Linux::debian

From www.deloptes.org
Jump to navigation Jump to search

Backporting

A good guide to backporting is at

  https://raphaelhertzog.com/2010/12/15/howto-to-rebuild-debian-packages/

A deb-src line in sources.list for unstable is needed to do:

 apt-get source libsane-common/unstable

Then:

 apt-get build-deps libsane-common/unstable

should get the dependencies from stable to build libsane-common and libsane.

firefox custom alternatives

update-alternatives --install /etc/alternatives/firefox x-www-browser /opt/custom/firefox/firefox 300
update-alternatives --set x-www-browser /opt/custom/firefox/firefox

Configurations

Some notes on kernel configuration options (linux 3.3.8) with some notes about intel splash on a intel chipset notebook. Most of the following is a server setup on AMD though.

CPU Frequency

Set min / max values

create file if not existing

/etc/default/cpufrequtils

define min/max value and governor

GOVERNOR="ondemand"
MAX_SPEED="3.6GHz"
MIN_SPEED="1.4GHz"

Kernel Configuration

  ┌───────────────────────────────────────────── General setup ──────────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                [*] Prompt for development and/or incomplete code/drivers                             │ │
  │ │                ()  Cross-compiler tool prefix                                                        │ │
  │ │                (eko4) Local version - append to kernel release                                       │ │
  │ │                [*] Automatically append version information to the version string                    │ │
  │ │                    Kernel compression mode (Gzip)  --->                                              │ │
  │ │                ((none)) Default hostname                                                             │ │
  │ │                [*] Support for paging of anonymous memory (swap)                                     │ │
  │ │                [*] System V IPC                                                                      │ │
  │ │                [*] POSIX Message Queues                                                              │ │
  │ │                [*] BSD Process Accounting                                                            │ │
  │ │                [ ]   BSD Process Accounting version 3 file format                                    │ │
  │ │                [*] open by fhandle syscalls                                                          │ │
  │ │                [ ] Export task/process statistics through netlink (EXPERIMENTAL)                     │ │
  │ │                [*] Auditing support                                                                  │ │
  │ │                [*]   Enable system-call auditing support                                             │ │
  │ │                [ ]   Make audit loginuid immutable                                                   │ │
  │ │                    IRQ subsystem  --->                                                               │ │
  │ │                    RCU Subsystem  --->                                                               │ │
  │ │                < > Kernel .config support                                                            │ │
  │ │                (15) Kernel log buffer size (16 => 64KB, 17 => 128KB)                                 │ │
  │ │                [ ] Control Group support  --->                                                       │ │
  │ │                -*- Namespaces support  --->                                                          │ │
  │ │                [ ] Automatic process group scheduling                                                │ │
  │ │                [*] Enable deprecated sysfs features to support old userspace tools                   │ │
  │ │                [ ]   Enable deprecated sysfs features by default                                     │ │
  │ │                -*- Kernel->user space relay support (formerly relayfs)                               │ │
  │ │                [*] Initial RAM filesystem and RAM disk (initramfs/initrd) support                    │ │
  │ │                ()    Initramfs source file(s)                                                        │ │
  │ │                [*] Optimize for size                                                                 │ │
  │ │                [ ] Configure standard kernel features (expert users)  --->                           │ │
  │ │                [ ] Embedded system                                                                   │ │
  │ │                    Kernel Performance Events And Counters  --->                                      │ │
  │ │                [ ] Disable heap randomization                                                        │ │
  │ │                    Choose SLAB allocator (SLAB)  --->                                                │ │
  │ │                [ ] Profiling support                                                                 │ │
  │ │                [ ] Kprobes                                                                           │ │
  │ │                [ ] Optimize trace point call sites                                                   │ │
  │ │                    GCOV-based kernel profiling  --->                                                 │ │
  ...
  ┌───────────────────────────────────────────── RCU Subsystem ──────────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                    RCU Implementation (Tree-based hierarchical RCU)  --->                            │ │
  │ │                [ ] Enable tracing for RCU                                                            │ │
  │ │                (32) Tree-based hierarchical RCU fanout value                                         │ │
  │ │                [ ] Disable tree-based hierarchical RCU auto-balancing                                │ │
  │ │                [ ] Accelerate last non-dyntick-idle CPU's grace periods                              │ │
  │ │                                                                                                      │ │
  ┌─────────────────────────────────────────── Namespaces support ───────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- Namespaces support                                                                │ │
  │ │                [*]   UTS namespace                                                                   │ │
  │ │                [*]   IPC namespace                                                                   │ │
  │ │                [ ]   User namespace (EXPERIMENTAL)                                                   │ │
  │ │                [*]   PID Namespaces                                                                  │ │
  │ │                [*]   Network namespace                                                               │ │
  ┌───────────────────────────────────── Enable loadable module support ─────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- Enable loadable module support                                                    │ │
  │ │                [ ]   Forced module loading                                                           │ │
  │ │                [*]   Module unloading                                                                │ │
  │ │                [*]     Forced module unloading                                                       │ │
  │ │                [*]   Module versioning support                                                       │ │
  │ │                [ ]   Source checksum for all modules                                                 │ │

  ┌───────────────────────────────────────── Enable the block layer ─────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- Enable the block layer                                                            │ │
  │ │                -*-   Block layer SG support v4                                                       │ │
  │ │                -*-   Block layer SG support v4 helper lib                                            │ │
  │ │                [ ]   Block layer data integrity support                                              │ │
  │ │                      Partition Types  --->                                                           │ │
  │ │                      IO Schedulers  --->                                                             │ │

  ┌───────────────────────────────────────────── IO Schedulers ──────────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                < > Deadline I/O scheduler                                                            │ │
  │ │                <*> CFQ I/O scheduler                                                                 │ │
  │ │                    Default I/O scheduler (CFQ)  --->                                                 │ │
  │ │                                                                                                      │ │

  ┌────────────────────────────────────── Processor type and features ───────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                [*] Tickless System (Dynamic Ticks)                                                   │ │
  │ │                [*] High Resolution Timer Support                                                     │ │
  │ │                [*] Symmetric multi-processing support                                                │ │
  │ │                [*] Enable MPS table                                                                  │ │
  │ │                [ ] Support for extended (non-PC) x86 platforms                                       │ │
  │ │                [*] Single-depth WCHAN output                                                         │ │
  │ │                [ ] Paravirtualized guest support  --->                                               │ │
  │ │                [ ] Memtest                                                                           │ │
  │ │                    Processor family (Generic-x86-64)  --->                                           │ │
  │ │                [ ] IBM Calgary IOMMU support                                                         │ │
  │ │                [ ] Enable Maximum number of SMP Processors and NUMA Nodes                            │ │
  │ │                (8) Maximum number of CPUs                                                            │ │
  │ │                [ ] SMT (Hyperthreading) scheduler support                                            │ │
  │ │                [*] Multi-core scheduler support                                                      │ │
  │ │                [ ] Fine granularity task level IRQ time accounting                                   │ │
  │ │                    Preemption Model (Voluntary Kernel Preemption (Desktop))  --->                    │ │
  │ │                [*] Reroute for broken boot IRQs                                                      │ │
  │ │                [*] Machine Check / overheating reporting                                             │ │
  │ │                [*]   Intel MCE features                                                              │ │
  │ │                [*]   AMD MCE features                                                                │ │
  │ │                <M> Machine check injector support                                                    │ │
  │ │                < > Dell laptop support                                                               │ │
  │ │                <M> /dev/cpu/microcode - microcode support                                            │ │
  │ │                [*]   Intel microcode patch loading support                                           │ │
  │ │                [*]   AMD microcode patch loading support                                             │ │
  │ │                <M> /dev/cpu/*/msr - Model-specific register support                                  │ │
  │ │                <M> /dev/cpu/*/cpuid - CPU information support                                        │ │
  │ │                [ ] Numa Memory Allocation and Scheduler Support                                      │ │
  │ │                    Memory model (Sparse Memory)  --->                                                │ │
  │ │                [*] Sparse Memory virtual memmap                                                      │ │
  │ │                [ ] Allow for memory hot-add                                                          │ │
  │ │                -*- Allow for memory compaction                                                       │ │
  │ │                -*- Page migration                                                                    │ │
  │ │                [ ] Enable KSM for page merging                                                       │ │
  │ │                (65536) Low address space to protect from user allocation                             │ │
  │ │                [ ] Enable recovery from hardware memory errors                                       │ │
  │ │                [*] Transparent Hugepage Support                                                      │ │
  │ │                      Transparent Hugepage Support sysfs defaults (always)  --->                      │ │
  │ │                [*] Enable cleancache driver to cache clean pages if tmem is present                  │ │
  │ │                [*] Check for low memory corruption                                                   │ │
  │ │                [ ]   Set the default setting of memory_corruption_check                              │ │
  │ │                (64) Amount of low memory, in kilobytes, to reserve for the BIOS                      │ │
  │ │                -*- MTRR (Memory Type Range Register) support                                         │ │
  │ │                [*]   MTRR cleanup support                                                            │ │
  │ │                (0)     MTRR cleanup enable value (0-1)                                               │ │
  │ │                (1)     MTRR cleanup spare reg num (0-7)                                              │ │
  │ │                [ ] EFI runtime service support                                                       │ │
  │ │                [*] Enable seccomp to safely compute untrusted bytecode                               │ │
  │ │                [ ] Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)                 │ │
  │ │                    Timer frequency (300 HZ)  --->                                                    │ │
  │ │                [ ] kexec system call                                                                 │ │
  │ │                [ ] kernel crash dumps                                                                │ │
  │ │                [ ] Build a relocatable kernel                                                        │ │
  │ │                -*- Support for hot-pluggable CPUs                                                    │ │
  │ │                [ ] Compat VDSO support                                                               │ │
  │ │                [ ] Built-in kernel command line                                                      │ │

  ┌─────────────────────────────────── Power management and ACPI options ────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                [*] Suspend to RAM and standby                                                        │ │
  │ │                [*] Hibernation (aka 'suspend to disk')                                               │ │
  │ │                (/dev/md4) Default resume partition                                                   │ │
  │ │                [*] Run-time PM core functionality                                                    │ │
  │ │                [ ] Power Management Debug Support                                                    │ │
  │ │                [*] ACPI (Advanced Configuration and Power Interface) Support  --->                   │ │
  │ │                [ ] SFI (Simple Firmware Interface) Support  --->                                     │ │
  │ │                    CPU Frequency scaling  --->                                                       │ │
  │ │                -*- CPU idle PM support                                                               │ │
  │ │                [ ]   Cpuidle Driver for Intel Processors                                             │ │
  │ │                    Memory power savings  --->                                                        │ │
  │ │                                                                                                      │ │

  ┌─────────────────────── ACPI (Advanced Configuration and Power Interface) Support ────────────────────────┐
  ...
  │                                                                                                          │
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- ACPI (Advanced Configuration and Power Interface) Support                         │ │
  │ │                [ ]   Deprecated /proc/acpi files                                                     │ │
  │ │                [ ]   Deprecated power /proc/acpi directories                                         │ │
  │ │                < >   EC read/write access through /sys/kernel/debug/ec                               │ │
  │ │                [ ]   Deprecated /proc/acpi/event support                                             │ │
  │ │                <M>   AC Adapter                                                                      │ │
  │ │                <M>   Battery                                                                         │ │
  │ │                <M>   Button                                                                          │ │
  │ │                <M>   Video                                                                           │ │
  │ │                <M>   Fan                                                                             │ │
  │ │                [ ]   Dock                                                                            │ │
  │ │                <M>   Processor                                                                       │ │
  │ │                <M>   Processor Aggregator                                                            │ │
  │ │                <M>   Thermal Zone                                                                    │ │
  │ │                [ ]   Debug Statements                                                                │ │
  │ │                < >   PCI slot detection driver                                                       │ │
  │ │                {M}   Container and Module Devices (EXPERIMENTAL)                                     │ │
  │ │                <M>   Smart Battery System                                                            │ │
  │ │                -*-   Hardware Error Device                                                           │ │
  │ │                <M>   Allow ACPI methods to be inserted/replaced at run time                          │ │
  │ │                [*]   ACPI Platform Error Interface (APEI)                                            │ │
  │ │                [*]     APEI Generic Hardware Error Source                                            │ │
  │ │                < >     APEI Error INJection (EINJ)                                                   │ │
  │ │                < >     APEI Error Record Serialization Table (ERST) Debug Support                    │ │
  │ └──────────────────────────────────────────────────────────────────────────────────────────────────────┘ │

