به عنوان یک ادمین لینوکس بعضا لازم است رفتار پیشفرض کرنل را تغییر دهید. برای مثال، ممکن است لازم باشد SysRq key را فعال کنید یا تعداد connection هایی را که Kernel می پذیرد افزایش دهید. پارامترهای kernel را می توان در هنگام ساختن آن، در هنگام بوت شدن سیستم یا در زمان اجرا تنظیم کرد.


در این مقاله قصد داریم نحوه استفاده از دستور sysctl را برای مشاهده و تغییر پارامترهای کرنل در زمان اجرا را توضیح دهیم.

استفاده از sysctl برای مشاهده پارامترهای کرنل در لینوکس

برای مشاهده تمام پارامترهای کرنل فعلی، دستور sysctl را با گزینه a- اجرا کنید.

sysctl -a

با این کار یک لیست بزرگی را دریافت خواهید کرد که چیزی شبیه به خروجی زیر است که در آن هر خط شامل نام پارامتر و مقدار آن است:

abi.vsyscall32 = 1

debug.exception-trace = 1

debug.kprobes-optimization = 1

dev.cdrom.autoclose = 1

dev.cdrom.autoeject = 0

dev.cdrom.check_media = 0

dev.cdrom.debug = 0

dev.cdrom.info = CD-ROM information, Id: cdrom.c 3.20 2003/12/17

dev.cdrom.info =

dev.cdrom.info = drive name:		sr0

dev.cdrom.info = drive speed:		12

dev.cdrom.info = drive # of slots:	1

dev.cdrom.info = Can close tray:		1

dev.cdrom.info = Can open tray:		1

dev.cdrom.info = Can lock tray:		1

dev.cdrom.info = Can change speed:	1

dev.cdrom.info = Can select disk:	0

dev.cdrom.info = Can read multisession:	1

dev.cdrom.info = Can read MCN:		1

dev.cdrom.info = Reports media changed:	1

dev.cdrom.info = Can play audio:		1

dev.cdrom.info = Can write CD-R:		1

dev.cdrom.info = Can write CD-RW:	1

dev.cdrom.info = Can read DVD:		1

dev.cdrom.info = Can write DVD-R:	1

dev.cdrom.info = Can write DVD-RAM:	1

dev.cdrom.info = Can read MRW:		1

dev.cdrom.info = Can write MRW:		1

dev.cdrom.info = Can write RAM:		1

dev.cdrom.info =

dev.cdrom.info =

dev.cdrom.lock = 0

dev.hpet.max-user-freq = 64

dev.mac_hid.mouse_button2_keycode = 97

dev.mac_hid.mouse_button3_keycode = 100

dev.mac_hid.mouse_button_emulation = 0

dev.parport.default.spintime = 500

dev.parport.default.timeslice = 200

dev.raid.speed_limit_max = 200000

dev.raid.speed_limit_min = 1000

dev.scsi.logging_level = 0

dev.tty.ldisc_autoload = 1

fs.aio-max-nr = 65536

fs.aio-nr = 0

fs.binfmt_misc.python3/8 = enabled

fs.binfmt_misc.python3/8 = interpreter /usr/bin/python3.8

fs.binfmt_misc.python3/8 = flags:

fs.binfmt_misc.python3/8 = offset 0

fs.binfmt_misc.python3/8 = magic 550d0d0a

fs.binfmt_misc.python2/7 = enabled

fs.binfmt_misc.python2/7 = interpreter /usr/bin/python2.7

fs.binfmt_misc.python2/7 = flags:

fs.binfmt_misc.python2/7 = offset 0

fs.binfmt_misc.python2/7 = magic 03f30d0a

fs.binfmt_misc.llvm-10-runtime/binfmt = enabled

fs.binfmt_misc.llvm-10-runtime/binfmt = interpreter /usr/bin/lli-10

fs.binfmt_misc.llvm-10-runtime/binfmt = flags:

fs.binfmt_misc.llvm-10-runtime/binfmt = offset 0

fs.binfmt_misc.llvm-10-runtime/binfmt = magic 4243

fs.binfmt_misc.status = enabled

fs.dentry-state = 99949	56854	45	0	11647	0

fs.dir-notify-enable = 1

fs.epoll.max_user_watches = 873672

fs.file-max = 9223372036854775807

fs.file-nr = 8192	0	9223372036854775807

fs.inode-nr = 88679	759

fs.inode-state = 88679	759	0	0	0	0	0

fs.inotify.max_queued_events = 16384

fs.inotify.max_user_instances = 128

fs.inotify.max_user_watches = 65536

fs.lease-break-time = 45

fs.leases-enable = 1

fs.mount-max = 100000

fs.mqueue.msg_default = 10

fs.mqueue.msg_max = 10

fs.mqueue.msgsize_default = 8192

fs.mqueue.msgsize_max = 8192

fs.mqueue.queues_max = 256

fs.nr_open = 1048576

fs.overflowgid = 65534

fs.overflowuid = 65534

fs.pipe-max-size = 1048576

fs.pipe-user-pages-hard = 0

fs.pipe-user-pages-soft = 16384

sysctl: permission denied on key 'fs.protected_fifos'

sysctl: permission denied on key 'fs.protected_hardlinks'

sysctl: permission denied on key 'fs.protected_regular'

sysctl: permission denied on key 'fs.protected_symlinks'

fs.quota.allocated_dquots = 0

fs.quota.cache_hits = 0

fs.quota.drops = 0

fs.quota.free_dquots = 0

fs.quota.lookups = 0

fs.quota.reads = 0

fs.quota.syncs = 0

fs.quota.writes = 0

fs.suid_dumpable = 2

fs.verity.require_signatures = 0

kernel.acct = 4	2	30

kernel.acpi_video_flags = 0

sysctl: permission denied on key 'kernel.apparmor_display_secid_mode'

kernel.auto_msgmni = 0

kernel.bootloader_type = 114

kernel.bootloader_version = 2

kernel.bpf_stats_enabled = 0

sysctl: permission denied on key 'kernel.cad_pid'

kernel.cap_last_cap = 40

kernel.core_pattern = |/usr/share/apport/apport %p %s %c %d %P %E

kernel.core_pipe_limit = 0

kernel.core_uses_pid = 0

kernel.ctrl-alt-del = 0

kernel.dmesg_restrict = 0

kernel.domainname = (none)

