sysctl.conf

vm.panic_on_oom=1
kernel.panic=10

# protect against tcp time-wait assassination hazards
net.ipv4.tcp_rfc1337 = 1

net.ipv4.conf.all.accept_redirects = 0
net.ipv4.ip_forward = 1
net.ipv4.tcp_fastopen = 3

net.core.wmem_max = 12582912
net.core.rmem_max = 12582912
net.ipv4.tcp_rmem = 10240 87380 12582912
net.ipv4.tcp_wmem = 10240 87380 12582912

net.ipv4.tcp_mtu_probing = 1
net.ipv4.tcp_base_mss = 1024

net.ipv4.tcp_congestion_control = westwood