  ┌───────────────────────────────────────── CPU Frequency scaling ──────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                [*] CPU Frequency scaling                                                             │ │
  │ │                <M>   CPU frequency translation statistics                                            │ │
  │ │                [*]     CPU frequency translation statistics details                                  │ │
  │ │                      Default CPUFreq governor (userspace)  --->                                      │ │
  │ │                <M>   'performance' governor                                                          │ │
  │ │                <M>   'powersave' governor                                                            │ │
  │ │                -*-   'userspace' governor for userspace frequency scaling                            │ │
  │ │                <M>   'ondemand' cpufreq policy governor                                              │ │
  │ │                <M>   'conservative' cpufreq governor                                                 │ │
  │ │                      x86 CPU frequency scaling drivers  --->                                         │ │
  │ │                                                                                                      │ │

  ┌─────────────────────────────────── x86 CPU frequency scaling drivers ────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                <M> Processor Clocking Control interface driver                                       │ │
  │ │                <M> ACPI Processor P-States driver                                                    │ │
  │ │                <M> AMD Opteron/Athlon64 PowerNow!                                                    │ │
  │ │                < > Intel Enhanced SpeedStep (deprecated)                                             │ │
  │ │                < > Intel Pentium 4 clock modulation                                                  │ │
  │ │                    *** shared options ***                                                            │ │
  │ │                                                                                                      │ │

  ┌───────────────────────────────────────── Bus options (PCI etc.) ─────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                [*] PCI support                                                                       │ │
  │ │                [*]   Support mmconfig PCI config space access                                        │ │
  │ │                [*]   PCI Express support                                                             │ │
  │ │                [ ]     Root Port Advanced Error Reporting support                                    │ │
  │ │                -*-     PCI Express ASPM control                                                      │ │
  │ │                [ ]       Debug PCI Express ASPM                                                      │ │
  │ │                [*] Message Signaled Interrupts (MSI and MSI-X)                                       │ │
  │ │                [ ] PCI Debugging                                                                     │ │
  │ │                < > PCI Stub driver                                                                   │ │
  │ │                [*] Interrupts on hypertransport devices                                              │ │
  │ │                [ ] PCI IOV support                                                                   │ │
  │ │                [ ] PCI PRI support                                                                   │ │
  │ │                [ ] PCI PASID support                                                                 │ │
  │ │                <*> PCI IO-APIC hotplug support                                                       │ │
  │ │                < > PCCard (PCMCIA/CardBus) support  --->                                             │ │
  │ │                < > Support for PCI Hotplug  --->                                                     │ │
  │ │                [ ] RapidIO support                                                                   │ │
  │ │                                                                                                      │ │

  ┌──────────────────────────────────────────── Graphics support ────────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                < > /dev/agpgart (AGP Support)  --->                                                  │ │
  │ │                -*- VGA Arbitration                                                                   │ │
  │ │                (2)   Maximum number of GPUs                                                          │ │
  │ │                [*] Laptop Hybrid Graphics - GPU switching support                                    │ │
  │ │                <M> Direct Rendering Manager (XFree86 4.1.0 and higher DRI support)  --->             │ │
  │ │                < > Intel GMA500 Stub Driver                                                          │ │
  │ │                <M> Lowlevel video output switch controls                                             │ │
  │ │                {*} Support for frame buffer devices  --->                                            │ │
  │ │                -*- Backlight & LCD device support  --->                                              │ │
  │ │                    Console display driver support  --->                                              │ │
  │ │                [*] Bootup logo  --->                                                                 │ │
  │ │                                                                                                      │ │

server intel chipset

  ┌──────────────────── Direct Rendering Manager (XFree86 4.1.0 and higher DRI support) ─────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- Direct Rendering Manager (XFree86 4.1.0 and higher DRI support)                   │ │
  │ │                < >   3dfx Banshee/Voodoo3+                                                           │ │
  │ │                < >   ATI Rage 128                                                                    │ │
  │ │                < >   ATI Radeon                                                                      │ │
  │ │                < >   Matrox g200/g400                                                                │ │
  │ │                < >   Via unichrome video cards                                                       │ │
  │ │                < >   Savage video cards                                                              │ │
  │ │                <M>   DRM driver for VMware Virtual GPU                                               │ │
  │ │                <M>   Intel GMA5/600 KMS Framebuffer                                                  │ │
  │ │                [ ]     Intel GMA600 support (Experimental)                                           │ │
  │ │                [ ]     Intel GMA3600/3650 support (Experimental)                                     │ │
  │ │                                                                                                      │ │

notebook intel chipset

  ┌──────────────────── Direct Rendering Manager (XFree86 4.1.0 and higher DRI support) ─────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- Direct Rendering Manager (XFree86 4.1.0 and higher DRI support)                   │ │
  │ │                < >   3dfx Banshee/Voodoo3+                                                           │ │
  │ │                < >   ATI Rage 128                                                                    │ │
  │ │                < >   ATI Radeon                                                                      │ │
  │ │                <M>   Intel 8xx/9xx/G3x/G4x/HD Graphics                                               │ │
  │ │                [*]     Enable modesetting on intel by default                                        │ │
  │ │                < >   Matrox g200/g400                                                                │ │
  │ │                < >   SiS video cards                                                                 │ │
  │ │                < >   Via unichrome video cards                                                       │ │
  │ │                < >   Savage video cards                                                              │ │
  │ │                <M>   DRM driver for VMware Virtual GPU                                               │ │
  │ │                                                                                                      │ │

notebook intel chipset i915 with splash activ

  ┌──────────────────────────────────── Support for frame buffer devices ────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- Support for frame buffer devices                                                  │ │
  │ │                [ ]   Enable firmware EDID                                                            │ │
  │ │                [ ]   Framebuffer foreign endianness support  --->                                    │ │
  │ │                -*-   Enable Video Mode Handling Helpers                                              │ │
  │ │                [ ]   Enable Tile Blitting Support                                                    │ │
  │ │                      *** Frame buffer hardware drivers ***                                           │ │
  │ │                < >   Cirrus Logic support                                                            │ │
  │ │                < >   Permedia2 support                                                               │ │
  │ │                < >   CyberPro 2000/2010/5000 support                                                 │ │
  │ │                < >   Arc Monochrome LCD board support                                                │ │
  │ │                [ ]   Asiliant (Chips) 69000 display support                                          │ │
  │ │                [ ]   IMS Twin Turbo display support                                                  │ │
  │ │                < >   VGA 16-color graphics support                                                   │ │
  │ │                < >   Userspace VESA VGA graphics support                                             │ │
  │ │                [ ]   VESA VGA graphics support                                                       │ │
  │ │                < >   N411 Apollo/Hecuba devkit support                                               │ │
  │ │                < >   Hercules mono graphics support                                                  │ │
  │ │                < >   Epson S1D13XXX framebuffer support                                              │ │
  │ │                < >   nVidia Framebuffer Support                                                      │ │
  │ │                < >   nVidia Riva support                                                             │ │
  │ │                < >   Intel LE80578 (Vermilion) support                                               │ │
  │ │                < >   Matrox acceleration                                                             │ │
  │ │                < >   ATI Radeon display support                                                      │ │
  │ │                < >   ATI Rage128 display support                                                     │ │
  │ │                < >   ATI Mach64 display support                                                      │ │
  │ │                < >   S3 Trio/Virge support                                                           │ │
  │ │                < >   SiS/XGI display support                                                         │ │
  │ │                < >   VIA UniChrome (Pro) and Chrome9 display support                                 │ │
  │ │                < >   NeoMagic display support                                                        │ │
  │ │                < >   IMG Kyro support                                                                │ │
  │ │                < >   3Dfx Banshee/Voodoo3/Voodoo5 display support                                    │ │
  │ │                < >   3Dfx Voodoo Graphics (sst1) support                                             │ │
  │ │                < >   VIA VT8623 support                                                              │ │
  │ │                < >   Trident/CyberXXX/CyberBlade support                                             │ │
  │ │                < >   ARK 2000PV support                                                              │ │
  │ │                < >   Fujitsu carmine frame buffer support                                            │ │
  │ │                < >   Toshiba Mobile IO FrameBuffer support                                           │ │
  │ │                < >   Silicon Motion SM501 framebuffer support                                        │ │
  │ │                <M>   SMSC UFX6000/7000 USB Framebuffer support                                       │ │
  │ │                < >   Displaylink USB Framebuffer support                                             │ │
  │ │                < >   Virtual Frame Buffer support (ONLY FOR TESTING!)                                │ │
  │ │                < >   E-Ink Metronome/8track controller support                                       │ │
  │ │                < >   Fujitsu MB862xx GDC support                                                     │ │
  │ │                < >   E-Ink Broadsheet/Epson S1D13521 controller support                              │ │

  ┌───────────────────────────────────── Console display driver support ─────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                -*- VGA text console                                                                  │ │
  │ │                [*]   Enable Scrollback Buffer in System RAM                                          │ │
  │ │                (64)    Scrollback Buffer Size (in KB)                                                │ │
  │ │                {*} Framebuffer Console support                                                       │ │
  │ │                -*-   Map the console to the primary display device                                   │ │
  │ │                [*]   Framebuffer Console Rotation                                                    │ │
  │ │                [*] Select compiled-in fonts                                                          │ │
  │ │                [ ]   VGA 8x8 font                                                                    │ │
  │ │                -*-   VGA 8x16 font                                                                   │ │
  │ │                [ ]   Mac console 6x11 font (not supported by all drivers)                            │ │
  │ │                [ ]   console 7x14 font (not supported by all drivers)                                │ │
  │ │                [ ]   Pearl (old m68k) console 8x8 font                                               │ │
  │ │                [ ]   Acorn console 8x8 font                                                          │ │
  │ │                [ ]   Mini 4x6 font                                                                   │ │
  │ │                [ ] Sparc console 8x16 font                                                           │ │
  │ │                [ ] Sparc console 12x22 font (not supported by all drivers)                           │ │
  │ │                [ ] console 10x18 font (not supported by all drivers)                                 │ │

server

  ┌───────────────────────────────────── Console display driver support ─────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                -*- VGA text console                                                                  │ │
  │ │                [ ]   Enable Scrollback Buffer in System RAM                                          │ │
  │ │                {*} Framebuffer Console support                                                       │ │
  │ │                -*-   Map the console to the primary display device                                   │ │
  │ │                [*]   Framebuffer Console Rotation                                                    │ │
  │ │                [*] Select compiled-in fonts                                                          │ │
  │ │                [ ]   VGA 8x8 font                                                                    │ │
  │ │                -*-   VGA 8x16 font                                                                   │ │
  │ │                [ ]   Mac console 6x11 font (not supported by all drivers)                            │ │
  │ │                [ ]   console 7x14 font (not supported by all drivers)                                │ │
  │ │                [ ]   Pearl (old m68k) console 8x8 font                                               │ │
  │ │                [ ]   Acorn console 8x8 font                                                          │ │
  │ │                [ ]   Mini 4x6 font                                                                   │ │
  │ │                [ ] Sparc console 8x16 font                                                           │ │
  │ │                [ ] Sparc console 12x22 font (not supported by all drivers)                           │ │
  │ │                [ ] console 10x18 font (not supported by all drivers)                                 │ │
  │ │                                                                                                      │ │

  ┌───────────────────────────────────────────── Device Drivers ─────────────────────────────────────────────┐
  ...
  │ ┌────────────────^(-)──────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                <M> Sound card support  --->                                                          │ │
  │ │                [*] HID Devices  --->                                                                 │ │
  │ │                [*] USB support  --->                                                                 │ │
  │ │                < > Ultra Wideband devices (EXPERIMENTAL)  --->                                       │ │
  │ │                < > MMC/SD/SDIO card support  --->                                                    │ │
  │ │                < > Sony MemoryStick card support (EXPERIMENTAL)  --->                                │ │
  │ │                -*- LED Support  --->                                                                 │ │
  │ │                [ ] Accessibility support  --->                                                       │ │
  │ │                < > InfiniBand support  --->                                                          │ │
  │ │                [*] EDAC (Error Detection And Correction) reporting  --->                             │ │
  │ │                [*] Real Time Clock  --->                                                             │ │
  │ │                [*] DMA Engine support  --->                                                          │ │
  │ │                [ ] Auxiliary Display support  --->                                                   │ │
  │ │                {M} Userspace I/O drivers  --->                                                       │ │
  │ │                    Virtio drivers  --->                                                              │ │
  │ │                    Microsoft Hyper-V guest support  --->                                             │ │
  │ │                [ ] Staging drivers  --->                                                             │ │
  │ │                [*] X86 Platform Specific Device Drivers  --->                                        │ │
  │ │                    Hardware Spinlock drivers  --->                                                   │ │
  │ │                [*] IOMMU Hardware Support  --->                                                      │ │
  │ │                [ ] Virtualization drivers  --->                                                      │ │
  │ │                [*] Generic Dynamic Voltage and Frequency Scaling (DVFS) support  --->                │ │