kernel.firmware_config.force_sysfs_fallback = 0

kernel.firmware_config.ignore_sysfs_fallback = 0

kernel.ftrace_dump_on_oops = 0

kernel.ftrace_enabled = 1

kernel.hardlockup_all_cpu_backtrace = 0

kernel.hardlockup_panic = 0

kernel.hostname = khoshamoz-pc

kernel.hotplug =

kernel.hung_task_all_cpu_backtrace = 0

kernel.hung_task_check_count = 4194304

kernel.hung_task_check_interval_secs = 0

kernel.hung_task_panic = 0

kernel.hung_task_timeout_secs = 120

kernel.hung_task_warnings = 10

kernel.io_delay_type = 1

kernel.kexec_load_disabled = 0

kernel.keys.gc_delay = 300

kernel.keys.maxbytes = 20000

kernel.keys.maxkeys = 200

kernel.keys.persistent_keyring_expiry = 259200

kernel.keys.root_maxbytes = 25000000

kernel.keys.root_maxkeys = 1000000

kernel.kptr_restrict = 1

kernel.max_lock_depth = 1024

kernel.max_rcu_stall_to_panic = 0

kernel.modprobe = /sbin/modprobe

kernel.modules_disabled = 0

kernel.msg_next_id = -1

kernel.msgmax = 8192

kernel.msgmnb = 16384

kernel.msgmni = 32000

kernel.ngroups_max = 65536

kernel.nmi_watchdog = 0

kernel.ns_last_pid = 8427

kernel.numa_balancing = 0

kernel.numa_balancing_scan_delay_ms = 1000

kernel.numa_balancing_scan_period_max_ms = 60000

kernel.numa_balancing_scan_period_min_ms = 1000

kernel.numa_balancing_scan_size_mb = 256

kernel.oops_all_cpu_backtrace = 0

kernel.osrelease = 5.11.0-40-generic

kernel.ostype = Linux

kernel.overflowgid = 65534

kernel.overflowuid = 65534

kernel.panic = 0

kernel.panic_on_io_nmi = 0

kernel.panic_on_oops = 0

kernel.panic_on_rcu_stall = 0

kernel.panic_on_unrecovered_nmi = 0

kernel.panic_on_warn = 0

kernel.panic_print = 0

kernel.perf_cpu_time_max_percent = 25

kernel.perf_event_max_contexts_per_stack = 8

kernel.perf_event_max_sample_rate = 100000

kernel.perf_event_max_stack = 127

kernel.perf_event_mlock_kb = 516

kernel.perf_event_paranoid = 4

kernel.pid_max = 4194304

kernel.poweroff_cmd = /sbin/poweroff

kernel.print-fatal-signals = 0

kernel.printk = 4	4	1	7

kernel.printk_delay = 0

kernel.printk_devkmsg = on

kernel.printk_ratelimit = 5

kernel.printk_ratelimit_burst = 10

kernel.pty.max = 4096

kernel.pty.nr = 1

kernel.pty.reserve = 1024

kernel.random.boot_id = ff1641b3-e558-4e33-ae1b-e33774890b53

kernel.random.entropy_avail = 3100

kernel.random.poolsize = 4096

kernel.random.urandom_min_reseed_secs = 60

kernel.random.uuid = b366b17e-c620-4847-b71b-3d896e05f14e

kernel.random.write_wakeup_threshold = 896

kernel.randomize_va_space = 2

kernel.real-root-dev = 0

kernel.sched_autogroup_enabled = 1

kernel.sched_cfs_bandwidth_slice_us = 5000

kernel.sched_child_runs_first = 0

kernel.sched_deadline_period_max_us = 4194304

kernel.sched_deadline_period_min_us = 100

kernel.sched_domain.cpu0.domain0.busy_factor = 16

kernel.sched_domain.cpu0.domain0.cache_nice_tries = 1

kernel.sched_domain.cpu0.domain0.flags = SD_BALANCE_NEWIDLE SD_BALANCE_EXEC SD_BALANCE_FORK SD_WAKE_AFFINE SD_PREFER_SIBLING

kernel.sched_domain.cpu0.domain0.imbalance_pct = 117

kernel.sched_domain.cpu0.domain0.max_interval = 4

kernel.sched_domain.cpu0.domain0.max_newidle_lb_cost = 43869

kernel.sched_domain.cpu0.domain0.min_interval = 2

kernel.sched_domain.cpu0.domain0.name = DIE

kernel.sched_domain.cpu1.domain0.busy_factor = 16

kernel.sched_domain.cpu1.domain0.cache_nice_tries = 1

kernel.sched_domain.cpu1.domain0.flags = SD_BALANCE_NEWIDLE SD_BALANCE_EXEC SD_BALANCE_FORK SD_WAKE_AFFINE SD_PREFER_SIBLING

kernel.sched_domain.cpu1.domain0.imbalance_pct = 117

kernel.sched_domain.cpu1.domain0.max_interval = 4

kernel.sched_domain.cpu1.domain0.max_newidle_lb_cost = 17263

kernel.sched_domain.cpu1.domain0.min_interval = 2

kernel.sched_domain.cpu1.domain0.name = DIE

kernel.sched_energy_aware = 1

kernel.sched_latency_ns = 12000000

kernel.sched_migration_cost_ns = 500000

kernel.sched_min_granularity_ns = 1500000

kernel.sched_nr_migrate = 32

kernel.sched_rr_timeslice_ms = 100

kernel.sched_rt_period_us = 1000000

kernel.sched_rt_runtime_us = 950000

kernel.sched_schedstats = 0

kernel.sched_tunable_scaling = 1

kernel.sched_util_clamp_max = 1024

kernel.sched_util_clamp_min = 1024

kernel.sched_util_clamp_min_rt_default = 1024

kernel.sched_wakeup_granularity_ns = 2000000

kernel.seccomp.actions_avail = kill_process kill_thread trap errno user_notif trace log allow

kernel.seccomp.actions_logged = kill_process kill_thread trap errno user_notif trace log

kernel.sem = 32000	1024000000	500	32000

kernel.sem_next_id = -1

kernel.sg-big-buff = 32768

kernel.shm_next_id = -1

kernel.shm_rmid_forced = 0

kernel.shmall = 18446744073692774399

kernel.shmmax = 18446744073692774399

kernel.shmmni = 4096

kernel.soft_watchdog = 1

kernel.softlockup_all_cpu_backtrace = 0

kernel.softlockup_panic = 0

kernel.stack_tracer_enabled = 0

kernel.sysctl_writes_strict = 1

kernel.sysrq = 176

kernel.tainted = 0

kernel.threads-max = 30661

kernel.timer_migration = 1

kernel.traceoff_on_warning = 0

kernel.tracepoint_printk = 0

kernel.unknown_nmi_panic = 0

kernel.unprivileged_bpf_disabled = 0

sysctl: permission denied on key 'kernel.unprivileged_userns_apparmor_policy'

kernel.unprivileged_userns_clone = 1

sysctl: permission denied on key 'kernel.usermodehelper.bset'

sysctl: permission denied on key 'kernel.usermodehelper.inheritable'

kernel.version = #44~20.04.2-Ubuntu SMP Tue Oct 26 18:07:44 UTC 2021

kernel.watchdog = 1

kernel.watchdog_cpumask = 0-127

kernel.watchdog_thresh = 10

kernel.yama.ptrace_scope = 1

net.core.bpf_jit_enable = 1

sysctl: permission denied on key 'net.core.bpf_jit_harden'

sysctl: permission denied on key 'net.core.bpf_jit_kallsyms'

sysctl: permission denied on key 'net.core.bpf_jit_limit'

net.core.busy_poll = 0

net.core.busy_read = 0

net.core.default_qdisc = fq_codel

net.core.dev_weight = 64

net.core.dev_weight_rx_bias = 1

net.core.dev_weight_tx_bias = 1

net.core.devconf_inherit_init_net = 0

net.core.fb_tunnels_only_for_init_net = 0

net.core.flow_limit_cpu_bitmap = 00000000,00000000,00000000,00000000

net.core.flow_limit_table_len = 4096

net.core.gro_normal_batch = 8

net.core.high_order_alloc_disable = 0

net.core.max_skb_frags = 17

net.core.message_burst = 10

net.core.message_cost = 5

net.core.netdev_budget = 300

net.core.netdev_budget_usecs = 8000

net.core.netdev_max_backlog = 1000

net.core.netdev_rss_key = 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00

