipv6.conf.default.force_tllao = 0

net.ipv6.conf.default.forwarding = 0

net.ipv6.conf.default.hop_limit = 64

net.ipv6.conf.default.ignore_routes_with_linkdown = 0

net.ipv6.conf.default.keep_addr_on_down = 0

net.ipv6.conf.default.max_addresses = 16

net.ipv6.conf.default.max_desync_factor = 600

net.ipv6.conf.default.mc_forwarding = 0

net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.default.mtu = 1280

net.ipv6.conf.default.ndisc_notify = 0

net.ipv6.conf.default.ndisc_tclass = 0

net.ipv6.conf.default.optimistic_dad = 0

net.ipv6.conf.default.proxy_ndp = 0

net.ipv6.conf.default.ra_defrtr_metric = 1024

net.ipv6.conf.default.regen_max_retry = 3

net.ipv6.conf.default.router_probe_interval = 60

net.ipv6.conf.default.router_solicitation_delay = 1

net.ipv6.conf.default.router_solicitation_interval = 4

net.ipv6.conf.default.router_solicitation_max_interval = 3600

net.ipv6.conf.default.router_solicitations = -1

net.ipv6.conf.default.rpl_seg_enabled = 0

net.ipv6.conf.default.seg6_enabled = 0

net.ipv6.conf.default.suppress_frag_ndisc = 1

net.ipv6.conf.default.temp_prefered_lft = 86400

net.ipv6.conf.default.temp_valid_lft = 604800

net.ipv6.conf.default.use_oif_addrs_only = 0

net.ipv6.conf.default.use_optimistic = 0

net.ipv6.conf.default.use_tempaddr = 0

net.ipv6.conf.docker0.accept_dad = 1

net.ipv6.conf.docker0.accept_ra = 0

net.ipv6.conf.docker0.accept_ra_defrtr = 1

net.ipv6.conf.docker0.accept_ra_from_local = 0

net.ipv6.conf.docker0.accept_ra_min_hop_limit = 1

net.ipv6.conf.docker0.accept_ra_mtu = 1

net.ipv6.conf.docker0.accept_ra_pinfo = 1

net.ipv6.conf.docker0.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.docker0.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.docker0.accept_ra_rtr_pref = 1

net.ipv6.conf.docker0.accept_redirects = 0

net.ipv6.conf.docker0.accept_source_route = 0

net.ipv6.conf.docker0.addr_gen_mode = 0

net.ipv6.conf.docker0.autoconf = 1

net.ipv6.conf.docker0.dad_transmits = 1

net.ipv6.conf.docker0.disable_ipv6 = 0

net.ipv6.conf.docker0.disable_policy = 0

net.ipv6.conf.docker0.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.docker0.drop_unsolicited_na = 0

net.ipv6.conf.docker0.enhanced_dad = 1

net.ipv6.conf.docker0.force_mld_version = 0

net.ipv6.conf.docker0.force_tllao = 0

net.ipv6.conf.docker0.forwarding = 0

net.ipv6.conf.docker0.hop_limit = 64

net.ipv6.conf.docker0.ignore_routes_with_linkdown = 0

net.ipv6.conf.docker0.keep_addr_on_down = 0

net.ipv6.conf.docker0.max_addresses = 16

net.ipv6.conf.docker0.max_desync_factor = 600

net.ipv6.conf.docker0.mc_forwarding = 0

net.ipv6.conf.docker0.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.docker0.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.docker0.mtu = 1500