  ┌────────────────────── Generic Dynamic Voltage and Frequency Scaling (DVFS) support ──────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- Generic Dynamic Voltage and Frequency Scaling (DVFS) support                      │ │
  │ │                      *** DEVFREQ Governors ***                                                       │ │
  │ │                [*]   Simple Ondemand                                                                 │ │
  │ │                [*]   Performance                                                                     │ │
  │ │                [*]   Powersave                                                                       │ │
  │ │                [*]   Userspace                                                                       │ │
  │ │                      *** DEVFREQ Drivers ***                                                         │ │
  │ │                                                                                                      │ │
  ┌──────────────────────────────────────────── Library routines ────────────────────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                {M} CRC-CCITT functions                                                               │ │
  │ │                {M} CRC16 functions                                                                   │ │
  │ │                <M> CRC calculation for the T10 Data Integrity Field                                  │ │
  │ │                {M} CRC ITU-T V.41 functions                                                          │ │
  │ │                -*- CRC32 functions                                                                   │ │
  │ │                <M> CRC7 functions                                                                    │ │
  │ │                {M} CRC32c (Castagnoli, et al) Cyclic Redundancy-Check                                │ │
  │ │                <M> CRC8 function                                                                     │ │
  │ │                -*- XZ decompression support                                                          │ │
  │ │                <M> XZ decompressor tester                                                            │ │
  │ │                [*] Averaging functions                                                               │ │
  │ │                <M> CORDIC algorithm                                                                  │ │
  │ │                                                                                                      │ │

  ┌───────────────────────────── Multiple devices driver support (RAID and LVM) ─────────────────────────────┐
  ...
  │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
  │ │                --- Multiple devices driver support (RAID and LVM)                                    │ │
  │ │                <M>   RAID support                                                                    │ │
  │ │                <M>     Linear (append) mode                                                          │ │
  │ │                <M>     RAID-0 (striping) mode                                                        │ │
  │ │                <M>     RAID-1 (mirroring) mode                                                       │ │
  │ │                < >     RAID-10 (mirrored striping) mode                                              │ │
  │ │                <M>     RAID-4/RAID-5/RAID-6 mode                                                     │ │
  │ │                <M>     Multipath I/O support                                                         │ │
  │ │                <M>     Faulty test module for MD                                                     │ │
  │ │                <M>   Device mapper support                                                           │ │
  │ │                [ ]     Device mapper debugging support                                               │ │
  │ │                <M>     Crypt target support                                                          │ │
  │ │                <M>     Snapshot target                                                               │ │
  │ │                <M>     Mirror target                                                                 │ │
  │ │                <M>   Zero target                                                                     │ │
  │ │                <M>   Multipath target                                                                │ │
  │ │                < >     I/O Path Selector based on the number of in-flight I/Os                       │ │
  │ │                < >     I/O Path Selector based on the service time                                   │ │
  │ │                                                                                                      │ │

 ┌─────────────────────────────────────────── I2O device support ───────────────────────────────────────────┐
 ...
 │ ┌──────────────────────────────────────────────────────────────────────────────────────────────────────┐ │
 │ │                --- I2O device support                                                                │ │
 │ │                [*]   Enable LCT notification                                                         │ │
 │ │                [*]   Enable Adaptec extensions                                                       │ │
 │ │                [*]     Enable 64-bit DMA                                                             │ │
 │ │                <M>   I2O Configuration support                                                       │ │
 │ │                [ ]     Enable ioctls (OBSOLETE)                                                      │ │
 │ │                <M>   I2O Bus Adapter OSM                                                             │ │
 │ │                <M>   I2O Block OSM                                                                   │ │
 │ │                <M>   I2O SCSI OSM                                                                    │ │
 │ │                <M>   I2O /proc support                                                               │ │

How_to_configure_cpufreqd

Alternatives

Configure default browser to custom firefox installation

  • list:
update-alternatives --list www-browser
/usr/bin/lynx.cur
/usr/bin/w3m
  • install:
sudo update-alternatives --install /etc/alternatives/x-www-browser www-browser /opt/custom/firefox/firefox 1
[sudo] password for <user>:
update-alternatives: renaming www-browser link from /usr/bin/www-browser to /etc/alternatives/x-www-browser.
<user>@<host>:/home-lisa/emanoil$ update-alternatives --list www-browser
/opt/custom/firefox/firefox
/usr/bin/lynx.cur
/usr/bin/w3m
  • set:
sudo update-alternatives --set www-browser /opt/custom/firefox/firefox

Terminal

Size

For anyone that would like to find the terminal window size, which can also be important can use these commands:

Code:

 WIDTH=`tput cols`
 HEIGHT=`tput lines`

Disable nepomuk in KDE4

1. First you have to stop it:

 qdbus org.kde.NepomukServer /nepomukserver quit

2. Then disable nepomuk autostart:

 sudo mv /usr/share/autostart/nepomukserver.desktop /usr/share/autostart/nepomukserver.desktop.piece-of-crap

3. Remove nepomuk database:

 rm -rf .kde/share/apps/nepomuk

SAMBA PDC and Windows 7

http://wiki.ubuntuusers.de/Samba_Server_PDC

Custom kernel users should update sysctl

  • create file "/etc/sysctl.d/99-custom.conf" with following content
# https://www.debian.org/releases/jessie/amd64/release-notes/ch-whats-new.en.html#newdistro

