# $FreeBSD: 81f3a59c460 kevans@FreeBSD.org Wed Jan 27 12:54:07 2021 -0600$
#
#  This file is read when going to multi-user and its contents piped thru
#  ``sysctl'' to adjust kernel values.  ``man 5 sysctl.conf'' for details.
#

hw.intr_storm_threshold=9000
net.inet.tcp.sendspace=1048576
net.inet.tcp.sendbuf_max=10485760
net.inet.tcp.sendbuf_inc=131072

net.inet.ip.forwarding=0 
net.inet6.ip6.forwarding=0

kern.ipc.shm_use_phys=1
kern.ipc.somaxconn=2048
kern.ipc.maxsockbuf=16777216
net.inet.tcp.sendbuf_inc=32768
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.ip.portrange.hifirst=50000
net.inet.ip.portrange.hilast=62000
net.inet.tcp.tso=0
net.inet.ip.sourceroute=0
net.inet.tcp.ecn.enable=1
net.inet.tcp.nolocaltimewait=1
net.inet.tcp.mssdflt=1448
net.inet.tcp.syncache.rexmtlimit=1 
net.inet.ip.redirect=0  
net.inet.icmp.drop_redirect=1
net.inet.tcp.drop_synfin=1
net.inet.tcp.rfc6675_pipe=1
net.inet.tcp.abc_l_var=44
kern.msgbuf_show_timestamp=1

#RACK & HTCP
net.inet.tcp.functions_default=rack
net.inet.tcp.cc.algorithm=htcp
net.inet.tcp.cc.htcp.rtt_scaling=1
net.inet.tcp.cc.htcp.adaptive_backoff=1
net.inet.tcp.fastopen.server_enable=1

#IPv6
net.inet6.icmp6.nodeinfo=0
net.inet6.ip6.auto_linklocal=1
net.inet6.ip6.accept_rtadv=0

# RFC 7323 workaround
net.inet.tcp.tolerate_missing_ts=1

# Kernel TLS
kern.ipc.mb_use_ext_pgs=1
kern.ipc.tls.ifnet.permitted=1
kern.ipc.tls.enable=1