diff --git a/ansible/roles/sysctl/files/90-telegraf.conf b/ansible/roles/sysctl/files/90-telegraf.conf
deleted file mode 100644
index 4edc3f05..00000000
--- a/ansible/roles/sysctl/files/90-telegraf.conf
+++ /dev/null
@@ -1,3 +0,0 @@
-# read/write buffer
-net.core.rmem_max = 33554432
-net.core.wmem_max = 33554432
diff --git a/ansible/roles/sysctl/files/90-tsg-os.conf b/ansible/roles/sysctl/files/90-tsg-os.conf
new file mode 100644
index 00000000..e2c591bc
--- /dev/null
+++ b/ansible/roles/sysctl/files/90-tsg-os.conf
@@ -0,0 +1,6 @@
+# read/write buffer
+net.core.rmem_max = 33554432
+net.core.wmem_max = 33554432
+
+# If it's non-zero, we mark only out of window RST segments as INVALID.
+net.netfilter.nf_conntrack_tcp_be_liberal = 1
\ No newline at end of file
diff --git a/ansible/roles/sysctl/tasks/main.yml b/ansible/roles/sysctl/tasks/main.yml
index c70bfee8..d8e5c9c0 100644
--- a/ansible/roles/sysctl/tasks/main.yml
+++ b/ansible/roles/sysctl/tasks/main.yml
@@ -1,4 +1,4 @@
-- name: "copy telegraf sysctl.d to destination server"
+- name: "copy tsg-os sysctl.d to destination server"
   copy:
-    src: "{{ role_path }}/files/90-telegraf.conf"
-    dest: /usr/lib/sysctl.d/
\ No newline at end of file
+    src: "{{ role_path }}/files/90-tsg-os.conf"
+    dest: /usr/lib/sysctl.d/
diff --git a/tools/mk-base-image b/tools/mk-base-image
index 079e1d05..03d76bcd 100755
--- a/tools/mk-base-image
+++ b/tools/mk-base-image
@@ -42,7 +42,7 @@ case $profile_id in
                     containerd.io lrzsz python3 watchdog pcm git tmux fish kernel kernel-devel kernel-tools-libs kernel-modules
                     kernel-tools kernel-core rpm-build libtool kernel-rpm-macros python36-devel tcsh kernel-modules-extra gcc-gfortran
                     libdb-devel fuse-devel python3-Cython cmake perl-generators libstdc++-devel libmnl-devel bison flex gcc-c++
-                    python3-docutils libnsl liburing hwloc-gui perl-open perl python2 js-d3-flame-graph xmlstarlet"
+                    python3-docutils libnsl liburing hwloc-gui perl-open perl python2 js-d3-flame-graph xmlstarlet conntrack-tools"
 
         ;;
     "7400-MCN0-P01R01" | "7400-MCN123-P01R01")