fs.protected_symlinks = 1


  • execute
# sysctl -p /etc/sysctl.d/99-custom.conf


typical sysctl setup for server

abi.vsyscall32 = 1
crypto.fips_enabled = 0
debug.exception-trace = 1
dev.hpet.max-user-freq = 64
dev.mac_hid.mouse_button2_keycode = 97
dev.mac_hid.mouse_button3_keycode = 100
dev.mac_hid.mouse_button_emulation = 0
dev.parport.default.spintime = 500
dev.parport.default.timeslice = 200
dev.raid.speed_limit_max = 200000
dev.raid.speed_limit_min = 1000
dev.scsi.logging_level = 0
fs.aio-max-nr = 65536
fs.aio-nr = 2861
fs.binfmt_misc.jar = enabled
fs.binfmt_misc.jar = flags:
fs.binfmt_misc.jar = interpreter /usr/lib/jvm/java-6-sun-1.6.0.22/jre/lib/jexec
fs.binfmt_misc.jar = magic 504b0304
fs.binfmt_misc.jar = offset 0
fs.binfmt_misc.python2/5 = enabled
fs.binfmt_misc.python2/5 = flags:
fs.binfmt_misc.python2/5 = interpreter /usr/bin/python2.5
fs.binfmt_misc.python2/5 = magic b3f20d0a
fs.binfmt_misc.python2/5 = offset 0
fs.binfmt_misc.python2/6 = enabled
fs.binfmt_misc.python2/6 = flags:
fs.binfmt_misc.python2/6 = interpreter /usr/bin/python2.6
fs.binfmt_misc.python2/6 = magic d1f20d0a
fs.binfmt_misc.python2/6 = offset 0
fs.binfmt_misc.python2/7 = enabled
fs.binfmt_misc.python2/7 = flags:
fs.binfmt_misc.python2/7 = interpreter /usr/bin/python2.7
fs.binfmt_misc.python2/7 = magic 03f30d0a
fs.binfmt_misc.python2/7 = offset 0
fs.binfmt_misc.status = enabled
fs.dentry-state = 227541       190137  45      0       0       0
fs.dir-notify-enable = 1
fs.epoll.max_user_watches = 3336192
fs.file-max = 1628964
fs.file-nr = 5792      0       1628964
fs.inode-nr = 195498   72774
fs.inode-state = 195498        72774   0       0       0       0       0
fs.inotify.max_queued_events = 16384
fs.inotify.max_user_instances = 128
fs.inotify.max_user_watches = 8192
fs.lease-break-time = 45
fs.leases-enable = 1
fs.mqueue.msg_max = 10
fs.mqueue.msgsize_max = 8192
fs.mqueue.queues_max = 256
fs.nfs.nlm_grace_period = 0
fs.nfs.nlm_tcpport = 0
fs.nfs.nlm_timeout = 10
fs.nfs.nlm_udpport = 0
fs.nfs.nsm_local_state = 3
fs.nfs.nsm_use_hostnames = 0
fs.nr_open = 1048576
fs.overflowgid = 65534
fs.overflowuid = 65534
fs.pipe-max-size = 1048576
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
fs.quota.allocated_dquots = 0
fs.quota.cache_hits = 0
fs.quota.drops = 0
fs.quota.free_dquots = 0
fs.quota.lookups = 0
fs.quota.reads = 0
fs.quota.syncs = 246
fs.quota.warnings = 1
fs.quota.writes = 0
fs.suid_dumpable = 0
fs.xfs.age_buffer_centisecs = 1500
fs.xfs.error_level = 3
fs.xfs.filestream_centisecs = 3000
fs.xfs.inherit_noatime = 1
fs.xfs.inherit_nodefrag = 1
fs.xfs.inherit_nodump = 1
fs.xfs.inherit_nosymlinks = 0
fs.xfs.inherit_sync = 1
fs.xfs.irix_sgid_inherit = 0
fs.xfs.irix_symlink_mode = 0
fs.xfs.panic_mask = 0
fs.xfs.rotorstep = 1
fs.xfs.stats_clear = 0
fs.xfs.xfsbufd_centisecs = 100
fs.xfs.xfssyncd_centisecs = 3000
kernel.acct = 4        2       30
kernel.acpi_video_flags = 0
kernel.auto_msgmni = 1
kernel.blk_iopoll = 1
kernel.bootloader_type = 114
kernel.bootloader_version = 2
kernel.cad_pid = 1
kernel.cap_last_cap = 35
kernel.compat-log = 1
kernel.core_pattern = core
kernel.core_pipe_limit = 0
kernel.core_uses_pid = 0
kernel.ctrl-alt-del = 0
kernel.dmesg_restrict = 0
kernel.domainname = (none)
kernel.ftrace_dump_on_oops = 0
kernel.hostname = lisa
kernel.hotplug =
kernel.hung_task_check_count = 4194304
kernel.hung_task_panic = 0
kernel.hung_task_timeout_secs = 120
kernel.hung_task_warnings = 10
kernel.io_delay_type = 0
kernel.keys.gc_delay = 300
kernel.keys.maxbytes = 20000
kernel.keys.maxkeys = 200
kernel.keys.root_maxbytes = 20000
kernel.keys.root_maxkeys = 200
kernel.kptr_restrict = 0
kernel.kstack_depth_to_print = 12
kernel.max_lock_depth = 1024
kernel.modprobe = /sbin/modprobe
kernel.modules_disabled = 0
kernel.msgmax = 8192
kernel.msgmnb = 16384
kernel.msgmni = 31976
kernel.ngroups_max = 65536
kernel.nmi_watchdog = 1
kernel.osrelease = 3.2.0-4-rt-amd64
kernel.ostype = Linux
kernel.overflowgid = 65534
kernel.overflowuid = 65534
kernel.panic = 0
kernel.panic_on_io_nmi = 0
kernel.panic_on_oops = 0
kernel.panic_on_unrecovered_nmi = 0
kernel.perf_event_max_sample_rate = 100000
kernel.perf_event_mlock_kb = 516
kernel.perf_event_paranoid = 1
kernel.pid_max = 32768
kernel.poweroff_cmd = /sbin/poweroff
kernel.print-fatal-signals = 0
kernel.printk = 4      4       1       7
kernel.printk_delay = 0
kernel.printk_ratelimit = 5
kernel.printk_ratelimit_burst = 10
kernel.pty.max = 4096
kernel.pty.nr = 4
kernel.random.boot_id = b72c005a-e315-4104-9667-344b5aec7224
kernel.random.entropy_avail = 3341
kernel.randomize_va_space = 2
kernel.random.poolsize = 4096
kernel.random.read_wakeup_threshold = 64
kernel.random.uuid = f949c100-1026-4b31-bdf3-720de61985d6
kernel.random.write_wakeup_threshold = 128
kernel.real-root-dev = 0
kernel.sched_autogroup_enabled = 0
kernel.sched_child_runs_first = 0
kernel.sched_domain.cpu0.domain0.busy_factor = 64
kernel.sched_domain.cpu0.domain0.busy_idx = 0
kernel.sched_domain.cpu0.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu0.domain0.flags = 687
kernel.sched_domain.cpu0.domain0.forkexec_idx = 0
kernel.sched_domain.cpu0.domain0.idle_idx = 0
kernel.sched_domain.cpu0.domain0.imbalance_pct = 110
kernel.sched_domain.cpu0.domain0.max_interval = 2
kernel.sched_domain.cpu0.domain0.min_interval = 1
kernel.sched_domain.cpu0.domain0.name = SIBLING
kernel.sched_domain.cpu0.domain0.newidle_idx = 0
kernel.sched_domain.cpu0.domain0.wake_idx = 0
kernel.sched_domain.cpu0.domain1.busy_factor = 64
kernel.sched_domain.cpu0.domain1.busy_idx = 2
kernel.sched_domain.cpu0.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu0.domain1.flags = 4655
kernel.sched_domain.cpu0.domain1.forkexec_idx = 0
kernel.sched_domain.cpu0.domain1.idle_idx = 0
kernel.sched_domain.cpu0.domain1.imbalance_pct = 125
kernel.sched_domain.cpu0.domain1.max_interval = 4
kernel.sched_domain.cpu0.domain1.min_interval = 1
kernel.sched_domain.cpu0.domain1.name = MC
kernel.sched_domain.cpu0.domain1.newidle_idx = 0
kernel.sched_domain.cpu0.domain1.wake_idx = 0
kernel.sched_domain.cpu1.domain0.busy_factor = 64
kernel.sched_domain.cpu1.domain0.busy_idx = 0
kernel.sched_domain.cpu1.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu1.domain0.flags = 687
kernel.sched_domain.cpu1.domain0.forkexec_idx = 0
kernel.sched_domain.cpu1.domain0.idle_idx = 0
kernel.sched_domain.cpu1.domain0.imbalance_pct = 110
kernel.sched_domain.cpu1.domain0.max_interval = 2
kernel.sched_domain.cpu1.domain0.min_interval = 1
kernel.sched_domain.cpu1.domain0.name = SIBLING
kernel.sched_domain.cpu1.domain0.newidle_idx = 0
kernel.sched_domain.cpu1.domain0.wake_idx = 0
kernel.sched_domain.cpu1.domain1.busy_factor = 64
kernel.sched_domain.cpu1.domain1.busy_idx = 2
kernel.sched_domain.cpu1.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu1.domain1.flags = 4655
kernel.sched_domain.cpu1.domain1.forkexec_idx = 0
kernel.sched_domain.cpu1.domain1.idle_idx = 0
kernel.sched_domain.cpu1.domain1.imbalance_pct = 125
kernel.sched_domain.cpu1.domain1.max_interval = 4
kernel.sched_domain.cpu1.domain1.min_interval = 1
kernel.sched_domain.cpu1.domain1.name = MC
kernel.sched_domain.cpu1.domain1.newidle_idx = 0
kernel.sched_domain.cpu1.domain1.wake_idx = 0
kernel.sched_domain.cpu2.domain0.busy_factor = 64
kernel.sched_domain.cpu2.domain0.busy_idx = 0
kernel.sched_domain.cpu2.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu2.domain0.flags = 687
kernel.sched_domain.cpu2.domain0.forkexec_idx = 0
kernel.sched_domain.cpu2.domain0.idle_idx = 0
kernel.sched_domain.cpu2.domain0.imbalance_pct = 110
kernel.sched_domain.cpu2.domain0.max_interval = 2
kernel.sched_domain.cpu2.domain0.min_interval = 1
kernel.sched_domain.cpu2.domain0.name = SIBLING
kernel.sched_domain.cpu2.domain0.newidle_idx = 0
kernel.sched_domain.cpu2.domain0.wake_idx = 0
kernel.sched_domain.cpu2.domain1.busy_factor = 64
kernel.sched_domain.cpu2.domain1.busy_idx = 2
kernel.sched_domain.cpu2.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu2.domain1.flags = 4655
kernel.sched_domain.cpu2.domain1.forkexec_idx = 0
kernel.sched_domain.cpu2.domain1.idle_idx = 0
kernel.sched_domain.cpu2.domain1.imbalance_pct = 125
kernel.sched_domain.cpu2.domain1.max_interval = 4
kernel.sched_domain.cpu2.domain1.min_interval = 1
kernel.sched_domain.cpu2.domain1.name = MC
kernel.sched_domain.cpu2.domain1.newidle_idx = 0
kernel.sched_domain.cpu2.domain1.wake_idx = 0
kernel.sched_domain.cpu3.domain0.busy_factor = 64
kernel.sched_domain.cpu3.domain0.busy_idx = 0
kernel.sched_domain.cpu3.domain0.cache_nice_tries = 0
kernel.sched_domain.cpu3.domain0.flags = 687
kernel.sched_domain.cpu3.domain0.forkexec_idx = 0
kernel.sched_domain.cpu3.domain0.idle_idx = 0
kernel.sched_domain.cpu3.domain0.imbalance_pct = 110
kernel.sched_domain.cpu3.domain0.max_interval = 2
kernel.sched_domain.cpu3.domain0.min_interval = 1
kernel.sched_domain.cpu3.domain0.name = SIBLING
kernel.sched_domain.cpu3.domain0.newidle_idx = 0
kernel.sched_domain.cpu3.domain0.wake_idx = 0
kernel.sched_domain.cpu3.domain1.busy_factor = 64
kernel.sched_domain.cpu3.domain1.busy_idx = 2
kernel.sched_domain.cpu3.domain1.cache_nice_tries = 1
kernel.sched_domain.cpu3.domain1.flags = 4655
kernel.sched_domain.cpu3.domain1.forkexec_idx = 0
kernel.sched_domain.cpu3.domain1.idle_idx = 0
kernel.sched_domain.cpu3.domain1.imbalance_pct = 125
kernel.sched_domain.cpu3.domain1.max_interval = 4
kernel.sched_domain.cpu3.domain1.min_interval = 1
kernel.sched_domain.cpu3.domain1.name = MC
kernel.sched_domain.cpu3.domain1.newidle_idx = 0
kernel.sched_domain.cpu3.domain1.wake_idx = 0
kernel.sched_latency_ns = 18000000
kernel.sched_migration_cost = 500000
kernel.sched_min_granularity_ns = 2250000
kernel.sched_nr_migrate = 8
kernel.sched_rt_period_us = 1000000
kernel.sched_rt_runtime_us = 950000
kernel.sched_shares_window = 10000000
kernel.sched_time_avg = 1000
kernel.sched_tunable_scaling = 1
kernel.sched_wakeup_granularity_ns = 3000000
kernel.sem = 250       32000   32      128
kernel.shmall = 2097152
kernel.shmmax = 268435456
kernel.shmmni = 4096
kernel.shm_rmid_forced = 0
kernel.softlockup_panic = 0
kernel.sysrq = 438
kernel.tainted = 4608
kernel.threads-max = 254531
kernel.timer_migration = 1
kernel.unknown_nmi_panic = 0
kernel.usermodehelper.bset = 4294967295        4294967295
kernel.usermodehelper.inheritable = 4294967295 4294967295
kernel.version = #1 SMP PREEMPT RT Debian 3.2.65-1+deb7u1
kernel.watchdog = 1
kernel.watchdog_thresh = 10
net.core.bpf_jit_enable = 0
net.core.dev_weight = 64
net.core.message_burst = 10
net.core.message_cost = 5
net.core.netdev_budget = 300
net.core.netdev_max_backlog = 1000
net.core.netdev_tstamp_prequeue = 1
net.core.optmem_max = 20480
net.core.rmem_default = 229376
net.core.rmem_max = 131071
net.core.rps_sock_flow_entries = 0
net.core.somaxconn = 128
net.core.warnings = 1
net.core.wmem_default = 229376
net.core.wmem_max = 131071
net.core.xfrm_acq_expires = 30
net.core.xfrm_aevent_etime = 10
net.core.xfrm_aevent_rseqth = 2
