tree fcea4d9f54f2e04cf1d203e104c4a14bfa103702
parent 5999e92b2da34cbbd50391327ec01081a91866ee
author Lorenz Brun <lorenz@nexantic.com> 1612974869 +0100
committer Lorenz Brun <lorenz@nexantic.com> 1612974869 +0100

Set reasonable defaults for our kernel's network configuration

This sets a number of sysctl options to tune the kernel for a datacenter-like environment by increasing
buffers and choosing a better congestion control algorithm. It also enforces reverse path filtering to
prevent spoofing from CAP_NET_ADMIN-enabled containers and blocks source routing as we have no need for that
and it might some day interfere with policy efforts.

To set all these options a small helper structure has been added which makes setting these more compact
and nicer to read.

Test Plan: Covered by E2E for breakage, scalability improvements not yet testable

Bug: T495

X-Origin-Diff: phab/D704
GitOrigin-RevId: 427b2513d604090e51b37587d772f240112be09d