VMmanager 6: Administrator guide

How to change netfilter parameters?

As of version 4.9.0, VMmanager automatically changes the settings of the netfilter built-in firewall when a new cluster node is connected. In particular, VMmanager increases the values of net.nf_conntrack_max and net.netfilter.nf_conntrack_max parameters controlling the maximum number of network connections to 1048576. This helps to avoid errors similar to nf_conntrack: table full, dropping packet causing the loss of network packets.

To change these parameters on the connected cluster nodes manually:

  1. Connect to the server with VMmanager via SSH.
  2. Enable ip_conntrack module:

    modprobe ip_conntrack
  3. Set the new value of the parameter net.netfilter.nf_conntrack_max. We recommend to increase that value to 1048576:

    echo "net.netfilter.nf_conntrack_max=1048576" >> /etc/sysctl.conf
  4. To apply the settings, execute the command:

    sysctl -p
  5. Check that the parameters have been changed:

    sysctl -a | grep conntrack_max

    The response to the command should look as follows:

    net.netfilter.nf_conntrack_max = 1048576
    net.nf_conntrack_max = 1048576