Connection TrackingΒΆ
The maximum number of connection tracking objects (used for IP filtering) is limited.
To change this limit, do:
vrouter running config# system
vrouter running system# network-stack
vrouter running network-stack# conntrack
vrouter running conntrack# max-entries 1000000
vrouter running conntrack# commit
Warning
If the fast path is running, a similar change is required in fast path limits configuration.
To customize conntrack TCP/UDP timeouts:
vrouter running config# system
vrouter running system# network-stack
vrouter running network-stack# conntrack
vrouter running conntrack# tcp-timeout-close 20
vrouter running conntrack# tcp-timeout-close-wait 70
vrouter running conntrack# tcp-timeout-established 500000
vrouter running conntrack# tcp-timeout-fin-wait 130
vrouter running conntrack# tcp-timeout-last-ack 40
vrouter running conntrack# tcp-timeout-max-retrans 400
vrouter running conntrack# tcp-timeout-syn-recv 70
vrouter running conntrack# tcp-timeout-syn-sent 130
vrouter running conntrack# tcp-timeout-time-wait 130
vrouter running conntrack# tcp-timeout-unacknowledged 400
vrouter running conntrack# udp-timeout 40
vrouter running conntrack# udp-timeout-stream 190
vrouter running conntrack# commit
To display the conntrack state:
vrouter> show state / system network-stack conntrack
conntrack
max-entries 1000000
tcp-timeout-close 20
tcp-timeout-close-wait 70
tcp-timeout-established 500000
tcp-timeout-fin-wait 130
tcp-timeout-last-ack 40
tcp-timeout-max-retrans 400
tcp-timeout-syn-recv 70
tcp-timeout-syn-sent 130
tcp-timeout-time-wait 130
tcp-timeout-unacknowledged 400
udp-timeout 40
udp-timeout-stream 190
..
The same configuration can be made using this NETCONF XML configuration:
vrouter running conntrack# show config xml absolute
<config xmlns="urn:6wind:vrouter">
<system xmlns="urn:6wind:vrouter/system">
<network-stack>
<conntrack>
<max-entries>1000000</max-entries>
<tcp-timeout-close>20</tcp-timeout-close>
<tcp-timeout-close-wait>70</tcp-timeout-close-wait>
<tcp-timeout-fin-wait>130</tcp-timeout-fin-wait>
<tcp-timeout-last-ack>40</tcp-timeout-last-ack>
<tcp-timeout-max-retrans>400</tcp-timeout-max-retrans>
<tcp-timeout-syn-recv>70</tcp-timeout-syn-recv>
<tcp-timeout-syn-sent>130</tcp-timeout-syn-sent>
<tcp-timeout-time-wait>130</tcp-timeout-time-wait>
<tcp-timeout-unacknowledged>400</tcp-timeout-unacknowledged>
<udp-timeout>40</udp-timeout>
<udp-timeout-stream>190</udp-timeout-stream>
</conntrack>
</network-stack>
</system>
</config>