강좌
클라우드/리눅스에 관한 강좌입니다.
리눅스 분류

sysctl과 커널파라미터(kernel parameter) 이란?

작성자 정보

  • 관리자 작성
  • 작성일

컨텐츠 정보

본문

sysctl과 커널파라미터(kernel parameter) 이란?

 

 

 

 

/proc 파일시스템의 디렉토리에 존재하는 파일들을 직접 수정및 변경하는 방법으로 커널옵션값을 조절한다.

 

 

 

 

 

 

이번에는 /proc/sys 파일시스템 내의 파일들을 직접 수정하지 않아도 커널옵션들을 변경할 수있는 명령어인 sysctl을 이용하여 지금까지의 작업을 동일하게 할 수 있는 방법에 대해서 알아볼 것이다.

 

 

 

 

 

 

sysctl의 man page를 확인해보면 sysctl은 “configure kernel parameters at runtime”이라고 정의되어있다.

 

 

 

 

즉 커널파라미터(kernel parameter)값을 설정하는 명령어란 것이다.

 

 

 

 

 

 

자, 그럼 sysctl을 이용하여 커널옵션들을 확인하고 수정하는 방법에 대해서 알아보도록 하겠다.

 

 

 

 

 

 

 

커널옵션값 전체 확인하는 방법

 

 

 

 

이제 커널파라미터(kernel parameter)라는 커널옵션값들이 어떤 것들이 있는가를 확인해보도록 하자. 먼저, “sysctl -a”라고 하면 커널설정값들을 모두 확인할 수 있다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a

abi.vsyscall32 = 1

crypto.fips_enabled = 0

crypto.fips_name = Rocky Linux 9 - Kernel Cryptographic API

crypto.fips_version = 5.14.0-162.23.1.el9_1.x86_64

debug.exception-trace = 1

debug.kprobes-optimization = 1

dev.cdrom.autoclose = 1

dev.cdrom.autoeject = 0

dev.cdrom.check_media = 0

dev.cdrom.debug = 0

dev.cdrom.info = CD-ROM information, Id: cdrom.c 3.20 2003/12/17

dev.cdrom.info =

dev.cdrom.info = drive name:            sr1     sr0

dev.cdrom.info = drive speed:           32      32

dev.cdrom.info = drive # of slots:      1       1

dev.cdrom.info = Can close tray:                1       1

dev.cdrom.info = Can open tray:         1       1

dev.cdrom.info = Can lock tray:         1       1

dev.cdrom.info = Can change speed:      1       1

dev.cdrom.info = Can select disk:       0       0

dev.cdrom.info = Can read multisession: 1       1

dev.cdrom.info = Can read MCN:          1       1

dev.cdrom.info = Reports media changed: 1       1

dev.cdrom.info = Can play audio:                1       1

dev.cdrom.info = Can write CD-R:                0       0

dev.cdrom.info = Can write CD-RW:       0       0

dev.cdrom.info = Can read DVD:          1       1

dev.cdrom.info = Can write DVD-R:       0       0

dev.cdrom.info = Can write DVD-RAM:     0       0

dev.cdrom.info = Can read MRW:          1       1

dev.cdrom.info = Can write MRW:         1       1

dev.cdrom.info = Can write RAM:         1       1

dev.cdrom.info =

dev.cdrom.info =

dev.cdrom.lock = 1

dev.hpet.max-user-freq = 64

dev.raid.speed_limit_max = 200000

dev.raid.speed_limit_min = 1000

dev.scsi.logging_level = 0

dev.tty.ldisc_autoload = 1

fs.aio-max-nr = 1048576

fs.aio-nr = 0

fs.binfmt_misc.status = enabled

fs.dentry-state = 76142 56450   45      0       5820    0

fs.dir-notify-enable = 1

fs.epoll.max_user_watches = 434376

fs.fanotify.max_queued_events = 16384

fs.fanotify.max_user_groups = 128

fs.fanotify.max_user_marks = 15416

fs.file-max = 6815744

fs.file-nr = 4512       0       6815744

fs.inode-nr = 70470     966

fs.inode-state = 70470  966     0       0       0       0       0

fs.inotify.max_queued_events = 16384

fs.inotify.max_user_instances = 128

fs.inotify.max_user_watches = 14520

fs.lease-break-time = 45

fs.leases-enable = 1

fs.mount-max = 100000

fs.mqueue.msg_default = 10

fs.mqueue.msg_max = 10

fs.mqueue.msgsize_default = 8192

fs.mqueue.msgsize_max = 8192

fs.mqueue.queues_max = 256

fs.nr_open = 1073741816

fs.overflowgid = 65534

fs.overflowuid = 65534

fs.pipe-max-size = 1048576

fs.pipe-user-pages-hard = 0

fs.pipe-user-pages-soft = 16384

fs.protected_fifos = 1

fs.protected_hardlinks = 1

fs.protected_regular = 1

fs.protected_symlinks = 1

fs.quota.allocated_dquots = 0

fs.quota.cache_hits = 0

fs.quota.drops = 0

fs.quota.free_dquots = 0

fs.quota.lookups = 0

fs.quota.reads = 0

fs.quota.syncs = 0

fs.quota.warnings = 1

fs.quota.writes = 0

fs.suid_dumpable = 2

fs.xfs.error_level = 3

fs.xfs.filestream_centisecs = 3000

fs.xfs.inherit_noatime = 1

fs.xfs.inherit_nodefrag = 1

fs.xfs.inherit_nodump = 1

fs.xfs.inherit_nosymlinks = 0

fs.xfs.inherit_sync = 1

fs.xfs.irix_sgid_inherit = 0

fs.xfs.irix_symlink_mode = 0

fs.xfs.panic_mask = 0

fs.xfs.rotorstep = 1

fs.xfs.speculative_cow_prealloc_lifetime = 300

fs.xfs.speculative_prealloc_lifetime = 300

fs.xfs.stats_clear = 0

fs.xfs.xfssyncd_centisecs = 3000

kernel.acct = 4 2       30

kernel.acpi_video_flags = 0

kernel.auto_msgmni = 0

kernel.bootloader_type = 6

kernel.bootloader_version = 38

kernel.bpf_stats_enabled = 0

kernel.cad_pid = 1

kernel.cap_last_cap = 40

kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h

kernel.core_pipe_limit = 16

kernel.core_uses_pid = 1

kernel.ctrl-alt-del = 0

kernel.dmesg_restrict = 0

kernel.domainname = (none)

