diff --git a/SOURCES/tuned-2.18.0-nf-conntrack-hashsize.patch b/SOURCES/tuned-2.18.0-nf-conntrack-hashsize.patch new file mode 100644 index 0000000..827cab7 --- /dev/null +++ b/SOURCES/tuned-2.18.0-nf-conntrack-hashsize.patch @@ -0,0 +1,53 @@ +From e1b21f23c9ca00bf9f399165c4d46d647f3946ca Mon Sep 17 00:00:00 2001 +From: Paolo Abeni +Date: Wed, 9 Feb 2022 17:15:46 +0100 +Subject: [PATCH] raise the netfilter hash table size in + openshift/atomic-{host,guest} to match the max netfilter conntrack entries, + reducing such hash table load. + +Signed-off-by: Paolo Abeni +--- + profiles/atomic-guest/tuned.conf | 2 +- + profiles/atomic-host/tuned.conf | 2 +- + profiles/openshift/tuned.conf | 2 +- + 3 files changed, 3 insertions(+), 3 deletions(-) + +diff --git a/profiles/atomic-guest/tuned.conf b/profiles/atomic-guest/tuned.conf +index c5a9417d..fe8d382a 100644 +--- a/profiles/atomic-guest/tuned.conf ++++ b/profiles/atomic-guest/tuned.conf +@@ -10,7 +10,7 @@ include=virtual-guest + avc_cache_threshold=65536 + + [net] +-nf_conntrack_hashsize=131072 ++nf_conntrack_hashsize=1048576 + + [sysctl] + kernel.pid_max=131072 +diff --git a/profiles/atomic-host/tuned.conf b/profiles/atomic-host/tuned.conf +index 968366fa..91ea5555 100644 +--- a/profiles/atomic-host/tuned.conf ++++ b/profiles/atomic-host/tuned.conf +@@ -10,7 +10,7 @@ include=throughput-performance + avc_cache_threshold=65536 + + [net] +-nf_conntrack_hashsize=131072 ++nf_conntrack_hashsize=1048576 + + [sysctl] + kernel.pid_max=131072 +diff --git a/profiles/openshift/tuned.conf b/profiles/openshift/tuned.conf +index 9019c05e..9815fb9e 100644 +--- a/profiles/openshift/tuned.conf ++++ b/profiles/openshift/tuned.conf +@@ -10,7 +10,7 @@ include=${f:virt_check:virtual-guest:throughput-performance} + avc_cache_threshold=8192 + + [net] +-nf_conntrack_hashsize=131072 ++nf_conntrack_hashsize=1048576 + + [sysctl] + net.ipv4.ip_forward=1 diff --git a/SPECS/tuned.spec b/SPECS/tuned.spec index b9c73c4..a0a784a 100644 --- a/SPECS/tuned.spec +++ b/SPECS/tuned.spec @@ -35,7 +35,7 @@ Summary: A dynamic adaptive system tuning daemon Name: tuned Version: 2.18.0 -Release: 1%{?prerel1}%{?dist} +Release: 2%{?prerel1}%{?dist} License: GPLv2+ Source0: https://github.com/redhat-performance/%{name}/archive/v%{version}%{?prerel2}/%{name}-%{version}%{?prerel2}.tar.gz # RHEL-8 specific recommend.conf: @@ -96,6 +96,8 @@ Requires: python3-syspurpose Patch0: tuned-2.18.0-rhel-8-profiles.patch # Revert no balancing cores to use SD_LOAD_BALANCE (see rhbz#1874596 for details) Patch1: tuned-2.18.0-sd-load-balance.patch +# rhbz#2052886 +Patch2: tuned-2.18.0-nf-conntrack-hashsize.patch %description The tuned package contains a daemon that tunes system settings dynamically. @@ -547,6 +549,10 @@ fi %{_mandir}/man7/tuned-profiles-openshift.7* %changelog +* Thu Feb 10 2022 Jaroslav Škarvada - 2.18.0-2 +- openshift/atomic: increased nf_conntrack_hashsize + resolves: rhbz#2052886 + * Wed Feb 9 2022 Jaroslav Škarvada - 2.18.0-1 - new release - rebased tuned to latest upstream