net.core.netdev_tstamp_prequeue = 1

net.core.optmem_max = 20480

net.core.rmem_default = 212992

net.core.rmem_max = 212992

net.core.rps_sock_flow_entries = 0

net.core.somaxconn = 4096

net.core.tstamp_allow_data = 1

net.core.warnings = 0

net.core.wmem_default = 212992

net.core.wmem_max = 212992

net.core.xfrm_acq_expires = 30

net.core.xfrm_aevent_etime = 10

net.core.xfrm_aevent_rseqth = 2

net.core.xfrm_larval_drop = 1

net.ipv4.cipso_cache_bucket_size = 10

net.ipv4.cipso_cache_enable = 1

net.ipv4.cipso_rbm_optfmt = 0

net.ipv4.cipso_rbm_strictvalid = 1

net.ipv4.conf.all.accept_local = 0

net.ipv4.conf.all.accept_redirects = 1

net.ipv4.conf.all.accept_source_route = 0

net.ipv4.conf.all.arp_accept = 0

net.ipv4.conf.all.arp_announce = 0

net.ipv4.conf.all.arp_filter = 0

net.ipv4.conf.all.arp_ignore = 0

net.ipv4.conf.all.arp_notify = 0

net.ipv4.conf.all.bc_forwarding = 0

net.ipv4.conf.all.bootp_relay = 0

net.ipv4.conf.all.disable_policy = 0

net.ipv4.conf.all.disable_xfrm = 0

net.ipv4.conf.all.drop_gratuitous_arp = 0

net.ipv4.conf.all.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.all.force_igmp_version = 0

net.ipv4.conf.all.forwarding = 0

net.ipv4.conf.all.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.all.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.all.ignore_routes_with_linkdown = 0

net.ipv4.conf.all.log_martians = 0

net.ipv4.conf.all.mc_forwarding = 0

net.ipv4.conf.all.medium_id = 0

net.ipv4.conf.all.promote_secondaries = 0

net.ipv4.conf.all.proxy_arp = 0

net.ipv4.conf.all.proxy_arp_pvlan = 0

net.ipv4.conf.all.route_localnet = 0

net.ipv4.conf.all.rp_filter = 2

net.ipv4.conf.all.secure_redirects = 1

net.ipv4.conf.all.send_redirects = 1

net.ipv4.conf.all.shared_media = 1

net.ipv4.conf.all.src_valid_mark = 0

net.ipv4.conf.all.tag = 0

net.ipv4.conf.default.accept_local = 0

net.ipv4.conf.default.accept_redirects = 1

net.ipv4.conf.default.accept_source_route = 1

net.ipv4.conf.default.arp_accept = 0

net.ipv4.conf.default.arp_announce = 0

net.ipv4.conf.default.arp_filter = 0

net.ipv4.conf.default.arp_ignore = 0

net.ipv4.conf.default.arp_notify = 0

net.ipv4.conf.default.bc_forwarding = 0

net.ipv4.conf.default.bootp_relay = 0

net.ipv4.conf.default.disable_policy = 0

net.ipv4.conf.default.disable_xfrm = 0

net.ipv4.conf.default.drop_gratuitous_arp = 0

net.ipv4.conf.default.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.default.force_igmp_version = 0

net.ipv4.conf.default.forwarding = 0

net.ipv4.conf.default.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.default.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.default.ignore_routes_with_linkdown = 0

net.ipv4.conf.default.log_martians = 0

net.ipv4.conf.default.mc_forwarding = 0

net.ipv4.conf.default.medium_id = 0

net.ipv4.conf.default.promote_secondaries = 1

net.ipv4.conf.default.proxy_arp = 0

net.ipv4.conf.default.proxy_arp_pvlan = 0

net.ipv4.conf.default.route_localnet = 0

net.ipv4.conf.default.rp_filter = 2

net.ipv4.conf.default.secure_redirects = 1

net.ipv4.conf.default.send_redirects = 1

net.ipv4.conf.default.shared_media = 1

net.ipv4.conf.default.src_valid_mark = 0

net.ipv4.conf.default.tag = 0

net.ipv4.conf.ens33.accept_local = 0

net.ipv4.conf.ens33.accept_redirects = 1

net.ipv4.conf.ens33.accept_source_route = 1

net.ipv4.conf.ens33.arp_accept = 0

net.ipv4.conf.ens33.arp_announce = 0

net.ipv4.conf.ens33.arp_filter = 0

net.ipv4.conf.ens33.arp_ignore = 0

net.ipv4.conf.ens33.arp_notify = 0

net.ipv4.conf.ens33.bc_forwarding = 0

net.ipv4.conf.ens33.bootp_relay = 0

net.ipv4.conf.ens33.disable_policy = 0

net.ipv4.conf.ens33.disable_xfrm = 0

net.ipv4.conf.ens33.drop_gratuitous_arp = 0

net.ipv4.conf.ens33.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.ens33.force_igmp_version = 0

net.ipv4.conf.ens33.forwarding = 0

net.ipv4.conf.ens33.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.ens33.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.ens33.ignore_routes_with_linkdown = 0

