Increase conntrack table size using sysctl

azafred · Feb 8, 2017 · 572e2ab · 572e2ab
1 parent 248323f
commit 572e2ab
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/nodeup/pkg/model/sysctls.go b/nodeup/pkg/model/sysctls.go
@@ -17,9 +17,10 @@ limitations under the License.
 package model
 
 import (
+	"strings"
+
 	"k8s.io/kops/upup/pkg/fi"
 	"k8s.io/kops/upup/pkg/fi/nodeup/nodetasks"
-	"strings"
 )
 
 // SysctlBuilder set up our sysctls
@@ -94,6 +95,10 @@ func (b *SysctlBuilder) Build(c *fi.ModelBuilderContext) error {
 			"# Increase size of file handles and inode cache",
 			"fs.file-max = 2097152",
 			"",
+
+			"# Increase size of conntrack table size to avoid poor iptables performance",
+			"net.netfilter.nf_conntrack_max = 1000000",
+			"",
 		)
 	}