[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] Re: sysctl tweaks for tiny relays



On Tuesday, 3 November 2026 09:31 Toralf Förster via tor-relays wrote:
> On 03/11/2026 03:40, forest via tor-relays wrote:
> >> net.ipv4.tcp_keepalive_time = 120
> > 
> > Why so aggressive? You could get away with 10x that interval.

:-)
I have (tor has it's own keepalive foo):

net.ipv4.tcp_keepalive_time=60
net.ipv4.tcp_keepalive_intvl=10
net.ipv4.tcp_keepalive_probes=3

> >> net.ipv6.ip_nonlocal_bind = 1
> > 
> > This seems like a mistake. Tor does not make use of arbitrary source
> > addresses. Unless you're running Unbound with a routed IPv6 netblock and
> > want it to randomize source addresses, there's no reason to enable this.
> 
> I had reboot (timing?) issues at one of my provider - gone away with that.

This is often because of IPv6 autoconf. That's why I disable it completely on 
servers.

# disable IPv6 autoconf
net.ipv6.conf.default.accept_ra=0
net.ipv6.conf.all.accept_ra=0 
net.ipv6.conf.default.autoconf=0
net.ipv6.conf.all.autoconf=0 

-- 
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx