feat: tune network sysctls

ishioni · Dec 24, 2024 · 08117ba · 08117ba
1 parent 4c0eab8
commit 08117ba
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/kubernetes/talos/bootstrap/talos/talconfig.yaml b/kubernetes/talos/bootstrap/talos/talconfig.yaml
@@ -163,6 +163,21 @@ patches:
     machine:
       network:
         disableSearchDomain: true
+  - |-
+      machine:
+        sysctls:
+          fs.inotify.max_user_watches: 1048576   # Watchdog
+          fs.inotify.max_user_instances: 8192    # Watchdog
+          net.core.default_qdisc: fq             # 10Gb/s
+          net.core.rmem_max: 67108864            # 10Gb/s | Cloudflared / QUIC
+          net.core.wmem_max: 67108864            # 10Gb/s | Cloudflared / QUIC
+          net.ipv4.tcp_congestion_control: bbr   # 10Gb/s
+          net.ipv4.tcp_fastopen: 3               # TCP Fast Open
+          net.ipv4.tcp_mtu_probing: 1            # 10Gb/s | Jumbo frames
+          net.ipv4.tcp_rmem: 4096 87380 33554432 # 10Gb/s
+          net.ipv4.tcp_wmem: 4096 65536 33554432 # 10Gb/s
+          net.ipv4.tcp_window_scaling: 1         # 10Gb/s
+          vm.nr_hugepages: 1024                  # Postgres
 
 controlPlane:
   schematic: