It's older so some details have changed over time, but the concepts are still relevant. It also has a lot of useful search terms to get you started.
net.core.rmem_max net.core.wmem_max
e.g. wireguard-go will hit those limits of not executed with CAP_NET_ADMIN.