firewalld nf_conntrack_max Static Default Lacks Runtime Scaling on openSUSE
Missing Dynamic Adjustment for Connection Tracking Table openSUSE Leap and Tumbleweed ship firewalld as the default firewall manager, which relies on the kernel's nf_conntrack subsystem. The parameter nf_conntrack_max is calculated once at boot from MemTotal (typically 65,536 entries per GB of RAM) and never adjusted afterward. High-concurrency workloads—dat
opensuse