net.ipv6.conf.docker0.ndisc_notify = 0

net.ipv6.conf.docker0.ndisc_tclass = 0

net.ipv6.conf.docker0.optimistic_dad = 0

net.ipv6.conf.docker0.proxy_ndp = 0

net.ipv6.conf.docker0.ra_defrtr_metric = 1024

net.ipv6.conf.docker0.regen_max_retry = 3

net.ipv6.conf.docker0.router_probe_interval = 60

net.ipv6.conf.docker0.router_solicitation_delay = 1

net.ipv6.conf.docker0.router_solicitation_interval = 4

net.ipv6.conf.docker0.router_solicitation_max_interval = 3600

net.ipv6.conf.docker0.router_solicitations = -1

net.ipv6.conf.docker0.rpl_seg_enabled = 0

net.ipv6.conf.docker0.seg6_enabled = 0

net.ipv6.conf.docker0.suppress_frag_ndisc = 1

net.ipv6.conf.docker0.temp_prefered_lft = 86400

net.ipv6.conf.docker0.temp_valid_lft = 604800

net.ipv6.conf.docker0.use_oif_addrs_only = 0

net.ipv6.conf.docker0.use_optimistic = 0

net.ipv6.conf.docker0.use_tempaddr = 0

net.ipv6.conf.enp0s3.accept_dad = 1

net.ipv6.conf.enp0s3.accept_ra = 0

net.ipv6.conf.enp0s3.accept_ra_defrtr = 1

net.ipv6.conf.enp0s3.accept_ra_from_local = 0

net.ipv6.conf.enp0s3.accept_ra_min_hop_limit = 1

net.ipv6.conf.enp0s3.accept_ra_mtu = 1

net.ipv6.conf.enp0s3.accept_ra_pinfo = 1

net.ipv6.conf.enp0s3.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.enp0s3.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.enp0s3.accept_ra_rtr_pref = 1

net.ipv6.conf.enp0s3.accept_redirects = 0

net.ipv6.conf.enp0s3.accept_source_route = 0

net.ipv6.conf.enp0s3.addr_gen_mode = 1

net.ipv6.conf.enp0s3.autoconf = 1

net.ipv6.conf.enp0s3.dad_transmits = 1

net.ipv6.conf.enp0s3.disable_ipv6 = 1

net.ipv6.conf.enp0s3.disable_policy = 0

net.ipv6.conf.enp0s3.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.enp0s3.drop_unsolicited_na = 0

net.ipv6.conf.enp0s3.enhanced_dad = 1

net.ipv6.conf.enp0s3.force_mld_version = 0

net.ipv6.conf.enp0s3.force_tllao = 0

net.ipv6.conf.enp0s3.forwarding = 0

net.ipv6.conf.enp0s3.hop_limit = 64

net.ipv6.conf.enp0s3.ignore_routes_with_linkdown = 0

net.ipv6.conf.enp0s3.keep_addr_on_down = 0

net.ipv6.conf.enp0s3.max_addresses = 16

net.ipv6.conf.enp0s3.max_desync_factor = 600

net.ipv6.conf.enp0s3.mc_forwarding = 0

net.ipv6.conf.enp0s3.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.enp0s3.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.enp0s3.mtu = 1500

