tweak ulimit and TCP settings