]> ネットワーク メイン メイン デフォルト受信バッファ数 NET-CORE-RMEM-DEFAULT Spinbutton 65535 262140 -1 /proc/sys/net/core/rmem_default ネットワーク メイン メイン 最大受信バッファ数 NET-CORE-RMEM-MAX Spinbutton 65535 262140 -1 /proc/sys/net/core/rmem_max ネットワーク メイン メイン デフォルト送信バッファ数 NET-CORE-WMEM-DEFAULT Spinbutton 65535 262140 -1 /proc/sys/net/core/wmem_default ネットワーク メイン メイン 最大送信バッファ数 NET-CORE-WMEM-MAX Spinbutton 65535 262140 -1 /proc/sys/net/core/wmem_max ネットワーク TCP TCP [1]. FIN timeout NET-TCP-FIN-TIMEOUT Spinbutton 100 500 -1 /proc/sys/net/ipv4/tcp_fin_timeout FIN timeout: The number of seconds to wait for a final FIN before the socket is always closed. This is a violation of the TCP standard but required for prevention of some denial of service attacks. ネットワーク TCP TCP [1]. Keepalive time NET-TCP-KEEPALIVE-TIME Spinbutton 0 65535 -1 /proc/sys/net/ipv4/tcp_keepalive_time Keepalive time: How often TCP sends out a keep alive message (in seconds). (Only when keep alive is enabled). ネットワーク TCP TCP [1]. Number of keepalive probes NET-TCP-KEEPALIVE-PROBES Spinbutton 0 50 -1 /proc/sys/net/ipv4/tcp_keepalive_probes Number of keepalive probes: The number of probes that TCP sends out before it decides that a connection is broken. ネットワーク TCP TCP [1]. Maximum keepalive probes NET-TCP-MAX-KEEPALIVES Spinbutton 0 30 -1 /proc/sys/net/ipv4/tcp_max_ka_probes Maximum keepalive probes: Holds the number of probes that are sent out per slow timer run. This shouldn't be set too high to prevent bursts. ネットワーク TCP TCP [1]. Maximum SYN retransmit. NET-TCP-SYN-RETRIES Spinbutton 5 255 -1 /proc/sys/net/ipv4/tcp_syn_retries SYN Retries: Number of times initial SYNs for a TCP connection attempt will be retransmitted. This is only the timeout for outgoing connections. For incoming connections, see retries1 ネットワーク TCP TCP [1]. Maximum SYN backlog. NET-TCP-SYN-BACKLOG Spinbutton 0 512 -1 /proc/sys/net/ipv4/tcp_max_syn_backlog Maximum SYN backlog: Length of the per-socket backlog queue. When the queue is full, and there are more connection requests, Linux will drop the incoming packets. When SYN Cookies are enabled the backlog queue is effectively ignored. ネットワーク TCP TCP [1]. Maximum retransmit answer retries. NET-TCP-RETRIES1 Spinbutton 0 64 -1 /proc/sys/net/ipv4/tcp_retries1 Retries 1: Defines how often an answer to a TCP connection is retransmitted before giving up. ネットワーク TCP TCP [1]. Maximum retransmit retries. NET-TCP-RETRIES2 Spinbutton 0 64 -1 /proc/sys/net/ipv4/tcp_retries2 Retries 2: Defines how often a TCP packet is retransmitted before giving up. ネットワーク TCP TCP [2]. Enable TCP Syncookies NET-TCP-SYNCOOKIES Checkbox 0 /proc/sys/net/ipv4/tcp_syncookies Syncookies: This option causes 'SYN Cookies' to be sent when the SYN backlog que of a socket overflows. This prevents possible denial of service attacks. Note, that the concept of a socket backlog is abandoned, which means the peer may not recieve reliable error messages from an overloaded server with SYN Cookies enabled. ネットワーク TCP TCP [2]. Retransmit collapse NET-TCP-RETRANS-COLLAPSE Checkbox 0 /proc/sys/net/ipv4/tcp_retrans_collapse Retransmit collapse: This option enables bug-to-bug compatability with some broken printers. On retransmit it tries to send bigger packets to work around bugs in certain TCP stacks. Can be turned off if your printer works fine without it, or you don't have a networked printer. ネットワーク TCP TCP [2]. Select Acknowledgements NET-TCP-SACK Checkbox 0 /proc/sys/net/ipv4/tcp_sack Select Acknowledgements: This option enables select acknowledgements (See RFC2018). ネットワーク TCP TCP [2]. TCP タイムスタンプ NET-TCP-TIMESTAMPS Checkbox 0 /proc/sys/net/ipv4/tcp_timestamps タイムスタンプ: このオプションはTCPタイムスタンプを それぞれのパケットで有効にします。 (詳細はRFC1323) ネットワーク TCP TCP [2]. TCP Window scaling NET-TCP-WINDOW-SCALING Checkbox 0 /proc/sys/net/ipv4/tcp_window_scaling Window scaling: This option enables TCP window scaling (See RFC1323). ネットワーク ICMP ICMP [1]. Destination unreachable rate NET-ICMP-DESTUNREACHRATE Spinbutton 100 500 -1 /proc/sys/net/ipv4/icmp_destunreach_rate ネットワーク ICMP ICMP [1]. Echo reply rate NET-ICMP-ECHOREPLYRATE Spinbutton 0 500 -1 /proc/sys/net/ipv4/icmp_echoreply_rate ネットワーク ICMP ICMP [1]. Param prob rate NET-ICMP-PARAMPROBRATE Spinbutton 100 500 -1 /proc/sys/net/ipv4/icmp_paramprob_rate ネットワーク ICMP ICMP [1]. Time exceed rate NET-ICMP-TIMEEXCEEDRATE Spinbutton 100 500 -1 /proc/sys/net/ipv4/icmp_timeexceed_rate ネットワーク ICMP ICMP [2]. Ignore extraneous error messages NET-ICMP-IGNOREBOGUSERRORS Checkbox -1 /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses Extraneous messages: This option ignores all bogus error messages that may arrive. ネットワーク ICMP ICMP [2]. Ignore all messages NET-ICMP-ECHOIGNOREAL Checkbox -1 /proc/sys/net/ipv4/icmp_echo_ignore_all Ignore all: This option will ignore all ICMP traffic arriving on all ethernet devices. ネットワーク ICMP ICMP [2]. Ignore broadcast messages NET-ICMP-ECHOIGNOREBROADCASTS Checkbox -1 /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts Ignore broadcast: This option will ignore ICMP broadcast messages on all ethernet devices. ネットワーク IP IP [1]. Default time to live (TTL) NET-IP-DEFAULT-TTL Spinbutton 8 256 -1 /proc/sys/net/ipv4/ip_default_ttl Default TTL: The maximum number of hops a packet may travel. ネットワーク IP IP [1]. Time to hold IP fragment in memory NET-IP-FRAGTIME Spinbutton 10 60 -1 /proc/sys/net/ipv4/ipfrag_time Fragtime: The number of seconds an IP fragment should remain in memory. ネットワーク IP IP [2]. IP Forwarding NET-IP-FORWARDING Checkbox -1 /proc/sys/net/ipv4/ip_forward IP Forwarding: This option enables forwarding of IP packages. E.g. from eth0 to eth1. ネットワーク IP IP [2]. RP Filter NET-IP-RP-FILTER Checkbox -1 /proc/sys/net/ipv4/conf/all/rp_filter RP Filter: Enables source route verification ネットワーク IP IP [2]. Global path MTU discovery disable NET-IP-NO-PMTU Checkbox -1 /proc/sys/net/ipv4/ip_no_pmtu_disc MTU discovery: Enabling this option will turn off path MTU discovery (MTU is the Maximum Transmission Unit) ネットワーク IP IP [2]. Always defragment incoming IP packets NET-IP-ALWAYS-DEFRAG Checkbox -1 /proc/sys/net/ipv4/ip_always_defrag Defragment: All incoming fragments (parts of IP packets that arose when some host between source and destination decided that the packets were too large and cut them into pieces) will be reassembled (defragmented) before being processed, even if the packet is to be forwarded. ネットワーク IP IP [2]. Debugging of IP Masquerading NET-IP-MASQ-DEBUG Checkbox -1 /proc/sys/net/ipv4/ip_masq_debug IP_Masq debug: This option toggles debug message output for IP masquerading. ネットワーク Unixドメイン Unixドメイン Delete delay NET-UNIX-DELETE-DELAY Spinbutton 1 60 -1 /proc/sys/net/unix/delete_delay Delete delay: Time in seconds to wait after closure before first attempting to delete a unix domain socket ネットワーク Unixドメイン Unixドメイン Destroy delay NET-UNIX-DESTROY-DELAY Spinbutton 1 60 -1 /proc/sys/net/unix/destroy_delay Delete delay: Time in seconds to wait after closure between repeat attempts to destroy a unix domain socket ネットワーク Unixドメイン Unixドメイン Max Datagram Queue Length NET-UNIX-MAX-DGRAM-QLEN Spinbutton 5 100 -1 /proc/sys/net/unix/max_dgram_qlen Max Datagram Queue Length: Sets the maximum number of datagram messages that may be pending on a Unix domain socket before further writes block or error. ネットワーク トークンリング タイムアウト RIF Cache Timeout NET-IP-MASQ-DEBUG Spinbutton 20000 1000000 -1 /proc/sys/net/token-ring/rif_timeout RIF timeout: Controls the number of hundredths of seconds before RIF routing cache entries for the token ring subsystem are purged. ファイルシステム メイン ファイルシステム メイン dquota-max FS-DQUOT-MAX Spinbutton 0 8192 0 /proc/sys/fs/dquot-max dquota-max: キャッシュされたディスク容量エントリの 最大数を示します。