net.ipv6.conf.enp0s3.ndisc_notify = 0

net.ipv6.conf.enp0s3.ndisc_tclass = 0

net.ipv6.conf.enp0s3.optimistic_dad = 0

net.ipv6.conf.enp0s3.proxy_ndp = 0

net.ipv6.conf.enp0s3.ra_defrtr_metric = 1024

net.ipv6.conf.enp0s3.regen_max_retry = 3

net.ipv6.conf.enp0s3.router_probe_interval = 60

net.ipv6.conf.enp0s3.router_solicitation_delay = 1

net.ipv6.conf.enp0s3.router_solicitation_interval = 4

net.ipv6.conf.enp0s3.router_solicitation_max_interval = 3600

net.ipv6.conf.enp0s3.router_solicitations = -1

net.ipv6.conf.enp0s3.rpl_seg_enabled = 0

net.ipv6.conf.enp0s3.seg6_enabled = 0

net.ipv6.conf.enp0s3.suppress_frag_ndisc = 1

net.ipv6.conf.enp0s3.temp_prefered_lft = 86400

net.ipv6.conf.enp0s3.temp_valid_lft = 604800

net.ipv6.conf.enp0s3.use_oif_addrs_only = 0

net.ipv6.conf.enp0s3.use_optimistic = 0

net.ipv6.conf.enp0s3.use_tempaddr = 0

net.ipv6.conf.lo.accept_dad = -1

net.ipv6.conf.lo.accept_ra = 1

net.ipv6.conf.lo.accept_ra_defrtr = 1

net.ipv6.conf.lo.accept_ra_from_local = 0

net.ipv6.conf.lo.accept_ra_min_hop_limit = 1

net.ipv6.conf.lo.accept_ra_mtu = 1

net.ipv6.conf.lo.accept_ra_pinfo = 1

net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.lo.accept_ra_rtr_pref = 1

net.ipv6.conf.lo.accept_redirects = 1

net.ipv6.conf.lo.accept_source_route = 0

net.ipv6.conf.lo.addr_gen_mode = 0

net.ipv6.conf.lo.autoconf = 1

net.ipv6.conf.lo.dad_transmits = 1

net.ipv6.conf.lo.disable_ipv6 = 0

net.ipv6.conf.lo.disable_policy = 0

net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.lo.drop_unsolicited_na = 0

