ansible/group_vars/vps/sysctl.yml

28 lines
1.7 KiB
YAML

---
# Sysctl-Override fuer netcup VPS (Reverse Proxy / WG-Hub).
# Unterschiede zum Default (roles/sysctl/defaults):
# + net.core.default_qdisc = fq (optimal fuer BBR-Pacing)
# - vm.swappiness / vm.dirty_ratio / vm.dirty_background_ratio
# (VM-I/O-spezifisch, auf Edge-VPS irrelevant; dort in 99-nc-kernel.conf gesetzt)
# Entspricht dem manuell gesetzten /etc/sysctl.d/99-net-tuning.conf (15.06.2026).
sysctl_params:
- { key: net.core.rmem_default, value: "262144" }
- { key: net.core.wmem_default, value: "262144" }
- { key: net.core.rmem_max, value: "67108864" }
- { key: net.core.wmem_max, value: "67108864" }
- { key: net.ipv4.tcp_rmem, value: "4096 87380 67108864" }
- { key: net.ipv4.tcp_wmem, value: "4096 65536 67108864" }
- { key: net.ipv4.tcp_window_scaling, value: "1" }
- { key: net.core.default_qdisc, value: "fq" }
- { key: net.ipv4.tcp_congestion_control, value: "bbr" }
- { key: net.ipv4.tcp_no_metrics_save, value: "0" }
- { key: net.ipv4.tcp_slow_start_after_idle, value: "0" }
- { key: net.ipv4.tcp_fastopen, value: "3" }
- { key: net.core.netdev_max_backlog, value: "16384" }
- { key: net.core.somaxconn, value: "4096" }
- { key: net.ipv4.tcp_notsent_lowat, value: "16384" }
- { key: net.ipv4.tcp_fin_timeout, value: "15" }
- { key: net.ipv4.tcp_tw_reuse, value: "1" }
- { key: net.ipv4.tcp_mtu_probing, value: "1" }
- { key: net.ipv4.ip_forward, value: "1" }
- { key: net.ipv6.conf.all.forwarding, value: "1" }