bugfix:TSG-19928:Set kernel args net.netfilter.nf_conntrack_tcp_be_liberal=1

ansible/roles/sysctl/files/90-telegraf.conf

@@ -1,3 +0,0 @@
-# read/write buffer
-net.core.rmem_max = 33554432
-net.core.wmem_max = 33554432

ansible/roles/sysctl/files/90-tsg-os.conf

@@ -0,0 +1,6 @@
+# read/write buffer
+net.core.rmem_max = 33554432
+net.core.wmem_max = 33554432
+
+# If it's non-zero, we mark only out of window RST segments as INVALID.
+net.netfilter.nf_conntrack_tcp_be_liberal = 1

ansible/roles/sysctl/tasks/main.yml

@@ -1,4 +1,4 @@
-- name: "copy telegraf sysctl.d to destination server"
+- name: "copy tsg-os sysctl.d to destination server"
   copy:
-    src: "{{ role_path }}/files/90-telegraf.conf"
+    src: "{{ role_path }}/files/90-tsg-os.conf"
     dest: /usr/lib/sysctl.d/

tools/mk-base-image

@@ -42,7 +42,7 @@ case $profile_id in
                     containerd.io lrzsz python3 watchdog pcm git tmux fish kernel kernel-devel kernel-tools-libs kernel-modules
                     kernel-tools kernel-core rpm-build libtool kernel-rpm-macros python36-devel tcsh kernel-modules-extra gcc-gfortran
                     libdb-devel fuse-devel python3-Cython cmake perl-generators libstdc++-devel libmnl-devel bison flex gcc-c++
-                    python3-docutils libnsl liburing hwloc-gui perl-open perl python2 js-d3-flame-graph xmlstarlet"
+                    python3-docutils libnsl liburing hwloc-gui perl-open perl python2 js-d3-flame-graph xmlstarlet conntrack-tools"
 
         ;;
     "7400-MCN0-P01R01" | "7400-MCN123-P01R01")