net.ipv6.conf.lo.enhanced_dad = 1

net.ipv6.conf.lo.force_mld_version = 0

net.ipv6.conf.lo.force_tllao = 0

net.ipv6.conf.lo.forwarding = 0

net.ipv6.conf.lo.hop_limit = 64

net.ipv6.conf.lo.ignore_routes_with_linkdown = 0

net.ipv6.conf.lo.keep_addr_on_down = 0

net.ipv6.conf.lo.max_addresses = 16

net.ipv6.conf.lo.max_desync_factor = 600

net.ipv6.conf.lo.mc_forwarding = 0

net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.lo.mtu = 65536

net.ipv6.conf.lo.ndisc_notify = 0

net.ipv6.conf.lo.ndisc_tclass = 0

net.ipv6.conf.lo.optimistic_dad = 0

net.ipv6.conf.lo.proxy_ndp = 0

net.ipv6.conf.lo.ra_defrtr_metric = 1024

net.ipv6.conf.lo.regen_max_retry = 3

net.ipv6.conf.lo.router_probe_interval = 60

net.ipv6.conf.lo.router_solicitation_delay = 1

net.ipv6.conf.lo.router_solicitation_interval = 4

net.ipv6.conf.lo.router_solicitation_max_interval = 3600

net.ipv6.conf.lo.router_solicitations = -1

net.ipv6.conf.lo.rpl_seg_enabled = 0

net.ipv6.conf.lo.seg6_enabled = 0

net.ipv6.conf.lo.suppress_frag_ndisc = 1

net.ipv6.conf.lo.temp_prefered_lft = 86400

net.ipv6.conf.lo.temp_valid_lft = 604800

net.ipv6.conf.lo.use_oif_addrs_only = 0

net.ipv6.conf.lo.use_optimistic = 0

net.ipv6.conf.lo.use_tempaddr = -1

net.ipv6.fib_multipath_hash_fields = 7

net.ipv6.fib_multipath_hash_policy = 0

net.ipv6.fib_notify_on_flag_change = 0

net.ipv6.flowlabel_consistency = 1

net.ipv6.flowlabel_reflect = 0

net.ipv6.flowlabel_state_ranges = 0

net.ipv6.fwmark_reflect = 0

net.ipv6.icmp.echo_ignore_all = 0

net.ipv6.icmp.echo_ignore_anycast = 0

net.ipv6.icmp.echo_ignore_multicast = 0

net.ipv6.icmp.ratelimit = 1000

net.ipv6.icmp.ratemask = 0-1,3-127

net.ipv6.idgen_delay = 1

net.ipv6.idgen_retries = 3

net.ipv6.ip6frag_high_thresh = 4194304

net.ipv6.ip6frag_low_thresh = 3145728

net.ipv6.ip6frag_secret_interval = 0

net.ipv6.ip6frag_time = 60

net.ipv6.ip_nonlocal_bind = 0

net.ipv6.max_dst_opts_length = 2147483647

net.ipv6.max_dst_opts_number = 8

net.ipv6.max_hbh_length = 2147483647

net.ipv6.max_hbh_opts_number = 8

net.ipv6.mld_max_msf = 64

net.ipv6.mld_qrv = 2

net.ipv6.neigh.default.anycast_delay = 100

net.ipv6.neigh.default.app_solicit = 0

net.ipv6.neigh.default.base_reachable_time_ms = 30000

net.ipv6.neigh.default.delay_first_probe_time = 5

net.ipv6.neigh.default.gc_interval = 30

net.ipv6.neigh.default.gc_stale_time = 60

net.ipv6.neigh.default.gc_thresh1 = 128

net.ipv6.neigh.default.gc_thresh2 = 512

net.ipv6.neigh.default.gc_thresh3 = 1024

net.ipv6.neigh.default.locktime = 0

net.ipv6.neigh.default.mcast_resolicit = 0

net.ipv6.neigh.default.mcast_solicit = 3

net.ipv6.neigh.default.proxy_delay = 80

net.ipv6.neigh.default.proxy_qlen = 64

net.ipv6.neigh.default.retrans_time_ms = 1000

net.ipv6.neigh.default.ucast_solicit = 3

net.ipv6.neigh.default.unres_qlen = 101

net.ipv6.neigh.default.unres_qlen_bytes = 212992

net.ipv6.neigh.docker0.anycast_delay = 100

net.ipv6.neigh.docker0.app_solicit = 0

net.ipv6.neigh.docker0.base_reachable_time_ms = 30000

net.ipv6.neigh.docker0.delay_first_probe_time = 5

net.ipv6.neigh.docker0.gc_stale_time = 60

net.ipv6.neigh.docker0.locktime = 0

net.ipv6.neigh.docker0.mcast_resolicit = 0

net.ipv6.neigh.docker0.mcast_solicit = 3

net.ipv6.neigh.docker0.proxy_delay = 80

net.ipv6.neigh.docker0.proxy_qlen = 64

net.ipv6.neigh.docker0.retrans_time_ms = 1000

net.ipv6.neigh.docker0.ucast_solicit = 3

net.ipv6.neigh.docker0.unres_qlen = 101

net.ipv6.neigh.docker0.unres_qlen_bytes = 212992

net.ipv6.neigh.enp0s3.anycast_delay = 100

net.ipv6.neigh.enp0s3.app_solicit = 0

