# System and Performance Tweaks
net.inet6.ip6.forwarding=1 # Permit forwarding (routing) of packets (IPV6)
net.inet6.ip6.mforwarding=1 # Permit forwarding (routing) of multicast packets (IPV6)
net.inet.ip.forwarding=1 # Permit forwarding (routing) of packets (IPV4)
net.inet.ip.mforwarding=1 # Permit forwarding (routing) of multicast packets (IPV4)
ddb.panic=0                     # do not enter ddb consol on kernel panic, reboot if possible
net.inet.ip.ifq.maxlen=2048      # Maximum allowed input queue length (256*number of interfaces)
net.inet.icmp.errppslimit=1000  # Maximum number of outgoing ICMP error messages per second
#net.inet.ip.ttl=254             # the TTL should match what we have for "min-ttl" in scrub rule in pf.conf
net.inet.tcp.ackonpush=1        # acks for packets with the push bit set should not be delayed
net.inet.tcp.ecn=1              # Explicit Congestion Notification enabled
#net.inet.tcp.mssdflt=1448       # maximum segment size (1452 from scrub pf.conf)
net.inet.tcp.rfc1323=1          # RFC1323 TCP window scaling
net.inet.tcp.sack=1             # enable TCP Selective ACK (SACK) Packet Recovery
net.inet.udp.recvspace=655360   # Increase UDP "receive" windows size to increase performance
net.inet.udp.sendspace=655360   # Increase UDP "send" windows size to increase performance
kern.maxclusters=128000         # Cluster allocation limit
#vm.swapencrypt.enable=1         # encrypt pages that go to swap
kern.shminfo.shmall=3145728
kern.shminfo.shmmax=2147483647
kern.shminfo.shmmni=1024
kern.shminfo.shmseg=1024
kern.maxproc=32768
kern.maxfiles=65535
kern.bufcachepercent=90
kern.maxvnodes=262144
kern.somaxconn=2048
### CARP options if needed
net.inet.carp.allow=0		# Disable CARP
net.inet.carp.log=0            # Log CARP state changes
net.inet.carp.preempt=0        # Enable CARP interfaces to preempt each other (0 -> 1)
## Disable More unneeded options
net.inet.ah.enable=0 
net.inet.esp.enable=0