net.core.xfrm_larval_drop = 1
net.ipv4.conf.all.accept_local = 0
net.ipv4.conf.all.accept_redirects = 1
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.arp_accept = 0
net.ipv4.conf.all.arp_announce = 0
net.ipv4.conf.all.arp_filter = 0
net.ipv4.conf.all.arp_ignore = 0
net.ipv4.conf.all.arp_notify = 0
net.ipv4.conf.all.bootp_relay = 0
net.ipv4.conf.all.disable_policy = 0
net.ipv4.conf.all.disable_xfrm = 0
net.ipv4.conf.all.force_igmp_version = 0
net.ipv4.conf.all.forwarding = 0
net.ipv4.conf.all.log_martians = 0
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.all.medium_id = 0
net.ipv4.conf.all.promote_secondaries = 0
net.ipv4.conf.all.proxy_arp = 0
net.ipv4.conf.all.proxy_arp_pvlan = 0
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.all.secure_redirects = 1
net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.all.shared_media = 1
net.ipv4.conf.all.src_valid_mark = 0
net.ipv4.conf.all.tag = 0
net.ipv4.conf.default.accept_local = 0
net.ipv4.conf.default.accept_redirects = 1
net.ipv4.conf.default.accept_source_route = 1
net.ipv4.conf.default.arp_accept = 0
net.ipv4.conf.default.arp_announce = 0
net.ipv4.conf.default.arp_filter = 0
net.ipv4.conf.default.arp_ignore = 0
net.ipv4.conf.default.arp_notify = 0
net.ipv4.conf.default.bootp_relay = 0
net.ipv4.conf.default.disable_policy = 0
net.ipv4.conf.default.disable_xfrm = 0
net.ipv4.conf.default.force_igmp_version = 0
net.ipv4.conf.default.forwarding = 0
net.ipv4.conf.default.log_martians = 0
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.default.medium_id = 0
net.ipv4.conf.default.promote_secondaries = 0
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.default.proxy_arp_pvlan = 0
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.default.secure_redirects = 1
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.default.shared_media = 1
net.ipv4.conf.default.src_valid_mark = 0
net.ipv4.conf.default.tag = 0
net.ipv4.conf.eth0.accept_local = 0
net.ipv4.conf.eth0.accept_redirects = 1
net.ipv4.conf.eth0.accept_source_route = 1
net.ipv4.conf.eth0.arp_accept = 0
net.ipv4.conf.eth0.arp_announce = 0
net.ipv4.conf.eth0.arp_filter = 0
net.ipv4.conf.eth0.arp_ignore = 0
net.ipv4.conf.eth0.arp_notify = 0
net.ipv4.conf.eth0.bootp_relay = 0
net.ipv4.conf.eth0.disable_policy = 0
net.ipv4.conf.eth0.disable_xfrm = 0
net.ipv4.conf.eth0.force_igmp_version = 0
net.ipv4.conf.eth0.forwarding = 0
net.ipv4.conf.eth0.log_martians = 0
net.ipv4.conf.eth0.mc_forwarding = 0
net.ipv4.conf.eth0.medium_id = 0
net.ipv4.conf.eth0.promote_secondaries = 0
net.ipv4.conf.eth0.proxy_arp = 0
net.ipv4.conf.eth0.proxy_arp_pvlan = 0
net.ipv4.conf.eth0.rp_filter = 0
net.ipv4.conf.eth0.secure_redirects = 1
net.ipv4.conf.eth0.send_redirects = 1
net.ipv4.conf.eth0.shared_media = 1
net.ipv4.conf.eth0.src_valid_mark = 0
net.ipv4.conf.eth0.tag = 0
net.ipv4.conf.lo.accept_local = 0
net.ipv4.conf.lo.accept_redirects = 1
net.ipv4.conf.lo.accept_source_route = 1
net.ipv4.conf.lo.arp_accept = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.lo.arp_filter = 0
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.lo.arp_notify = 0
net.ipv4.conf.lo.bootp_relay = 0
net.ipv4.conf.lo.disable_policy = 1
net.ipv4.conf.lo.disable_xfrm = 1
net.ipv4.conf.lo.force_igmp_version = 0
net.ipv4.conf.lo.forwarding = 0
net.ipv4.conf.lo.log_martians = 0
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.lo.medium_id = 0
net.ipv4.conf.lo.promote_secondaries = 0
net.ipv4.conf.lo.proxy_arp = 0
net.ipv4.conf.lo.proxy_arp_pvlan = 0
net.ipv4.conf.lo.rp_filter = 0
net.ipv4.conf.lo.secure_redirects = 1
net.ipv4.conf.lo.send_redirects = 1
net.ipv4.conf.lo.shared_media = 1
net.ipv4.conf.lo.src_valid_mark = 0
net.ipv4.conf.lo.tag = 0
net.ipv4.conf.vmnet1.accept_local = 0
net.ipv4.conf.vmnet1.accept_redirects = 1
net.ipv4.conf.vmnet1.accept_source_route = 1
net.ipv4.conf.vmnet1.arp_accept = 0
net.ipv4.conf.vmnet1.arp_announce = 0
net.ipv4.conf.vmnet1.arp_filter = 0
net.ipv4.conf.vmnet1.arp_ignore = 0
net.ipv4.conf.vmnet1.arp_notify = 0
net.ipv4.conf.vmnet1.bootp_relay = 0
net.ipv4.conf.vmnet1.disable_policy = 0
net.ipv4.conf.vmnet1.disable_xfrm = 0
net.ipv4.conf.vmnet1.force_igmp_version = 0
net.ipv4.conf.vmnet1.forwarding = 0
net.ipv4.conf.vmnet1.log_martians = 0
net.ipv4.conf.vmnet1.mc_forwarding = 0
net.ipv4.conf.vmnet1.medium_id = 0
net.ipv4.conf.vmnet1.promote_secondaries = 0
net.ipv4.conf.vmnet1.proxy_arp = 0
net.ipv4.conf.vmnet1.proxy_arp_pvlan = 0
net.ipv4.conf.vmnet1.rp_filter = 0
net.ipv4.conf.vmnet1.secure_redirects = 1
net.ipv4.conf.vmnet1.send_redirects = 1
net.ipv4.conf.vmnet1.shared_media = 1
net.ipv4.conf.vmnet1.src_valid_mark = 0
net.ipv4.conf.vmnet1.tag = 0
net.ipv4.conf.vmnet8.accept_local = 0
net.ipv4.conf.vmnet8.accept_redirects = 1
net.ipv4.conf.vmnet8.accept_source_route = 1
net.ipv4.conf.vmnet8.arp_accept = 0
net.ipv4.conf.vmnet8.arp_announce = 0
net.ipv4.conf.vmnet8.arp_filter = 0
net.ipv4.conf.vmnet8.arp_ignore = 0
net.ipv4.conf.vmnet8.arp_notify = 0
net.ipv4.conf.vmnet8.bootp_relay = 0
net.ipv4.conf.vmnet8.disable_policy = 0
net.ipv4.conf.vmnet8.disable_xfrm = 0
net.ipv4.conf.vmnet8.force_igmp_version = 0
net.ipv4.conf.vmnet8.forwarding = 0
net.ipv4.conf.vmnet8.log_martians = 0
net.ipv4.conf.vmnet8.mc_forwarding = 0
net.ipv4.conf.vmnet8.medium_id = 0
net.ipv4.conf.vmnet8.promote_secondaries = 0
net.ipv4.conf.vmnet8.proxy_arp = 0
net.ipv4.conf.vmnet8.proxy_arp_pvlan = 0
net.ipv4.conf.vmnet8.rp_filter = 0
net.ipv4.conf.vmnet8.secure_redirects = 1
net.ipv4.conf.vmnet8.send_redirects = 1
net.ipv4.conf.vmnet8.shared_media = 1
net.ipv4.conf.vmnet8.src_valid_mark = 0
net.ipv4.conf.vmnet8.tag = 0
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_echo_sysrq = 0
net.ipv4.icmp_errors_use_inbound_ifaddr = 0
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.icmp_ratelimit = 1000
net.ipv4.icmp_ratemask = 6168
net.ipv4.igmp_max_memberships = 20
net.ipv4.igmp_max_msf = 10
net.ipv4.inet_peer_maxttl = 600
net.ipv4.inet_peer_minttl = 120
net.ipv4.inet_peer_threshold = 65664
net.ipv4.ip_default_ttl = 64
net.ipv4.ip_dynaddr = 0
net.ipv4.ip_forward = 0
net.ipv4.ipfrag_high_thresh = 262144
net.ipv4.ipfrag_low_thresh = 196608
net.ipv4.ipfrag_max_dist = 64
net.ipv4.ipfrag_secret_interval = 600
net.ipv4.ipfrag_time = 30
net.ipv4.ip_local_port_range = 32768   61000
net.ipv4.ip_local_reserved_ports =
net.ipv4.ip_nonlocal_bind = 0
net.ipv4.ip_no_pmtu_disc = 0
net.ipv4.neigh.default.anycast_delay = 100
net.ipv4.neigh.default.app_solicit = 0
net.ipv4.neigh.default.base_reachable_time_ms = 30000
net.ipv4.neigh.default.delay_first_probe_time = 5
net.ipv4.neigh.default.gc_interval = 30
net.ipv4.neigh.default.gc_stale_time = 60
net.ipv4.neigh.default.gc_thresh1 = 128
net.ipv4.neigh.default.gc_thresh2 = 512
net.ipv4.neigh.default.gc_thresh3 = 1024
net.ipv4.neigh.default.locktime = 100
net.ipv4.neigh.default.mcast_solicit = 3
net.ipv4.neigh.default.proxy_delay = 80
net.ipv4.neigh.default.proxy_qlen = 64
net.ipv4.neigh.default.retrans_time_ms = 1000
net.ipv4.neigh.default.ucast_solicit = 3
net.ipv4.neigh.default.unres_qlen = 3
net.ipv4.neigh.eth0.anycast_delay = 100
net.ipv4.neigh.eth0.app_solicit = 0
net.ipv4.neigh.eth0.base_reachable_time_ms = 30000
net.ipv4.neigh.eth0.delay_first_probe_time = 5
net.ipv4.neigh.eth0.gc_stale_time = 60
net.ipv4.neigh.eth0.locktime = 100
net.ipv4.neigh.eth0.mcast_solicit = 3
net.ipv4.neigh.eth0.proxy_delay = 80
net.ipv4.neigh.eth0.proxy_qlen = 64
net.ipv4.neigh.eth0.retrans_time_ms = 1000
net.ipv4.neigh.eth0.ucast_solicit = 3
net.ipv4.neigh.eth0.unres_qlen = 3
net.ipv4.neigh.lo.anycast_delay = 100
net.ipv4.neigh.lo.app_solicit = 0
net.ipv4.neigh.lo.base_reachable_time_ms = 30000
net.ipv4.neigh.lo.delay_first_probe_time = 5
net.ipv4.neigh.lo.gc_stale_time = 60
net.ipv4.neigh.lo.locktime = 100
net.ipv4.neigh.lo.mcast_solicit = 3
net.ipv4.neigh.lo.proxy_delay = 80
net.ipv4.neigh.lo.proxy_qlen = 64
net.ipv4.neigh.lo.retrans_time_ms = 1000
net.ipv4.neigh.lo.ucast_solicit = 3
net.ipv4.neigh.lo.unres_qlen = 3
net.ipv4.neigh.vmnet1.anycast_delay = 100
net.ipv4.neigh.vmnet1.app_solicit = 0
net.ipv4.neigh.vmnet1.base_reachable_time_ms = 30000
net.ipv4.neigh.vmnet1.delay_first_probe_time = 5
net.ipv4.neigh.vmnet1.gc_stale_time = 60
net.ipv4.neigh.vmnet1.locktime = 100
net.ipv4.neigh.vmnet1.mcast_solicit = 3
net.ipv4.neigh.vmnet1.proxy_delay = 80
net.ipv4.neigh.vmnet1.proxy_qlen = 64
net.ipv4.neigh.vmnet1.retrans_time_ms = 1000
net.ipv4.neigh.vmnet1.ucast_solicit = 3
net.ipv4.neigh.vmnet1.unres_qlen = 3
net.ipv4.neigh.vmnet8.anycast_delay = 100
net.ipv4.neigh.vmnet8.app_solicit = 0
net.ipv4.neigh.vmnet8.base_reachable_time_ms = 30000
net.ipv4.neigh.vmnet8.delay_first_probe_time = 5
net.ipv4.neigh.vmnet8.gc_stale_time = 60
net.ipv4.neigh.vmnet8.locktime = 100
net.ipv4.neigh.vmnet8.mcast_solicit = 3
net.ipv4.neigh.vmnet8.proxy_delay = 80
net.ipv4.neigh.vmnet8.proxy_qlen = 64
net.ipv4.neigh.vmnet8.retrans_time_ms = 1000
net.ipv4.neigh.vmnet8.ucast_solicit = 3
net.ipv4.neigh.vmnet8.unres_qlen = 3
net.ipv4.ping_group_range = 1  0
net.ipv4.route.error_burst = 1250
net.ipv4.route.error_cost = 250
net.ipv4.route.gc_elasticity = 8
net.ipv4.route.gc_interval = 60
net.ipv4.route.gc_min_interval = 0
net.ipv4.route.gc_min_interval_ms = 500
net.ipv4.route.gc_thresh = 524288
net.ipv4.route.gc_timeout = 300
net.ipv4.route.max_size = 8388608
net.ipv4.route.min_adv_mss = 256
net.ipv4.route.min_pmtu = 552
net.ipv4.route.mtu_expires = 600
net.ipv4.route.redirect_load = 5
net.ipv4.route.redirect_number = 9
net.ipv4.route.redirect_silence = 5120
net.ipv4.rt_cache_rebuild_count = 4
net.ipv4.tcp_abc = 0
net.ipv4.tcp_abort_on_overflow = 0
net.ipv4.tcp_adv_win_scale = 1
net.ipv4.tcp_allowed_congestion_control = cubic reno
net.ipv4.tcp_app_win = 31
net.ipv4.tcp_available_congestion_control = cubic reno
net.ipv4.tcp_base_mss = 512
net.ipv4.tcp_challenge_ack_limit = 100
net.ipv4.tcp_congestion_control = cubic
net.ipv4.tcp_cookie_size = 0
net.ipv4.tcp_dsack = 1
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_fack = 1
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_frto = 2
net.ipv4.tcp_frto_response = 0
net.ipv4.tcp_keepalive_intvl = 75
net.ipv4.tcp_keepalive_probes = 9
net.ipv4.tcp_keepalive_time = 7200
net.ipv4.tcp_low_latency = 0
net.ipv4.tcp_max_orphans = 262144
net.ipv4.tcp_max_ssthresh = 0
net.ipv4.tcp_max_syn_backlog = 2048
net.ipv4.tcp_max_tw_buckets = 262144
net.ipv4.tcp_mem = 385185      513581  770370
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_mtu_probing = 0
net.ipv4.tcp_no_metrics_save = 0
net.ipv4.tcp_orphan_retries = 0
net.ipv4.tcp_reordering = 3
net.ipv4.tcp_retrans_collapse = 1
net.ipv4.tcp_retries1 = 3
net.ipv4.tcp_retries2 = 15
net.ipv4.tcp_rfc1337 = 0
net.ipv4.tcp_rmem = 4096       87380   6291456
net.ipv4.tcp_sack = 1
net.ipv4.tcp_slow_start_after_idle = 1
net.ipv4.tcp_stdurg = 0
net.ipv4.tcp_synack_retries = 5
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_syn_retries = 5
net.ipv4.tcp_thin_dupack = 0