net.ipv6.neigh.enp0s3.base_reachable_time_ms = 30000

net.ipv6.neigh.enp0s3.delay_first_probe_time = 5

net.ipv6.neigh.enp0s3.gc_stale_time = 60

net.ipv6.neigh.enp0s3.locktime = 0

net.ipv6.neigh.enp0s3.mcast_resolicit = 0

net.ipv6.neigh.enp0s3.mcast_solicit = 3

net.ipv6.neigh.enp0s3.proxy_delay = 80

net.ipv6.neigh.enp0s3.proxy_qlen = 64

net.ipv6.neigh.enp0s3.retrans_time_ms = 1000

net.ipv6.neigh.enp0s3.ucast_solicit = 3

net.ipv6.neigh.enp0s3.unres_qlen = 101

net.ipv6.neigh.enp0s3.unres_qlen_bytes = 212992

net.ipv6.neigh.lo.anycast_delay = 100

net.ipv6.neigh.lo.app_solicit = 0

net.ipv6.neigh.lo.base_reachable_time_ms = 30000

net.ipv6.neigh.lo.delay_first_probe_time = 5

net.ipv6.neigh.lo.gc_stale_time = 60

net.ipv6.neigh.lo.locktime = 0

net.ipv6.neigh.lo.mcast_resolicit = 0

net.ipv6.neigh.lo.mcast_solicit = 3

net.ipv6.neigh.lo.proxy_delay = 80

net.ipv6.neigh.lo.proxy_qlen = 64

net.ipv6.neigh.lo.retrans_time_ms = 1000

net.ipv6.neigh.lo.ucast_solicit = 3

net.ipv6.neigh.lo.unres_qlen = 101

net.ipv6.neigh.lo.unres_qlen_bytes = 212992

net.ipv6.route.gc_elasticity = 9

net.ipv6.route.gc_interval = 30

net.ipv6.route.gc_min_interval = 0

net.ipv6.route.gc_min_interval_ms = 500

net.ipv6.route.gc_thresh = 1024

net.ipv6.route.gc_timeout = 60

net.ipv6.route.max_size = 4096

net.ipv6.route.min_adv_mss = 1220

net.ipv6.route.mtu_expires = 600

net.ipv6.route.skip_notify_on_dev_down = 0

net.ipv6.seg6_flowlabel = 0

net.ipv6.xfrm6_gc_thresh = 32768

net.mptcp.add_addr_timeout = 120

net.mptcp.allow_join_initial_addr_port = 1

net.mptcp.checksum_enabled = 0

net.mptcp.enabled = 0

net.mptcp.pm_type = 0

net.mptcp.stale_loss_cnt = 4

net.netfilter.nf_conntrack_acct = 0

net.netfilter.nf_conntrack_buckets = 65536

net.netfilter.nf_conntrack_checksum = 1

net.netfilter.nf_conntrack_count = 13

net.netfilter.nf_conntrack_dccp_loose = 1

net.netfilter.nf_conntrack_dccp_timeout_closereq = 64

net.netfilter.nf_conntrack_dccp_timeout_closing = 64

net.netfilter.nf_conntrack_dccp_timeout_open = 43200

net.netfilter.nf_conntrack_dccp_timeout_partopen = 480

net.netfilter.nf_conntrack_dccp_timeout_request = 240

net.netfilter.nf_conntrack_dccp_timeout_respond = 480

net.netfilter.nf_conntrack_dccp_timeout_timewait = 240

net.netfilter.nf_conntrack_events = 2

net.netfilter.nf_conntrack_expect_max = 1024

net.netfilter.nf_conntrack_frag6_high_thresh = 4194304

net.netfilter.nf_conntrack_frag6_low_thresh = 3145728

net.netfilter.nf_conntrack_frag6_timeout = 60

net.netfilter.nf_conntrack_generic_timeout = 600

net.netfilter.nf_conntrack_gre_timeout = 30

net.netfilter.nf_conntrack_gre_timeout_stream = 180

net.netfilter.nf_conntrack_helper = 0

net.netfilter.nf_conntrack_icmp_timeout = 30

net.netfilter.nf_conntrack_icmpv6_timeout = 30

net.netfilter.nf_conntrack_log_invalid = 0

net.netfilter.nf_conntrack_max = 65536

net.netfilter.nf_conntrack_sctp_timeout_closed = 10

net.netfilter.nf_conntrack_sctp_timeout_cookie_echoed = 3

net.netfilter.nf_conntrack_sctp_timeout_cookie_wait = 3

net.netfilter.nf_conntrack_sctp_timeout_established = 432000

net.netfilter.nf_conntrack_sctp_timeout_heartbeat_acked = 210

net.netfilter.nf_conntrack_sctp_timeout_heartbeat_sent = 30

net.netfilter.nf_conntrack_sctp_timeout_shutdown_ack_sent = 3

net.netfilter.nf_conntrack_sctp_timeout_shutdown_recd = 0

net.netfilter.nf_conntrack_sctp_timeout_shutdown_sent = 0

net.netfilter.nf_conntrack_tcp_be_liberal = 0

net.netfilter.nf_conntrack_tcp_ignore_invalid_rst = 0

net.netfilter.nf_conntrack_tcp_loose = 1