同時ユーザ数を多く 抱える場合はこの項目を増やしてください。 ファイルシステム メイン ファイルシステム メイン file-max FS-FILE-MAX Spinbutton 0 16384 0 /proc/sys/fs/file-max file-max: この値はLinuxカーネルが確保できるファイル ハンドルの最大数を表しています。もし ファイルハンドルを使い切ったというエラー メッセージが大量に出力されたらこの上限を 上げてみましょう。デフォルト値は4096です。 ファイルシステム メイン ファイルシステム メイン inode-max FS-INODE-MAX Spinbutton 0 65535 0 /proc/sys/fs/inode-max inode-max: The maximum number of inodes possible to use. You should set this to two or three times higher than file-max. ファイルシステム メイン ファイルシステム メイン super-max FS-SUPER-MAX Spinbutton 0 1024 0 /proc/sys/fs/super-max super-max: スーパーブロックの最大数です。 ファイルシステムをマウントするたびに 一つのスーパーブロックが使われます。 仮想メモリ bdflush bdflush. Activate bdflush when % dirty VM-BDFLUSH-NFRACT Spinbutton 0 100 0 /proc/sys/vm/bdflush 仮想メモリ bdflush bdflush. Dirty blocks to write per wake cycle. VM-BDFLUSH-NDIRTY Spinbutton 50 1000 1 /proc/sys/vm/bdflush 仮想メモリ bdflush bdflush. Try to reclaim n buffers on refill VM-BDFLUSH-NREFILL Spinbutton 64 1024 2 /proc/sys/vm/bdflush 仮想メモリ bdflush bdflush. Dirty buffer threshold VM-BDFLUSH-NREF-DIRT Spinbutton 256 1024 3 /proc/sys/vm/bdflush 仮想メモリ bdflush bdflush. Time to age normal buffer before flush VM-BDFLUSH-AGE-BUFFER Spinbutton 500 5000 5 /proc/sys/vm/bdflush 仮想メモリ bdflush bdflush. Time to age superblock before flush VM-BDFLUSH-AGE-SUPER Spinbutton 100 5000 6 /proc/sys/vm/bdflush 仮想メモリ Buffermem Buffermem. Minimum percentage VM-BUFFERMEM-MIN Spinbutton 1 50 0 /proc/sys/vm/buffermem 仮想メモリ Buffermem Buffermem. Maximum percentage VM-BUFFERMEM-MAX Spinbutton 0 1024 2 /proc/sys/vm/buffermem 仮想メモリ Buffermem Page Cache. Minimum percentage VM-PAGECACHE-MIN Spinbutton 1 50 0 /proc/sys/vm/pagecache 仮想メモリ Buffermem Page Cache. Maximum percentage VM-PAGECACHE-MAX Spinbutton 10 90 2 /proc/sys/vm/pagecache 仮想メモリ Swapping Overcommit. Overcommit Memory VM_OVERCOMMIT Checkbox -1 /proc/sys/vm/overcommit_memory Overcommit Memory: The following algorithm is used to decide if there's enough memory: if this option is checked, then there's always enough memory. This is a useful feature, since programs often malloc() huge amounts of memory 'just in case', while they only use a small part of it. Leaving this option unchecked will lead to the failure of such a huge malloc(), when in fact the system has enough memory for the program to run. On the other hand, enabling this feature can cause you to run out of memory and thrash the system to death, so large and/or important servers will want to set this disabled. 仮想メモリ Swapping kswapd. Tries base VM-KSWAPD-TRIES-BASE Spinbutton 512 1024 0 /proc/sys/vm/kswapd Tries base: The maximum number of pages kswapd tries to free in one round. This value is divided by 4 or 8. 仮想メモリ Swapping kswapd. Tries min VM-KSWAPD-TRIES-MIN Spinbutton 16 128 1 /proc/sys/vm/kswapd Tries min: The minimum number of times kswapd tries to free a page. 仮想メモリ Swapping kswapd. Swap cluster VM-KSWAPD-SWAP-CLUSTER Spinbutton 32 256 2 /proc/sys/vm/kswapd Swap cluster: This is the number of pages kswapd writes in one turn. This value should be large so that kswapd does its IO in large chunks, but not so large that it floods the request queue. 