charlesrocket.freebsd.mainframe role – Deploys server tunings

Note

This role is part of the charlesrocket.freebsd collection (version 1.16.0).

It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it use: ansible-galaxy collection install charlesrocket.freebsd.

To use it in a playbook, specify: charlesrocket.freebsd.mainframe.

Entry point main – Deploys server tunings

Synopsis

  • Adjust the system for server applications.

Parameters

Parameter

Comments

mainframe_ahci

boolean

Enable AHCI.

Choices:

  • false

  • true ← (default)

mainframe_drop_synfin

boolean

Drop SYN/FIN packets.

Choices:

  • false

  • true ← (default)

mainframe_icmp_may_rst

boolean

Enable ICMP RST.

Choices:

  • false

  • true ← (default)

mainframe_ip_process_options

boolean

Process IP options.

Choices:

  • false ← (default)

  • true

mainframe_ip_random_id

boolean

Random IP packet IDs.

Choices:

  • false

  • true ← (default)

mainframe_net_blackhole

boolean

Activate blackhole.

Choices:

  • false

  • true ← (default)

mainframe_nolocaltimewait

boolean

Tune loopback interface.

Choices:

  • false

  • true ← (default)

mainframe_path_mtu_discovery

boolean

Enable PMTUD.

Choices:

  • false ← (default)

  • true

mainframe_sshd

boolean

Enable SSH.

Choices:

  • false

  • true ← (default)

mainframe_tcp_always_keepalive

boolean

Detect dead TCP connections.

Choices:

  • false ← (default)

  • true

Authors

  • charlesrocket