kernel.firmware_config.force_sysfs_fallback = 0

kernel.firmware_config.ignore_sysfs_fallback = 0

kernel.ftrace_dump_on_oops = 0

kernel.ftrace_enabled = 1

kernel.hardlockup_all_cpu_backtrace = 0

kernel.hardlockup_panic = 1

kernel.hostname = RockyLinux

kernel.hung_task_all_cpu_backtrace = 0

kernel.hung_task_check_count = 4194304

kernel.hung_task_check_interval_secs = 0

kernel.hung_task_panic = 0

kernel.hung_task_timeout_secs = 120

kernel.hung_task_warnings = 10

kernel.io_delay_type = 0

kernel.kexec_load_disabled = 0

kernel.keys.gc_delay = 300

kernel.keys.maxbytes = 20000

kernel.keys.maxkeys = 200

kernel.keys.persistent_keyring_expiry = 259200

kernel.keys.root_maxbytes = 25000000

kernel.keys.root_maxkeys = 1000000

kernel.kptr_restrict = 1

kernel.max_lock_depth = 1024

kernel.max_rcu_stall_to_panic = 0

kernel.modprobe = /usr/sbin/modprobe

kernel.modules_disabled = 0

kernel.msg_next_id = -1

kernel.msgmax = 8192

kernel.msgmnb = 16384

kernel.msgmni = 32000

kernel.ngroups_max = 65536

kernel.nmi_watchdog = 0

kernel.ns_last_pid = 2291

kernel.numa_balancing = 0

kernel.oops_all_cpu_backtrace = 0

kernel.osrelease = 5.14.0-162.23.1.el9_1.x86_64

kernel.ostype = Linux

kernel.overflowgid = 65534

kernel.overflowuid = 65534

kernel.panic = 0

kernel.panic_on_io_nmi = 0

kernel.panic_on_oops = 1

kernel.panic_on_rcu_stall = 0

kernel.panic_on_unrecovered_nmi = 0

kernel.panic_on_warn = 0

kernel.panic_print = 0

kernel.perf_cpu_time_max_percent = 25

kernel.perf_event_max_contexts_per_stack = 8

kernel.perf_event_max_sample_rate = 100000

kernel.perf_event_max_stack = 127

kernel.perf_event_mlock_kb = 516

kernel.perf_event_paranoid = 2

kernel.pid_max = 4194304

kernel.poweroff_cmd = /sbin/poweroff

kernel.print-fatal-signals = 0

kernel.printk = 4       4       1       7

kernel.printk_delay = 0

kernel.printk_devkmsg = on

kernel.printk_ratelimit = 5

kernel.printk_ratelimit_burst = 10

kernel.pty.max = 4096

kernel.pty.nr = 1

kernel.pty.reserve = 1024

kernel.random.boot_id = a6fa6ce2-d981-4ed7-813c-dcf437a0217c

kernel.random.entropy_avail = 0

kernel.random.poolsize = 256

kernel.random.urandom_min_reseed_secs = 300

kernel.random.uuid = 1725a1ab-1395-40b7-8f4b-471be3e65724

kernel.random.write_wakeup_threshold = 256

kernel.randomize_va_space = 2

kernel.real-root-dev = 0

kernel.sched_autogroup_enabled = 1

kernel.sched_cfs_bandwidth_slice_us = 5000

kernel.sched_child_runs_first = 0

kernel.sched_deadline_period_max_us = 4194304

kernel.sched_deadline_period_min_us = 100

kernel.sched_energy_aware = 1

kernel.sched_rr_timeslice_ms = 100

kernel.sched_rt_period_us = 1000000

kernel.sched_rt_runtime_us = 950000

kernel.sched_schedstats = 0

kernel.seccomp.actions_avail = kill_process kill_thread trap errno user_notif trace log allow

kernel.seccomp.actions_logged = kill_process kill_thread trap errno user_notif trace log

kernel.sem = 250        32000   100     128

kernel.sem_next_id = -1

kernel.shm_next_id = -1

kernel.shm_rmid_forced = 0

kernel.shmall = 4294967296

kernel.shmmax = 68719476736

kernel.shmmni = 4096

kernel.soft_watchdog = 1

kernel.softlockup_all_cpu_backtrace = 0

kernel.softlockup_panic = 0

kernel.stack_tracer_enabled = 0

kernel.sysctl_writes_strict = 1

kernel.sysrq = 16

kernel.tainted = 0

kernel.task_delayacct = 0

kernel.threads-max = 15244

kernel.timer_migration = 1

kernel.traceoff_on_warning = 0

kernel.tracepoint_printk = 0

kernel.unknown_nmi_panic = 0

kernel.unprivileged_bpf_disabled = 2

kernel.usermodehelper.bset = 4294967295 511

kernel.usermodehelper.inheritable = 4294967295  511

kernel.version = #1 SMP PREEMPT_DYNAMIC Tue Apr 11 19:09:37 UTC 2023

kernel.watchdog = 1

kernel.watchdog_cpumask = 0

kernel.watchdog_thresh = 10

kernel.yama.ptrace_scope = 0

net.bridge.bridge-nf-call-arptables = 1

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-iptables = 1

net.bridge.bridge-nf-filter-pppoe-tagged = 0

net.bridge.bridge-nf-filter-vlan-tagged = 0

net.bridge.bridge-nf-pass-vlan-input-dev = 0

net.core.bpf_jit_enable = 1

net.core.bpf_jit_harden = 1

net.core.bpf_jit_kallsyms = 1

net.core.bpf_jit_limit = 264241152

net.core.busy_poll = 0

net.core.busy_read = 0

net.core.default_qdisc = fq_codel

net.core.dev_weight = 64

net.core.dev_weight_rx_bias = 1

net.core.dev_weight_tx_bias = 1

net.core.devconf_inherit_init_net = 0

net.core.fb_tunnels_only_for_init_net = 0

net.core.flow_limit_cpu_bitmap = 0

net.core.flow_limit_table_len = 4096

net.core.gro_normal_batch = 8

net.core.high_order_alloc_disable = 0

net.core.max_skb_frags = 17

net.core.message_burst = 10

net.core.message_cost = 5

net.core.netdev_budget = 300

net.core.netdev_budget_usecs = 2000

net.core.netdev_max_backlog = 1000

net.core.netdev_rss_key = 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00

net.core.netdev_tstamp_prequeue = 1

net.core.netdev_unregister_timeout_secs = 10

net.core.optmem_max = 81920

net.core.rmem_default = 262144

net.core.rmem_max = 4194304

net.core.rps_sock_flow_entries = 0

net.core.somaxconn = 4096

net.core.tstamp_allow_data = 1

net.core.warnings = 0

net.core.wmem_default = 262144

net.core.wmem_max = 1048576

net.core.xfrm_acq_expires = 30

net.core.xfrm_aevent_etime = 10

net.core.xfrm_aevent_rseqth = 2

net.core.xfrm_larval_drop = 1

net.ipv4.cipso_cache_bucket_size = 10

net.ipv4.cipso_cache_enable = 1

net.ipv4.cipso_rbm_optfmt = 0

net.ipv4.cipso_rbm_strictvalid = 1

net.ipv4.conf.all.accept_local = 0

net.ipv4.conf.all.accept_redirects = 0

net.ipv4.conf.all.accept_source_route = 0

net.ipv4.conf.all.arp_accept = 0

net.ipv4.conf.all.arp_announce = 0

net.ipv4.conf.all.arp_filter = 0

net.ipv4.conf.all.arp_ignore = 0

net.ipv4.conf.all.arp_notify = 0

net.ipv4.conf.all.bc_forwarding = 0

net.ipv4.conf.all.bootp_relay = 0

net.ipv4.conf.all.disable_policy = 0

net.ipv4.conf.all.disable_xfrm = 0

net.ipv4.conf.all.drop_gratuitous_arp = 0

net.ipv4.conf.all.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.all.force_igmp_version = 0

net.ipv4.conf.all.forwarding = 1

net.ipv4.conf.all.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.all.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.all.ignore_routes_with_linkdown = 0

net.ipv4.conf.all.log_martians = 0

net.ipv4.conf.all.mc_forwarding = 0

net.ipv4.conf.all.medium_id = 0

net.ipv4.conf.all.promote_secondaries = 0

net.ipv4.conf.all.proxy_arp = 0

net.ipv4.conf.all.proxy_arp_pvlan = 0

net.ipv4.conf.all.route_localnet = 0

net.ipv4.conf.all.rp_filter = 0

net.ipv4.conf.all.secure_redirects = 1

net.ipv4.conf.all.send_redirects = 0

net.ipv4.conf.all.shared_media = 1

net.ipv4.conf.all.src_valid_mark = 0

net.ipv4.conf.all.tag = 0

net.ipv4.conf.default.accept_local = 0

net.ipv4.conf.default.accept_redirects = 0

net.ipv4.conf.default.accept_source_route = 0

net.ipv4.conf.default.arp_accept = 0

net.ipv4.conf.default.arp_announce = 0

net.ipv4.conf.default.arp_filter = 0

net.ipv4.conf.default.arp_ignore = 0

net.ipv4.conf.default.arp_notify = 0

net.ipv4.conf.default.bc_forwarding = 0

net.ipv4.conf.default.bootp_relay = 0

net.ipv4.conf.default.disable_policy = 0

net.ipv4.conf.default.disable_xfrm = 0

net.ipv4.conf.default.drop_gratuitous_arp = 0

net.ipv4.conf.default.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.default.force_igmp_version = 0

net.ipv4.conf.default.forwarding = 1

net.ipv4.conf.default.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.default.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.default.ignore_routes_with_linkdown = 0

net.ipv4.conf.default.log_martians = 0

net.ipv4.conf.default.mc_forwarding = 0

net.ipv4.conf.default.medium_id = 0

net.ipv4.conf.default.promote_secondaries = 1

net.ipv4.conf.default.proxy_arp = 0

net.ipv4.conf.default.proxy_arp_pvlan = 0

net.ipv4.conf.default.route_localnet = 0

net.ipv4.conf.default.rp_filter = 1

net.ipv4.conf.default.secure_redirects = 1

net.ipv4.conf.default.send_redirects = 0

net.ipv4.conf.default.shared_media = 1

net.ipv4.conf.default.src_valid_mark = 0

net.ipv4.conf.default.tag = 0

net.ipv4.conf.docker0.accept_local = 0

net.ipv4.conf.docker0.accept_redirects = 0

net.ipv4.conf.docker0.accept_source_route = 0

net.ipv4.conf.docker0.arp_accept = 0

net.ipv4.conf.docker0.arp_announce = 0

net.ipv4.conf.docker0.arp_filter = 0

net.ipv4.conf.docker0.arp_ignore = 0

net.ipv4.conf.docker0.arp_notify = 0

net.ipv4.conf.docker0.bc_forwarding = 0

net.ipv4.conf.docker0.bootp_relay = 0

net.ipv4.conf.docker0.disable_policy = 0

net.ipv4.conf.docker0.disable_xfrm = 0

net.ipv4.conf.docker0.drop_gratuitous_arp = 0

net.ipv4.conf.docker0.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.docker0.force_igmp_version = 0

