Site Tools


advanced-ctnf

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
advanced-ctnf [2023/05/08 00:33] – [TCP Timeout] -formatting hogwildadvanced-ctnf [2023/05/08 00:39] – [Conntrack / Netfilter] -condense warning hogwild
Line 1: Line 1:
 ====== Conntrack / Netfilter ====== ====== Conntrack / Netfilter ======
-The settings on this page allow you to control some advanced network parameters. In most cases, the default settings are already fine. You should think very carefully before changing the settings from their defaults. You are advised to change these settings only if you have advanced networking knowledge and/or experience.+ 
 +The settings in this menu allow you to control some advanced network parameters. In most cases, the default settings are fine. Think very carefully before changing the settings from their defaults. You are advised to change these settings only if you have advanced networking knowledge and/or experience. 
  
 ===== Connections ===== ===== Connections =====
Line 27: Line 29:
  
 The UDP Timeout table defines the timeouts of UDP packets to and from the router. The UDP Timeout table defines the timeouts of UDP packets to and from the router.
 +
 + \\
  
 {{:pasted:20220110-185419.png}}\\  \\ {{:pasted:20220110-185419.png}}\\  \\
 +
  
 ===== Other Timeouts ===== ===== Other Timeouts =====
  
 Other Timeouts allows further adjustments to the router's timeout settings. Other Timeouts allows further adjustments to the router's timeout settings.
 +
 + \\
  
 {{:pasted:20220110-185520.png}} {{:pasted:20220110-185520.png}}
  
-=====  Tracking/NAT Helpers ===== 
  
-Some protocols are well-known for not being designed to work well with NAT. Some workarounds (Helpers) have been developed to allow these protocols to operate in a NAT environment. Enabling the option will enable the helper procedure. Be advised that on networks where VoIP is in use, the use of the SIP helper is //not// recommended. While this may seem counterintuitive, real world experience often shows that the SIP helper often makes VoIP work worse, not better.+===== Tracking/NAT Helpers ===== 
 + 
 +Some protocols are well-known for being poorly designed to work with NAT. Some workarounds (Helpers) have been developed to allow these protocols to operate in a NAT environment. Enabling the option will enable the helper procedure. 
 + 
 +Be advised that on networks where VoIP is in use, the use of the SIP helper is //not// recommended. While this may seem counterintuitive, real world experience shows that the SIP Helper often makes VoIP function work worse, not better. 
 + 
 + \\
  
 {{:pasted:20220110-185610.png}} {{:pasted:20220110-185610.png}}
 +
  
 ===== Miscellaneous ===== ===== Miscellaneous =====
  
-**TCP/UDP Buffers**: This settings defines the amount of TCP/UDP buffers allowed (again, to and from the router). Please be aware that this setting needs to be tweaked carefully. A large buffer will facilitate higher throughput, but a buffer too big might create a collateral //bufferbloat. //Bloated buffers lead to network-crippling latency spikes.+**TCP/UDP Buffers**: This setting defines the amount of TCP/UDP buffers allowed (to and from the router). This setting needs to be tweaked carefully. A large buffer will facilitate higher throughput, but too large a buffer might create //bufferbloat. //Bloated buffers lead to network-crippling latency spikes.
  
 **TTL Adjust**: This option increases or decreases the packet Time-To-Live value crossing the router. **TTL Adjust**: This option increases or decreases the packet Time-To-Live value crossing the router.
  
- **Inbound Layer 7**: This enables L7 matching for inbound traffic, caches the results, and marks the traffic as outbound.+**Inbound Layer 7**: This enables Layer 7 matching for inbound traffic, caches the results, and marks the traffic as outbound. 
 + 
 + \\
  
 {{:pasted:20220110-185834.png}} \\  \\ {{:pasted:20220110-185834.png}} \\  \\
  
  
advanced-ctnf.txt · Last modified: 2023/05/24 22:02 by hogwild