Virtual Filesystem for Kernel Parameter

 Excellent question! To answer “Which filesystem can be used to change certain kernel parameters at runtime using the sysctl command?”, we first need to explore dependent foundational concepts. This gives a solid base for mastering Linux internals and prepares you for FAANG-level troubleshooting and system design interviews.

---

✅ Step 1: Foundational Concepts

---

🔹 1. Virtual Filesystems in Linux

Linux exposes internal kernel data structures and device info through virtual filesystems. These are mounted under /proc, /sys, and others.

Filesystem	Purpose
/proc	Kernel and process info (pseudo-files)
/sys	Kernel objects and device model
/dev	Device files (block/char)
/tmpfs	Temporary in-memory storage
/run	Runtime system information
/proc/sys	Kernel runtime parameters (used by sysctl)

---

🔹 2. Kernel Parameters

• Kernel parameters control low-level behavior like memory, networking, file limits, etc.
  
  

• Can be:
  
  

• Set at boot time via GRUB or /etc/sysctl.conf
  
  

• Modified at runtime using:
  
  

• The sysctl command
  
  

• Writing directly to /proc/sys/*
  
  

---

🔹 3. sysctl Command

Used to view, set, or persist kernel parameters at runtime.

📌 Syntax:

sysctl -a                          # List all sysctl net.ipv4.ip_forward         # View specific sudo sysctl -w vm.swappiness=10    # Set value temporarily

🛠️ It works by reading/writing to /proc/sys/.

Example:

echo 1 > /proc/sys/net/ipv4/ip_forward

Equivalent to:

syecho 1 > /proc/sys/net/ipv4/ip_forward

✅ Answer to the Original Question:

Which filesystem can be used to change kernel parameters at runtime using sysctl?

✅ /proc filesystem, specifically /proc/sys

---

🔍 Edge Cases & Cautions

1. Changes via sysctl or /proc/sys are temporary (reset on reboot).
   
   

2. Persistent changes must go in:
   
   

• /etc/sysctl.conf
  
  

• /etc/sysctl.d/*.conf
  
  

3. Some kernel parameters require reboot to take effect (e.g., hugepages).
   
   

4. Invalid parameters give: sysctl: cannot stat /proc/sys/...: No such file or directory
   
   

---

🔥 FAANG-Level 20 Questions & Answers

---

🔸 Core sysctl and /proc/sys Questions

1. Q: What filesystem does sysctl interact with?
   A: The /proc filesystem, particularly /proc/sys.
   
   

2. Q: How do you check if IPv4 forwarding is enabled?
   A: sysctl net.ipv4.ip_forward or cat /proc/sys/net/ipv4/ip_forward
   
   

3. Q: How to enable IP forwarding persistently?
   A: Add net.ipv4.ip_forward = 1 to /etc/sysctl.conf, then sysctl -p.
   
   

4. Q: What does sysctl -p do?
   A: Reloads parameters from /etc/sysctl.conf.
   
   

5. Q: Can you use sysctl without root?
   A: Only for reading. Setting requires root privileges.
   
   

---

🔸 System Design and Debugging Use Cases

6. Q: A container has slow TCP connection setup—how to debug via sysctl?
   A: Check values like net.ipv4.tcp_syncookies, tcp_tw_reuse, and tcp_fin_timeout.
   
   

7. Q: How can high vm.swappiness affect your system?
   A: It causes more aggressive swapping; tune with sysctl -w vm.swappiness=10.
   
   

8. Q: How do you tune file descriptor limits using sysctl?
   A: Set fs.file-max, but also update ulimits and PAM.
   
   

9. Q: What’s the equivalent sysctl parameter for /proc/sys/kernel/hostname?
   A: kernel.hostname
   
   

10. Q: Why might sysctl fail with "permission denied" on a file?
    A: The kernel may prevent changes at runtime or you're not root.
    
    

---

🔸 DevOps & Production-Ready Questions

11. Q: Which kernel tuning via sysctl improves high-throughput servers?
    A: net.core.somaxconn, tcp_max_syn_backlog, tcp_window_scaling
    
    

12. Q: How do you audit all current sysctl settings?
    A: sysctl -a or find /proc/sys -type f -exec cat {} \;
    
    

13. Q: How can sysctl tuning help in Kubernetes?
    A: Node-level tuning for max open files, swap behavior, and networking.
    
    

14. Q: What’s the risk of setting kernel.core_pattern?
    A: It redirects core dumps; misconfiguration may break debugging.
    
    

15. Q: How to temporarily disable IPv6 via sysctl?
    A: sysctl -w net.ipv6.conf.all.disable_ipv6=1
    
    

---

🔸 Advanced Debug & Design-Level Questions

16. Q: How does sysctl handle nested paths like net.ipv4.conf.eth0.rp_filter?
    A: It maps to /proc/sys/net/ipv4/conf/eth0/rp_filter
    
    

17. Q: How do you validate sysctl parameter compatibility?
    A: Use sysctl -a and check kernel docs for availability by version.
    
    

18. Q: Can changes in /proc/sys be tracked?
    A: Use auditd or inotify to track changes.
    
    

19. Q: Why would /proc/sys show missing parameters?
    A: Kernel modules may not be loaded or the feature is disabled in config.
    
    

20. Q: Can you add custom parameters under /proc/sys?
    A: Only via kernel module or patching; user-defined files are not supported.
    
    

---

✅ Summary Table

Command/Path	Purpose	Example
/proc/sys/	Runtime kernel parameters	/proc/sys/net/ipv4/ip_forward
sysctl -a	List all kernel params	Debug or audit
sysctl -w	Set param temporarily	sysctl -w vm.dirty_ratio=20
/etc/sysctl.conf	Persistent config	net.core.somaxconn = 1024
sysctl -p	Apply config from file	Reload after editing

---

Would you like a visual layout of key kernel tunables, or a lab workbook to practice changing and persisting sysctl parameters with edge cases?