net.netfilter.nf_conntrack_max not applied on boot

[ohrensessel]

We are experiencing that net.netfilter.nf_conntrack_max is not applied on boot, so that we manually need to load /etc/sysctl.d/conntrack.conf

[ohrensessel]

do you see the same problem?

[sargon]

Nope. Usually the /etc/sysctl.d/*.conf files should be read by sysctl himself when called with --system,
so when they aren't interpreted, either you have some value somewhere which is processed later or
for some reason the whole sysctl.d mechanism dosn't work on the problematic machine, maybe old version of sysctl?