Linux 閮剜舀銝餈啁隤踵,甇斗敹脰雿喳隤踵:
' D7 U* K5 r' b1 W- j- D, z* V' h, Z1 B! c
#vi /etc/sysctl.conf& {" c& ~0 V% F! T0 e( j7 x3 [6 z. \1 v
### 寥脩頂蝯梯園蝞∠ ###
" E8 {5 _* }7 G2 P; F/ F/ u4 U$ G0 c9 [" K
: z- `6 W/ _2 M9 |8 d# 憭扳獢inode敹怠# O% x$ [9 N% M4 p0 k6 L
fs.file-max = 2097152
: g* \6 _ d' K& e$ W5 ]+ B% C) m1 Z
! N; Q: i/ a5 t
# 頛撠鈭斗% n+ Z: R6 `8 c8 D# P# a0 S0 o4 n
vm.swappiness = 10
: W& Y9 @4 T- \3 Q4 d4 X+ Lvm.dirty_ratio = 60# w; V2 B' r: R/ `6 B$ V3 K
vm.dirty_background_ratio = 2# R" ~! X2 V! u& \, h' b
2 m3 B9 s6 j: _
, K$ j3 ?5 y4 c* e' @# L
### 銝祉蝬脰楝摰券賊 ###5 b& M1 O/ L! B1 }" m: u" ]
7 I% W f( K; T0 |$ C
/ y1 T& z. k# u1 q1 v+ B; \
# 鋡怠(passive)TCP亦SYNACKs甈⊥
' X+ a0 s' {7 J6 ?$ C* Nnet.ipv4.tcp_synack_retries = 2
+ @* M. u3 S) }" T$ s2 X/ f8 f. M0 e$ {
9 Z+ _) U+ J' Y2 w# l9 Y
# 閮望祆蝬脰楝仿蝭
& t/ m8 k, `$ s$ z4 A6 A( y6 Fnet.ipv4.ip_local_port_range = 2000 65535
. i( K3 V, k' X$ p3 Z/ Q, d: B! ?# a- m$ X
1 d2 |% a5 m) M
# 貿CP Time-Wait靽霅
6 i/ C9 v9 z2 Jnet.ipv4.tcp_rfc1337 = 1
7 e- A9 n/ f" I; y, g" d$ c. ~! }- b& p! E/ v
) p9 d$ X4 B$ m% b+ z6 w* |
# 雿撠 tcp_fin_timeout connection 閮剖; x$ q2 @' S4 K/ m/ j
net.ipv4.tcp_fin_timeout = 15
) Z7 p, S2 M- I0 c) C' e. G/ d( J; q3 a/ {' P6 k5 {; n
9 }0 G) R1 {, q
# 雿蝺摮瘣餅閮剖
8 e: ]8 W5 l* T9 J2 nnet.ipv4.tcp_keepalive_time = 3000 h. V' `/ ~6 J2 \/ z1 h% ^, r
net.ipv4.tcp_keepalive_probes = 5 \9 G# e$ ?, g( G. `' d- b7 H) _& {
net.ipv4.tcp_keepalive_intvl = 150 x# O8 T g# u2 R$ d2 Z) G6 N2 ~
+ v: }/ r* y& A$ e$ ?, w# ^- Y+ M& Y8 Q# |7 ^. z# [
### 隤踵渡雯頝舀 ###
* l+ X6 ~8 u6 G% L0 K3 t
; Y1 U- j0 w4 d# q, m1 |! I) [
# 閮剔Socket交嗥楨摮
; E0 e* g( J7 H& r1 Znet.core.rmem_default = 31457280" ^) R8 p# T7 `& k' h% E
% [! i- w( b, s8 P, m- N5 J- w5 k
# 憭抒Socket交嗥楨摮
* z2 ~. E/ F4 Gnet.core.rmem_max = 12582912
( V. ^% A! u8 [2 L2 ]4 D7 t7 K* x- k
, @9 o% N( k2 A9 G
# 閮剔Socket喲蝺拙
" q- \2 T; ^& o3 A- D( I0 ?# j* Jnet.core.wmem_default = 31457280+ b& T4 \8 N4 \( s$ s
