kern.maxfiles=65535
kern.maxfilesperproc=4096
kern.ipc.somaxconn=8192
kern.ipc.maxsockbuf=262144              # default 262144
kern.timecounter.method=1
kern.ps_showallprocs=1                  # default 1
kern.ps_argsopen=0                      # default 1
#
vm.max_launder=32               # default 32
vm.swap_idle_enabled=1          # default 0
vfs.vmiodirenable=1             # default 1
vm.v_free_target=5000           # default 7212
vm.v_cache_min=5000             # default 7212
vm.v_cache_max=10000            # default 14424
vm.swap_idle_threshold1=15      # default 2
vm.swap_idle_threshold2=30      # default 10
#
net.inet.tcp.sendspace=131070   #
net.inet.tcp.recvspace=131070   # default 57344
net.inet.udp.recvspace=32768    # default 42080
net.inet.udp.maxdgram=32768     # default 9216
net.local.stream.recvspace=65535 # default 8096
net.local.stream.sendspace=65535 # default 8096


# ipfw
net.inet.ip.dummynet.hash_size=1024
net.inet.ip.dummynet.max_chain_len=16
net.inet.ip.fw.one_pass=0
net.inet.ip.fw.dyn_buckets=1024
net.inet.ip.fw.dyn_max=1024

#
net.inet.tcp.log_in_vain=0      # too much information when enabled
net.inet.udp.log_in_vain=0

# TCPIP Stack Tuning
net.inet.tcp.rfc1323=0
net.inet.tcp.rfc1644=1
net.inet.tcp.syncookies=1
net.inet.tcp.delayed_ack=0
net.inet.tcp.always_keepalive=1
net.inet.ip.check_interface=0
net.inet.tcp.keepidle=1296000           # 15 days
net.inet.tcp.keepintvl=3600             #  1 hour
net.inet.tcp.inflight_enable=1          # default 0
net.inet.tcp.slowstart_flightsize=1             # default 1
net.inet.tcp.local_slowstart_flightsize=1       # default 4
#
net.inet.tcp.blackhole=2
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=0
net.inet.icmp.icmplim=256
net.inet.tcp.icmp_may_rst=1
net.inet.tcp.drop_synfin=1
net.inet.ip.redirect=0
net.inet.ip.portrange.first=10000
net.inet.ip.portrange.last=20000
net.inet.ip.portrange.hifirst=20001
net.inet.ip.portrange.hilast=30000

# misc
net.inet.tcp.msl=7500                   # default 30000
net.inet.ip.intr_queue_maxlen=250       # default 50
net.inet.ip.rtexpire=2                  # default 3600
net.inet.ip.rtminexpire=2               # default 10
net.inet.ip.rtmaxcache=256              # default 128