net.ipv4.conf.ens33.log_martians = 0

net.ipv4.conf.ens33.mc_forwarding = 0

net.ipv4.conf.ens33.medium_id = 0

net.ipv4.conf.ens33.promote_secondaries = 1

net.ipv4.conf.ens33.proxy_arp = 0

net.ipv4.conf.ens33.proxy_arp_pvlan = 0

net.ipv4.conf.ens33.route_localnet = 0

net.ipv4.conf.ens33.rp_filter = 2

net.ipv4.conf.ens33.secure_redirects = 1

net.ipv4.conf.ens33.send_redirects = 1

net.ipv4.conf.ens33.shared_media = 1

net.ipv4.conf.ens33.src_valid_mark = 0

net.ipv4.conf.ens33.tag = 0

net.ipv4.conf.lo.accept_local = 0

net.ipv4.conf.lo.accept_redirects = 1

net.ipv4.conf.lo.accept_source_route = 1

net.ipv4.conf.lo.arp_accept = 0

net.ipv4.conf.lo.arp_announce = 0

net.ipv4.conf.lo.arp_filter = 0

net.ipv4.conf.lo.arp_ignore = 0

net.ipv4.conf.lo.arp_notify = 0

net.ipv4.conf.lo.bc_forwarding = 0

net.ipv4.conf.lo.bootp_relay = 0

net.ipv4.conf.lo.disable_policy = 1

net.ipv4.conf.lo.disable_xfrm = 1

net.ipv4.conf.lo.drop_gratuitous_arp = 0

net.ipv4.conf.lo.drop_unicast_in_l2_multicast = 0

net.ipv4.conf.lo.force_igmp_version = 0

net.ipv4.conf.lo.forwarding = 0

net.ipv4.conf.lo.igmpv2_unsolicited_report_interval = 10000

net.ipv4.conf.lo.igmpv3_unsolicited_report_interval = 1000

net.ipv4.conf.lo.ignore_routes_with_linkdown = 0

net.ipv4.conf.lo.log_martians = 0

net.ipv4.conf.lo.mc_forwarding = 0

net.ipv4.conf.lo.medium_id = 0

net.ipv4.conf.lo.promote_secondaries = 1

net.ipv4.conf.lo.proxy_arp = 0

net.ipv4.conf.lo.proxy_arp_pvlan = 0

net.ipv4.conf.lo.route_localnet = 0

net.ipv4.conf.lo.rp_filter = 0

net.ipv4.conf.lo.secure_redirects = 1

net.ipv4.conf.lo.send_redirects = 1

net.ipv4.conf.lo.shared_media = 1

net.ipv4.conf.lo.src_valid_mark = 0

net.ipv4.conf.lo.tag = 0

net.ipv4.fib_multipath_hash_policy = 0

net.ipv4.fib_multipath_use_neigh = 0

net.ipv4.fib_sync_mem = 524288

net.ipv4.fwmark_reflect = 0

net.ipv4.icmp_echo_ignore_all = 0

net.ipv4.icmp_echo_ignore_broadcasts = 1

net.ipv4.icmp_errors_use_inbound_ifaddr = 0

net.ipv4.icmp_ignore_bogus_error_responses = 1

net.ipv4.icmp_msgs_burst = 50

net.ipv4.icmp_msgs_per_sec = 1000

net.ipv4.icmp_ratelimit = 1000

net.ipv4.icmp_ratemask = 6168

net.ipv4.igmp_link_local_mcast_reports = 1

net.ipv4.igmp_max_memberships = 20

net.ipv4.igmp_max_msf = 10

net.ipv4.igmp_qrv = 2

net.ipv4.inet_peer_maxttl = 600

net.ipv4.inet_peer_minttl = 120

net.ipv4.inet_peer_threshold = 65664

net.ipv4.ip_autobind_reuse = 0

net.ipv4.ip_default_ttl = 64

net.ipv4.ip_dynaddr = 0

net.ipv4.ip_early_demux = 1

net.ipv4.ip_forward = 0

net.ipv4.ip_forward_update_priority = 1

net.ipv4.ip_forward_use_pmtu = 0

net.ipv4.ip_local_port_range = 32768	60999

net.ipv4.ip_local_reserved_ports =

net.ipv4.ip_no_pmtu_disc = 0

net.ipv4.ip_nonlocal_bind = 0

net.ipv4.ip_unprivileged_port_start = 1024

net.ipv4.ipfrag_high_thresh = 4194304

net.ipv4.ipfrag_low_thresh = 3145728

net.ipv4.ipfrag_max_dist = 64

net.ipv4.ipfrag_secret_interval = 0

net.ipv4.ipfrag_time = 30

net.ipv4.neigh.default.anycast_delay = 100

net.ipv4.neigh.default.app_solicit = 0

net.ipv4.neigh.default.base_reachable_time_ms = 30000

net.ipv4.neigh.default.delay_first_probe_time = 5

net.ipv4.neigh.default.gc_interval = 30

net.ipv4.neigh.default.gc_stale_time = 60

net.ipv4.neigh.default.gc_thresh1 = 128

net.ipv4.neigh.default.gc_thresh2 = 512

net.ipv4.neigh.default.gc_thresh3 = 1024

net.ipv4.neigh.default.locktime = 100

net.ipv4.neigh.default.mcast_resolicit = 0

net.ipv4.neigh.default.mcast_solicit = 3

net.ipv4.neigh.default.proxy_delay = 80

net.ipv4.neigh.default.proxy_qlen = 64

net.ipv4.neigh.default.retrans_time_ms = 1000

net.ipv4.neigh.default.ucast_solicit = 3

net.ipv4.neigh.default.unres_qlen = 101

net.ipv4.neigh.default.unres_qlen_bytes = 212992

net.ipv4.neigh.ens33.anycast_delay = 100

net.ipv4.neigh.ens33.app_solicit = 0

net.ipv4.neigh.ens33.base_reachable_time_ms = 30000

net.ipv4.neigh.ens33.delay_first_probe_time = 5

net.ipv4.neigh.ens33.gc_stale_time = 60

net.ipv4.neigh.ens33.locktime = 100

net.ipv4.neigh.ens33.mcast_resolicit = 0

net.ipv4.neigh.ens33.mcast_solicit = 3

net.ipv4.neigh.ens33.proxy_delay = 80

net.ipv4.neigh.ens33.proxy_qlen = 64

net.ipv4.neigh.ens33.retrans_time_ms = 1000

net.ipv4.neigh.ens33.ucast_solicit = 3

net.ipv4.neigh.ens33.unres_qlen = 101

net.ipv4.neigh.ens33.unres_qlen_bytes = 212992

net.ipv4.neigh.lo.anycast_delay = 100

net.ipv4.neigh.lo.app_solicit = 0

net.ipv4.neigh.lo.base_reachable_time_ms = 30000

net.ipv4.neigh.lo.delay_first_probe_time = 5

net.ipv4.neigh.lo.gc_stale_time = 60

net.ipv4.neigh.lo.locktime = 100

net.ipv4.neigh.lo.mcast_resolicit = 0

net.ipv4.neigh.lo.mcast_solicit = 3

net.ipv4.neigh.lo.proxy_delay = 80

net.ipv4.neigh.lo.proxy_qlen = 64

net.ipv4.neigh.lo.retrans_time_ms = 1000

net.ipv4.neigh.lo.ucast_solicit = 3

net.ipv4.neigh.lo.unres_qlen = 101

net.ipv4.neigh.lo.unres_qlen_bytes = 212992

net.ipv4.nexthop_compat_mode = 1

net.ipv4.ping_group_range = 0	2147483647

net.ipv4.raw_l3mdev_accept = 1

net.ipv4.route.error_burst = 1250

net.ipv4.route.error_cost = 250

net.ipv4.route.gc_elasticity = 8

net.ipv4.route.gc_interval = 60

net.ipv4.route.gc_min_interval = 0

net.ipv4.route.gc_min_interval_ms = 500

net.ipv4.route.gc_thresh = -1

net.ipv4.route.gc_timeout = 300

net.ipv4.route.max_size = 2147483647

net.ipv4.route.min_adv_mss = 256

net.ipv4.route.min_pmtu = 552

net.ipv4.route.mtu_expires = 600

net.ipv4.route.redirect_load = 5

net.ipv4.route.redirect_number = 9

net.ipv4.route.redirect_silence = 5120

net.ipv4.tcp_abort_on_overflow = 0

net.ipv4.tcp_adv_win_scale = 1

net.ipv4.tcp_allowed_congestion_control = reno cubic

net.ipv4.tcp_app_win = 31

net.ipv4.tcp_autocorking = 1

net.ipv4.tcp_available_congestion_control = reno cubic

net.ipv4.tcp_available_ulp = espintcp mptcp

net.ipv4.tcp_base_mss = 1024

net.ipv4.tcp_challenge_ack_limit = 1000

net.ipv4.tcp_comp_sack_delay_ns = 1000000

net.ipv4.tcp_comp_sack_nr = 44

net.ipv4.tcp_comp_sack_slack_ns = 100000

net.ipv4.tcp_congestion_control = cubic

net.ipv4.tcp_dsack = 1

net.ipv4.tcp_early_demux = 1

net.ipv4.tcp_early_retrans = 3

net.ipv4.tcp_ecn = 2

net.ipv4.tcp_ecn_fallback = 1

net.ipv4.tcp_fack = 0

net.ipv4.tcp_fastopen = 1

net.ipv4.tcp_fastopen_blackhole_timeout_sec = 0

sysctl: permission denied on key 'net.ipv4.tcp_fastopen_key'

net.ipv4.tcp_fin_timeout = 60

net.ipv4.tcp_frto = 2

net.ipv4.tcp_fwmark_accept = 0

net.ipv4.tcp_invalid_ratelimit = 500

net.ipv4.tcp_keepalive_intvl = 75

net.ipv4.tcp_keepalive_probes = 9

net.ipv4.tcp_keepalive_time = 7200

net.ipv4.tcp_l3mdev_accept = 0

net.ipv4.tcp_limit_output_bytes = 1048576

net.ipv4.tcp_low_latency = 0

net.ipv4.tcp_max_orphans = 16384

net.ipv4.tcp_max_reordering = 300

net.ipv4.tcp_max_syn_backlog = 256

net.ipv4.tcp_max_tw_buckets = 16384

net.ipv4.tcp_mem = 44805	59740	89610

net.ipv4.tcp_min_rtt_wlen = 300

net.ipv4.tcp_min_snd_mss = 48

net.ipv4.tcp_min_tso_segs = 2

net.ipv4.tcp_moderate_rcvbuf = 1

net.ipv4.tcp_mtu_probe_floor = 48

net.ipv4.tcp_mtu_probing = 0

net.ipv4.tcp_no_metrics_save = 0

net.ipv4.tcp_no_ssthresh_metrics_save = 1

net.ipv4.tcp_notsent_lowat = 4294967295

net.ipv4.tcp_orphan_retries = 0

net.ipv4.tcp_pacing_ca_ratio = 120

net.ipv4.tcp_pacing_ss_ratio = 200

net.ipv4.tcp_probe_interval = 600

net.ipv4.tcp_probe_threshold = 8

net.ipv4.tcp_recovery = 1

net.ipv4.tcp_reflect_tos = 0

net.ipv4.tcp_reordering = 3

net.ipv4.tcp_retrans_collapse = 1

net.ipv4.tcp_retries1 = 3

net.ipv4.tcp_retries2 = 15

net.ipv4.tcp_rfc1337 = 0

net.ipv4.tcp_rmem = 4096	131072	6291456

net.ipv4.tcp_rx_skb_cache = 0

net.ipv4.tcp_sack = 1

net.ipv4.tcp_slow_start_after_idle = 1

net.ipv4.tcp_stdurg = 0

net.ipv4.tcp_syn_retries = 6

net.ipv4.tcp_synack_retries = 5

net.ipv4.tcp_syncookies = 1

net.ipv4.tcp_thin_linear_timeouts = 0

net.ipv4.tcp_timestamps = 1

net.ipv4.tcp_tso_win_divisor = 3

net.ipv4.tcp_tw_reuse = 2

net.ipv4.tcp_tx_skb_cache = 0

net.ipv4.tcp_window_scaling = 1

net.ipv4.tcp_wmem = 4096	16384	4194304

net.ipv4.tcp_workaround_signed_windows = 0

net.ipv4.udp_early_demux = 1

net.ipv4.udp_l3mdev_accept = 0

net.ipv4.udp_mem = 89610	119480	179220

net.ipv4.udp_rmem_min = 4096

net.ipv4.udp_wmem_min = 4096

net.ipv4.xfrm4_gc_thresh = 32768

net.ipv6.anycast_src_echo_reply = 0

net.ipv6.auto_flowlabels = 1

net.ipv6.bindv6only = 0

net.ipv6.calipso_cache_bucket_size = 10

net.ipv6.calipso_cache_enable = 1

net.ipv6.conf.all.accept_dad = 0

net.ipv6.conf.all.accept_ra = 1

net.ipv6.conf.all.accept_ra_defrtr = 1

net.ipv6.conf.all.accept_ra_from_local = 0

net.ipv6.conf.all.accept_ra_min_hop_limit = 1

net.ipv6.conf.all.accept_ra_mtu = 1

net.ipv6.conf.all.accept_ra_pinfo = 1

net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.all.accept_ra_rtr_pref = 1

net.ipv6.conf.all.accept_redirects = 1

net.ipv6.conf.all.accept_source_route = 0

net.ipv6.conf.all.addr_gen_mode = 0

net.ipv6.conf.all.autoconf = 1

net.ipv6.conf.all.dad_transmits = 1

net.ipv6.conf.all.disable_ipv6 = 0

net.ipv6.conf.all.disable_policy = 0

net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.all.drop_unsolicited_na = 0

net.ipv6.conf.all.enhanced_dad = 1

net.ipv6.conf.all.force_mld_version = 0

net.ipv6.conf.all.force_tllao = 0

net.ipv6.conf.all.forwarding = 0

net.ipv6.conf.all.hop_limit = 64

net.ipv6.conf.all.ignore_routes_with_linkdown = 0

net.ipv6.conf.all.keep_addr_on_down = 0

net.ipv6.conf.all.max_addresses = 16

net.ipv6.conf.all.max_desync_factor = 600

net.ipv6.conf.all.mc_forwarding = 0

net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.all.mtu = 1280

net.ipv6.conf.all.ndisc_notify = 0

net.ipv6.conf.all.ndisc_tclass = 0

net.ipv6.conf.all.proxy_ndp = 0

net.ipv6.conf.all.regen_max_retry = 3

net.ipv6.conf.all.router_probe_interval = 60

net.ipv6.conf.all.router_solicitation_delay = 1

net.ipv6.conf.all.router_solicitation_interval = 4

net.ipv6.conf.all.router_solicitation_max_interval = 3600

net.ipv6.conf.all.router_solicitations = -1

net.ipv6.conf.all.rpl_seg_enabled = 0

net.ipv6.conf.all.seg6_enabled = 0

net.ipv6.conf.all.seg6_require_hmac = 0

sysctl: permission denied on key 'net.ipv6.conf.all.stable_secret'

net.ipv6.conf.all.suppress_frag_ndisc = 1

net.ipv6.conf.all.temp_prefered_lft = 86400

net.ipv6.conf.all.temp_valid_lft = 604800

net.ipv6.conf.all.use_oif_addrs_only = 0

net.ipv6.conf.all.use_tempaddr = 2

net.ipv6.conf.default.accept_dad = 1

net.ipv6.conf.default.accept_ra = 1

net.ipv6.conf.default.accept_ra_defrtr = 1

net.ipv6.conf.default.accept_ra_from_local = 0

net.ipv6.conf.default.accept_ra_min_hop_limit = 1

net.ipv6.conf.default.accept_ra_mtu = 1

net.ipv6.conf.default.accept_ra_pinfo = 1

net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.default.accept_ra_rtr_pref = 1

net.ipv6.conf.default.accept_redirects = 1

net.ipv6.conf.default.accept_source_route = 0

net.ipv6.conf.default.addr_gen_mode = 0

net.ipv6.conf.default.autoconf = 1

net.ipv6.conf.default.dad_transmits = 1

net.ipv6.conf.default.disable_ipv6 = 0

net.ipv6.conf.default.disable_policy = 0

net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.default.drop_unsolicited_na = 0

net.ipv6.conf.default.enhanced_dad = 1

net.ipv6.conf.default.force_mld_version = 0

net.ipv6.conf.default.force_tllao = 0

net.ipv6.conf.default.forwarding = 0

net.ipv6.conf.default.hop_limit = 64

net.ipv6.conf.default.ignore_routes_with_linkdown = 0

net.ipv6.conf.default.keep_addr_on_down = 0

net.ipv6.conf.default.max_addresses = 16

net.ipv6.conf.default.max_desync_factor = 600

net.ipv6.conf.default.mc_forwarding = 0

net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.default.mtu = 1280

net.ipv6.conf.default.ndisc_notify = 0

net.ipv6.conf.default.ndisc_tclass = 0

net.ipv6.conf.default.proxy_ndp = 0

net.ipv6.conf.default.regen_max_retry = 3

net.ipv6.conf.default.router_probe_interval = 60

net.ipv6.conf.default.router_solicitation_delay = 1

net.ipv6.conf.default.router_solicitation_interval = 4

net.ipv6.conf.default.router_solicitation_max_interval = 3600

net.ipv6.conf.default.router_solicitations = -1

net.ipv6.conf.default.rpl_seg_enabled = 0

net.ipv6.conf.default.seg6_enabled = 0

net.ipv6.conf.default.seg6_require_hmac = 0

sysctl: permission denied on key 'net.ipv6.conf.default.stable_secret'

net.ipv6.conf.default.suppress_frag_ndisc = 1

net.ipv6.conf.default.temp_prefered_lft = 86400

net.ipv6.conf.default.temp_valid_lft = 604800

net.ipv6.conf.default.use_oif_addrs_only = 0

net.ipv6.conf.default.use_tempaddr = 2

net.ipv6.conf.ens33.accept_dad = 1

net.ipv6.conf.ens33.accept_ra = 0

net.ipv6.conf.ens33.accept_ra_defrtr = 1

net.ipv6.conf.ens33.accept_ra_from_local = 0

net.ipv6.conf.ens33.accept_ra_min_hop_limit = 1

net.ipv6.conf.ens33.accept_ra_mtu = 1

net.ipv6.conf.ens33.accept_ra_pinfo = 1

net.ipv6.conf.ens33.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.ens33.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.ens33.accept_ra_rtr_pref = 1

net.ipv6.conf.ens33.accept_redirects = 1

net.ipv6.conf.ens33.accept_source_route = 0

net.ipv6.conf.ens33.addr_gen_mode = 1

net.ipv6.conf.ens33.autoconf = 1

net.ipv6.conf.ens33.dad_transmits = 1

net.ipv6.conf.ens33.disable_ipv6 = 0

net.ipv6.conf.ens33.disable_policy = 0

net.ipv6.conf.ens33.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.ens33.drop_unsolicited_na = 0

net.ipv6.conf.ens33.enhanced_dad = 1

net.ipv6.conf.ens33.force_mld_version = 0

net.ipv6.conf.ens33.force_tllao = 0

net.ipv6.conf.ens33.forwarding = 0

net.ipv6.conf.ens33.hop_limit = 64

net.ipv6.conf.ens33.ignore_routes_with_linkdown = 0

net.ipv6.conf.ens33.keep_addr_on_down = 0

net.ipv6.conf.ens33.max_addresses = 16

net.ipv6.conf.ens33.max_desync_factor = 600

net.ipv6.conf.ens33.mc_forwarding = 0

net.ipv6.conf.ens33.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.ens33.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.ens33.mtu = 1500

net.ipv6.conf.ens33.ndisc_notify = 0

net.ipv6.conf.ens33.ndisc_tclass = 0

net.ipv6.conf.ens33.proxy_ndp = 0

net.ipv6.conf.ens33.regen_max_retry = 3

net.ipv6.conf.ens33.router_probe_interval = 60

net.ipv6.conf.ens33.router_solicitation_delay = 1

net.ipv6.conf.ens33.router_solicitation_interval = 4

net.ipv6.conf.ens33.router_solicitation_max_interval = 3600

net.ipv6.conf.ens33.router_solicitations = -1

net.ipv6.conf.ens33.rpl_seg_enabled = 0

net.ipv6.conf.ens33.seg6_enabled = 0

net.ipv6.conf.ens33.seg6_require_hmac = 0

sysctl: permission denied on key 'net.ipv6.conf.ens33.stable_secret'

net.ipv6.conf.ens33.suppress_frag_ndisc = 1

net.ipv6.conf.ens33.temp_prefered_lft = 86400

net.ipv6.conf.ens33.temp_valid_lft = 604800

net.ipv6.conf.ens33.use_oif_addrs_only = 0

net.ipv6.conf.ens33.use_tempaddr = 0

net.ipv6.conf.lo.accept_dad = -1

net.ipv6.conf.lo.accept_ra = 1

net.ipv6.conf.lo.accept_ra_defrtr = 1

net.ipv6.conf.lo.accept_ra_from_local = 0

net.ipv6.conf.lo.accept_ra_min_hop_limit = 1

net.ipv6.conf.lo.accept_ra_mtu = 1

net.ipv6.conf.lo.accept_ra_pinfo = 1

net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0

net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0

net.ipv6.conf.lo.accept_ra_rtr_pref = 1

net.ipv6.conf.lo.accept_redirects = 1

net.ipv6.conf.lo.accept_source_route = 0

net.ipv6.conf.lo.addr_gen_mode = 0

net.ipv6.conf.lo.autoconf = 1

net.ipv6.conf.lo.dad_transmits = 1

net.ipv6.conf.lo.disable_ipv6 = 0

net.ipv6.conf.lo.disable_policy = 0

net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0

net.ipv6.conf.lo.drop_unsolicited_na = 0

net.ipv6.conf.lo.enhanced_dad = 1

net.ipv6.conf.lo.force_mld_version = 0

net.ipv6.conf.lo.force_tllao = 0

net.ipv6.conf.lo.forwarding = 0

net.ipv6.conf.lo.hop_limit = 64

net.ipv6.conf.lo.ignore_routes_with_linkdown = 0

net.ipv6.conf.lo.keep_addr_on_down = 0

net.ipv6.conf.lo.max_addresses = 16

net.ipv6.conf.lo.max_desync_factor = 600

net.ipv6.conf.lo.mc_forwarding = 0

net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000

net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000

net.ipv6.conf.lo.mtu = 65536

net.ipv6.conf.lo.ndisc_notify = 0

net.ipv6.conf.lo.ndisc_tclass = 0

net.ipv6.conf.lo.proxy_ndp = 0

net.ipv6.conf.lo.regen_max_retry = 3

net.ipv6.conf.lo.router_probe_interval = 60

net.ipv6.conf.lo.router_solicitation_delay = 1

net.ipv6.conf.lo.router_solicitation_interval = 4

net.ipv6.conf.lo.router_solicitation_max_interval = 3600

net.ipv6.conf.lo.router_solicitations = -1

net.ipv6.conf.lo.rpl_seg_enabled = 0

net.ipv6.conf.lo.seg6_enabled = 0

net.ipv6.conf.lo.seg6_require_hmac = 0

sysctl: permission denied on key 'net.ipv6.conf.lo.stable_secret'