net.ipv4.conf.docker0.forwarding = 1

net.ipv4.conf.docker0.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.docker0.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.docker0.ignore_routes_with_linkdown = 0

net.ipv4.conf.docker0.log_martians = 0

net.ipv4.conf.docker0.mc_forwarding = 0

net.ipv4.conf.docker0.medium_id = 0

net.ipv4.conf.docker0.promote_secondaries = 1

net.ipv4.conf.docker0.proxy_arp = 0

net.ipv4.conf.docker0.proxy_arp_pvlan = 0

net.ipv4.conf.docker0.route_localnet = 0

net.ipv4.conf.docker0.rp_filter = 1

net.ipv4.conf.docker0.secure_redirects = 1

net.ipv4.conf.docker0.send_redirects = 0

net.ipv4.conf.docker0.shared_media = 1

net.ipv4.conf.docker0.src_valid_mark = 0

net.ipv4.conf.docker0.tag = 0

net.ipv4.conf.enp0s3.accept_local = 0

net.ipv4.conf.enp0s3.accept_redirects = 0

net.ipv4.conf.enp0s3.accept_source_route = 0

net.ipv4.conf.enp0s3.arp_accept = 0

net.ipv4.conf.enp0s3.arp_announce = 0

net.ipv4.conf.enp0s3.arp_filter = 0

net.ipv4.conf.enp0s3.arp_ignore = 0

net.ipv4.conf.enp0s3.arp_notify = 0

net.ipv4.conf.enp0s3.bc_forwarding = 0

net.ipv4.conf.enp0s3.bootp_relay = 0

net.ipv4.conf.enp0s3.disable_policy = 0

net.ipv4.conf.enp0s3.disable_xfrm = 0

net.ipv4.conf.enp0s3.drop_gratuitous_arp = 0

net.ipv4.conf.enp0s3.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.enp0s3.force_igmp_version = 0

net.ipv4.conf.enp0s3.forwarding = 1

net.ipv4.conf.enp0s3.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.enp0s3.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.enp0s3.ignore_routes_with_linkdown = 0

net.ipv4.conf.enp0s3.log_martians = 0

net.ipv4.conf.enp0s3.mc_forwarding = 0

net.ipv4.conf.enp0s3.medium_id = 0

net.ipv4.conf.enp0s3.promote_secondaries = 1

net.ipv4.conf.enp0s3.proxy_arp = 0

net.ipv4.conf.enp0s3.proxy_arp_pvlan = 0

net.ipv4.conf.enp0s3.route_localnet = 0

net.ipv4.conf.enp0s3.rp_filter = 1

net.ipv4.conf.enp0s3.secure_redirects = 1

net.ipv4.conf.enp0s3.send_redirects = 0

net.ipv4.conf.enp0s3.shared_media = 1

net.ipv4.conf.enp0s3.src_valid_mark = 0

net.ipv4.conf.enp0s3.tag = 0

net.ipv4.conf.lo.accept_local = 0

net.ipv4.conf.lo.accept_redirects = 1

net.ipv4.conf.lo.accept_source_route = 0

net.ipv4.conf.lo.arp_accept = 0

net.ipv4.conf.lo.arp_announce = 0

net.ipv4.conf.lo.arp_filter = 0

net.ipv4.conf.lo.arp_ignore = 0

net.ipv4.conf.lo.arp_notify = 0

net.ipv4.conf.lo.bc_forwarding = 0

net.ipv4.conf.lo.bootp_relay = 0

net.ipv4.conf.lo.disable_policy = 1

net.ipv4.conf.lo.disable_xfrm = 1

net.ipv4.conf.lo.drop_gratuitous_arp = 0

net.ipv4.conf.lo.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.lo.force_igmp_version = 0

net.ipv4.conf.lo.forwarding = 1

net.ipv4.conf.lo.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.lo.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.lo.ignore_routes_with_linkdown = 0

