Skip to content
This repository has been archived by the owner on Aug 14, 2023. It is now read-only.

Set ip_conntrack_tcp_be_liberal to improve network stability #112

Merged
merged 4 commits into from
Jul 30, 2016

Conversation

StefanScherer
Copy link
Member

Add echo 1 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_be_liberal into build.

Fixes #57

Signed-off-by: Stefan Scherer <scherer_stefan@icloud.com>
@StefanScherer
Copy link
Member Author

ping @mevatron :-)

@StefanScherer StefanScherer added this to the v1.0.0-blackbeard milestone Jul 30, 2016
@StefanScherer
Copy link
Member Author

OK, I thought this wouldn't be that easy. /proc isn't fully available while building with qemu?

Signed-off-by: Stefan Scherer <scherer_stefan@icloud.com>
Signed-off-by: Stefan Scherer <scherer_stefan@icloud.com>
Signed-off-by: Stefan Scherer <scherer_stefan@icloud.com>
@StefanScherer
Copy link
Member Author

green, merging for a pre-release

@mevatron
Copy link

mevatron commented Aug 1, 2016

@StefanScherer Awesome :) I had some difficulty getting the sysctl to ever automatically happen on boot-up. I would always have to manually enable the netfilter settings after logging in, so I switched over to the iptables fix that was recommended:

iptables -I INPUT -m conntrack --ctstate INVALID -j DROP

That has worked with no issues on my ODROID-XU4.

It'll be interesting if this works without a hitch on Blackbeard (nice codename by the way) :).

@StefanScherer
Copy link
Member Author

@mevatron I had to revert this PR as sysctl doesn't work. Thanks for the iptables fix. I'll try to get this into v1.0.0

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants