1000-custom.conf

fs.protected_hardlinks=1
fs.protected_symlinks=1
kernel.kptr_restrict=1
kernel.panic=10
kernel.perf_event_paranoid=2
kernel.randomize_va_space=2
kernel.yama.ptrace_scope=1
net.core.netdev_max_backlog=182757
net.ipv4.conf.all.accept_redirects=0
net.ipv4.conf.all.accept_source_route=0
net.ipv4.conf.all.log_martians=1
net.ipv4.conf.all.rp_filter=1
net.ipv4.conf.all.secure_redirects=1
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.accept_redirects=0
net.ipv4.conf.default.accept_source_route=0
net.ipv4.conf.default.log_martians=1
net.ipv4.conf.default.rp_filter=1
net.ipv4.conf.default.secure_redirects=1
net.ipv4.conf.default.send_redirects=0
net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.icmp_ignore_bogus_error_responses=1
net.ipv4.tcp_rfc1337=1
net.ipv4.tcp_syncookies=1
vm.mmap_min_addr=65536
net.core.default_qdisc=fq
net.ipv4.tcp_congestion_control=bbr
net.ipv4.ip_nonlocal_bind=1
# LXD [START]
fs.aio-max-nr=1048576
fs.inotify.max_queued_events=1048576
fs.inotify.max_user_instances=1048576
fs.inotify.max_user_watches=1048576
kernel.dmesg_restrict=1
kernel.keys.maxbytes=2000000
kernel.keys.maxkeys=2000	
net.core.bpf_jit_limit=1000000000
net.ipv4.neigh.default.gc_thresh3=8192
net.ipv6.neigh.default.gc_thresh3=8192
vm.max_map_count=262144
# LXD [END]
# CLOUDFLARED [START] 
# increase limits for high trafficed web apps
net.core.rmem_max=2500000
net.ipv4.ip_local_port_range=12000 60999
# CLOUDFLARED [END]