Sascha
d857b72cf8
- [vps]-Gruppe mit netcup (194.13.80.132) ins Inventory, in [all:children] - sysctl-Rolle: Loop auf Variable sysctl_params umgestellt (defaults/main.yml) - group_vars/vps: VPS-Override (fq ergaenzt, swappiness/dirty_ratio weggelassen) - .gitignore: id_ed25519 (privater Key!) + iso-builder/output ergaenzt Entspricht dem live gesetzten /etc/sysctl.d/99-net-tuning.conf (15.06.2026). Dry-run gegen netcup: changed=0 (idempotent), andere Hosts unveraendert. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
27 lines
1.6 KiB
YAML
27 lines
1.6 KiB
YAML
---
|
|
# Sysctl-Override fuer netcup VPS (Reverse Proxy / WG-Hub).
|
|
# Unterschiede zum Default (roles/sysctl/defaults):
|
|
# + net.core.default_qdisc = fq (optimal fuer BBR-Pacing)
|
|
# - vm.swappiness / vm.dirty_ratio / vm.dirty_background_ratio
|
|
# (VM-I/O-spezifisch, auf Edge-VPS irrelevant; dort in 99-nc-kernel.conf gesetzt)
|
|
# Entspricht dem manuell gesetzten /etc/sysctl.d/99-net-tuning.conf (15.06.2026).
|
|
sysctl_params:
|
|
- { key: net.core.rmem_default, value: "262144" }
|
|
- { key: net.core.wmem_default, value: "262144" }
|
|
- { key: net.core.rmem_max, value: "67108864" }
|
|
- { key: net.core.wmem_max, value: "67108864" }
|
|
- { key: net.ipv4.tcp_rmem, value: "4096 87380 67108864" }
|
|
- { key: net.ipv4.tcp_wmem, value: "4096 65536 67108864" }
|
|
- { key: net.ipv4.tcp_window_scaling, value: "1" }
|
|
- { key: net.core.default_qdisc, value: "fq" }
|
|
- { key: net.ipv4.tcp_congestion_control, value: "bbr" }
|
|
- { key: net.ipv4.tcp_slow_start_after_idle, value: "0" }
|
|
- { key: net.ipv4.tcp_fastopen, value: "3" }
|
|
- { key: net.core.netdev_max_backlog, value: "16384" }
|
|
- { key: net.core.somaxconn, value: "4096" }
|
|
- { key: net.ipv4.tcp_notsent_lowat, value: "16384" }
|
|
- { key: net.ipv4.tcp_fin_timeout, value: "15" }
|
|
- { key: net.ipv4.tcp_tw_reuse, value: "1" }
|
|
- { key: net.ipv4.tcp_mtu_probing, value: "1" }
|
|
- { key: net.ipv4.ip_forward, value: "1" }
|
|
- { key: net.ipv6.conf.all.forwarding, value: "1" }
|