net.ipv4.tcp_thin_linear_timeouts = 0
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_tso_win_divisor = 3
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_tw_reuse = 0
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_wmem = 4096       16384   4194304
net.ipv4.tcp_workaround_signed_windows = 0
net.ipv4.udp_mem = 385185      513581  770370
net.ipv4.udp_rmem_min = 4096
net.ipv4.udp_wmem_min = 4096
net.ipv4.xfrm4_gc_thresh = 4194304
net.ipv6.bindv6only = 1
net.ipv6.conf.all.accept_dad = 1
net.ipv6.conf.all.accept_ra = 1
net.ipv6.conf.all.accept_ra_defrtr = 1
net.ipv6.conf.all.accept_ra_pinfo = 1
net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.all.accept_ra_rtr_pref = 1
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.autoconf = 1
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.force_tllao = 0
net.ipv6.conf.all.forwarding = 0
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.optimistic_dad = 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.regen_max_retry = 3
net.ipv6.conf.all.router_probe_interval = 60
net.ipv6.conf.all.router_solicitation_delay = 1
net.ipv6.conf.all.router_solicitation_interval = 4
net.ipv6.conf.all.router_solicitations = 3
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.default.accept_dad = 1
net.ipv6.conf.default.accept_ra = 1
net.ipv6.conf.default.accept_ra_defrtr = 1
net.ipv6.conf.default.accept_ra_pinfo = 1
net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.default.accept_ra_rtr_pref = 1
net.ipv6.conf.default.accept_redirects = 1
net.ipv6.conf.default.accept_source_route = 0
net.ipv6.conf.default.autoconf = 1
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.force_tllao = 0
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.max_desync_factor = 600
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.optimistic_dad = 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.regen_max_retry = 3
net.ipv6.conf.default.router_probe_interval = 60
net.ipv6.conf.default.router_solicitation_delay = 1
net.ipv6.conf.default.router_solicitation_interval = 4
net.ipv6.conf.default.router_solicitations = 3
net.ipv6.conf.default.temp_prefered_lft = 86400
net.ipv6.conf.default.temp_valid_lft = 604800
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.eth0.accept_dad = 1
net.ipv6.conf.eth0.accept_ra = 1
net.ipv6.conf.eth0.accept_ra_defrtr = 1
net.ipv6.conf.eth0.accept_ra_pinfo = 1
net.ipv6.conf.eth0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth0.accept_ra_rtr_pref = 1
net.ipv6.conf.eth0.accept_redirects = 1
net.ipv6.conf.eth0.accept_source_route = 0
net.ipv6.conf.eth0.autoconf = 1
net.ipv6.conf.eth0.dad_transmits = 1
net.ipv6.conf.eth0.disable_ipv6 = 0
net.ipv6.conf.eth0.force_mld_version = 0
net.ipv6.conf.eth0.force_tllao = 0
net.ipv6.conf.eth0.forwarding = 0
net.ipv6.conf.eth0.hop_limit = 64
net.ipv6.conf.eth0.max_addresses = 16
net.ipv6.conf.eth0.max_desync_factor = 600
net.ipv6.conf.eth0.mc_forwarding = 0
net.ipv6.conf.eth0.mtu = 1500
net.ipv6.conf.eth0.optimistic_dad = 0
net.ipv6.conf.eth0.proxy_ndp = 0
net.ipv6.conf.eth0.regen_max_retry = 3
net.ipv6.conf.eth0.router_probe_interval = 60
net.ipv6.conf.eth0.router_solicitation_delay = 1
net.ipv6.conf.eth0.router_solicitation_interval = 4
net.ipv6.conf.eth0.router_solicitations = 3
net.ipv6.conf.eth0.temp_prefered_lft = 86400
net.ipv6.conf.eth0.temp_valid_lft = 604800
net.ipv6.conf.eth0.use_tempaddr = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.disable_ipv6 = 0
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.force_tllao = 0
net.ipv6.conf.lo.forwarding = 0
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.mtu = 16436
net.ipv6.conf.lo.optimistic_dad = 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.regen_max_retry = 3
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.router_solicitation_delay = 1
net.ipv6.conf.lo.router_solicitation_interval = 4
net.ipv6.conf.lo.router_solicitations = 3
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.vmnet1.accept_dad = 1
net.ipv6.conf.vmnet1.accept_ra = 1
net.ipv6.conf.vmnet1.accept_ra_defrtr = 1
net.ipv6.conf.vmnet1.accept_ra_pinfo = 1
net.ipv6.conf.vmnet1.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.vmnet1.accept_ra_rtr_pref = 1
net.ipv6.conf.vmnet1.accept_redirects = 1
net.ipv6.conf.vmnet1.accept_source_route = 0
net.ipv6.conf.vmnet1.autoconf = 1
net.ipv6.conf.vmnet1.dad_transmits = 1
net.ipv6.conf.vmnet1.disable_ipv6 = 0
net.ipv6.conf.vmnet1.force_mld_version = 0
net.ipv6.conf.vmnet1.force_tllao = 0
net.ipv6.conf.vmnet1.forwarding = 0
net.ipv6.conf.vmnet1.hop_limit = 64
net.ipv6.conf.vmnet1.max_addresses = 16
net.ipv6.conf.vmnet1.max_desync_factor = 600
net.ipv6.conf.vmnet1.mc_forwarding = 0
net.ipv6.conf.vmnet1.mtu = 1500
net.ipv6.conf.vmnet1.optimistic_dad = 0
net.ipv6.conf.vmnet1.proxy_ndp = 0
net.ipv6.conf.vmnet1.regen_max_retry = 3
net.ipv6.conf.vmnet1.router_probe_interval = 60
net.ipv6.conf.vmnet1.router_solicitation_delay = 1
net.ipv6.conf.vmnet1.router_solicitation_interval = 4
net.ipv6.conf.vmnet1.router_solicitations = 3
net.ipv6.conf.vmnet1.temp_prefered_lft = 86400
net.ipv6.conf.vmnet1.temp_valid_lft = 604800
net.ipv6.conf.vmnet1.use_tempaddr = 0
net.ipv6.conf.vmnet8.accept_dad = 1
net.ipv6.conf.vmnet8.accept_ra = 1
net.ipv6.conf.vmnet8.accept_ra_defrtr = 1
net.ipv6.conf.vmnet8.accept_ra_pinfo = 1
net.ipv6.conf.vmnet8.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.vmnet8.accept_ra_rtr_pref = 1
net.ipv6.conf.vmnet8.accept_redirects = 1
net.ipv6.conf.vmnet8.accept_source_route = 0
net.ipv6.conf.vmnet8.autoconf = 1
net.ipv6.conf.vmnet8.dad_transmits = 1
net.ipv6.conf.vmnet8.disable_ipv6 = 0
net.ipv6.conf.vmnet8.force_mld_version = 0
net.ipv6.conf.vmnet8.force_tllao = 0
net.ipv6.conf.vmnet8.forwarding = 0
net.ipv6.conf.vmnet8.hop_limit = 64
net.ipv6.conf.vmnet8.max_addresses = 16
net.ipv6.conf.vmnet8.max_desync_factor = 600
net.ipv6.conf.vmnet8.mc_forwarding = 0
net.ipv6.conf.vmnet8.mtu = 1500
net.ipv6.conf.vmnet8.optimistic_dad = 0
net.ipv6.conf.vmnet8.proxy_ndp = 0
net.ipv6.conf.vmnet8.regen_max_retry = 3
net.ipv6.conf.vmnet8.router_probe_interval = 60
net.ipv6.conf.vmnet8.router_solicitation_delay = 1
net.ipv6.conf.vmnet8.router_solicitation_interval = 4
net.ipv6.conf.vmnet8.router_solicitations = 3
net.ipv6.conf.vmnet8.temp_prefered_lft = 86400
net.ipv6.conf.vmnet8.temp_valid_lft = 604800
net.ipv6.conf.vmnet8.use_tempaddr = 0
net.ipv6.icmp.ratelimit = 1000
net.ipv6.ip6frag_high_thresh = 262144
net.ipv6.ip6frag_low_thresh = 196608
net.ipv6.ip6frag_secret_interval = 600
net.ipv6.ip6frag_time = 60
net.ipv6.mld_max_msf = 64
net.ipv6.neigh.default.anycast_delay = 100
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.base_reachable_time_ms = 30000
net.ipv6.neigh.default.delay_first_probe_time = 5
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.gc_thresh1 = 128
net.ipv6.neigh.default.gc_thresh2 = 512
net.ipv6.neigh.default.gc_thresh3 = 1024
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.proxy_delay = 80
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.retrans_time_ms = 1000
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.unres_qlen = 3
net.ipv6.neigh.eth0.anycast_delay = 100
net.ipv6.neigh.eth0.app_solicit = 0
net.ipv6.neigh.eth0.base_reachable_time_ms = 30000
net.ipv6.neigh.eth0.delay_first_probe_time = 5
net.ipv6.neigh.eth0.gc_stale_time = 60
net.ipv6.neigh.eth0.locktime = 0
net.ipv6.neigh.eth0.mcast_solicit = 3
net.ipv6.neigh.eth0.proxy_delay = 80
net.ipv6.neigh.eth0.proxy_qlen = 64
net.ipv6.neigh.eth0.retrans_time_ms = 1000
net.ipv6.neigh.eth0.ucast_solicit = 3
net.ipv6.neigh.eth0.unres_qlen = 3
net.ipv6.neigh.lo.anycast_delay = 100
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.base_reachable_time_ms = 30000
net.ipv6.neigh.lo.delay_first_probe_time = 5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.proxy_delay = 80
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.unres_qlen = 3
net.ipv6.neigh.vmnet1.anycast_delay = 100
net.ipv6.neigh.vmnet1.app_solicit = 0
net.ipv6.neigh.vmnet1.base_reachable_time_ms = 30000
net.ipv6.neigh.vmnet1.delay_first_probe_time = 5
net.ipv6.neigh.vmnet1.gc_stale_time = 60
net.ipv6.neigh.vmnet1.locktime = 0
net.ipv6.neigh.vmnet1.mcast_solicit = 3
net.ipv6.neigh.vmnet1.proxy_delay = 80
net.ipv6.neigh.vmnet1.proxy_qlen = 64
net.ipv6.neigh.vmnet1.retrans_time_ms = 1000
net.ipv6.neigh.vmnet1.ucast_solicit = 3
net.ipv6.neigh.vmnet1.unres_qlen = 3
net.ipv6.neigh.vmnet8.anycast_delay = 100
net.ipv6.neigh.vmnet8.app_solicit = 0
net.ipv6.neigh.vmnet8.base_reachable_time_ms = 30000
net.ipv6.neigh.vmnet8.delay_first_probe_time = 5
net.ipv6.neigh.vmnet8.gc_stale_time = 60
net.ipv6.neigh.vmnet8.locktime = 0
net.ipv6.neigh.vmnet8.mcast_solicit = 3
net.ipv6.neigh.vmnet8.proxy_delay = 80
net.ipv6.neigh.vmnet8.proxy_qlen = 64
net.ipv6.neigh.vmnet8.retrans_time_ms = 1000
net.ipv6.neigh.vmnet8.ucast_solicit = 3
net.ipv6.neigh.vmnet8.unres_qlen = 3
net.ipv6.route.gc_elasticity = 9
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.gc_timeout = 60
net.ipv6.route.max_size = 4096
net.ipv6.route.min_adv_mss = 1220
net.ipv6.route.mtu_expires = 600
net.ipv6.xfrm6_gc_thresh = 2048
net.netfilter.nf_log.0 = NONE
net.netfilter.nf_log.10 = NONE
net.netfilter.nf_log.11 = NONE
net.netfilter.nf_log.12 = NONE
net.netfilter.nf_log.1 = NONE
net.netfilter.nf_log.2 = NONE
net.netfilter.nf_log.3 = NONE
net.netfilter.nf_log.4 = NONE
net.netfilter.nf_log.5 = NONE
net.netfilter.nf_log.6 = NONE
net.netfilter.nf_log.7 = NONE
net.netfilter.nf_log.8 = NONE
net.netfilter.nf_log.9 = NONE
net.token-ring.rif_timeout = 150000
net.unix.max_dgram_qlen = 10
sunrpc.max_resvport = 1023
sunrpc.min_resvport = 665
sunrpc.nfsd_debug = 0
sunrpc.nfs_debug = 0
sunrpc.nlm_debug = 0
sunrpc.rpc_debug = 0
sunrpc.tcp_fin_timeout = 15
sunrpc.tcp_max_slot_table_entries = 128
sunrpc.tcp_slot_table_entries = 2
sunrpc.transports = tcp 1048576
sunrpc.transports = tcp-bc 1048576
sunrpc.transports = udp 32768
sunrpc.udp_slot_table_entries = 16
vm.block_dump = 0
vm.dirty_background_bytes = 0
vm.dirty_background_ratio = 10
vm.dirty_bytes = 0
vm.dirty_expire_centisecs = 3000
vm.dirty_ratio = 20
vm.dirty_writeback_centisecs = 500
vm.drop_caches = 0
vm.extfrag_threshold = 500
vm.hugepages_treat_as_movable = 0
vm.hugetlb_shm_group = 0
vm.laptop_mode = 0
vm.legacy_va_layout = 0
vm.lowmem_reserve_ratio = 256  256     32
vm.max_map_count = 65530
vm.memory_failure_early_kill = 0
vm.memory_failure_recovery = 1
vm.min_free_kbytes = 16215
vm.min_slab_ratio = 5
vm.min_unmapped_ratio = 1
vm.mmap_min_addr = 65536
vm.nr_hugepages = 0
vm.nr_hugepages_mempolicy = 0
vm.nr_overcommit_hugepages = 0
vm.nr_pdflush_threads = 0
vm.numa_zonelist_order = default
vm.oom_dump_tasks = 1
vm.oom_kill_allocating_task = 0
vm.overcommit_memory = 0
vm.overcommit_ratio = 50
vm.page-cluster = 3
vm.panic_on_oom = 0
vm.percpu_pagelist_fraction = 0
vm.scan_unevictable_pages = 0
vm.stat_interval = 1
vm.swappiness = 60
vm.vfs_cache_pressure = 100
vm.zone_reclaim_mode = 0

