net.ipv4.tcp_syncookies=1
net.ipv4.conf.default.accept_source_route=0
net.ipv4.conf.all.accept_source_route=0
net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.icmp_ignore_bogus_error_responses=1
net.ipv6.conf.default.accept_source_route=0
net.ipv6.conf.all.accept_source_route=0
net.ipv4.tcp_max_syn_backlog=4096
net.ipv4.tcp_synack_retries=2
#net.netfilter.nf_conntrack_tcp_timeout_time_wait=1

# Disable IPv6
net.ipv6.conf.default.disable_ipv6=1
net.ipv6.conf.all.disable_ipv6=1

# Performance
fs.file-max=4000000
net.core.netdev_max_backlog=10000
net.ipv4.tcp_window_scaling=1
net.ipv4.tcp_slow_start_after_idle=0
#net.netfilter.nf_conntrack_max=4194304
#net.netfilter.nf_conntrack_tcp_timeout_established=600
net.ipv4.tcp_keepalive_time=1800
net.ipv4.tcp_keepalive_intvl=15
net.ipv4.tcp_keepalive_probes=5
# Questionable
net.ipv4.tcp_tw_reuse=1
net.ipv4.tcp_tw_recycle=0
net.ipv4.tcp_sack=1
net.ipv4.tcp_dsack=1
net.ipv4.tcp_timestamps=1

# Generic network settings
net.ipv4.ip_forward=1
net.ipv4.route.flush=1
net.ipv4.ip_nonlocal_bind=1
net.core.rmem_max=16777216
net.core.wmem_max=16777216
net.ipv4.ip_local_port_range=2000 65535

# Parameters to consider
net.core.somaxconn=15000
net.ipv4.conf.default.arp_announce=0
net.ipv4.conf.default.arp_ignore=0
net.ipv4.neigh.default.gc_thresh1=1024
net.ipv4.neigh.default.gc_thresh2=4096
net.ipv4.neigh.default.gc_thresh3=8192
net.ipv4.tcp_fin_timeout=15
net.ipv4.tcp_max_orphans=3200000
net.ipv4.tcp_max_tw_buckets=400000
##### Commented out due to recommendations from PurePeak
net.ipv4.tcp_rmem=4096 87380 16777216
net.ipv4.tcp_wmem=4096 65536 16777216
net.ipv4.tcp_moderate_rcvbuf=1
net.ipv4.tcp_no_metrics_save=1

#net.netfilter.nf_conntrack_max=3145728000
#net.nf_conntrack_max=31457280000
#net.ipv4.netfilter.ip_conntrack_max=3145728000
net.netfilter.nf_conntrack_max=314572800

### 10Gb Optimization ###
net.core.rmem_default=1048576
net.core.wmem_default=1048576
net.core.rmem_max=67108864
net.core.wmem_max=67108864
net.core.default_qdisc=fq
net.ipv4.tcp_max_syn_backlog=16384
vm.dirty_ratio=6
vm.dirty_background_ratio=3
net.core.netdev_max_backlog=50000
net.ipv4.tcp_retries2=2