仮想メモリ Swapping VM [2]. Page cluster VM-VM2-PAGE-CLUSTER Spinbutton 1 5 -1 /proc/sys/vm/page-cluster This entry configures the swap readahead. 1 << PAGE-CLUSTER 仮想メモリ Pagetable cache Page table cache. Minimum VM-PAGETABLE-CACHE-MIN Spinbutton 0 90 0 /proc/sys/vm/pagetable_cache pagetablecache settings: The kernel keeps a number of page tables in a per-CPU cache. This helps a lot on SMP systems. The cache size for each processor will be between the min and max value. On a low memory (<16mb) single CPU system, you can safely set these values to 0 so you don't waste memory. 仮想メモリ Pagetable cache Page table cache. Maximum VM-PAGETABLE-CACHE-MAX Spinbutton 0 90 1 /proc/sys/vm/pagetable_cache カーネル セキュリティ セキュリティ ctrl-alt-delを無効にする KERNEL-CTRL-ALT-DEL Checkbox 0 /proc/sys/kernel/ctrl-alt-del Control Alt Delete: これがチェックされていないと、ctrl-alt-delは トラップされてinit(1)に送られ、まじめに 再起動します。しかしこれがチェックされていると Linuxはこのキーコンビネーションに、 使用中のバッファを同期しないまま ただちに再起動することで対応します。 カーネル セキュリティ セキュリティ 'magic sysrq'を有効にする KERNEL-SYSRQ Checkbox 0 /proc/sys/kernel/sysrq Magic SysRQの有効: 多くの環境ではエンドユーザがコンソールの デバッグシーケンスを使えるようにすることは 望まれません。このオプションは、カーネルの開発 やシステム障害をデバッグするのに便利なマジック キーシーケンスを有効にします。 カーネル ログ ログ Reboot time after a panic KERNEL-PANIC Spinbutton 0 3600 0 /proc/sys/kernel/panic Panic reboot time: After a kernel panic the kernel will wait this long before attempting to reboot the system. Normally this is set to zero to disable the feature, but for a remote machine you may wish to set this. カーネル ログ ログ Space to resume accounting KERNEL-ACCT-RESUME Spinbutton 1 99 0 /proc/sys/kernel/acct Accounting resume: If accounting is stopped due to lack of disk space it will be resumed when a check finds the log disk has this percentage of space free. カーネル ログ ログ Suspend accounting KERNEL-ACCT-SUSPEND Spinbutton 1 99 1 /proc/sys/kernel/acct Suspend accounting: When the log disk drops to this percentage of free space then accounting is suspended. カーネル ログ ログ Accounting space timer KERNEL-ACCT-TIMER Spinbutton 1 3600 2 /proc/sys/kernel/acct Accounting space timer: Controls how often in seconds the disk space is checked in order to resume accounting when the disk becomes too full. カーネル ログ ログ Console log level KERNEL-PRINTK-CONSOLE-LOGLEVEL Spinbutton 0 7 0 /proc/sys/kernel/printk Console log level: Sets the priority level needed before a message is printed to the console. カーネル リソース リソース Real time signals KERNEL-RTSIG-MAX Spinbutton 100 5000 0 /proc/sys/kernel/rtsig-max Real Time Signals: Some processes use real time signal queues. These queues have a finite length to control resource usage. If you have real time signal using applications reporting insufficient signals you may need to adjust this. カーネル リソース リソース Maximum System 5 Shared Memory KERNEL-SHMALL Spinbutton 1048576 2147483647 0 /proc/sys/kernel/shmall Maximum SYSV Shared Memory: Set the limit on the total amount of system 5 style shared memory in the system. Some large database applications such as Oracle may require this is raised from the default. カーネル リソース リソース Maximum System 5 Segment Size KERNEL-SHMMAX Spinbutton 16384 33554432 0 /proc/sys/kernel/shmmax Maximum SYSV Shared Memory segment size: Set the limit on the size of each system 5 style shared memory object in the system. Some large database applications such as Oracle may require this is raised from the default. Hardware RAID RAID settings Min speed limit HARDWARE-RAIDMIN Spinbutton 100 1000 0 /proc/sys/dev/raid/speed_limit_min Minimum level throughput. Hardware RAID RAID settings Max speed limit HARDWARE-RAIDMAX Spinbutton 100000 200000 0 /proc/sys/dev/raid/speed_limit_max Maximum level throughput.