[pve-devel] nf_conntrack_tcp_timeout_established tuning option

[Alexandre DERUMIER]

hi,

by default the nf_conntrack_tcp_timeout_established is quite huge (5days),

cisco firewall have 2hour by default

it could be great to have a tuning option,

I found a doc here:
https://dev.openwrt.org/ticket/12976

with recommandation of minimum : 7875

tcp_keepalive_time + tcp_keepalive_probes * tcp_keepalive_intvl = 7200 + 9 * 75 by default)