27 Commits

Author SHA1 Message Date
IceCodeNew
2ead2cea26
Disable TCP slow start after idle
Signed-off-by: IceCodeNew <32576256+IceCodeNew@users.noreply.github.com>
2021-10-12 21:16:55 +08:00
K4YT3X
3ea204497d tweaked perf restrictions, disallowed IPv6 SRR and redirects 1.3 2021-06-07 22:03:11 +00:00
K4YT3X
50d77687e4
Merge pull request #5 from HorlogeSkynet/master
added recommendations from ANSSI
2021-06-07 17:55:37 -04:00
Samuel FORESTIER
9a3fd6cf9c
Fixed variables processing order issue related to perf subsystem
> https://bbs.archlinux.org/viewtopic.php?id=248926
2021-06-07 08:21:17 +00:00
Samuel FORESTIER
4eba426270 added recommendations from ANSSI (perf subsystem + vm low addr mapping)
> https://www.ssi.gouv.fr/uploads/2016/01/linux_configuration-fr-v1.2.pdf#section.6.2
2021-06-06 14:12:51 +02:00
k4yt3x
f426457a6b changed akas.io links to k4t.io 2021-05-25 07:18:13 +00:00
K4YT3X
5eecf56b0a added more descriptions for TCP timestamps 2020-10-29 10:44:10 -04:00
K4YT3X
fbe72f187d added comments for rp_filter (BCP38) 2020-10-21 23:37:04 -04:00
K4YT3X
7ec9bd7ef5 increased fs.inotify.max_user_watches to 524288 2020-10-19 17:31:10 -04:00
K4YT3X
b291beb3f9 added more deployment methods and explanations 1.2 2020-10-08 14:35:18 -04:00
K4YT3X
b260f22a45 optimized usage instructions, removed full sysctl.conf from README 2020-10-07 17:58:47 -04:00
K4YT3X
f173c2cafc added note for inode-max 2020-10-07 17:39:07 -04:00
K4YT3X
fa7dc0052b synchronized README with config file 2020-10-07 17:31:58 -04:00
K4YT3X
d45547b9c5 further increased ip port range 2020-10-07 17:31:14 -04:00
K4YT3X
2f4267a8d9 increased kernel.pix_max and fs.file-max values according to theoretical limits on 64-bit systems 2020-10-07 17:29:29 -04:00
K4YT3X
f84b2472fa
Merge pull request #1 from IceCodeNew/4pr_net.ipv4.ip_local_port_range
It is better if two numbers have different parity
2020-10-07 20:38:51 +00:00
IceCodeNew
fcdee62224 It is better if two numbers have different parity
Refer: https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt
Signed-off-by: IceCodeNew <32576256+IceCodeNew@users.noreply.github.com>
2020-10-07 23:57:00 +08:00
K4YT3X
1939bb08ae synchronized README with config file 1.1 2020-10-06 14:53:49 -04:00
K4YT3X
abb9f9fc22 version 1.1: added more security options and tweaks 2020-10-06 14:20:18 -04:00
K4YT3X
a7f9469e33 added sysctl-explorer link 1.0 2020-10-05 18:22:07 -04:00
K4YT3X
7d768f05f1 added sample commands 2020-10-05 18:20:33 -04:00
K4YT3X
4b70379318 added short link to sysctl.conf 2020-10-05 18:09:31 -04:00
K4YT3X
2f7ba697fc added more descriptions into the README file 2020-10-05 18:03:38 -04:00
K4YT3X
dfb8a59ce7 synchronized README with config file 2020-10-05 17:53:32 -04:00
K4YT3X
13fb9e964a added version number 1.0 2020-10-05 17:52:47 -04:00
K4YT3X
5062ebcc05 added the first version of sysctl.conf 2020-10-05 17:52:08 -04:00
K4YT3X
32e37446ad
Initial commit 2020-10-05 21:44:34 +00:00