This message was deleted.

yes and other OS's as well (their equivalent)

Thanks! is this about what you do as well for the agents and server?

So the short version is: • Disable swap on all servers • Disable firewall on all servers I never had need to enable ip forwarding. What you enable or disable in sysctl is up to you (here is a copy of my lab environment)

kernel.randomize_va_space=2

net.ipv4.ip_forward=0

kernel.sysrq=0

vm.panic_on_oom=1

kernel.dmesg_restrict=1

kernel.kptr_restrict=2

net.ipv4.conf.all.send_redirects=0

net.ipv4.conf.default.send_redirects=0

net.ipv4.conf.all.accept_source_route=0

net.ipv4.route.flush=1

net.ipv4.conf.all.accept_redirects=0

net.ipv4.conf.all.secure_redirects=0

net.ipv4.conf.all.forwarding=0

net.ipv4.conf.default.forwarding=0

net.ipv4.conf.all.log_martians=1

net.ipv4.conf.default.log_martians=1

net.ipv4.icmp_echo_ignore_broadcasts=1

net.ipv4.tcp_timestamps=0

net.ipv4.tcp_syncookies=1

net.ipv4.tcp_syn_retries=5

net.ipv4.tcp_synack_retries=2

net.ipv4.conf.all.rp_filter=1

net.ipv4.conf.default.rp_filter=1

net.ipv4.icmp_ignore_bogus_error_responses=1

net.ipv4.tcp_keepalive_time=300

net.ipv4.tcp_keepalive_probes=6

net.ipv4.tcp_keepalive_intvl=15

net.ipv6.conf.all.disable_ipv6=1

net.ipv6.conf.default.disable_ipv6=1

net.ipv6.conf.lo.disable_ipv6=1

fs.suid_dumpable=0

net.ipv4.icmp_echo_ignore_all=0