Linux 閮剜舀銝餈啁隤踵,甇斗敹脰雿喳隤踵:
0 ^3 n% z9 h. }; M0 V
& p' ?; _2 X/ F f#vi /etc/sysctl.conf
1 C b; N8 I* P; s### 寥脩頂蝯梯園蝞∠ ###
3 e5 d" p" E/ O! \& V+ ?% Q: |! R. i6 ^
- B; B: ^4 A. j0 d: L- H8 p! Q) @8 E# 憭扳獢inode敹怠
/ m6 {, a9 t1 f7 q1 `fs.file-max = 2097152
- |; a3 g2 q) H- F$ w+ c' C
3 b6 y3 }! h7 ^; E- L9 s
[/ w0 @* F+ ?: H# f1 P# 頛撠鈭斗
# q5 h* \9 Q" T: T. m s( R& Ivm.swappiness = 106 ^+ L4 T7 u/ _9 k: O0 a- _
vm.dirty_ratio = 600 P# H0 S1 k! s* y1 f3 G) n: ~
vm.dirty_background_ratio = 2! X$ Z1 A7 u; V4 H: ]
; ]* y0 R3 w9 ^, j
, Q& H; L: u+ e. Q### 銝祉蝬脰楝摰券賊 ###, x# l% F, B$ u8 {5 w5 n6 Q
1 a/ U+ P. \! h+ q; w4 ^( I: K1 s; H4 g% }. m3 U* @
# 鋡怠(passive)TCP亦SYNACKs甈⊥ \, f8 v/ u7 v* Y9 a" H
net.ipv4.tcp_synack_retries = 2
1 e8 y. L0 ~. q# K! f* Q
) h+ }4 w& g" n8 Q H! V4 P- ^3 x4 ]1 _% Q$ X( h
# 閮望祆蝬脰楝仿蝭
c; h" @3 l7 [! N+ E7 Jnet.ipv4.ip_local_port_range = 2000 655351 h8 n' F% |) m$ z7 f
1 L/ H( N# u2 Z6 h4 M% ]9 J$ v
# O. a" ^# z% R) p" D5 h, P# 貿CP Time-Wait靽霅; o* Z$ R% ^( T, P4 o! s
net.ipv4.tcp_rfc1337 = 11 \7 t b/ @! \& f3 ^8 u( D
! Z5 D9 _0 O! ?5 _$ {
: J* s4 X5 e/ S% ^" Z% r% O( C- F/ B# 雿撠 tcp_fin_timeout connection 閮剖
+ s: ]! A; K; L7 Z: ~5 Inet.ipv4.tcp_fin_timeout = 15
& ^( }3 I: X6 E- Z- o, ?; R$ P9 U5 o6 T" j( a8 Z+ _
1 r+ ^+ q! D; {# 雿蝺摮瘣餅閮剖, V7 M4 y j& o
net.ipv4.tcp_keepalive_time = 300: d8 b: B$ t: J3 V" W
net.ipv4.tcp_keepalive_probes = 5
9 i9 [% u- V4 K/ ~/ D: L6 ynet.ipv4.tcp_keepalive_intvl = 15' h `8 K: d, \0 ?
