From 4095975934a8c8cb9d503ce162b68f8fa0263a8e Mon Sep 17 00:00:00 2001 From: Markus Hauschild Date: Mon, 15 Jan 2018 20:19:03 +0100 Subject: [PATCH] exit-ipv4: make sure nf_conntrack is loaded --- roles/exit-ipv4/tasks/main.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/exit-ipv4/tasks/main.yml b/roles/exit-ipv4/tasks/main.yml index 3401764..f40a699 100644 --- a/roles/exit-ipv4/tasks/main.yml +++ b/roles/exit-ipv4/tasks/main.yml @@ -6,6 +6,9 @@ - name: Enable IPv4 routing sysctl: name=net.ipv4.ip_forward value=1 state=present +- name: Load nf_conntrack module + modprobe: name=nf_conntrack + - name: Increas conntrack limit sysctl: name=net.netfilter.nf_conntrack_max value={{ conntrack_max }} state=present