typical sysctl setup for firewall

# sysctl -a | sort |  sed -e 's:^: :g'
debug.exception-trace = 1
dev.scsi.logging_level = 0
fs.aio-max-nr = 65536
fs.aio-nr = 0
fs.dentry-state = 16136        14816   45      0       0       0
fs.dir-notify-enable = 1
fs.file-max = 24484
fs.file-nr = 424       0       24484
fs.inode-nr = 15744    677
fs.inode-state = 15744 677     0       0       0       0       0
fs.inotify.max_queued_events = 16384
fs.inotify.max_user_instances = 128
fs.inotify.max_user_watches = 8192
fs.lease-break-time = 45
fs.leases-enable = 1
fs.mqueue.msg_max = 10
fs.mqueue.msgsize_max = 8192
fs.mqueue.queues_max = 256
fs.nr_open = 1048576
fs.overflowgid = 65534
fs.overflowuid = 65534
fs.quota.allocated_dquots = 0
fs.quota.cache_hits = 0
fs.quota.drops = 0
fs.quota.free_dquots = 0
fs.quota.lookups = 0
fs.quota.reads = 0
fs.quota.syncs = 18
fs.quota.warnings = 1
fs.quota.writes = 0
fs.suid_dumpable = 0
kernel.acct = 4        2       30
kernel.bootloader_type = 113
kernel.cad_pid = 1
kernel.core_pattern = core
kernel.core_uses_pid = 0
kernel.ctrl-alt-del = 0
kernel.domainname = (none)
kernel.hostname = fw
kernel.hotplug =
kernel.hung_task_check_count = 1024
kernel.hung_task_timeout_secs = 120
kernel.hung_task_warnings = 10
kernel.io_delay_type = 0
kernel.keys.maxbytes = 20000
kernel.keys.maxkeys = 200
kernel.keys.root_maxbytes = 20000
kernel.keys.root_maxkeys = 200
kernel.kstack_depth_to_print = 24
kernel.maps_protect = 0
kernel.max_lock_depth = 1024
kernel.modprobe = /sbin/modprobe
kernel.msgmax = 8192
kernel.msgmnb = 16384
kernel.msgmni = 492
kernel.ngroups_max = 65536
kernel.nmi_watchdog = 0
kernel.osrelease = 2.6.26.2eko2
kernel.ostype = Linux
kernel.overflowgid = 65534
kernel.overflowuid = 65534
kernel.panic = 0
kernel.panic_on_oops = 0
kernel.panic_on_unrecovered_nmi = 0
kernel.pid_max = 32768
kernel.poweroff_cmd = /sbin/poweroff
kernel.print-fatal-signals = 0
kernel.printk = 7      4       1       7
kernel.printk_ratelimit = 5
kernel.printk_ratelimit_burst = 10
kernel.pty.max = 4096
kernel.pty.nr = 1
kernel.random.boot_id = 03a98b4a-169f-4d2e-a2ba-5c09bd114360
kernel.random.entropy_avail = 187
kernel.random.poolsize = 4096
kernel.random.read_wakeup_threshold = 64
kernel.random.uuid = cad33b52-7c05-49dd-9242-ed7b9d1ae26a
kernel.random.write_wakeup_threshold = 128
kernel.randomize_va_space = 2
kernel.real-root-dev = 0
kernel.sched_compat_yield = 0
kernel.sched_rt_period_us = 1000000
kernel.sched_rt_runtime_us = 950000
kernel.sem = 250       32000   32      128
kernel.shmall = 2097152
kernel.shmmax = 33554432
kernel.shmmni = 4096
kernel.softlockup_thresh = 60
kernel.sysrq = 1
kernel.tainted = 0
kernel.threads-max = 4028
kernel.unknown_nmi_panic = 0
kernel.version = #1 Sun Aug 17 08:24:43 CEST 2008
net.core.dev_weight = 64
net.core.message_burst = 10
net.core.message_cost = 5
net.core.netdev_budget = 300
net.core.netdev_max_backlog = 1000
net.core.optmem_max = 10240
net.core.rmem_default = 109568
net.core.rmem_max = 109568
net.core.somaxconn = 128
net.core.warnings = 1
net.core.wmem_default = 109568
net.core.wmem_max = 109568
net.core.xfrm_acq_expires = 30
net.core.xfrm_aevent_etime = 10
net.core.xfrm_aevent_rseqth = 2
net.core.xfrm_larval_drop = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.arp_accept = 0
net.ipv4.conf.all.arp_announce = 0
net.ipv4.conf.all.arp_filter = 0
net.ipv4.conf.all.arp_ignore = 0
net.ipv4.conf.all.bootp_relay = 0
net.ipv4.conf.all.disable_policy = 0
net.ipv4.conf.all.disable_xfrm = 0
net.ipv4.conf.all.force_igmp_version = 0
net.ipv4.conf.all.forwarding = 1
net.ipv4.conf.all.log_martians = 1
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.all.medium_id = 0
net.ipv4.conf.all.promote_secondaries = 0
net.ipv4.conf.all.proxy_arp = 0
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.all.secure_redirects = 1
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.all.shared_media = 1
net.ipv4.conf.all.tag = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.default.arp_accept = 0
net.ipv4.conf.default.arp_announce = 0
net.ipv4.conf.default.arp_filter = 0
net.ipv4.conf.default.arp_ignore = 0
net.ipv4.conf.default.bootp_relay = 0
net.ipv4.conf.default.disable_policy = 0
net.ipv4.conf.default.disable_xfrm = 0
net.ipv4.conf.default.force_igmp_version = 0
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.default.log_martians = 1
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.default.medium_id = 0
net.ipv4.conf.default.promote_secondaries = 0
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.secure_redirects = 1
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.default.shared_media = 1
net.ipv4.conf.default.tag = 0
net.ipv4.conf.eth0.accept_redirects = 0
net.ipv4.conf.eth0.accept_source_route = 0
net.ipv4.conf.eth0.arp_accept = 0
net.ipv4.conf.eth0.arp_announce = 0
net.ipv4.conf.eth0.arp_filter = 0
net.ipv4.conf.eth0.arp_ignore = 0
net.ipv4.conf.eth0.bootp_relay = 0
net.ipv4.conf.eth0.disable_policy = 0
net.ipv4.conf.eth0.disable_xfrm = 0
net.ipv4.conf.eth0.force_igmp_version = 0
net.ipv4.conf.eth0.forwarding = 1
net.ipv4.conf.eth0.log_martians = 1
net.ipv4.conf.eth0.mc_forwarding = 0
net.ipv4.conf.eth0.medium_id = 0
net.ipv4.conf.eth0.promote_secondaries = 0
net.ipv4.conf.eth0.proxy_arp = 0
net.ipv4.conf.eth0.rp_filter = 1
net.ipv4.conf.eth0.secure_redirects = 1
net.ipv4.conf.eth0.send_redirects = 0
net.ipv4.conf.eth0.shared_media = 1
net.ipv4.conf.eth0.tag = 0
net.ipv4.conf.eth1.accept_redirects = 0
net.ipv4.conf.eth1.accept_source_route = 0
net.ipv4.conf.eth1.arp_accept = 0
net.ipv4.conf.eth1.arp_announce = 0
net.ipv4.conf.eth1.arp_filter = 0
net.ipv4.conf.eth1.arp_ignore = 0
net.ipv4.conf.eth1.bootp_relay = 0
net.ipv4.conf.eth1.disable_policy = 0
net.ipv4.conf.eth1.disable_xfrm = 0
net.ipv4.conf.eth1.force_igmp_version = 0
net.ipv4.conf.eth1.forwarding = 1
net.ipv4.conf.eth1.log_martians = 1
net.ipv4.conf.eth1.mc_forwarding = 0
net.ipv4.conf.eth1.medium_id = 0
net.ipv4.conf.eth1.promote_secondaries = 0
net.ipv4.conf.eth1.proxy_arp = 0
net.ipv4.conf.eth1.rp_filter = 1
net.ipv4.conf.eth1.secure_redirects = 1
net.ipv4.conf.eth1.send_redirects = 0
net.ipv4.conf.eth1.shared_media = 1
net.ipv4.conf.eth1.tag = 0
net.ipv4.conf.eth2.accept_redirects = 0
net.ipv4.conf.eth2.accept_source_route = 0
net.ipv4.conf.eth2.arp_accept = 0
net.ipv4.conf.eth2.arp_announce = 0
net.ipv4.conf.eth2.arp_filter = 0
net.ipv4.conf.eth2.arp_ignore = 0
net.ipv4.conf.eth2.bootp_relay = 0
net.ipv4.conf.eth2.disable_policy = 0
net.ipv4.conf.eth2.disable_xfrm = 0
net.ipv4.conf.eth2.force_igmp_version = 0
net.ipv4.conf.eth2.forwarding = 1
net.ipv4.conf.eth2.log_martians = 1
net.ipv4.conf.eth2.mc_forwarding = 0
net.ipv4.conf.eth2.medium_id = 0
net.ipv4.conf.eth2.promote_secondaries = 0
net.ipv4.conf.eth2.proxy_arp = 0
net.ipv4.conf.eth2.rp_filter = 1
net.ipv4.conf.eth2.secure_redirects = 1
net.ipv4.conf.eth2.send_redirects = 0
net.ipv4.conf.eth2.shared_media = 1
net.ipv4.conf.eth2.tag = 0
net.ipv4.conf.lo.accept_redirects = 0
net.ipv4.conf.lo.accept_source_route = 0
net.ipv4.conf.lo.arp_accept = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.lo.arp_filter = 0
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.lo.bootp_relay = 0
net.ipv4.conf.lo.disable_policy = 1
net.ipv4.conf.lo.disable_xfrm = 1
net.ipv4.conf.lo.force_igmp_version = 0
net.ipv4.conf.lo.forwarding = 1
net.ipv4.conf.lo.log_martians = 1
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.lo.medium_id = 0
net.ipv4.conf.lo.promote_secondaries = 0
net.ipv4.conf.lo.proxy_arp = 0
net.ipv4.conf.lo.rp_filter = 1
net.ipv4.conf.lo.secure_redirects = 1
net.ipv4.conf.lo.send_redirects = 0
net.ipv4.conf.lo.shared_media = 1
net.ipv4.conf.lo.tag = 0
net.ipv4.conf.tun0.accept_redirects = 0
net.ipv4.conf.tun0.accept_source_route = 0
net.ipv4.conf.tun0.arp_accept = 0
net.ipv4.conf.tun0.arp_announce = 0
net.ipv4.conf.tun0.arp_filter = 0
net.ipv4.conf.tun0.arp_ignore = 0
net.ipv4.conf.tun0.bootp_relay = 0
net.ipv4.conf.tun0.disable_policy = 0
net.ipv4.conf.tun0.disable_xfrm = 0
net.ipv4.conf.tun0.force_igmp_version = 0
net.ipv4.conf.tun0.forwarding = 1
net.ipv4.conf.tun0.log_martians = 1
net.ipv4.conf.tun0.mc_forwarding = 0
net.ipv4.conf.tun0.medium_id = 0
net.ipv4.conf.tun0.promote_secondaries = 0
net.ipv4.conf.tun0.proxy_arp = 0
net.ipv4.conf.tun0.rp_filter = 1
net.ipv4.conf.tun0.secure_redirects = 1
net.ipv4.conf.tun0.send_redirects = 0
net.ipv4.conf.tun0.shared_media = 1
net.ipv4.conf.tun0.tag = 0
net.ipv4.icmp_echo_ignore_all = 1
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_errors_use_inbound_ifaddr = 0
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.icmp_ratelimit = 250
net.ipv4.icmp_ratemask = 6168
net.ipv4.igmp_max_memberships = 20
net.ipv4.igmp_max_msf = 10
