post your /etc/sysctl.conf

Alain De Vos

Alain De Vos

Mine,
Code: 
cat sysctl.conf
# $FreeBSD$
#
#  This file is read when going to multi-user and its contents piped thru
#  ``sysctl'' to adjust kernel values.  ``man 5 sysctl.conf'' for details.
#

###ENABLE SECURITY
security.bsd.unprivileged_read_msgbuf=0  #1
security.bsd.unprivileged_proc_debug=0   #1
security.bsd.see_other_uids=1
security.bsd.see_other_gids=1
security.bsd.hardlink_check_uid=0
security.bsd.hardlink_check_gid=0
kern.randompid=1                         #0
kern.corefile=/var/coredumps/%U/%N.core  #%N.core
###KERN
kern.msgbuf_show_timestamp=1             #0 show timestamp in messagebuf
kern.shutdown.poweroff_delay=2000        #5000 : Delay before poweroff to write disk caches (msec)
kern.shutdown.kproc_shutdown_wait=20     #60 : Max wait time (sec) to stop for each process
kern.ipc.shm_use_phys=1                  #0  : Enable locking of shared memory pages in core
kern.ipc.shmall=512000                   #131072
kern.ipc.shmmax=1000000000               #536870912
###HW
hw.usb.no_shutdown_wait=1                #0  : No USB device waiting at system shutdown
###VFS
vfs.zfs.min_auto_ashift=12               #9
vfs.usermount=1                          #0,Unprivileged users may mount and unmount file systems
##################987654321####
vfs.zfs.arc_min=  4000000000              #0
vfs.zfs.arc_max= 10000000000              #0
#################a987654321###
#
kern.metadelay=4                         #28
kern.dirdelay=5                          #29
kern.filedelay=7                         #30
#
security.bsd.unprivileged_idprio=1       #0
kern.sched.preempt_thresh=120            #80

kern.init_shutdown_timeout="180"

vm.cluster_anon=1

vfs.zfs.txg.timeout=5
kern.ipc.shm_allow_removed=1
kern.ipc.shm_use_phys=1

net.local.stream.recvspace=65536
net.local.stream.sendspace=65536

# JAILS/ALLOW UPGRADES IN JAILS # ---------------------------------------------
security.jail.chflags_allowed=1

# JAILS/ALLOW RAW SOCKETS # ---------------------------------------------------
security.jail.allow_raw_sockets=1

# ALLOW idprio(8) USE BY REGULAR USER # ---------------------------------------
security.bsd.unprivileged_idprio=1

hw.snd.feeder_rate_quality=3

###NET##################################################################
net.inet6.ip6.temppltime=7200            # 86400 ,  Maximum preferred lifetime for temporary addresses
net.inet6.ip6.tempvltime=14400           # 604800 , Maximum valid lifetime for temporary addresses
net.inet.tcp.cc.algorithm=cubic          #newreno #Congestion control newreno,CDG,CHD,CUBIC,DCTCP,HD,H-TCP,VEGAS
#
net.inet.ip.maxfragpackets=0             #15762
net.inet.ip.maxfragsperpacket=0          #16
#
net.inet6.ip6.accept_rtadv=1             #0 Default value of per-interface flag for accepting ICMPv6 RA messages
 
Just update your old post which is already good ;)
Alain De Vos

Thread 'For who might be interested my /etc/sysctl.conf'

Code: 
hw.snd.default_unit=4
hw.snd.feeder_rate_quality=3
hw.usb.no_shutdown_wait=1                #0  : No USB device waiting at system shutdown
kern.cam.scsi_delay=2000     # Delay (in ms) before probing SCSI
kern.corefile=/var/coredumps/%U/%N.core  #%N.core
kern.dirdelay=5                          #29
kern.filedelay=7                         #30
kern.geom.label.disk_ident.enable=0
kern.geom.label.gptid.enable=0
kern.geom.label.ufsid.enable=0
kern.init_shutdown_timeout=180
kern.ipc.shm_allow_removed=1
kern.ipc.shm_use_phys=1                  #0  : Enable locking of shared memory pages in...
  • Thanks
 
This system is old. These accumulate without my remembering why I did some of them...
Code: 
vfs.usermount=1

kern.ipc.maxsockbuf=5242880
kern.ipc.shmall=32768
kern.ipc.shmmax=134217728
kern.ipc.shm_allow_removed=1
kern.ipc.somaxconn=1024
kern.sched.preempt_thresh=224
kern.maxfiles=200000
net.inet.ip.forwarding=1
net.inet.tcp.sendspace=65536
net.inet.tcp.recvspace=65536
net.inet.tcp.sendbuf_max=16777216
net.inet.tcp.recvbuf_max=16777216
net.inet.tcp.rfc1323=1  # accurate TCP time stamps
net.inet.tcp.rfc3042=1  # packet loss fast retransmit not tcp timeout
net.inet.tcp.rfc3390=1  # increase TCP receive window size above 64k
net.inet.tcp.rfc6675_pipe=1
net.inet.tcp.tso=0
net.inet.icmp.icmplim=1  #
net.inet.icmp.icmplim_output=0 #
net.inet.tcp.sack.enable=1  #
net.inet.tcp.path_mtu_discovery=0
net.inet.tcp.blackhole=1
net.inet.udp.blackhole=1
net.inet.tcp.syncache.rexmtlimit=0
net.inet.tcp.abc_l_var=44
net.inet.tcp.initcwnd_segments=44
net.inet.tcp.syncookies=0

hw.syscons.bell=0
hw.snd.default_unit=0
hw.snd.default_auto=0
#hw.snd.vpc_0db=100
hw.snd.latency_profile=0
hw.snd.latency=7
dev.hdac.0.polling=1

net.local.stream.sendspace=164240  # (default 8192)
net.local.stream.recvspace=164240  # (default 8192)
net.inet.ip.random_id=1
 
I don't poke around net.
Only,
net.inet6.ip6.temppltime=7200 # 86400 , Maximum preferred lifetime for temporary addresses
net.inet6.ip6.tempvltime=14400 # 604800 , Maximum valid lifetime for temporary addresses
net.inet.tcp.cc.algorithm=cubic #newreno #Congestion control newreno,CDG,CHD,CUBIC,DCTCP,HD,H-TCP,VEGAS
#
net.inet.ip.maxfragpackets=0 #15762
net.inet.ip.maxfragsperpacket=0 #16
#
net.inet6.ip6.accept_rtadv=1 #0 Default value of per-interface flag for accepting ICMPv6 RA messages

net.inet.tcp.sendspace=65536
net.inet.tcp.recvspace=65536
 
Mine is extremely short, I don't like adjusting things unnecessarily:
Code: 
vfs.zfs.min_auto_ashift=12

# Don't print a warning message when a device on a network moves from one IP
# address to another.
net.link.ether.inet.log_arp_movements=0
 
You must log in or register to reply here.
Back
Top