{"action":"created","issue":{"url":"https://api.github.com/repos/aptible/support/issues/123","labels_url":"https://api.github.com/repos/aptible/support/issues/123/labels{/name}","comments_url":"https://api.github.com/repos/aptible/support/issues/123/comments","events_url":"https://api.github.com/repos/aptible/support/issues/123/events","html_url":"https://github.com/aptible/support/issues/123","id":94150288,"number":123,"title":"Configurable sysctl values?","user":{"login":"fancyremarker","id":156030,"avatar_url":"https://avatars.githubusercontent.com/u/156030?v=3","gravatar_id":"","url":"https://api.github.com/users/fancyremarker","html_url":"https://github.com/fancyremarker","followers_url":"https://api.github.com/users/fancyremarker/followers","following_url":"https://api.github.com/users/fancyremarker/following{/other_user}","gists_url":"https://api.github.com/users/fancyremarker/gists{/gist_id}","starred_url":"https://api.github.com/users/fancyremarker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fancyremarker/subscriptions","organizations_url":"https://api.github.com/users/fancyremarker/orgs","repos_url":"https://api.github.com/users/fancyremarker/repos","events_url":"https://api.github.com/users/fancyremarker/events{/privacy}","received_events_url":"https://api.github.com/users/fancyremarker/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/aptible/support/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-07-09T20:57:53Z","updated_at":"2015-09-11T14:50:10Z","closed_at":null,"body":"Support configuring values like `net.core.somaxconn` which are not directly inherited from the host."},"comment":{"url":"https://api.github.com/repos/aptible/support/issues/comments/139565734","html_url":"https://github.com/aptible/support/issues/123#issuecomment-139565734","issue_url":"https://api.github.com/repos/aptible/support/issues/123","id":139565734,"user":{"login":"mjacksonw","id":69848,"avatar_url":"https://avatars.githubusercontent.com/u/69848?v=3","gravatar_id":"","url":"https://api.github.com/users/mjacksonw","html_url":"https://github.com/mjacksonw","followers_url":"https://api.github.com/users/mjacksonw/followers","following_url":"https://api.github.com/users/mjacksonw/following{/other_user}","gists_url":"https://api.github.com/users/mjacksonw/gists{/gist_id}","starred_url":"https://api.github.com/users/mjacksonw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjacksonw/subscriptions","organizations_url":"https://api.github.com/users/mjacksonw/orgs","repos_url":"https://api.github.com/users/mjacksonw/repos","events_url":"https://api.github.com/users/mjacksonw/events{/privacy}","received_events_url":"https://api.github.com/users/mjacksonw/received_events","type":"User","site_admin":false},"created_at":"2015-09-11T14:50:10Z","updated_at":"2015-09-11T14:50:10Z","body":"Just a ping on this, since we're running up against it hard again. Thoughts, just to be annoying:\r\n\r\n1. Perhaps mount `/proc` as a volume (renamed so docker doesn't set it read-only):\r\n\r\n```\r\ndocker run ... -v /proc:/proc-rw ...\r\n```\r\n\r\nSo then you'd be able to `echo 1024 > /proc-rw/sys/net/core/somaxconn` to your heart's content.\r\n\r\n2. Does it even need to be configurable? Would there be much downside to setting `net.core.somaxconn` to something significantly higher, like `16384` or `32768`? Seems any web stack is liable to run up against that default value of `128` sooner or later, and many (most?) app servers make it relatively easy to limit the impact value at that level."}}