Author Archive for: wriedel
Entries by wriedel
Common Vulnerabilities and Exposures – CVEannounce
Tweets by CVEannounce
Common Vulnerabilities and Exposures – CVEnew
Tweets by CVEnew
How to force fsck at every boot in Linux
In /etc/init.d/checkfs.sh is the line if [ -f /forcefsck ] || grep -s -w -i “forcefsck” /proc/cmdline, so providing forcefsck on the kernel command line or generating a /forcefsck file on shutdown should cause an fsck on the next reboot. To prevent manual fsck runs, ask fsck to try to automatically fix errors with the -y option by uncommenting and changing no to yes in the following /etc/default/rcS […]
Top 10 Best Proxy Server and online Proxy
proxysite.com proxy.org Filterbypass.me Unblocker.us proxify.com newipnow.com dontfilter.us UnblockMyWeb.com KProxy.com CrazyProxy.org
Risk Management Frameworks
Risk Management Frameworks Risk Assessment should be considered separate from Application Threat modeling, although similar but Application Threat Modeling is more of a calculated approach. ISO27001 BSI Grundschutz NIST Cybersecurity Framework Risk Management Activities
Threat Modeling
Application Threat Modeling Application Threat modeling should be considered separate from Risk Assessment, although similar but Application Threat Modeling is more of a calculated approach. Threat modeling allows you to systematically identify and rate the threats that are most likely to affect your system. By identifying and rating threats based on a solid understanding of […]
LINUX – Network Throughput Tuning
General Approach To check what setting your system is using, use ‘sysctl name’ (e.g.: ‘sysctl net.ipv4.tcp_rmem’). To change a setting use ‘sysctl -w’. To make the setting permanent add the setting to the file ‘sysctl.conf’.
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
cho > /etc/sysctl.conf
echo -e "\
# /etc/sysctl.conf \r
# ---------------- BEGIN ---------------- \r
# to load new settings \r
# sysctl --load /etc/sysctl.conf \r
# \r
### TCP tuning \r
# \r
# For hosts with 10G NIC optimized for network paths up to 200ms RTT, or a 40G NIC up on paths up to 50ms RTT \r
# allow testing with 512MB buffers \r
net.core.rmem_max = 536870912 \r
net.core.wmem_max = 536870912 \r
# \r
# increase Linux autotuning TCP buffer limits \r
# min, default, and max number of bytes to use \r
# allow auto-tuning up to 128MB buffers \r
net.ipv4.tcp_rmem = 4096 87380 268435456 \
net.ipv4.tcp_wmem = 4096 65536 268435456 \r
# \r
# recommended to increase this for CentOS6 with 10G NICS or higher \r
net.core.netdev_max_backlog = 250000 \r
# \r
# don't cache ssthresh from previous connection \r
net.ipv4.tcp_no_metrics_save = 1 \r
# \r
# recommended default congestion control is htcp \r
# test with 'sysctl net.ipv4.tcp_available_congestion_control'
net.ipv4.tcp_congestion_control = reno \r
# \r
# recommended for hosts with jumbo frames enabled \r
net.ipv4.tcp_mtu_probing = 1 \r
# \r
# recommended for CentOS7/Debian8 hosts \r
net.core.default_qdisc = fq \r
# \r
fs.inotify.max_user_watches = 100000 \r
#\r
# --------------- END ------------------" \
> /etc/sysctl.conf
cat /etc/sysctl.conf
sysctl --load /etc/sysctl.conf
sysctl -p
|
More Reading: fasterdata.es.net
