Hi,

since starting to use pve firewall i had today the first time where VMs
and Host starts heavily in dropping packets.

I'm only using IP and MAC filters. Nothing else.

The kernel host log is full of:

[1620408.606201] net_ratelimit: 462 callbacks suppressed
[1620408.606204] nf_conntrack: table full, dropping packet

1.) Where do we use nf_conntrack?

2.) Should PVE ship with a sysctl file raising the nf conntrack limits?

On the host are only 19 VMs running.

Greets,
Stefan
_______________________________________________
pve-devel mailing list
pve-devel@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to