On 2006/03/08 16:37, Marcel Prisi wrote: > OpenBGPD's config seems OK, but I need some help about OpenBSD's tunable > parameters using sysctl.
> net.inet.tcp.recvspace=65536 > net.inet.tcp.sendspace=65536 > kern.ipc.somaxconn=1024 > net.inet.icmp.drop_redirect=1 > net.inet.icmp.log_redirect=1 > net.inet.ip.redirect=0 > net.inet.ip.sourceroute=0 > net.inet.icmp.bmcastecho=0 > net.inet.icmp.maskrepl=0 Half of these aren't even for OpenBSD. Are these settings from some guide to tuning another OS for use as a webserver or something like that? > Are these OK ? Should I also do something for udp ? Do I miss some ? I think you should remove them all and only touch the defaults if you encounter a specific problem and have understood how the change that you're making will help. The defaults are pretty sane. The thing you might want to monitor on a busy router is mbuf use (netstat -m) but that's monitoring, not tweaking, unless you start having a problem.