> On the new VPS I get the following message (from time to

> time lots of them):

> "kernel: [XXXXXX.XXXXXX] TCP: too many orphaned sockets"

I'd look at "net.ipv4.tcp_max_orphans". Some VPS providers add their own defaults to /etc/sysctl.conf, so you might want to check there and see if it's already set, or otherwise add your own value. The Mozilla relays use a value of 262144.

https://github.com/XioNoX/moz-tor-relays/blob/master/roles/kernel-tuning/tasks/main.yml