net.netfilter.nf_conntrack_tcp_max_retrans = 3

net.netfilter.nf_conntrack_tcp_timeout_close = 10

net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60

net.netfilter.nf_conntrack_tcp_timeout_established = 432000

net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120

net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30

net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300

net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60

net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120

net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120

net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300

net.netfilter.nf_conntrack_timestamp = 0

net.netfilter.nf_conntrack_udp_timeout = 30

net.netfilter.nf_conntrack_udp_timeout_stream = 120

net.netfilter.nf_flowtable_tcp_timeout = 30

net.netfilter.nf_flowtable_udp_timeout = 30

net.netfilter.nf_log.0 = NONE

net.netfilter.nf_log.1 = NONE

net.netfilter.nf_log.10 = NONE

net.netfilter.nf_log.11 = NONE

net.netfilter.nf_log.12 = NONE

net.netfilter.nf_log.2 = NONE

net.netfilter.nf_log.3 = NONE

net.netfilter.nf_log.4 = NONE

net.netfilter.nf_log.5 = NONE

net.netfilter.nf_log.6 = NONE

net.netfilter.nf_log.7 = NONE

net.netfilter.nf_log.8 = NONE

net.netfilter.nf_log.9 = NONE

net.netfilter.nf_log_all_netns = 0

net.nf_conntrack_max = 65536

net.unix.max_dgram_qlen = 512

sunrpc.max_resvport = 1023

sunrpc.min_resvport = 665

sunrpc.nfs_debug = 0x0000

sunrpc.nfsd_debug = 0x0000

sunrpc.nlm_debug = 0x0000

sunrpc.rpc_debug = 0x0000

sunrpc.tcp_fin_timeout = 15

sunrpc.tcp_max_slot_table_entries = 65536

sunrpc.tcp_slot_table_entries = 2

sunrpc.transports = tcp 1048576

sunrpc.transports = udp 32768

sunrpc.udp_slot_table_entries = 16

user.max_cgroup_namespaces = 7622

user.max_fanotify_groups = 128

user.max_fanotify_marks = 15416

user.max_inotify_instances = 128

user.max_inotify_watches = 14520

user.max_ipc_namespaces = 7622

user.max_mnt_namespaces = 7622

user.max_net_namespaces = 7622

user.max_pid_namespaces = 7622

user.max_time_namespaces = 7622

user.max_user_namespaces = 7622

user.max_uts_namespaces = 7622

vm.admin_reserve_kbytes = 8192

vm.compact_unevictable_allowed = 1

vm.compaction_proactiveness = 20

vm.dirty_background_bytes = 0

vm.dirty_background_ratio = 10

vm.dirty_bytes = 0

vm.dirty_expire_centisecs = 3000

vm.dirty_ratio = 20

vm.dirty_writeback_centisecs = 500

vm.dirtytime_expire_seconds = 43200

vm.extfrag_threshold = 500

vm.hugetlb_shm_group = 0

vm.laptop_mode = 0

vm.legacy_va_layout = 0

vm.lowmem_reserve_ratio = 256   256     32      0       0

vm.max_map_count = 65530

vm.memory_failure_early_kill = 0

vm.memory_failure_recovery = 1

vm.min_free_kbytes = 45056

vm.min_slab_ratio = 5

vm.min_unmapped_ratio = 1

vm.mmap_min_addr = 65536

vm.mmap_rnd_bits = 28

vm.mmap_rnd_compat_bits = 8

vm.nr_hugepages = 0

vm.nr_hugepages_mempolicy = 0

vm.nr_overcommit_hugepages = 0

vm.numa_stat = 1

vm.numa_zonelist_order = Node

vm.oom_dump_tasks = 1

vm.oom_kill_allocating_task = 0

vm.overcommit_kbytes = 0

vm.overcommit_memory = 0

vm.overcommit_ratio = 50

vm.page-cluster = 3

vm.page_lock_unfairness = 5

vm.panic_on_oom = 0

vm.percpu_pagelist_high_fraction = 0

vm.stat_interval = 1

vm.swappiness = 20

vm.unprivileged_userfaultfd = 1

vm.user_reserve_kbytes = 60033

vm.vfs_cache_pressure = 100

vm.watermark_boost_factor = 15000

vm.watermark_scale_factor = 10

vm.zone_reclaim_mode = 0

[root@RockyLinux ~]#

 

 

 

 

이 명령의 결과가 너무 길어서 그 결과를 모두 한꺼번에 나타내지는 못했지만 설정된 모든 값들의 의미를 확인해보기 바란다.

