L7-sysctl cookbook

Description

Configures sysctl system control parameters via Opscode Chef in /etc/sysctl.conf

L7-sysctl - The default no-op recipe.
Predefined parameters:
L7-sysctl::basic_securty - Sets kernel level security settings.
L7-sysctl::disable_ipv6 - If you do not use ipv6 then disable it.
L7-sysctl::enable_forwarding - Enables ipv4 forwarding.
L7-sysctl::less_swapping - Decrease swap ratio to 10 for less swapping.
L7-sysctl::no_overcommit - Do not overcommit available memory.
L7-sysctl::panic - Reboot on kernel panic.
L7-sysctl::tune_conntrack - Increase connection tracking buffers.
L7-sysctl::tune_shm - Increase shm.
L7-sysctl::tune_tck_stack - Tune tcp stack for 1G/10G networks for higher throughput.
L7-sysctl::tune_vfs - Tune vfs.
L7-sysctl::disable_bridge_nf_call - Disable netfilter calls on bridged packets.
L7-sysctl::ipv6_no_autoconfig - No autoconfig for ipv6.
L7-sysctl::tcp_congestion_yeah - Sets the tcp congestion control to YeAH.
L7-sysctl::tcp_congestion_bbr - Sets the tcp congestion control to bbr.
L7-sysctl::tcp_fastopen - Enable client/server side tcp fast open.

Include L7-sysctl::default recipe in your runlist.
Place 'depends L7-sysctl' in the metadata of your cookbook.
name: The sysctl parameter name.
comment: Optional string for identification.
value: Must be set to proper value.
immediately: Optional true/false. Sets value at runtime or at the end of chef run. Default: false.

L7_sysctl 'net.ipv4.ip_forward' do
	comment 'Enable ip forwarding'
	value '1'
	immediately true
end