9 a# j& R" _* A7 G, U2 ~' r3 Y% W V1 U
### 隤踵渡雯頝舀 ###9 n: j1 O. K; r# n7 k+ n
3 }5 v3 N0 j# Q
- I* X: U7 n; O' L8 u, {! v# 閮剔Socket交嗥楨摮3 F9 Z) X/ A7 x, \
net.core.rmem_default = 31457280
- Q% U. k* C N" z' Z. i" u# H" ~ A5 k; \0 p
; |! I$ {. c( [+ a& q' R# 憭抒Socket交嗥楨摮
8 S' U+ @' s8 z! Knet.core.rmem_max = 12582912, g1 T( V: c/ R# ?4 b$ Q
% z& c: h) k% d# w; y1 @% |# W
6 ]$ x6 P) l/ h& m3 |8 |! Y# j
# 閮剔Socket喲蝺拙
! ]! F9 O& H6 E! \net.core.wmem_default = 314572809 j6 c' z: l+ m
6 T) O( e }1 H' n6 Y. z5 x/ I$ k5 x6 {
# 憭抒Socket喲蝺拙1 O. \4 |% l7 q" R
net.core.wmem_max = 125829128 n( O- J+ [* g
7 n" B. K+ o8 k2 q) q1 k9 n! g: z! ]9 i+ t9 a: d: `! w) ?+ L
# 憭抒雯頝舫交# u- E2 _- h; R4 p9 t, m ?! e' P
net.core.somaxconn = 4096
: I; k% B2 W1 a3 U* ?& n- g) j4 I' d! ? i4 k8 g2 x7 g$ x+ l
8 D$ w# P: M' |7 @( O# 憭抒雯頝舫亦backlog$ z2 p7 ?& r6 L x
net.core.netdev_max_backlog = 65536
* K6 k1 d% v! s7 V: f& V) H* Q4 ?* d3 d7 j) D
, N- }0 g& K. U5 w( t
# 憭扯園蝺拙憭折
3 `, u [' W u: B/ P$ ^% v4 ]0 d1 knet.core.optmem_max = 25165824
5 A) Q& b+ t; I: w' ~
; e8 Z2 ?1 _' g/ c% v
/ j- r. w6 O$ T$ h+ O+ m# Increase the maximum total buffer-space allocatable憭批臬蝺拙蝛粹憭抒蜇5 g( C( ~" M4 t3 }$ }
# This is measured in units of pages (4096 bytes)
$ {" a3 E) U" f- u1 j# B9 `net.ipv4.tcp_mem = 65536 131072 2621447 u$ k1 O1 `+ z1 ], j6 q& O# C, S
net.ipv4.udp_mem = 65536 131072 262144% {' a( q# J& i8 Y# a9 ^4 m
$ T: t0 P v0 b$ O3 ^2 B
( j8 P, Y: |. H& c7 f' I# 憭扯蝺拙臬蝛粹% p0 k7 M0 X( l5 ~+ H) W
net.ipv4.tcp_rmem = 8192 87380 16777216
; B. m9 C8 p% Jnet.ipv4.udp_rmem_min = 16384
; j, g/ c& m- w0 T- X1 H' m' @# I. P1 w' {4 H! ~; a! q+ E
. }; ?$ ~/ w) z/ O
# 憭批神亦楨摮臬蝛粹* j r; J7 L b
net.ipv4.tcp_wmem = 8192 65536 16777216
. ]* z4 T4 w6 n/ onet.ipv4.udp_wmem_min = 16384) `/ x, z. W" G0 Z
, a# R$ g5 ^1 [+ d! H8 P+ Q9 F
% S+ [# {' r& {7 U; C0 T q
# 憭含cp-time-wait獢嗅瘙賊隞仿脩陛DOS餅
, W% c5 N. b# P" @3 L$ Fnet.ipv4.tcp_max_tw_buckets = 1440000
* l* g% ~- P8 ]+ ]9 L7 enet.ipv4.tcp_tw_recycle = 1
4 A6 ?, f0 z( j" N7 F" g4 [! P4 ynet.ipv4.tcp_tw_reuse = 1& e: i4 q& X, T1 T+ X. t k
! b9 Q- y; n7 ?0 `8 A" \
$ ]; W$ D, y9 t& w
摮瑼隞亦
* N4 A6 S1 W1 W#sysctl -p 頛亙歇霈- P2 E2 X' X" M; }1 E! l
4 ?* Z1 u1 y( I o9 |8 e靘皞:6 p9 {+ h# N& r, U
2 g# L" ~0 B! K( s9 ]- f. x! M% `
https://easyengine.io/tutorials/linux/sysctl-conf/
; C" T) Q$ n1 l9 ^5 B8 C( D7 P摰ｇ砍梯批捆閬蝛擃 888999999999 舐閬踝函嗅蝛 0
O3 n: b* l6 z+ D
* k1 Q0 ^# s7 _$ D" J7 Y0 y( c3 V3 |( \& o* a' O
& f4 [2 [7 Q2 v* }% k3 Q8 \& s |
|
潸” 2017-8-28 11:01:58
嗉
鈭
霈