net.ipv6.conf.lo.suppress_frag_ndisc = 1

net.ipv6.conf.lo.temp_prefered_lft = 86400

net.ipv6.conf.lo.temp_valid_lft = 604800

net.ipv6.conf.lo.use_oif_addrs_only = 0

net.ipv6.conf.lo.use_tempaddr = -1

net.ipv6.fib_multipath_hash_policy = 0

net.ipv6.flowlabel_consistency = 1

net.ipv6.flowlabel_reflect = 0

net.ipv6.flowlabel_state_ranges = 0

net.ipv6.fwmark_reflect = 0

net.ipv6.icmp.echo_ignore_all = 0

net.ipv6.icmp.echo_ignore_anycast = 0

net.ipv6.icmp.echo_ignore_multicast = 0

net.ipv6.icmp.ratelimit = 1000

net.ipv6.icmp.ratemask = 0-1,3-127

net.ipv6.idgen_delay = 1

net.ipv6.idgen_retries = 3

net.ipv6.ip6frag_high_thresh = 4194304

net.ipv6.ip6frag_low_thresh = 3145728

net.ipv6.ip6frag_secret_interval = 0

net.ipv6.ip6frag_time = 60

net.ipv6.ip_nonlocal_bind = 0

net.ipv6.max_dst_opts_length = 2147483647

net.ipv6.max_dst_opts_number = 8

net.ipv6.max_hbh_length = 2147483647

net.ipv6.max_hbh_opts_number = 8

net.ipv6.mld_max_msf = 64

net.ipv6.mld_qrv = 2

net.ipv6.neigh.default.anycast_delay = 100

net.ipv6.neigh.default.app_solicit = 0

net.ipv6.neigh.default.base_reachable_time_ms = 30000

net.ipv6.neigh.default.delay_first_probe_time = 5

net.ipv6.neigh.default.gc_interval = 30

net.ipv6.neigh.default.gc_stale_time = 60

net.ipv6.neigh.default.gc_thresh1 = 128

net.ipv6.neigh.default.gc_thresh2 = 512

net.ipv6.neigh.default.gc_thresh3 = 1024

net.ipv6.neigh.default.locktime = 0

net.ipv6.neigh.default.mcast_resolicit = 0

net.ipv6.neigh.default.mcast_solicit = 3

net.ipv6.neigh.default.proxy_delay = 80

net.ipv6.neigh.default.proxy_qlen = 64

net.ipv6.neigh.default.retrans_time_ms = 1000

net.ipv6.neigh.default.ucast_solicit = 3

net.ipv6.neigh.default.unres_qlen = 101

net.ipv6.neigh.default.unres_qlen_bytes = 212992

net.ipv6.neigh.ens33.anycast_delay = 100

net.ipv6.neigh.ens33.app_solicit = 0

net.ipv6.neigh.ens33.base_reachable_time_ms = 30000

net.ipv6.neigh.ens33.delay_first_probe_time = 5

net.ipv6.neigh.ens33.gc_stale_time = 60

net.ipv6.neigh.ens33.locktime = 0

net.ipv6.neigh.ens33.mcast_resolicit = 0

net.ipv6.neigh.ens33.mcast_solicit = 3

net.ipv6.neigh.ens33.proxy_delay = 80

net.ipv6.neigh.ens33.proxy_qlen = 64

net.ipv6.neigh.ens33.retrans_time_ms = 1000

net.ipv6.neigh.ens33.ucast_solicit = 3

net.ipv6.neigh.ens33.unres_qlen = 101

net.ipv6.neigh.ens33.unres_qlen_bytes = 212992

net.ipv6.neigh.lo.anycast_delay = 100

net.ipv6.neigh.lo.app_solicit = 0

net.ipv6.neigh.lo.base_reachable_time_ms = 30000

net.ipv6.neigh.lo.delay_first_probe_time = 5

net.ipv6.neigh.lo.gc_stale_time = 60

net.ipv6.neigh.lo.locktime = 0

net.ipv6.neigh.lo.mcast_resolicit = 0

net.ipv6.neigh.lo.mcast_solicit = 3

net.ipv6.neigh.lo.proxy_delay = 80

net.ipv6.neigh.lo.proxy_qlen = 64

net.ipv6.neigh.lo.retrans_time_ms = 1000

net.ipv6.neigh.lo.ucast_solicit = 3

net.ipv6.neigh.lo.unres_qlen = 101

net.ipv6.neigh.lo.unres_qlen_bytes = 212992

net.ipv6.route.gc_elasticity = 9

net.ipv6.route.gc_interval = 30

net.ipv6.route.gc_min_interval = 0

net.ipv6.route.gc_min_interval_ms = 500

net.ipv6.route.gc_thresh = 1024

net.ipv6.route.gc_timeout = 60

net.ipv6.route.max_size = 4096

net.ipv6.route.min_adv_mss = 1220

net.ipv6.route.mtu_expires = 600

net.ipv6.route.skip_notify_on_dev_down = 0

net.ipv6.seg6_flowlabel = 0

net.ipv6.xfrm6_gc_thresh = 32768

net.mptcp.add_addr_timeout = 120

net.mptcp.enabled = 1

net.netfilter.nf_conntrack_acct = 0

net.netfilter.nf_conntrack_buckets = 16384

net.netfilter.nf_conntrack_checksum = 1

net.netfilter.nf_conntrack_count = 0

net.netfilter.nf_conntrack_dccp_loose = 1

net.netfilter.nf_conntrack_dccp_timeout_closereq = 64

net.netfilter.nf_conntrack_dccp_timeout_closing = 64

net.netfilter.nf_conntrack_dccp_timeout_open = 43200

net.netfilter.nf_conntrack_dccp_timeout_partopen = 480

net.netfilter.nf_conntrack_dccp_timeout_request = 240

net.netfilter.nf_conntrack_dccp_timeout_respond = 480

net.netfilter.nf_conntrack_dccp_timeout_timewait = 240

net.netfilter.nf_conntrack_events = 1

net.netfilter.nf_conntrack_expect_max = 256

net.netfilter.nf_conntrack_frag6_high_thresh = 4194304

net.netfilter.nf_conntrack_frag6_low_thresh = 3145728

net.netfilter.nf_conntrack_frag6_timeout = 60

net.netfilter.nf_conntrack_generic_timeout = 600

net.netfilter.nf_conntrack_gre_timeout = 30

net.netfilter.nf_conntrack_gre_timeout_stream = 180

net.netfilter.nf_conntrack_helper = 0

net.netfilter.nf_conntrack_icmp_timeout = 30

net.netfilter.nf_conntrack_icmpv6_timeout = 30

net.netfilter.nf_conntrack_log_invalid = 0

net.netfilter.nf_conntrack_max = 65536

net.netfilter.nf_conntrack_sctp_timeout_closed = 10

net.netfilter.nf_conntrack_sctp_timeout_cookie_echoed = 3

net.netfilter.nf_conntrack_sctp_timeout_cookie_wait = 3

net.netfilter.nf_conntrack_sctp_timeout_established = 432000

net.netfilter.nf_conntrack_sctp_timeout_heartbeat_acked = 210

net.netfilter.nf_conntrack_sctp_timeout_heartbeat_sent = 30

net.netfilter.nf_conntrack_sctp_timeout_shutdown_ack_sent = 3

net.netfilter.nf_conntrack_sctp_timeout_shutdown_recd = 0

net.netfilter.nf_conntrack_sctp_timeout_shutdown_sent = 0

net.netfilter.nf_conntrack_tcp_be_liberal = 0

net.netfilter.nf_conntrack_tcp_loose = 1