net.ipv4.conf.lo.log_martians = 0

net.ipv4.conf.lo.mc_forwarding = 0

net.ipv4.conf.lo.medium_id = 0

net.ipv4.conf.lo.promote_secondaries = 1

net.ipv4.conf.lo.proxy_arp = 0

net.ipv4.conf.lo.proxy_arp_pvlan = 0

net.ipv4.conf.lo.route_localnet = 0

net.ipv4.conf.lo.rp_filter = 1

net.ipv4.conf.lo.secure_redirects = 1

net.ipv4.conf.lo.send_redirects = 1

net.ipv4.conf.lo.shared_media = 1

net.ipv4.conf.lo.src_valid_mark = 0

net.ipv4.conf.lo.tag = 0

net.ipv4.fib_multipath_hash_fields = 7

net.ipv4.fib_multipath_hash_policy = 0

net.ipv4.fib_multipath_use_neigh = 0

net.ipv4.fib_notify_on_flag_change = 0

net.ipv4.fib_sync_mem = 524288

net.ipv4.fwmark_reflect = 0

net.ipv4.icmp_echo_enable_probe = 0

net.ipv4.icmp_echo_ignore_all = 0

net.ipv4.icmp_echo_ignore_broadcasts = 1

net.ipv4.icmp_errors_use_inbound_ifaddr = 0

net.ipv4.icmp_ignore_bogus_error_responses = 1

net.ipv4.icmp_msgs_burst = 50

net.ipv4.icmp_msgs_per_sec = 1000

net.ipv4.icmp_ratelimit = 1000

net.ipv4.icmp_ratemask = 6168

net.ipv4.igmp_link_local_mcast_reports = 1

net.ipv4.igmp_max_memberships = 20

net.ipv4.igmp_max_msf = 10

net.ipv4.igmp_qrv = 2

net.ipv4.inet_peer_maxttl = 600

net.ipv4.inet_peer_minttl = 120

net.ipv4.inet_peer_threshold = 65664

net.ipv4.ip_autobind_reuse = 0

net.ipv4.ip_default_ttl = 64

net.ipv4.ip_dynaddr = 0

net.ipv4.ip_early_demux = 1

net.ipv4.ip_forward = 1

net.ipv4.ip_forward_update_priority = 1

net.ipv4.ip_forward_use_pmtu = 0

net.ipv4.ip_local_port_range = 9000     65500

net.ipv4.ip_local_reserved_ports =

net.ipv4.ip_no_pmtu_disc = 0

net.ipv4.ip_nonlocal_bind = 0

net.ipv4.ip_unprivileged_port_start = 1024

net.ipv4.ipfrag_high_thresh = 4194304

net.ipv4.ipfrag_low_thresh = 3145728

net.ipv4.ipfrag_max_dist = 64

net.ipv4.ipfrag_secret_interval = 0

net.ipv4.ipfrag_time = 30

net.ipv4.neigh.default.anycast_delay = 100

net.ipv4.neigh.default.app_solicit = 0

net.ipv4.neigh.default.base_reachable_time_ms = 30000

net.ipv4.neigh.default.delay_first_probe_time = 5

net.ipv4.neigh.default.gc_interval = 30

net.ipv4.neigh.default.gc_stale_time = 60

net.ipv4.neigh.default.gc_thresh1 = 128

net.ipv4.neigh.default.gc_thresh2 = 512

net.ipv4.neigh.default.gc_thresh3 = 1024

net.ipv4.neigh.default.locktime = 100

net.ipv4.neigh.default.mcast_resolicit = 0

net.ipv4.neigh.default.mcast_solicit = 3

net.ipv4.neigh.default.proxy_delay = 80

net.ipv4.neigh.default.proxy_qlen = 64

net.ipv4.neigh.default.retrans_time_ms = 1000

net.ipv4.neigh.default.ucast_solicit = 3

net.ipv4.neigh.default.unres_qlen = 101

net.ipv4.neigh.default.unres_qlen_bytes = 212992

net.ipv4.neigh.docker0.anycast_delay = 100

net.ipv4.neigh.docker0.app_solicit = 0

net.ipv4.neigh.docker0.base_reachable_time_ms = 30000

net.ipv4.neigh.docker0.delay_first_probe_time = 5

net.ipv4.neigh.docker0.gc_stale_time = 60

net.ipv4.neigh.docker0.locktime = 100

net.ipv4.neigh.docker0.mcast_resolicit = 0

net.ipv4.neigh.docker0.mcast_solicit = 3

net.ipv4.neigh.docker0.proxy_delay = 80

net.ipv4.neigh.docker0.proxy_qlen = 64

net.ipv4.neigh.docker0.retrans_time_ms = 1000

net.ipv4.neigh.docker0.ucast_solicit = 3

net.ipv4.neigh.docker0.unres_qlen = 101

net.ipv4.neigh.docker0.unres_qlen_bytes = 212992

net.ipv4.neigh.enp0s3.anycast_delay = 100

net.ipv4.neigh.enp0s3.app_solicit = 0

net.ipv4.neigh.enp0s3.base_reachable_time_ms = 30000

net.ipv4.neigh.enp0s3.delay_first_probe_time = 5

net.ipv4.neigh.enp0s3.gc_stale_time = 60

net.ipv4.neigh.enp0s3.locktime = 100

net.ipv4.neigh.enp0s3.mcast_resolicit = 0

net.ipv4.neigh.enp0s3.mcast_solicit = 3

net.ipv4.neigh.enp0s3.proxy_delay = 80

net.ipv4.neigh.enp0s3.proxy_qlen = 64

net.ipv4.neigh.enp0s3.retrans_time_ms = 1000

net.ipv4.neigh.enp0s3.ucast_solicit = 3

net.ipv4.neigh.enp0s3.unres_qlen = 101

net.ipv4.neigh.enp0s3.unres_qlen_bytes = 212992

net.ipv4.neigh.lo.anycast_delay = 100

net.ipv4.neigh.lo.app_solicit = 0

net.ipv4.neigh.lo.base_reachable_time_ms = 30000

net.ipv4.neigh.lo.delay_first_probe_time = 5

net.ipv4.neigh.lo.gc_stale_time = 60

net.ipv4.neigh.lo.locktime = 100

net.ipv4.neigh.lo.mcast_resolicit = 0

net.ipv4.neigh.lo.mcast_solicit = 3

net.ipv4.neigh.lo.proxy_delay = 80

net.ipv4.neigh.lo.proxy_qlen = 64

net.ipv4.neigh.lo.retrans_time_ms = 1000

net.ipv4.neigh.lo.ucast_solicit = 3

net.ipv4.neigh.lo.unres_qlen = 101

net.ipv4.neigh.lo.unres_qlen_bytes = 212992

net.ipv4.nexthop_compat_mode = 1

net.ipv4.ping_group_range = 0   2147483647

net.ipv4.raw_l3mdev_accept = 1

net.ipv4.route.error_burst = 5000

net.ipv4.route.error_cost = 1000

net.ipv4.route.gc_elasticity = 8

net.ipv4.route.gc_interval = 60

net.ipv4.route.gc_min_interval = 0

net.ipv4.route.gc_min_interval_ms = 500

net.ipv4.route.gc_thresh = -1

net.ipv4.route.gc_timeout = 300

net.ipv4.route.max_size = 2147483647

net.ipv4.route.min_adv_mss = 256

net.ipv4.route.min_pmtu = 552

net.ipv4.route.mtu_expires = 600

net.ipv4.route.redirect_load = 20

net.ipv4.route.redirect_number = 9

net.ipv4.route.redirect_silence = 20480

net.ipv4.tcp_abort_on_overflow = 0

net.ipv4.tcp_adv_win_scale = 1

net.ipv4.tcp_allowed_congestion_control = reno cubic

net.ipv4.tcp_app_win = 31

net.ipv4.tcp_autocorking = 1

net.ipv4.tcp_available_congestion_control = reno cubic

net.ipv4.tcp_available_ulp = espintcp mptcp tls

net.ipv4.tcp_base_mss = 1024

net.ipv4.tcp_challenge_ack_limit = 1000

net.ipv4.tcp_comp_sack_delay_ns = 1000000

net.ipv4.tcp_comp_sack_nr = 44

net.ipv4.tcp_comp_sack_slack_ns = 100000

net.ipv4.tcp_congestion_control = cubic

net.ipv4.tcp_dsack = 1

net.ipv4.tcp_early_demux = 1

net.ipv4.tcp_early_retrans = 3

net.ipv4.tcp_ecn = 2

net.ipv4.tcp_ecn_fallback = 1

net.ipv4.tcp_fack = 0

net.ipv4.tcp_fastopen = 1027

net.ipv4.tcp_fastopen_blackhole_timeout_sec = 0

net.ipv4.tcp_fastopen_key = 45debd64-0fdd5285-1e7c6c53-666f8649

net.ipv4.tcp_fin_timeout = 60

net.ipv4.tcp_frto = 2

net.ipv4.tcp_fwmark_accept = 0

net.ipv4.tcp_invalid_ratelimit = 500

net.ipv4.tcp_keepalive_intvl = 75

net.ipv4.tcp_keepalive_probes = 9

net.ipv4.tcp_keepalive_time = 7200

net.ipv4.tcp_l3mdev_accept = 0

net.ipv4.tcp_limit_output_bytes = 1048576

net.ipv4.tcp_low_latency = 0

net.ipv4.tcp_max_orphans = 8192

net.ipv4.tcp_max_reordering = 300

net.ipv4.tcp_max_syn_backlog = 4096

net.ipv4.tcp_max_tw_buckets = 262144

net.ipv4.tcp_mem = 21783        29045   43566

net.ipv4.tcp_migrate_req = 0

net.ipv4.tcp_min_rtt_wlen = 300

net.ipv4.tcp_min_snd_mss = 48

net.ipv4.tcp_min_tso_segs = 2

net.ipv4.tcp_moderate_rcvbuf = 1

net.ipv4.tcp_mtu_probe_floor = 48

net.ipv4.tcp_mtu_probing = 0

net.ipv4.tcp_no_metrics_save = 0

net.ipv4.tcp_no_ssthresh_metrics_save = 1

net.ipv4.tcp_notsent_lowat = 4294967295

net.ipv4.tcp_orphan_retries = 0

net.ipv4.tcp_pacing_ca_ratio = 120

net.ipv4.tcp_pacing_ss_ratio = 200

net.ipv4.tcp_probe_interval = 600

net.ipv4.tcp_probe_threshold = 8

net.ipv4.tcp_recovery = 1

net.ipv4.tcp_reflect_tos = 0

net.ipv4.tcp_reordering = 3

net.ipv4.tcp_retrans_collapse = 1

net.ipv4.tcp_retries1 = 3

net.ipv4.tcp_retries2 = 15

net.ipv4.tcp_rfc1337 = 0

net.ipv4.tcp_rmem = 4096        131072  6291456

net.ipv4.tcp_sack = 1

net.ipv4.tcp_slow_start_after_idle = 0

net.ipv4.tcp_stdurg = 0

net.ipv4.tcp_syn_retries = 6

net.ipv4.tcp_synack_retries = 5

net.ipv4.tcp_syncookies = 1

net.ipv4.tcp_thin_linear_timeouts = 0

net.ipv4.tcp_timestamps = 1

net.ipv4.tcp_tso_win_divisor = 3

net.ipv4.tcp_tw_reuse = 2

net.ipv4.tcp_window_scaling = 1

net.ipv4.tcp_wmem = 4096        16384   4194304

net.ipv4.tcp_workaround_signed_windows = 0

net.ipv4.udp_early_demux = 1

net.ipv4.udp_l3mdev_accept = 0

net.ipv4.udp_mem = 43566        58091   87132

net.ipv4.udp_rmem_min = 4096

net.ipv4.udp_wmem_min = 4096

net.ipv4.xfrm4_gc_thresh = 32768

net.ipv6.anycast_src_echo_reply = 0

net.ipv6.auto_flowlabels = 1

net.ipv6.bindv6only = 0

net.ipv6.calipso_cache_bucket_size = 10

net.ipv6.calipso_cache_enable = 1

net.ipv6.conf.all.accept_dad = 0

net.ipv6.conf.all.accept_ra = 1

net.ipv6.conf.all.accept_ra_defrtr = 1

net.ipv6.conf.all.accept_ra_from_local = 0

net.ipv6.conf.all.accept_ra_min_hop_limit = 1

net.ipv6.conf.all.accept_ra_mtu = 1

net.ipv6.conf.all.accept_ra_pinfo = 1

net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.all.accept_ra_rtr_pref = 1

