Open Stack

Hi,

We recently had a case of the kernel dropping packets due to a full connection tracking table ("kernel: nf_conntrack: table full, dropping packet.”).

How do people usually deal with this:

- increase the buffer size (which is what I did for now)?
- reduce tracking timeouts?
- remove connection tracking altogether?

The settings we were using so far are the defaults that come with the OS.

Thanks!
 Arne

--
Arne Wiebalck
CERN IT