 

 

 

 

다음은 이 실행의 결과과 몇 개인가를 wc로 확인해 본 것이다.

 

 

 

 

참고하기 바란다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a | wc -l

1130

[root@RockyLinux ~]#

 

 

 

 

현재 이 리눅스시스템에서 “sysctl -a”의 결과는 모두 1130행이며 이것은 sysctl로 설정할 수 있는 값이 1130가지임을 의미한다.

 

 

 

 

 

 

결론적으로 우리는 이 결과를 통해 1130가지의 설정들을 함으로서 각 상황에 맞는 시스템튜닝을 할 수 있다는 것을 알아야 한다.

 

 

 

 

그리고 이번에 이 방법들에 대해서 배우게 될 것이다.

 

 

 

 

 

 

앞의 예는 커널파라미터(kernel parameter)의 값들을 모두 확인하였지만 이번에는 조금 응용하여 특정파라미터값을 확인하는 방법을 설명하겠다.

 

 

 

 

다음과 같이 특정파라미터값만을 확인하고자 할 때에는 다음 예와 같이  “sysctl -a”의 결과를 특정문자열에 해당하는 패턴행만을 grep으로 잡아서 확인하면 된다.

 

 

 

 

다음의 예는 kernel.max라는 파라미터의 값만을 확인한 것이다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a | grep kernel.max

kernel.max_lock_depth = 1024

kernel.max_rcu_stall_to_panic = 0

[root@RockyLinux ~]#

 

 

 

그리고 다음은 sysrq, file-max, 그리고 mem에 관한 커널파라미터(kernel parameter)값을 확인한 것이다.

 



[root@RockyLinux ~]# sysctl -a | grep sysrq

kernel.sysrq = 16

[root@RockyLinux ~]#

[root@RockyLinux ~]#

[root@RockyLinux ~]# sysctl -a | grep file-max

fs.file-max = 6815744

[root@RockyLinux ~]#

[root@RockyLinux ~]# sysctl -a | grep mem

net.core.optmem_max = 81920

net.core.rmem_default = 262144

net.core.rmem_max = 4194304

net.core.wmem_default = 262144

net.core.wmem_max = 1048576

net.ipv4.fib_sync_mem = 524288

net.ipv4.igmp_max_memberships = 20

net.ipv4.tcp_mem = 21783        29045   43566

net.ipv4.tcp_rmem = 4096        131072  6291456

net.ipv4.tcp_wmem = 4096        16384   4194304

net.ipv4.udp_mem = 43566        58091   87132

net.ipv4.udp_rmem_min = 4096

net.ipv4.udp_wmem_min = 4096

vm.lowmem_reserve_ratio = 256   256     32      0       0

vm.memory_failure_early_kill = 0

vm.memory_failure_recovery = 1

vm.nr_hugepages_mempolicy = 0

vm.overcommit_memory = 0

[root@RockyLinux ~]#

 

 

 

 

위의 예에서 실행된 3가지 명령들의 의미는 다음과 같다.

 

 

 

 

 

 

sysctl -a | grep sysrq

 

 

커널파라미터(kernel parameter) sysrq(매직키)에 관한 설정 값을 확인한 것이며,

 

 

sysctl -a | grep file-max

 

 

두번째 예는 file-max(오픈가능한 최대파일수)에 관한 설정값을 확인한 것이며,

 

 

 

 

sysctl -a | grep mem    

 

 

셋번째 예는 mem(메모리)에 관한 설정값을 확인한 것이다.