net.ipv6.conf.all.accept_redirects = 0

net.ipv6.conf.all.accept_source_route = 0

net.ipv6.conf.all.addr_gen_mode = 0

net.ipv6.conf.all.autoconf = 1

net.ipv6.conf.all.dad_transmits = 1

net.ipv6.conf.all.disable_ipv6 = 0

net.ipv6.conf.all.disable_policy = 0

net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.all.drop_unsolicited_na = 0

net.ipv6.conf.all.enhanced_dad = 1

net.ipv6.conf.all.force_mld_version = 0

net.ipv6.conf.all.force_tllao = 0

net.ipv6.conf.all.forwarding = 0

net.ipv6.conf.all.hop_limit = 64

net.ipv6.conf.all.ignore_routes_with_linkdown = 0

net.ipv6.conf.all.keep_addr_on_down = 0

net.ipv6.conf.all.max_addresses = 16

net.ipv6.conf.all.max_desync_factor = 600

net.ipv6.conf.all.mc_forwarding = 0

net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.all.mtu = 1280

net.ipv6.conf.all.ndisc_notify = 0

net.ipv6.conf.all.ndisc_tclass = 0

net.ipv6.conf.all.optimistic_dad = 0

net.ipv6.conf.all.proxy_ndp = 0

net.ipv6.conf.all.ra_defrtr_metric = 1024

net.ipv6.conf.all.regen_max_retry = 3

net.ipv6.conf.all.router_probe_interval = 60

net.ipv6.conf.all.router_solicitation_delay = 1

net.ipv6.conf.all.router_solicitation_interval = 4

net.ipv6.conf.all.router_solicitation_max_interval = 3600

net.ipv6.conf.all.router_solicitations = -1

net.ipv6.conf.all.rpl_seg_enabled = 0

net.ipv6.conf.all.seg6_enabled = 0

net.ipv6.conf.all.suppress_frag_ndisc = 1

net.ipv6.conf.all.temp_prefered_lft = 86400

net.ipv6.conf.all.temp_valid_lft = 604800

net.ipv6.conf.all.use_oif_addrs_only = 0

net.ipv6.conf.all.use_optimistic = 0

net.ipv6.conf.all.use_tempaddr = 0

net.ipv6.conf.default.accept_dad = 1

net.ipv6.conf.default.accept_ra = 1

net.ipv6.conf.default.accept_ra_defrtr = 1

net.ipv6.conf.default.accept_ra_from_local = 0

net.ipv6.conf.default.accept_ra_min_hop_limit = 1

net.ipv6.conf.default.accept_ra_mtu = 1

net.ipv6.conf.default.accept_ra_pinfo = 1

net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.default.accept_ra_rtr_pref = 1

net.ipv6.conf.default.accept_redirects = 0

net.ipv6.conf.default.accept_source_route = 0

net.ipv6.conf.default.addr_gen_mode = 0

net.ipv6.conf.default.autoconf = 1

net.ipv6.conf.default.dad_transmits = 1

net.ipv6.conf.default.disable_ipv6 = 0

net.ipv6.conf.default.disable_policy = 0

net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.default.drop_unsolicited_na = 0

net.ipv6.conf.default.enhanced_dad = 1

net.ipv6.conf.default.force_mld_version = 0

net.ipv6.conf.default.force_tllao = 0

net.ipv6.conf.default.forwarding = 0

net.ipv6.conf.default.hop_limit = 64

net.ipv6.conf.default.ignore_routes_with_linkdown = 0

net.ipv6.conf.default.keep_addr_on_down = 0

net.ipv6.conf.default.max_addresses = 16

net.ipv6.conf.default.max_desync_factor = 600

net.ipv6.conf.default.mc_forwarding = 0

net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.default.mtu = 1280

net.ipv6.conf.default.ndisc_notify = 0

net.ipv6.conf.default.ndisc_tclass = 0

net.ipv6.conf.default.optimistic_dad = 0

net.ipv6.conf.default.proxy_ndp = 0

net.ipv6.conf.default.ra_defrtr_metric = 1024

net.ipv6.conf.default.regen_max_retry = 3

net.ipv6.conf.default.router_probe_interval = 60

net.ipv6.conf.default.router_solicitation_delay = 1

net.ipv6.conf.default.router_solicitation_interval = 4

net.ipv6.conf.default.router_solicitation_max_interval = 3600

net.ipv6.conf.default.router_solicitations = -1

net.ipv6.conf.default.rpl_seg_enabled = 0

net.ipv6.conf.default.seg6_enabled = 0

net.ipv6.conf.default.suppress_frag_ndisc = 1

net.ipv6.conf.default.temp_prefered_lft = 86400

net.ipv6.conf.default.temp_valid_lft = 604800

net.ipv6.conf.default.use_oif_addrs_only = 0

net.ipv6.conf.default.use_optimistic = 0

net.ipv6.conf.default.use_tempaddr = 0

net.ipv6.conf.docker0.accept_dad = 1

net.ipv6.conf.docker0.accept_ra = 0

net.ipv6.conf.docker0.accept_ra_defrtr = 1

net.ipv6.conf.docker0.accept_ra_from_local = 0

net.ipv6.conf.docker0.accept_ra_min_hop_limit = 1

net.ipv6.conf.docker0.accept_ra_mtu = 1

net.ipv6.conf.docker0.accept_ra_pinfo = 1

net.ipv6.conf.docker0.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.docker0.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.docker0.accept_ra_rtr_pref = 1

net.ipv6.conf.docker0.accept_redirects = 0

net.ipv6.conf.docker0.accept_source_route = 0

net.ipv6.conf.docker0.addr_gen_mode = 0

net.ipv6.conf.docker0.autoconf = 1

net.ipv6.conf.docker0.dad_transmits = 1

net.ipv6.conf.docker0.disable_ipv6 = 0

net.ipv6.conf.docker0.disable_policy = 0

net.ipv6.conf.docker0.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.docker0.drop_unsolicited_na = 0

net.ipv6.conf.docker0.enhanced_dad = 1

net.ipv6.conf.docker0.force_mld_version = 0

net.ipv6.conf.docker0.force_tllao = 0

net.ipv6.conf.docker0.forwarding = 0

net.ipv6.conf.docker0.hop_limit = 64

net.ipv6.conf.docker0.ignore_routes_with_linkdown = 0

net.ipv6.conf.docker0.keep_addr_on_down = 0

net.ipv6.conf.docker0.max_addresses = 16

net.ipv6.conf.docker0.max_desync_factor = 600

net.ipv6.conf.docker0.mc_forwarding = 0

net.ipv6.conf.docker0.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.docker0.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.docker0.mtu = 1500

net.ipv6.conf.docker0.ndisc_notify = 0

net.ipv6.conf.docker0.ndisc_tclass = 0

net.ipv6.conf.docker0.optimistic_dad = 0

net.ipv6.conf.docker0.proxy_ndp = 0

net.ipv6.conf.docker0.ra_defrtr_metric = 1024

net.ipv6.conf.docker0.regen_max_retry = 3

net.ipv6.conf.docker0.router_probe_interval = 60

net.ipv6.conf.docker0.router_solicitation_delay = 1

net.ipv6.conf.docker0.router_solicitation_interval = 4

net.ipv6.conf.docker0.router_solicitation_max_interval = 3600

net.ipv6.conf.docker0.router_solicitations = -1

net.ipv6.conf.docker0.rpl_seg_enabled = 0

net.ipv6.conf.docker0.seg6_enabled = 0

net.ipv6.conf.docker0.suppress_frag_ndisc = 1

net.ipv6.conf.docker0.temp_prefered_lft = 86400

net.ipv6.conf.docker0.temp_valid_lft = 604800

net.ipv6.conf.docker0.use_oif_addrs_only = 0

net.ipv6.conf.docker0.use_optimistic = 0

net.ipv6.conf.docker0.use_tempaddr = 0

net.ipv6.conf.enp0s3.accept_dad = 1

net.ipv6.conf.enp0s3.accept_ra = 0

net.ipv6.conf.enp0s3.accept_ra_defrtr = 1

net.ipv6.conf.enp0s3.accept_ra_from_local = 0

net.ipv6.conf.enp0s3.accept_ra_min_hop_limit = 1

net.ipv6.conf.enp0s3.accept_ra_mtu = 1

net.ipv6.conf.enp0s3.accept_ra_pinfo = 1

net.ipv6.conf.enp0s3.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.enp0s3.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.enp0s3.accept_ra_rtr_pref = 1

net.ipv6.conf.enp0s3.accept_redirects = 0

net.ipv6.conf.enp0s3.accept_source_route = 0

net.ipv6.conf.enp0s3.addr_gen_mode = 1

net.ipv6.conf.enp0s3.autoconf = 1

net.ipv6.conf.enp0s3.dad_transmits = 1

net.ipv6.conf.enp0s3.disable_ipv6 = 1

net.ipv6.conf.enp0s3.disable_policy = 0

net.ipv6.conf.enp0s3.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.enp0s3.drop_unsolicited_na = 0

