{
  # System config tweaks for performance and scale
  # See linux manpages for proc (5), tcp (7), and ip (7)
  boot.kernelModules = [ "tcp_bbr" ];
  boot.kernel.sysctl = {
    # Network
    "net.core.rmem_max" = 16777216;
    "net.core.wmem_max" = 16777216;
    "net.core.optmem_max" = 16777216;
    "net.core.default_qdisc" = pkgs.lib.mkDefault "fq_codel";
    "net.ipv4.tcp_congestion_control" = "bbr";
    "net.ipv4.tcp_slow_start_after_idle" = 0;
    "net.ipv4.tcp_tw_reuse" = 1;
    "net.ipv4.tcp_rfc1337" = 1;
    "net.ipv4.tcp_syn_retries" = 2;
    "net.ipv4.tcp_synack_retries" = 2;
    "net.ipv4.tcp_orphan_retries" = 2;
    "net.ipv4.tcp_retries2" = 8;
    "net.ipv4.tcp_max_syn_backlog" = 102400;
    "net.ipv4.tcp_max_tw_buckets" = 51200;
    "net.ipv4.tcp_mtu_probing" = 1;
    "net.ipv4.tcp_fin_timeout" = 15;
    "net.ipv4.tcp_keepalive_intvl" = 30;
    "net.ipv4.tcp_keepalive_probes" = 3;
    "net.ipv4.tcp_keepalive_time" = 600;
    "net.ipv4.tcp_rmem" = "4096 87380 16777216";
    "net.ipv4.tcp_wmem" = "4096 65536 16777216";
    "net.ipv4.tcp_fastopen" = 3;
    "net.ipv4.ip_local_port_range" = "1024 65535";
  };
}