Theo de Raadt a icrit :
The idea is that you shouldn't need to change any options.
Well then it will be easier than I thought :-)I read some old threads about too small tcp.sendspace / tcp.recvspace in 3.4 time that used to hit performance so I thought it would be useful.
The others were about DOS prevention. Thanks for your help.