net.ipv6.conf.enp0s3.enhanced_dad = 1

net.ipv6.conf.enp0s3.force_mld_version = 0

net.ipv6.conf.enp0s3.force_tllao = 0

net.ipv6.conf.enp0s3.forwarding = 0

net.ipv6.conf.enp0s3.hop_limit = 64

net.ipv6.conf.enp0s3.ignore_routes_with_linkdown = 0

net.ipv6.conf.enp0s3.keep_addr_on_down = 0

net.ipv6.conf.enp0s3.max_addresses = 16

net.ipv6.conf.enp0s3.max_desync_factor = 600

net.ipv6.conf.enp0s3.mc_forwarding = 0

net.ipv6.conf.enp0s3.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.enp0s3.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.enp0s3.mtu = 1500

net.ipv6.conf.enp0s3.ndisc_notify = 0

net.ipv6.conf.enp0s3.ndisc_tclass = 0

net.ipv6.conf.enp0s3.optimistic_dad = 0

net.ipv6.conf.enp0s3.proxy_ndp = 0

net.ipv6.conf.enp0s3.ra_defrtr_metric = 1024

net.ipv6.conf.enp0s3.regen_max_retry = 3

net.ipv6.conf.enp0s3.router_probe_interval = 60

net.ipv6.conf.enp0s3.router_solicitation_delay = 1

net.ipv6.conf.enp0s3.router_solicitation_interval = 4

net.ipv6.conf.enp0s3.router_solicitation_max_interval = 3600

net.ipv6.conf.enp0s3.router_solicitations = -1

net.ipv6.conf.enp0s3.rpl_seg_enabled = 0

net.ipv6.conf.enp0s3.seg6_enabled = 0

net.ipv6.conf.enp0s3.suppress_frag_ndisc = 1

net.ipv6.conf.enp0s3.temp_prefered_lft = 86400

net.ipv6.conf.enp0s3.temp_valid_lft = 604800

net.ipv6.conf.enp0s3.use_oif_addrs_only = 0

net.ipv6.conf.enp0s3.use_optimistic = 0

net.ipv6.conf.enp0s3.use_tempaddr = 0

net.ipv6.conf.lo.accept_dad = -1

net.ipv6.conf.lo.accept_ra = 1

net.ipv6.conf.lo.accept_ra_defrtr = 1

net.ipv6.conf.lo.accept_ra_from_local = 0

net.ipv6.conf.lo.accept_ra_min_hop_limit = 1

net.ipv6.conf.lo.accept_ra_mtu = 1

net.ipv6.conf.lo.accept_ra_pinfo = 1

net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.lo.accept_ra_rtr_pref = 1

net.ipv6.conf.lo.accept_redirects = 1

net.ipv6.conf.lo.accept_source_route = 0

net.ipv6.conf.lo.addr_gen_mode = 0

net.ipv6.conf.lo.autoconf = 1

net.ipv6.conf.lo.dad_transmits = 1

net.ipv6.conf.lo.disable_ipv6 = 0

net.ipv6.conf.lo.disable_policy = 0

net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.lo.drop_unsolicited_na = 0

