diff --git a/SOURCES/tuned-2.18.0-nf-conntrack-hashsize.patch b/SOURCES/tuned-2.18.0-nf-conntrack-hashsize.patch
new file mode 100644
index 0000000..827cab7
--- /dev/null
+++ b/SOURCES/tuned-2.18.0-nf-conntrack-hashsize.patch
@@ -0,0 +1,53 @@
+From e1b21f23c9ca00bf9f399165c4d46d647f3946ca Mon Sep 17 00:00:00 2001
+From: Paolo Abeni <pabeni@redhat.com>
+Date: Wed, 9 Feb 2022 17:15:46 +0100
+Subject: [PATCH] raise the netfilter hash table size in
+ openshift/atomic-{host,guest} to match the max netfilter conntrack entries,
+ reducing such hash table load.
+
+Signed-off-by: Paolo Abeni <pabeni@redhat.com>
+---
+ profiles/atomic-guest/tuned.conf | 2 +-
+ profiles/atomic-host/tuned.conf | 2 +-
+ profiles/openshift/tuned.conf | 2 +-
+ 3 files changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/profiles/atomic-guest/tuned.conf b/profiles/atomic-guest/tuned.conf
+index c5a9417d..fe8d382a 100644
+--- a/profiles/atomic-guest/tuned.conf
++++ b/profiles/atomic-guest/tuned.conf
+@@ -10,7 +10,7 @@ include=virtual-guest
+ avc_cache_threshold=65536
+
+ [net]
+-nf_conntrack_hashsize=131072
++nf_conntrack_hashsize=1048576
+
+ [sysctl]
+ kernel.pid_max=131072
+diff --git a/profiles/atomic-host/tuned.conf b/profiles/atomic-host/tuned.conf
+index 968366fa..91ea5555 100644
+--- a/profiles/atomic-host/tuned.conf
++++ b/profiles/atomic-host/tuned.conf
+@@ -10,7 +10,7 @@ include=throughput-performance
+ avc_cache_threshold=65536
+
+ [net]
+-nf_conntrack_hashsize=131072
++nf_conntrack_hashsize=1048576
+
+ [sysctl]
+ kernel.pid_max=131072
+diff --git a/profiles/openshift/tuned.conf b/profiles/openshift/tuned.conf
+index 9019c05e..9815fb9e 100644
+--- a/profiles/openshift/tuned.conf
++++ b/profiles/openshift/tuned.conf
+@@ -10,7 +10,7 @@ include=${f:virt_check:virtual-guest:throughput-performance}
+ avc_cache_threshold=8192
+
+ [net]
+-nf_conntrack_hashsize=131072
++nf_conntrack_hashsize=1048576
+
+ [sysctl]
+ net.ipv4.ip_forward=1
diff --git a/SPECS/tuned.spec b/SPECS/tuned.spec
index b9c73c4..a0a784a 100644
--- a/SPECS/tuned.spec
+++ b/SPECS/tuned.spec
@@ -35,7 +35,7 @@
Summary: A dynamic adaptive system tuning daemon
Name: tuned
Version: 2.18.0
-Release: 1%{?prerel1}%{?dist}
+Release: 2%{?prerel1}%{?dist}
License: GPLv2+
Source0: https://github.com/redhat-performance/%{name}/archive/v%{version}%{?prerel2}/%{name}-%{version}%{?prerel2}.tar.gz
# RHEL-8 specific recommend.conf:
@@ -96,6 +96,8 @@ Requires: python3-syspurpose
Patch0: tuned-2.18.0-rhel-8-profiles.patch
# Revert no balancing cores to use SD_LOAD_BALANCE (see rhbz#1874596 for details)
Patch1: tuned-2.18.0-sd-load-balance.patch
+# rhbz#2052886
+Patch2: tuned-2.18.0-nf-conntrack-hashsize.patch
%description
The tuned package contains a daemon that tunes system settings dynamically.
@@ -547,6 +549,10 @@ fi
%{_mandir}/man7/tuned-profiles-openshift.7*
%changelog
+* Thu Feb 10 2022 Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-2
+- openshift/atomic: increased nf_conntrack_hashsize
+ resolves: rhbz#2052886
+
* Wed Feb 9 2022 Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-1
- new release
- rebased tuned to latest upstream