summaryrefslogtreecommitdiff
path: root/roles/configure_sysctl
diff options
context:
space:
mode:
authorNiklas Yann Wettengel <niyawe@niyawe.de>2017-07-02 15:05:58 +0200
committerNiklas Yann Wettengel <niyawe@niyawe.de>2017-07-02 15:05:58 +0200
commitd18d1ffd4f1a902b8dc555bbc7fe25e471920780 (patch)
tree23ec8a820e57d0c63ec636d0bc6ecc1c4a105323 /roles/configure_sysctl
parentc5748a7c09230ebb882bc37b5cc9ed9c2543a4d9 (diff)
enable ipv6 routing
Diffstat (limited to 'roles/configure_sysctl')
-rw-r--r--roles/configure_sysctl/files/ff.conf13
1 files changed, 12 insertions, 1 deletions
diff --git a/roles/configure_sysctl/files/ff.conf b/roles/configure_sysctl/files/ff.conf
index edd39b2..a80a925 100644
--- a/roles/configure_sysctl/files/ff.conf
+++ b/roles/configure_sysctl/files/ff.conf
@@ -1,10 +1,21 @@
net.ipv4.ip_forward=1
-#net.ipv6.conf.all.forwarding=1
+
+net.ipv6.conf.all.forwarding=1
+
+net.ipv6.conf.all.autoconf = 0
+net.ipv6.conf.default.autoconf = 0
+
+net.ipv6.conf.all.accept_ra = 0
+net.ipv6.conf.default.accept_ra = 0
+
net.ipv6.neigh.default.gc_thresh3=4096
net.ipv6.neigh.default.gc_thresh2=2048
net.ipv6.neigh.default.gc_thresh1=1024
net.ipv6.neigh.default.gc_interval=3600
net.ipv6.neigh.default.gc_stale_time=3600
+# decrease nf_conntrack_tcp_timeout_established - default=432000
+net.netfilter.nf_conntrack_tcp_timeout_established=86400
+
# reboot after kernel panic
kernel.panic=1