net.ipv6.conf.lo.enhanced_dad = 1

net.ipv6.conf.lo.force_mld_version = 0

net.ipv6.conf.lo.force_tllao = 0

net.ipv6.conf.lo.forwarding = 0

net.ipv6.conf.lo.hop_limit = 64

net.ipv6.conf.lo.ignore_routes_with_linkdown = 0

net.ipv6.conf.lo.keep_addr_on_down = 0

net.ipv6.conf.lo.max_addresses = 16

net.ipv6.conf.lo.max_desync_factor = 600

net.ipv6.conf.lo.mc_forwarding = 0

net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.lo.mtu = 65536

net.ipv6.conf.lo.ndisc_notify = 0

net.ipv6.conf.lo.ndisc_tclass = 0

net.ipv6.conf.lo.optimistic_dad = 0

net.ipv6.conf.lo.proxy_ndp = 0

net.ipv6.conf.lo.ra_defrtr_metric = 1024

net.ipv6.conf.lo.regen_max_retry = 3

net.ipv6.conf.lo.router_probe_interval = 60

net.ipv6.conf.lo.router_solicitation_delay = 1

net.ipv6.conf.lo.router_solicitation_interval = 4

net.ipv6.conf.lo.router_solicitation_max_interval = 3600

net.ipv6.conf.lo.router_solicitations = -1

net.ipv6.conf.lo.rpl_seg_enabled = 0

net.ipv6.conf.lo.seg6_enabled = 0

net.ipv6.conf.lo.suppress_frag_ndisc = 1

net.ipv6.conf.lo.temp_prefered_lft = 86400

net.ipv6.conf.lo.temp_valid_lft = 604800

net.ipv6.conf.lo.use_oif_addrs_only = 0

net.ipv6.conf.lo.use_optimistic = 0

net.ipv6.conf.lo.use_tempaddr = -1

net.ipv6.fib_multipath_hash_fields = 7

net.ipv6.fib_multipath_hash_policy = 0

net.ipv6.fib_notify_on_flag_change = 0

net.ipv6.flowlabel_consistency = 1

net.ipv6.flowlabel_reflect = 0

net.ipv6.flowlabel_state_ranges = 0

net.ipv6.fwmark_reflect = 0

net.ipv6.icmp.echo_ignore_all = 0

net.ipv6.icmp.echo_ignore_anycast = 0

net.ipv6.icmp.echo_ignore_multicast = 0

net.ipv6.icmp.ratelimit = 1000

net.ipv6.icmp.ratemask = 0-1,3-127

net.ipv6.idgen_delay = 1

net.ipv6.idgen_retries = 3

net.ipv6.ip6frag_high_thresh = 4194304

net.ipv6.ip6frag_low_thresh = 3145728

net.ipv6.ip6frag_secret_interval = 0

net.ipv6.ip6frag_time = 60

net.ipv6.ip_nonlocal_bind = 0

net.ipv6.max_dst_opts_length = 2147483647

net.ipv6.max_dst_opts_number = 8

net.ipv6.max_hbh_length = 2147483647

net.ipv6.max_hbh_opts_number = 8

net.ipv6.mld_max_msf = 64

net.ipv6.mld_qrv = 2

net.ipv6.neigh.default.anycast_delay = 100

net.ipv6.neigh.default.app_solicit = 0

net.ipv6.neigh.default.base_reachable_time_ms = 30000

net.ipv6.neigh.default.delay_first_probe_time = 5

net.ipv6.neigh.default.gc_interval = 30

net.ipv6.neigh.default.gc_stale_time = 60

net.ipv6.neigh.default.gc_thresh1 = 128

net.ipv6.neigh.default.gc_thresh2 = 512

net.ipv6.neigh.default.gc_thresh3 = 1024

net.ipv6.neigh.default.locktime = 0

net.ipv6.neigh.default.mcast_resolicit = 0

net.ipv6.neigh.default.mcast_solicit = 3

net.ipv6.neigh.default.proxy_delay = 80

net.ipv6.neigh.default.proxy_qlen = 64

net.ipv6.neigh.default.retrans_time_ms = 1000

net.ipv6.neigh.default.ucast_solicit = 3

net.ipv6.neigh.default.unres_qlen = 101

net.ipv6.neigh.default.unres_qlen_bytes = 212992

net.ipv6.neigh.docker0.anycast_delay = 100

net.ipv6.neigh.docker0.app_solicit = 0

net.ipv6.neigh.docker0.base_reachable_time_ms = 30000

net.ipv6.neigh.docker0.delay_first_probe_time = 5

net.ipv6.neigh.docker0.gc_stale_time = 60

net.ipv6.neigh.docker0.locktime = 0

net.ipv6.neigh.docker0.mcast_resolicit = 0

net.ipv6.neigh.docker0.mcast_solicit = 3

net.ipv6.neigh.docker0.proxy_delay = 80

net.ipv6.neigh.docker0.proxy_qlen = 64

net.ipv6.neigh.docker0.retrans_time_ms = 1000

net.ipv6.neigh.docker0.ucast_solicit = 3

net.ipv6.neigh.docker0.unres_qlen = 101

net.ipv6.neigh.docker0.unres_qlen_bytes = 212992

net.ipv6.neigh.enp0s3.anycast_delay = 100

net.ipv6.neigh.enp0s3.app_solicit = 0

net.ipv6.neigh.enp0s3.base_reachable_time_ms = 30000

net.ipv6.neigh.enp0s3.delay_first_probe_time = 5

net.ipv6.neigh.enp0s3.gc_stale_time = 60

net.ipv6.neigh.enp0s3.locktime = 0

net.ipv6.neigh.enp0s3.mcast_resolicit = 0

net.ipv6.neigh.enp0s3.mcast_solicit = 3

net.ipv6.neigh.enp0s3.proxy_delay = 80

net.ipv6.neigh.enp0s3.proxy_qlen = 64

net.ipv6.neigh.enp0s3.retrans_time_ms = 1000

net.ipv6.neigh.enp0s3.ucast_solicit = 3

net.ipv6.neigh.enp0s3.unres_qlen = 101

net.ipv6.neigh.enp0s3.unres_qlen_bytes = 212992

net.ipv6.neigh.lo.anycast_delay = 100

net.ipv6.neigh.lo.app_solicit = 0

net.ipv6.neigh.lo.base_reachable_time_ms = 30000

net.ipv6.neigh.lo.delay_first_probe_time = 5

net.ipv6.neigh.lo.gc_stale_time = 60

net.ipv6.neigh.lo.locktime = 0

net.ipv6.neigh.lo.mcast_resolicit = 0

net.ipv6.neigh.lo.mcast_solicit = 3

net.ipv6.neigh.lo.proxy_delay = 80

net.ipv6.neigh.lo.proxy_qlen = 64

net.ipv6.neigh.lo.retrans_time_ms = 1000

net.ipv6.neigh.lo.ucast_solicit = 3

net.ipv6.neigh.lo.unres_qlen = 101

net.ipv6.neigh.lo.unres_qlen_bytes = 212992

net.ipv6.route.gc_elasticity = 9

net.ipv6.route.gc_interval = 30

net.ipv6.route.gc_min_interval = 0

net.ipv6.route.gc_min_interval_ms = 500

net.ipv6.route.gc_thresh = 1024

net.ipv6.route.gc_timeout = 60

net.ipv6.route.max_size = 4096

net.ipv6.route.min_adv_mss = 1220

net.ipv6.route.mtu_expires = 600

net.ipv6.route.skip_notify_on_dev_down = 0

net.ipv6.seg6_flowlabel = 0

net.ipv6.xfrm6_gc_thresh = 32768

net.mptcp.add_addr_timeout = 120

net.mptcp.allow_join_initial_addr_port = 1

net.mptcp.checksum_enabled = 0

net.mptcp.enabled = 0

net.mptcp.pm_type = 0

net.mptcp.stale_loss_cnt = 4

net.netfilter.nf_conntrack_acct = 0

net.netfilter.nf_conntrack_buckets = 65536

net.netfilter.nf_conntrack_checksum = 1

net.netfilter.nf_conntrack_count = 13

net.netfilter.nf_conntrack_dccp_loose = 1

net.netfilter.nf_conntrack_dccp_timeout_closereq = 64

net.netfilter.nf_conntrack_dccp_timeout_closing = 64

net.netfilter.nf_conntrack_dccp_timeout_open = 43200

net.netfilter.nf_conntrack_dccp_timeout_partopen = 480

net.netfilter.nf_conntrack_dccp_timeout_request = 240

net.netfilter.nf_conntrack_dccp_timeout_respond = 480

net.netfilter.nf_conntrack_dccp_timeout_timewait = 240

net.netfilter.nf_conntrack_events = 2

net.netfilter.nf_conntrack_expect_max = 1024

net.netfilter.nf_conntrack_frag6_high_thresh = 4194304

net.netfilter.nf_conntrack_frag6_low_thresh = 3145728

net.netfilter.nf_conntrack_frag6_timeout = 60

net.netfilter.nf_conntrack_generic_timeout = 600

net.netfilter.nf_conntrack_gre_timeout = 30

net.netfilter.nf_conntrack_gre_timeout_stream = 180

net.netfilter.nf_conntrack_helper = 0

net.netfilter.nf_conntrack_icmp_timeout = 30

net.netfilter.nf_conntrack_icmpv6_timeout = 30

net.netfilter.nf_conntrack_log_invalid = 0

net.netfilter.nf_conntrack_max = 65536

net.netfilter.nf_conntrack_sctp_timeout_closed = 10

net.netfilter.nf_conntrack_sctp_timeout_cookie_echoed = 3

net.netfilter.nf_conntrack_sctp_timeout_cookie_wait = 3

net.netfilter.nf_conntrack_sctp_timeout_established = 432000

net.netfilter.nf_conntrack_sctp_timeout_heartbeat_acked = 210

net.netfilter.nf_conntrack_sctp_timeout_heartbeat_sent = 30

net.netfilter.nf_conntrack_sctp_timeout_shutdown_ack_sent = 3

net.netfilter.nf_conntrack_sctp_timeout_shutdown_recd = 0

net.netfilter.nf_conntrack_sctp_timeout_shutdown_sent = 0

net.netfilter.nf_conntrack_tcp_be_liberal = 0

net.netfilter.nf_conntrack_tcp_ignore_invalid_rst = 0

net.netfilter.nf_conntrack_tcp_loose = 1

net.netfilter.nf_conntrack_tcp_max_retrans = 3

net.netfilter.nf_conntrack_tcp_timeout_close = 10

net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60

net.netfilter.nf_conntrack_tcp_timeout_established = 432000

net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120

net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30

net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300

net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60

net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120

net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120

net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300

net.netfilter.nf_conntrack_timestamp = 0

net.netfilter.nf_conntrack_udp_timeout = 30

net.netfilter.nf_conntrack_udp_timeout_stream = 120

net.netfilter.nf_flowtable_tcp_timeout = 30

net.netfilter.nf_flowtable_udp_timeout = 30

net.netfilter.nf_log.0 = NONE

net.netfilter.nf_log.1 = NONE

net.netfilter.nf_log.10 = NONE

net.netfilter.nf_log.11 = NONE

net.netfilter.nf_log.12 = NONE

net.netfilter.nf_log.2 = NONE

net.netfilter.nf_log.3 = NONE

net.netfilter.nf_log.4 = NONE

net.netfilter.nf_log.5 = NONE

net.netfilter.nf_log.6 = NONE

net.netfilter.nf_log.7 = NONE

net.netfilter.nf_log.8 = NONE

net.netfilter.nf_log.9 = NONE

net.netfilter.nf_log_all_netns = 0

net.nf_conntrack_max = 65536

net.unix.max_dgram_qlen = 512

sunrpc.max_resvport = 1023

sunrpc.min_resvport = 665

sunrpc.nfs_debug = 0x0000

sunrpc.nfsd_debug = 0x0000

sunrpc.nlm_debug = 0x0000

sunrpc.rpc_debug = 0x0000

sunrpc.tcp_fin_timeout = 15

sunrpc.tcp_max_slot_table_entries = 65536

sunrpc.tcp_slot_table_entries = 2

sunrpc.transports = tcp 1048576

sunrpc.transports = udp 32768

sunrpc.udp_slot_table_entries = 16

user.max_cgroup_namespaces = 7622

user.max_fanotify_groups = 128

user.max_fanotify_marks = 15416

user.max_inotify_instances = 128

user.max_inotify_watches = 14520

user.max_ipc_namespaces = 7622

user.max_mnt_namespaces = 7622

user.max_net_namespaces = 7622

user.max_pid_namespaces = 7622

user.max_time_namespaces = 7622

user.max_user_namespaces = 7622

user.max_uts_namespaces = 7622

vm.admin_reserve_kbytes = 8192

vm.compact_unevictable_allowed = 1

vm.compaction_proactiveness = 20

vm.dirty_background_bytes = 0

vm.dirty_background_ratio = 10

vm.dirty_bytes = 0

vm.dirty_expire_centisecs = 3000

vm.dirty_ratio = 20

vm.dirty_writeback_centisecs = 500

vm.dirtytime_expire_seconds = 43200

vm.extfrag_threshold = 500

vm.hugetlb_shm_group = 0

vm.laptop_mode = 0

vm.legacy_va_layout = 0

vm.lowmem_reserve_ratio = 256   256     32      0       0

vm.max_map_count = 65530

vm.memory_failure_early_kill = 0

vm.memory_failure_recovery = 1

vm.min_free_kbytes = 45056

vm.min_slab_ratio = 5

vm.min_unmapped_ratio = 1

vm.mmap_min_addr = 65536

vm.mmap_rnd_bits = 28

vm.mmap_rnd_compat_bits = 8

vm.nr_hugepages = 0

vm.nr_hugepages_mempolicy = 0

vm.nr_overcommit_hugepages = 0

vm.numa_stat = 1

vm.numa_zonelist_order = Node

vm.oom_dump_tasks = 1

vm.oom_kill_allocating_task = 0

vm.overcommit_kbytes = 0

vm.overcommit_memory = 0

vm.overcommit_ratio = 50

vm.page-cluster = 3

vm.page_lock_unfairness = 5

vm.panic_on_oom = 0

vm.percpu_pagelist_high_fraction = 0

vm.stat_interval = 1

vm.swappiness = 20

vm.unprivileged_userfaultfd = 1

vm.user_reserve_kbytes = 60033

vm.vfs_cache_pressure = 100

vm.watermark_boost_factor = 15000

vm.watermark_scale_factor = 10

vm.zone_reclaim_mode = 0

[root@RockyLinux ~]#

 

 

 

 

이 명령의 결과가 너무 길어서 그 결과를 모두 한꺼번에 나타내지는 못했지만 설정된 모든 값들의 의미를 확인해보기 바란다.

