fs.file-max = 2000000
kernel.pid_max = 4194303
#net.ipv4.tcp_mem = 262144 1572864 2097152
net.core.rmem_default = 33554432
net.core.rmem_max = 67108864
net.core.wmem_default = 67108864
net.core.wmem_max = 134217728
net.core.optmem_max = 4194304
net.ipv4.tcp_rmem = 4194304 33554432 67108864
net.ipv4.tcp_wmem = 4194304 67108864 134217728

net.core.netdev_budget = 50000
net.core.netdev_max_backlog = 100000
net.ipv4.ip_local_port_range = 1024 65535
net.ipv4.neigh.default.unres_qlen_bytes = 16777216
net.core.somaxconn = 500000
net.ipv4.tcp_max_syn_backlog = 500000
net.ipv4.tcp_abort_on_overflow = 0
net.ipv4.tcp_max_orphans = 262144
net.ipv4.tcp_max_tw_buckets = 10000
net.ipv4.tcp_mtu_probing = 2
net.ipv4.tcp_base_mss = 1460
net.ipv4.tcp_sack = 1
net.ipv4.tcp_comp_sack_delay_ns = 2500000
net.ipv4.tcp_comp_sack_nr = 10
net.ipv4.tcp_dsack = 1
#net.ipv4.tcp_ecn = 0
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_adv_win_scale = 2
net.ipv4.tcp_reordering = 10
net.ipv4.tcp_max_reordering = 600
net.ipv4.tcp_synack_retries = 10
net.ipv4.tcp_syn_retries = 7
# In seconds, time default value for connections to keep alive
net.ipv4.tcp_keepalive_time = 7200
# How many keepalive probes TCP sends out, until it decides that the connection is broken
net.ipv4.tcp_keepalive_probes = 15
# In seconds, how frequently the probes are send out
net.ipv4.tcp_keepalive_intvl = 60
# Number of retries before killing a TCP connection
# Time, after which TCP decides, that something is wrong due to unacknowledged RTO retransmissions,and reports this suspicion to the network layer.
net.ipv4.tcp_retries1 = 3
# Time, after which TCP decides to timeout the TCP connection, when RTO retransmissions remain unacknowledged
net.ipv4.tcp_retries2 = 10
# How many times to retry to kill connections on the other side before killing it on our own side
net.ipv4.tcp_orphan_retries = 2
#Disable TCP auto corking, as it needlessly increasing latency when the application doesn't expect to send more data
net.ipv4.tcp_autocorking = 0
# Disables Forward RTO-Recovery, since we are not operating on a lossy wireless network
net.ipv4.tcp_frto = 0
# Protect Against TCP TIME-WAIT Assassination
net.ipv4.tcp_rfc1337 = 1
# Avoid falling back to slow start after a connection goes idle
net.ipv4.tcp_slow_start_after_idle = 0
# Enable both client support & server support of TCP Fast Open
net.ipv4.tcp_fastopen = 3
# Disable timestamps
net.ipv4.tcp_timestamps = 0
# Keep sockets in the state FIN-WAIT-2 for ultra short period if we were the one closing the socket, because this gives us no benefit and eats up memory
net.ipv4.tcp_fin_timeout = 5
# Do not cache metrics on closing connections
net.ipv4.tcp_no_metrics_save = 1
# Enable reuse of TIME-WAIT sockets for new connections
net.ipv4.tcp_tw_reuse = 1
# Allows the use of a large window (> 64 kB) on a TCP connection
net.ipv4.tcp_window_scaling = 1
# Set maximum window size to MAX_TCP_WINDOW i.e. 32767 in times there is no received window scaling option
net.ipv4.tcp_workaround_signed_windows = 1
# The maximum amount of unsent bytes in TCP socket write queue, this is on top of the congestion window
net.ipv4.tcp_notsent_lowat = 131072
# Controls the amount of data in the Qdisc queue or device queue
net.ipv4.tcp_limit_output_bytes = 3276800
# Controls a per TCP socket cache of one socket buffer
# Use Huge amount of memory
#net.ipv4.tcp_rx_skb_cache = 1
# Congestion Control
net.core.default_qdisc = fq
net.ipv4.tcp_congestion_control = bbr
net.netfilter.nf_conntrack_max=200000