 

 

 


물론, 다음과 같이 grep을 이용하여 커널파라미터(kernel parameter)의 설정값들 중 원하는 값들만을 확인할 수 있다.

 

 

 

 

 

다음은 kernel.panic와 관련된 커널파라미터(kernel parameter)값만을 확인한 것이다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a | grep kernel.panic

kernel.panic = 0

kernel.panic_on_io_nmi = 0

kernel.panic_on_oops = 1

kernel.panic_on_rcu_stall = 0

kernel.panic_on_unrecovered_nmi = 0

kernel.panic_on_warn = 0

kernel.panic_print = 0

[root@RockyLinux ~]#

 

 

 

그리고 다음은 파일시스템과 관련된 “fs.”에 해당하는 파라미터값들만 확인한 것이다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a | grep fs.

fs.aio-max-nr = 1048576

fs.aio-nr = 0

fs.binfmt_misc.status = enabled

fs.dentry-state = 78388 58698   45      0       6745    0

fs.dir-notify-enable = 1

fs.epoll.max_user_watches = 434376

fs.fanotify.max_queued_events = 16384

fs.fanotify.max_user_groups = 128

fs.fanotify.max_user_marks = 15416

fs.file-max = 6815744

fs.file-nr = 4512       0       6815744

fs.inode-nr = 71787     966

fs.inode-state = 71787  966     0       0       0       0       0

fs.inotify.max_queued_events = 16384

fs.inotify.max_user_instances = 128

fs.inotify.max_user_watches = 14520

fs.lease-break-time = 45

fs.leases-enable = 1

fs.mount-max = 100000

fs.mqueue.msg_default = 10

fs.mqueue.msg_max = 10

fs.mqueue.msgsize_default = 8192

fs.mqueue.msgsize_max = 8192

fs.mqueue.queues_max = 256

fs.nr_open = 1073741816

fs.overflowgid = 65534

fs.overflowuid = 65534

fs.pipe-max-size = 1048576

fs.pipe-user-pages-hard = 0

fs.pipe-user-pages-soft = 16384

fs.protected_fifos = 1

fs.protected_hardlinks = 1

fs.protected_regular = 1

fs.protected_symlinks = 1

fs.quota.allocated_dquots = 0

fs.quota.cache_hits = 0

fs.quota.drops = 0

fs.quota.free_dquots = 0

fs.quota.lookups = 0

fs.quota.reads = 0

fs.quota.syncs = 0

fs.quota.warnings = 1

fs.quota.writes = 0

fs.suid_dumpable = 2

fs.xfs.error_level = 3

fs.xfs.filestream_centisecs = 3000

fs.xfs.inherit_noatime = 1

fs.xfs.inherit_nodefrag = 1

fs.xfs.inherit_nodump = 1

fs.xfs.inherit_nosymlinks = 0

fs.xfs.inherit_sync = 1

fs.xfs.irix_sgid_inherit = 0

fs.xfs.irix_symlink_mode = 0

fs.xfs.panic_mask = 0

fs.xfs.rotorstep = 1

fs.xfs.speculative_cow_prealloc_lifetime = 300

fs.xfs.speculative_prealloc_lifetime = 300

fs.xfs.stats_clear = 0

fs.xfs.xfssyncd_centisecs = 3000

kernel.firmware_config.force_sysfs_fallback = 0

kernel.firmware_config.ignore_sysfs_fallback = 0

kernel.sched_cfs_bandwidth_slice_us = 5000

sunrpc.nfs_debug = 0x0000

sunrpc.nfsd_debug = 0x0000

vm.vfs_cache_pressure = 100

[root@RockyLinux ~]#

 

 

 

 

 

이렇게 수많은 커널파라미터(kernel parameter)값들 가운데 우리가 원하는 파라미터값만을 확인할 수 있다.

 

 

 

관련자료

댓글 0
등록된 댓글이 없습니다.

공지사항


뉴스광장


  • 현재 회원수 :  60,156 명
  • 현재 강좌수 :  36,513 개
  • 현재 접속자 :  294 명