 

 

 

 

다음은 이 실행의 결과과 몇 개인가를 wc로 확인해 본 것이다.

 

 

 

 

참고하기 바란다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a | wc -l

1130

[root@RockyLinux ~]#

 

 

 

 

현재 이 리눅스시스템에서 “sysctl -a”의 결과는 모두 1130행이며 이것은 sysctl로 설정할 수 있는 값이 1130가지임을 의미한다.

 

 

 

 

 

 

결론적으로 우리는 이 결과를 통해 1130가지의 설정들을 함으로서 각 상황에 맞는 시스템튜닝을 할 수 있다는 것을 알아야 한다.

 

 

 

 

그리고 이번에 이 방법들에 대해서 배우게 될 것이다.

 

 

 

 

 

 

앞의 예는 커널파라미터(kernel parameter)의 값들을 모두 확인하였지만 이번에는 조금 응용하여 특정파라미터값을 확인하는 방법을 설명하겠다.

 

 

 

 

다음과 같이 특정파라미터값만을 확인하고자 할 때에는 다음 예와 같이  “sysctl -a”의 결과를 특정문자열에 해당하는 패턴행만을 grep으로 잡아서 확인하면 된다.

 

 

 

 

다음의 예는 kernel.max라는 파라미터의 값만을 확인한 것이다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a | grep kernel.max

kernel.max_lock_depth = 1024

kernel.max_rcu_stall_to_panic = 0

[root@RockyLinux ~]#

 

 

 

그리고 다음은 sysrq, file-max, 그리고 mem에 관한 커널파라미터(kernel parameter)값을 확인한 것이다.

 



[root@RockyLinux ~]# sysctl -a | grep sysrq

kernel.sysrq = 16

[root@RockyLinux ~]#

[root@RockyLinux ~]#

[root@RockyLinux ~]# sysctl -a | grep file-max

fs.file-max = 6815744

[root@RockyLinux ~]#

[root@RockyLinux ~]# sysctl -a | grep mem

net.core.optmem_max = 81920

net.core.rmem_default = 262144

net.core.rmem_max = 4194304

net.core.wmem_default = 262144

net.core.wmem_max = 1048576

net.ipv4.fib_sync_mem = 524288

net.ipv4.igmp_max_memberships = 20

net.ipv4.tcp_mem = 21783        29045   43566

net.ipv4.tcp_rmem = 4096        131072  6291456

net.ipv4.tcp_wmem = 4096        16384   4194304

net.ipv4.udp_mem = 43566        58091   87132

net.ipv4.udp_rmem_min = 4096

net.ipv4.udp_wmem_min = 4096

vm.lowmem_reserve_ratio = 256   256     32      0       0

vm.memory_failure_early_kill = 0

vm.memory_failure_recovery = 1

vm.nr_hugepages_mempolicy = 0

vm.overcommit_memory = 0

[root@RockyLinux ~]#

 

 

 

 

위의 예에서 실행된 3가지 명령들의 의미는 다음과 같다.

 

 

 

 

 

 

sysctl -a | grep sysrq

 

 

커널파라미터(kernel parameter)중 sysrq(매직키)에 관한 설정 값을 확인한 것이며,

 

 

sysctl -a | grep file-max

 

 

두번째 예는 file-max(오픈가능한 최대파일수)에 관한 설정값을 확인한 것이며,

 

 

 

 

sysctl -a | grep mem    

 

 

셋번째 예는 mem(메모리)에 관한 설정값을 확인한 것이다.

 

 

 


물론, 다음과 같이 grep을 이용하여 커널파라미터(kernel parameter)의 설정값들 중 원하는 값들만을 확인할 수 있다.

 

 

 

 

 

다음은 kernel.panic와 관련된 커널파라미터(kernel parameter)값만을 확인한 것이다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a | grep kernel.panic

kernel.panic = 0

kernel.panic_on_io_nmi = 0

kernel.panic_on_oops = 1

kernel.panic_on_rcu_stall = 0

kernel.panic_on_unrecovered_nmi = 0

kernel.panic_on_warn = 0

kernel.panic_print = 0

[root@RockyLinux ~]#

 

 

 

그리고 다음은 파일시스템과 관련된 “fs.”에 해당하는 파라미터값들만 확인한 것이다.

 

 

 

 

 

 

[root@RockyLinux ~]# sysctl -a | grep fs.

fs.aio-max-nr = 1048576

fs.aio-nr = 0

fs.binfmt_misc.status = enabled

fs.dentry-state = 78388 58698   45      0       6745    0

fs.dir-notify-enable = 1

fs.epoll.max_user_watches = 434376

fs.fanotify.max_queued_events = 16384

fs.fanotify.max_user_groups = 128

fs.fanotify.max_user_marks = 15416

fs.file-max = 6815744

fs.file-nr = 4512       0       6815744

fs.inode-nr = 71787     966

fs.inode-state = 71787  966     0       0       0       0       0

fs.inotify.max_queued_events = 16384

fs.inotify.max_user_instances = 128

fs.inotify.max_user_watches = 14520

fs.lease-break-time = 45

fs.leases-enable = 1

fs.mount-max = 100000

fs.mqueue.msg_default = 10

fs.mqueue.msg_max = 10

fs.mqueue.msgsize_default = 8192

fs.mqueue.msgsize_max = 8192

fs.mqueue.queues_max = 256

fs.nr_open = 1073741816

fs.overflowgid = 65534

fs.overflowuid = 65534

fs.pipe-max-size = 1048576

fs.pipe-user-pages-hard = 0

fs.pipe-user-pages-soft = 16384

fs.protected_fifos = 1

fs.protected_hardlinks = 1

fs.protected_regular = 1

fs.protected_symlinks = 1

fs.quota.allocated_dquots = 0

fs.quota.cache_hits = 0

fs.quota.drops = 0

fs.quota.free_dquots = 0

fs.quota.lookups = 0

fs.quota.reads = 0

fs.quota.syncs = 0

fs.quota.warnings = 1

fs.quota.writes = 0

fs.suid_dumpable = 2

fs.xfs.error_level = 3

fs.xfs.filestream_centisecs = 3000

fs.xfs.inherit_noatime = 1

fs.xfs.inherit_nodefrag = 1

fs.xfs.inherit_nodump = 1

fs.xfs.inherit_nosymlinks = 0

fs.xfs.inherit_sync = 1

fs.xfs.irix_sgid_inherit = 0

fs.xfs.irix_symlink_mode = 0

fs.xfs.panic_mask = 0

fs.xfs.rotorstep = 1

fs.xfs.speculative_cow_prealloc_lifetime = 300

fs.xfs.speculative_prealloc_lifetime = 300

fs.xfs.stats_clear = 0

fs.xfs.xfssyncd_centisecs = 3000

kernel.firmware_config.force_sysfs_fallback = 0

kernel.firmware_config.ignore_sysfs_fallback = 0

kernel.sched_cfs_bandwidth_slice_us = 5000

sunrpc.nfs_debug = 0x0000

sunrpc.nfsd_debug = 0x0000

vm.vfs_cache_pressure = 100

[root@RockyLinux ~]#

 

 

 

 

 

이렇게 수많은 커널파라미터(kernel parameter)값들 가운데 우리가 원하는 파라미터값만을 확인할 수 있다.

 

 

 

관련자료

댓글 0
등록된 댓글이 없습니다.

공지사항


뉴스광장


  • 현재 회원수 :  60,534 명
  • 현재 강좌수 :  37,615 개
  • 현재 접속자 :  111 명