[pve-devel] pvefw: using ctmark to associacte connections to VMs

[Alexandre DERUMIER]

>>What is the advantage of using dynamic value? You want to save RAM? 
I'm thinking of users who's have small server, will small ram and other users who's have big server and big ram.

But sure, we can tune net.netfilter.nf_conntrack_max, but users must be warned to do it.

----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Samedi 1 Mars 2014 14:15:47 
Objet: RE: pvefw: using ctmark to associacte connections to VMs 

> >>or dynamic value with number of vms ?) 
> 
> Maybe, allowing something like 32000 connections by vm, (350byte of 
> memory by connection, around 10mb) and net.netfilter.nf_conntrack_max = 
> numberofvms x 32000. 

What is the advantage of using dynamic value? You want to save RAM?