jow- / nlbwmon

Simple conntrack based traffic accounting
ISC License
154 stars 34 forks source link

nlbwmon stability #26

Closed PxxBxx closed 5 years ago

PxxBxx commented 5 years ago

Hello, I have a stable luci/openwrt router (https://openmptcprouter.com), its uptime is rock-solid (>8days, I sometime reboot the instance, or upgrade it). But as soon as I install nlbwmon (x86_64, via opkg install nlbwmon), the uptime goes crazy : 2 days, then 1 day, then 18 hours, then 4 hours, then 30min....). I don't have anything in the logs, but I only have "system" logs persistent, I can't keep kernel logs.... but as the router reboots itself, there must me something wrong.

maybe the kernel (conntrack) settings, due to the regular polling that the nlbwmon daemon does to it ? Could anyone give me some "safe" settings to put via sysctl ? for example, here are my current settings :

net.netfilter.nf_conntrack_acct = 1
net.netfilter.nf_conntrack_buckets = 4096
net.netfilter.nf_conntrack_checksum = 0
net.netfilter.nf_conntrack_count = 3125
net.netfilter.nf_conntrack_events = 1
net.netfilter.nf_conntrack_expect_max = 64
net.netfilter.nf_conntrack_frag6_high_thresh = 4194304
net.netfilter.nf_conntrack_frag6_low_thresh = 3145728
net.netfilter.nf_conntrack_frag6_timeout = 60
net.netfilter.nf_conntrack_generic_timeout = 600
net.netfilter.nf_conntrack_helper = 1
net.netfilter.nf_conntrack_icmp_timeout = 30
net.netfilter.nf_conntrack_icmpv6_timeout = 30
net.netfilter.nf_conntrack_log_invalid = 0
net.netfilter.nf_conntrack_max = 131072
net.netfilter.nf_conntrack_tcp_be_liberal = 0
net.netfilter.nf_conntrack_tcp_loose = 1
net.netfilter.nf_conntrack_tcp_max_retrans = 3
net.netfilter.nf_conntrack_tcp_no_window_check = 1
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_established = 7440
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30
net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300
net.netfilter.nf_conntrack_udp_timeout = 60
net.netfilter.nf_conntrack_udp_timeout_stream = 180
net.nf_conntrack_max = 131072
jow- commented 5 years ago

I assume this might have been related to #30 - will close this now. If you still see unexpected reboots in conjunction with nlbwmon, please open a new issue.