sysctl pillars

base/sysctl/cp15_barrier.sls

@@ -0,0 +1,13 @@
+# -*- coding: utf-8 -*-
+# vim: ft=yaml
+---
+{%- if grains.get('cpuarch') in ['aarch64'] %}
+sysctl:
+  lookup:
+    config:
+      location: '/etc/sysctl.d'
+  params:
+    abi.cp15_barrier:
+      value: 2
+{%- endif %}
+

base/sysctl/init.sls

@@ -0,0 +1,4 @@
+include:
+  - base.sysctl.system
+  - base.sysctl.net_params
+  - base.sysctl.cp15_barrier

base/sysctl/net_params.sls

@@ -0,0 +1,26 @@
+# -*- coding: utf-8 -*-
+# vim: ft=yaml
+sysctl:
+  lookup:
+    config:
+      location: /etc/sysctl.d
+  params:
+    net.ipv4.ip_forward: 1
+    net.core.rmem_max:
+      value: 16777216
+    net.core.wmem_max:
+      value: 16777216
+    net.ipv4.tcp_window_scaling:
+      value: 1
+    net.ipv4.tcp_rmem:
+      value: 4096 87380 16777216
+    net.ipv4.tcp_wmem:
+      value: 4096 65536 16777216
+    net.ipv4.tcp_mtu_probing:
+      value: 2
+    net.ipv4.tcp_fin_timeout:
+      value: 30
+    net.ipv4.tcp_keepalive_intvl:
+      value: 30
+    net.ipv4.tcp_keepalive_probes:
+      value: 5

base/sysctl/system.sls

@@ -0,0 +1,8 @@
+# -*- coding: utf-8 -*-
+# vim: ft=yaml
+sysctl:
+  lookup:
+    config:
+      location: /etc/sysctl.d
+  params:
+    vm.swappiness: 10