net.ipv4.inet_peer_gc_maxtime = 120
net.ipv4.inet_peer_gc_mintime = 10
net.ipv4.inet_peer_maxttl = 600
net.ipv4.inet_peer_minttl = 120
net.ipv4.inet_peer_threshold = 65664
net.ipv4.ip_default_ttl = 64
net.ipv4.ip_dynaddr = 0
net.ipv4.ip_forward = 1
net.ipv4.ip_local_port_range = 32768   61001
net.ipv4.ip_no_pmtu_disc = 0
net.ipv4.ip_nonlocal_bind = 0
net.ipv4.ipfrag_high_thresh = 262144
net.ipv4.ipfrag_low_thresh = 196608
net.ipv4.ipfrag_max_dist = 64
net.ipv4.ipfrag_secret_interval = 600
net.ipv4.ipfrag_time = 30
net.ipv4.neigh.default.anycast_delay = 100
net.ipv4.neigh.default.app_solicit = 0
net.ipv4.neigh.default.base_reachable_time_ms = 30000
net.ipv4.neigh.default.delay_first_probe_time = 5
net.ipv4.neigh.default.gc_interval = 30
net.ipv4.neigh.default.gc_stale_time = 60
net.ipv4.neigh.default.gc_thresh1 = 128
net.ipv4.neigh.default.gc_thresh2 = 512
net.ipv4.neigh.default.gc_thresh3 = 1024
net.ipv4.neigh.default.locktime = 100
net.ipv4.neigh.default.mcast_solicit = 3
net.ipv4.neigh.default.proxy_delay = 80
net.ipv4.neigh.default.proxy_qlen = 64
net.ipv4.neigh.default.retrans_time_ms = 1000
net.ipv4.neigh.default.ucast_solicit = 3
net.ipv4.neigh.default.unres_qlen = 3
net.ipv4.neigh.eth0.anycast_delay = 100
net.ipv4.neigh.eth0.app_solicit = 0
net.ipv4.neigh.eth0.base_reachable_time_ms = 30000
net.ipv4.neigh.eth0.delay_first_probe_time = 5
net.ipv4.neigh.eth0.gc_stale_time = 60
net.ipv4.neigh.eth0.locktime = 100
net.ipv4.neigh.eth0.mcast_solicit = 3
net.ipv4.neigh.eth0.proxy_delay = 80
net.ipv4.neigh.eth0.proxy_qlen = 64
net.ipv4.neigh.eth0.retrans_time_ms = 1000
net.ipv4.neigh.eth0.ucast_solicit = 3
net.ipv4.neigh.eth0.unres_qlen = 3
net.ipv4.neigh.eth1.anycast_delay = 100
net.ipv4.neigh.eth1.app_solicit = 0
net.ipv4.neigh.eth1.base_reachable_time_ms = 30000
net.ipv4.neigh.eth1.delay_first_probe_time = 5
net.ipv4.neigh.eth1.gc_stale_time = 60
net.ipv4.neigh.eth1.locktime = 100
net.ipv4.neigh.eth1.mcast_solicit = 3
net.ipv4.neigh.eth1.proxy_delay = 80
net.ipv4.neigh.eth1.proxy_qlen = 64
net.ipv4.neigh.eth1.retrans_time_ms = 1000
net.ipv4.neigh.eth1.ucast_solicit = 3
net.ipv4.neigh.eth1.unres_qlen = 3
net.ipv4.neigh.eth2.anycast_delay = 100
net.ipv4.neigh.eth2.app_solicit = 0
net.ipv4.neigh.eth2.base_reachable_time_ms = 30000
net.ipv4.neigh.eth2.delay_first_probe_time = 5
net.ipv4.neigh.eth2.gc_stale_time = 60
net.ipv4.neigh.eth2.locktime = 100
net.ipv4.neigh.eth2.mcast_solicit = 3
net.ipv4.neigh.eth2.proxy_delay = 80
net.ipv4.neigh.eth2.proxy_qlen = 64
net.ipv4.neigh.eth2.retrans_time_ms = 1000
net.ipv4.neigh.eth2.ucast_solicit = 3
net.ipv4.neigh.eth2.unres_qlen = 3
net.ipv4.neigh.lo.anycast_delay = 100
net.ipv4.neigh.lo.app_solicit = 0
net.ipv4.neigh.lo.base_reachable_time_ms = 30000
net.ipv4.neigh.lo.delay_first_probe_time = 5
net.ipv4.neigh.lo.gc_stale_time = 60
net.ipv4.neigh.lo.locktime = 100
net.ipv4.neigh.lo.mcast_solicit = 3
net.ipv4.neigh.lo.proxy_delay = 80
net.ipv4.neigh.lo.proxy_qlen = 64
net.ipv4.neigh.lo.retrans_time_ms = 1000
net.ipv4.neigh.lo.ucast_solicit = 3
net.ipv4.neigh.lo.unres_qlen = 3
net.ipv4.neigh.tun0.anycast_delay = 100
net.ipv4.neigh.tun0.app_solicit = 0
net.ipv4.neigh.tun0.base_reachable_time_ms = 30000
net.ipv4.neigh.tun0.delay_first_probe_time = 5
net.ipv4.neigh.tun0.gc_stale_time = 60
net.ipv4.neigh.tun0.locktime = 100
net.ipv4.neigh.tun0.mcast_solicit = 3
net.ipv4.neigh.tun0.proxy_delay = 80
net.ipv4.neigh.tun0.proxy_qlen = 64
net.ipv4.neigh.tun0.retrans_time_ms = 1000
net.ipv4.neigh.tun0.ucast_solicit = 3
net.ipv4.neigh.tun0.unres_qlen = 3
net.ipv4.netfilter.ip_conntrack_buckets = 4096
net.ipv4.netfilter.ip_conntrack_checksum = 1
net.ipv4.netfilter.ip_conntrack_count = 285
net.ipv4.netfilter.ip_conntrack_generic_timeout = 600
net.ipv4.netfilter.ip_conntrack_icmp_timeout = 30
net.ipv4.netfilter.ip_conntrack_log_invalid = 0
net.ipv4.netfilter.ip_conntrack_max = 16384
net.ipv4.netfilter.ip_conntrack_tcp_be_liberal = 0
net.ipv4.netfilter.ip_conntrack_tcp_loose = 1
net.ipv4.netfilter.ip_conntrack_tcp_max_retrans = 3
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close = 10
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 432000
net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_last_ack = 30
net.ipv4.netfilter.ip_conntrack_tcp_timeout_max_retrans = 300
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_recv = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120
net.ipv4.netfilter.ip_conntrack_udp_timeout = 30
net.ipv4.netfilter.ip_conntrack_udp_timeout_stream = 180
net.ipv4.route.error_burst = 1250
net.ipv4.route.error_cost = 250
net.ipv4.route.gc_elasticity = 8
net.ipv4.route.gc_interval = 60
net.ipv4.route.gc_min_interval = 0
net.ipv4.route.gc_min_interval_ms = 500
net.ipv4.route.gc_thresh = 2048
net.ipv4.route.gc_timeout = 300
net.ipv4.route.max_size = 32768
net.ipv4.route.min_adv_mss = 256
net.ipv4.route.min_pmtu = 552
net.ipv4.route.mtu_expires = 600
net.ipv4.route.redirect_load = 5
net.ipv4.route.redirect_number = 9
net.ipv4.route.redirect_silence = 5120
net.ipv4.route.secret_interval = 600
net.ipv4.tcp_abc = 0
net.ipv4.tcp_abort_on_overflow = 0
net.ipv4.tcp_adv_win_scale = 2
net.ipv4.tcp_allowed_congestion_control = reno
net.ipv4.tcp_app_win = 31
net.ipv4.tcp_available_congestion_control = reno
net.ipv4.tcp_base_mss = 512
net.ipv4.tcp_congestion_control = reno
net.ipv4.tcp_dsack = 1
net.ipv4.tcp_ecn = 0
net.ipv4.tcp_fack = 1
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_frto = 2
net.ipv4.tcp_frto_response = 0
net.ipv4.tcp_keepalive_intvl = 75
net.ipv4.tcp_keepalive_probes = 9
net.ipv4.tcp_keepalive_time = 7200
net.ipv4.tcp_low_latency = 0
net.ipv4.tcp_max_orphans = 8192
net.ipv4.tcp_max_ssthresh = 0
net.ipv4.tcp_max_syn_backlog = 256
net.ipv4.tcp_max_tw_buckets = 16384
net.ipv4.tcp_mem = 22143       29524   44286
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_mtu_probing = 0
net.ipv4.tcp_no_metrics_save = 0
net.ipv4.tcp_orphan_retries = 0
net.ipv4.tcp_reordering = 3
net.ipv4.tcp_retrans_collapse = 1
net.ipv4.tcp_retries1 = 3
net.ipv4.tcp_retries2 = 15
net.ipv4.tcp_rfc1337 = 0
net.ipv4.tcp_rmem = 4096       87380   944768
net.ipv4.tcp_sack = 1
net.ipv4.tcp_slow_start_after_idle = 1
net.ipv4.tcp_stdurg = 0
net.ipv4.tcp_syn_retries = 5
net.ipv4.tcp_synack_retries = 5
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_tso_win_divisor = 3
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_tw_reuse = 0
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_wmem = 4096       16384   944768
net.ipv4.tcp_workaround_signed_windows = 0
net.ipv4.udp_mem = 23250       31000   46500
net.ipv4.udp_rmem_min = 4096
net.ipv4.udp_wmem_min = 4096
net.netfilter.nf_conntrack_buckets = 4096
net.netfilter.nf_conntrack_checksum = 1
net.netfilter.nf_conntrack_count = 285
net.netfilter.nf_conntrack_expect_max = 64
net.netfilter.nf_conntrack_generic_timeout = 600
net.netfilter.nf_conntrack_icmp_timeout = 30
net.netfilter.nf_conntrack_log_invalid = 0
net.netfilter.nf_conntrack_max = 16384
net.netfilter.nf_conntrack_tcp_be_liberal = 0
net.netfilter.nf_conntrack_tcp_loose = 1
net.netfilter.nf_conntrack_tcp_max_retrans = 3
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_established = 432000
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30
net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.netfilter.nf_conntrack_udp_timeout = 30
net.netfilter.nf_conntrack_udp_timeout_stream = 180
net.nf_conntrack_max = 16384
net.unix.max_dgram_qlen = 10
sunrpc.max_resvport = 1023
sunrpc.min_resvport = 665
sunrpc.nfs_debug = 0
sunrpc.nfsd_debug = 0
sunrpc.nlm_debug = 0
sunrpc.rpc_debug = 0
sunrpc.tcp_slot_table_entries = 16
sunrpc.transports =
sunrpc.transports = tcp 1048576
sunrpc.transports = udp 32768
sunrpc.udp_slot_table_entries = 16
vm.block_dump = 0
vm.dirty_background_ratio = 5
vm.dirty_expire_centisecs = 3000
vm.dirty_ratio = 10
vm.dirty_writeback_centisecs = 500
vm.drop_caches = 0
vm.laptop_mode = 0
vm.legacy_va_layout = 0
vm.lowmem_reserve_ratio = 256  32
vm.max_map_count = 65536
vm.min_free_kbytes = 2022
vm.mmap_min_addr = 0
vm.nr_pdflush_threads = 2
vm.oom_dump_tasks = 0
vm.oom_kill_allocating_task = 0
vm.overcommit_memory = 0
vm.overcommit_ratio = 50
vm.page-cluster = 3
vm.panic_on_oom = 0
vm.percpu_pagelist_fraction = 0
vm.swappiness = 60
vm.vdso_enabled = 2
vm.vfs_cache_pressure = 100

Citrix

http://packages.debian.org/wheezy/i386/libxp6/download

required

 ctxusb-2.2.0_amd64.deb
 ctxusb-2.2.0_i386.deb
 ctxusb_2.4.285639_amd64.deb
 icaclient_12.1.0_amd64.deb
 icaclient_13.1.0.285639_amd64.deb
 libmotif-common_2.3.4-4_all.deb
 libxm4_2.3.4-4_i386.deb
 nspluginwrapper_1.4.4-1_amd64.deb
 nspluginwrapper_1.4.4-2_amd64.deb
 nspluginwrapper_1.4.4-3_amd64.deb
 openmotif_2.3.1-2_amd64.deb