net.netfilter.nf_conntrack_tcp_max_retrans = 3

net.netfilter.nf_conntrack_tcp_timeout_close = 10

net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60

net.netfilter.nf_conntrack_tcp_timeout_established = 432000

net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120

net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30

net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300

net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60

net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120

net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120

net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300

net.netfilter.nf_conntrack_timestamp = 0

net.netfilter.nf_conntrack_udp_timeout = 30

net.netfilter.nf_conntrack_udp_timeout_stream = 120

net.netfilter.nf_log.0 = NONE

net.netfilter.nf_log.1 = NONE

net.netfilter.nf_log.10 = NONE

net.netfilter.nf_log.11 = NONE

net.netfilter.nf_log.12 = NONE

net.netfilter.nf_log.2 = NONE

net.netfilter.nf_log.3 = NONE

net.netfilter.nf_log.4 = NONE

net.netfilter.nf_log.5 = NONE

net.netfilter.nf_log.6 = NONE

net.netfilter.nf_log.7 = NONE

net.netfilter.nf_log.8 = NONE

net.netfilter.nf_log.9 = NONE

net.netfilter.nf_log_all_netns = 0

net.nf_conntrack_max = 65536

net.unix.max_dgram_qlen = 512

user.max_cgroup_namespaces = 15330

user.max_inotify_instances = 128

user.max_inotify_watches = 65536

user.max_ipc_namespaces = 15330

user.max_mnt_namespaces = 15330

user.max_net_namespaces = 15330

user.max_pid_namespaces = 15330

user.max_time_namespaces = 15330

user.max_user_namespaces = 15330

user.max_uts_namespaces = 15330

vm.admin_reserve_kbytes = 8192

vm.block_dump = 0

vm.compact_unevictable_allowed = 1

vm.compaction_proactiveness = 20

vm.dirty_background_bytes = 0

vm.dirty_background_ratio = 10

vm.dirty_bytes = 0

vm.dirty_expire_centisecs = 3000

vm.dirty_ratio = 20

vm.dirty_writeback_centisecs = 500

vm.dirtytime_expire_seconds = 43200

vm.extfrag_threshold = 500

vm.hugetlb_shm_group = 0

vm.laptop_mode = 0

vm.legacy_va_layout = 0

vm.lowmem_reserve_ratio = 256	256	32	0	0

vm.max_map_count = 65530

vm.memory_failure_early_kill = 0

vm.memory_failure_recovery = 1

vm.min_free_kbytes = 67584

vm.min_slab_ratio = 5

vm.min_unmapped_ratio = 1

vm.mmap_min_addr = 65536

sysctl: permission denied on key 'vm.mmap_rnd_bits'

sysctl: permission denied on key 'vm.mmap_rnd_compat_bits'

vm.nr_hugepages = 0

vm.nr_hugepages_mempolicy = 0

vm.nr_overcommit_hugepages = 0

vm.numa_stat = 1

vm.numa_zonelist_order = Node

vm.oom_dump_tasks = 1

vm.oom_kill_allocating_task = 0

vm.overcommit_kbytes = 0

vm.overcommit_memory = 0

vm.overcommit_ratio = 50

vm.page-cluster = 3

vm.page_lock_unfairness = 5

vm.panic_on_oom = 0

vm.percpu_pagelist_fraction = 0

vm.stat_interval = 1

sysctl: permission denied on key 'vm.stat_refresh'

vm.swappiness = 60

vm.unprivileged_userfaultfd = 0

vm.user_reserve_kbytes = 122284

vm.vfs_cache_pressure = 100

vm.watermark_boost_factor = 0

vm.watermark_scale_factor = 10

vm.zone_reclaim_mode = 0

همه کاربران می توانند پارامترهای کرنل فعلی را مشاهده کنند و فقط کاربر root می تواند مقادیر را تغییر دهد. شما می توانید مقدار یک پارامتر را با ارسال نام آن به عنوان پارامتر به sysctl بررسی کنید. به عنوان مثال، برای بررسی مقدار vm.swappiness باید دستور زیر را اجرا کنید:

sysctl vm.swappiness

vm.swappiness = 60

Swappiness یک ویژگی کرنل لینوکس است که مشخص می کند سیستم چند وقت یکبار از فضای swap استفاده می کند.
دستور sysctl اطلاعات را از فولدر /proc/sys می خواند. proc/sys یک دایرکتوری مجازی می باشد که حاوی file object هایی است که می توان از آنها برای مشاهده و تنظیم پارامترهای کرنل فعلی استفاده کرد.
همچنین می توانید با نمایش محتوای فایل مناسب مقدار پارامتر را مشاهده کنید. تنها تفاوت در نحوه نمایش فایل است. برای مثال، هم sysctl vm.swappiness و هم cat /proc/sys/vm/swappiness خروجی یکسانی خواهند داشت.

استفاده از sysctl برای تغییر پارامترهای کرنل لینوکس

برای تنظیم یک پارامتر کرنل در زمان اجرا، دستور sysctl را اجرا کرده و سپس نام و مقدار پارامتر را با فرمت زیر اجرا کنید:

sysctl -w parameter=value

اگر مقدار یا value شما دارای فاصله یا کاراکترهای خاص است، مقدار را در " " قرار دهید. همچنین می توانید چندین پاراکتر و مقدار را در یک دستور اجرا کنید.
هنگام تغییر تنظیمات کرنل در یک سیستمی که در محیط واقعی است بیشتر مراقب باشید زیرا ممکن است کرنل را ناپایدار کرده و مجبور شوید تا سیستم را ریستارت کنید.
به عنوان مثال، برای فعال کردن فوروارد کردن پکت IPv4 باید دستور زیر را اجرا کنید:

sudo sysctl -w net.ipv4.ip_forward=1

تغییر بلافاصله اعمال می شود، اما پایدار و دائمی نیست. پس از ریستارت سیستم دوباره مقدار پیش فرض load خواهد شد.
برای تنظیم دائمی یک پارامتر، باید تنظیمات را در /etc/sysctl.conf یا فایل پیکربندی دیگری در فولدر /etc/sysctl.d بنویسید:

sysctl -w net.ipv4.ip_forward=1 >> /etc/sysctl.conf

راه دیگر برای تغییر پارامترها استفاده از دستور echo برای درج تنظیمات روی فایل های دایرکتوری /proc/sys است. عنوان مثال، به جای اجرای دستور بالا، می توانید از دستور زیر استفاده کنید:

echo 1 > /proc/sys/net/ipv4/ip_forward

گزینه p- به شما امکان می دهد تنظیمات را از یک فایل پیکربندی load کنید:

sysctl -p /etc/sysctl.d/file_name.conf

به جای file_name.conf در دستور فوق باید نام فایل خود را مشخص کنید. وقتی هیچ فایلی ندهید، sysctl فایل /etc/sysctl.conf را خواهد خواند.