4 e9 c+ c7 h- p9 o% X
$ I% G$ A' R1 Z% z( _# 憭抒Socket喲蝺拙/ v9 O& D7 ]0 ^1 F' o. |8 V1 A
net.core.wmem_max = 12582912. y3 a, V( ~2 ~
1 F O/ w. v4 P+ Z& H9 x
; C! r# T. B( S% @# 憭抒雯頝舫交3 u8 g2 M' u* B
net.core.somaxconn = 4096
, [/ h# Q( k5 Z) M: f M4 R) ^3 j
$ G' w& V p) S1 F, {
5 }; y% b" H! N3 c/ |# 憭抒雯頝舫亦backlog
$ B5 h$ `" Q, L/ pnet.core.netdev_max_backlog = 65536
' g4 {2 ~- [0 C# k v F# u5 F
g/ F# m- W6 r7 Z, Q9 v: T- ^* |5 a! K/ h
# 憭扯園蝺拙憭折6 K4 {/ ~5 A3 E2 V# _
net.core.optmem_max = 25165824
& h7 ~. z! w0 k% i
7 `4 w& p9 K9 M# {6 W( H o" F5 G8 W5 w0 ^
# Increase the maximum total buffer-space allocatable憭批臬蝺拙蝛粹憭抒蜇) R& F k5 ]$ M
# This is measured in units of pages (4096 bytes)) e8 f/ c) i9 ?+ b+ j5 k" K5 s
net.ipv4.tcp_mem = 65536 131072 2621441 e' A1 s1 ^* p( ~& g( T
net.ipv4.udp_mem = 65536 131072 262144* V. h9 `+ F$ \+ Q
! c# C* o0 S, G8 y9 Z/ L# g" V1 T$ W: C$ T t6 ]& t
# 憭扯蝺拙臬蝛粹
0 {1 P# A6 _9 l! R: B/ K) Nnet.ipv4.tcp_rmem = 8192 87380 16777216
% q% c6 p$ _7 Inet.ipv4.udp_rmem_min = 16384
+ ~- v% f. N1 D% E1 C0 n+ i) L1 M
) k8 [& k* k' Z8 ?" X, h! E; Y: m9 }2 G5 A% c+ L( v5 `
# 憭批神亦楨摮臬蝛粹
2 b5 Q3 T* C# K, ]$ J7 enet.ipv4.tcp_wmem = 8192 65536 16777216
5 A$ e* G% n" o# I( Xnet.ipv4.udp_wmem_min = 163846 {8 R. s) k ` O* @; w
( ~: m' y% S% O; p/ \& W% ~0 ?5 \3 g/ p% i
# 憭含cp-time-wait獢嗅瘙賊隞仿脩陛DOS餅
6 O# g1 Q9 k/ ~net.ipv4.tcp_max_tw_buckets = 1440000& ]* a) K5 s0 b) m
net.ipv4.tcp_tw_recycle = 1" P0 J$ Y2 p& o$ Q% `% x
net.ipv4.tcp_tw_reuse = 1
0 |" t0 p9 n" A/ Y$ F
# M' L5 Z3 G q( f
+ D2 W- M) D) A1 F8 S4 g! l# }2 s摮瑼隞亦' m; u6 p8 w5 T: V( O6 b$ Z
#sysctl -p 頛亙歇霈
1 z0 f% I3 P7 ?$ Y( W5 @ J1 l7 ]& ?# f; \) f
靘皞:( v- A+ {' `# f
/ \% l( a: p. _9 [) T$ Y; {https://easyengine.io/tutorials/linux/sysctl-conf/. u/ F+ \: R: [4 E, C
摰ｇ砍梯批捆閬蝛擃 888999999999 舐閬踝函嗅蝛 0
* F/ A' N+ C( i4 M0 s: H1 Z: Q& M0 H! d# [6 v
# N: }0 d# Y" d
) V$ j9 q. z# `9 B: c9 A
|
|
潸” 2017-8-28 11:01:58
嗉
鈭
霈
