In a past few days i have problem with my Linux Gateway. Internet was working veary slow.. and I have not found any solution for thet. I have even inspect all logs and possibilities but still have no solution to problem… When i have typed dmesg command.. i saw what is the problem … Server load was low… everything was seams to be working fine exept this:
ip_conntrack: table full, dropping packet
I didn't see that msg before.. and i was wandering what this means..
so my only internet friend known as google
has given me some explenations....
It seams that server is running iptables, but it was under a very heavy load
and also handling a high volume of network connections.
Generally, the ip_conntrack_max is set to the total MB of RAM installed
multiplied by 16.
However, this server had 2GB of RAM, but ip_conntrack_max was set to 65536:
# cat /proc/sys/net/ipv4/ip_conntrack_max
65536
So i Have decide to chel the servers current connections...
# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count
Solution for this problem is simple, You need to ajust it like i have done...
# echo 131072 > /proc/sys/net/ipv4/ip_conntrack_max
After this my network works fine.. internet also..and load of iptables was normal.
And now that is howw to be done. Enjoy
Leave your response!