[转帖]Linux操作系统内核参数优化

linux,操作系统,内核,参数,优化 · 浏览次数 : 0

小编点评

## Process Opening File Maximum Number The following content should be added to the `/etc/security/limits.conf` file with the desired memory limit values substituted: ``` * hard nofile 100000* soft nofile 100000 ``` This will allow the process to open a maximum of 100,000 files simultaneously. **Other relevant changes:** * `net.core.wmem_default` and `net.core.rmem_default` can also be set to desired values, like 8388608 and 8388608 respectively. * `net.ipv4.tcp_syncookies` and `net.ipv4.tcp_max_syn_backlog` can be set to 1 to enable syn cookie based on kernel compile options. * `net.ipv4.tcp_keepalive_time` can be adjusted to control the number of keepalive messages sent before closing a connection. * `net.ipv4.tcp_tw_reuse` allows reusing TIME-WAIT sockets for new connections, enabling faster reuse. * `net.ipv4.tcp_tw_recycle` allows quickly closing TIME-WAIT sockets, preventing prolonged idle state.

正文

https://cloud.tencent.com/developer/article/1437197?from=article.detail.1888155&areaSource=106000.5&traceId=en1H1V0Ctjdzz29-luoya

调整进程可打开文件最大数

临时修改执行如下命令(65535替换为自己想要的值）

ulimit -n 65535

永久修改，编辑文件/etc/security/limits.conf,添加如下内容（100000替换为自己想要的值）

* hard nofile 100000
* soft nofile 100000

编辑文件/etc/sysctl.conf中的相关内核参数

修改完毕之后，调用命令 sysctl -p 使修改立即生效

sh#  net.core.wmem_default 发送缓存区预留内存默认大小 默认值 16k
#  net.core.rmem_default 接受缓存区预留内存默认大小 默认值 16k
#  net.core.wmem_max 发送缓存区预留内存最大值 默认值 128k
#  net.core.rmem_max 接受缓存区预留内存最大值 默认值 128k
#  
#  net.unix.max_dgram_qlen 进程间通信发送数据, 默认10
#
#  net.ipv4.tcp_syncookies 只有在内核编译选择CONFIG_SYNCOOKIES时发送作用，当出现syn等待队列出现溢出时像对方发送synccookies,防止syn flood攻击
#  net.ipv4.tcp_max_syn_backlogi 送人SYN包的最大请求队列，负载重的服务器增加该值提升接受连接的能力，默认值 1024
#  net.ipv4.tcp_synack_retries 
#  net.ipv4.syn_retries
#  net.ipv4.tcp_fin_timeout 如果socket连接由本端关闭，则保持在FIN-WAIT-2状态的时间
#  net.ipv4.tcp_keepalive_time 当keepalive起作用的时候，tcp发送keepalive消息的频度，默认2小时
#  net.ipv4.tcp_tw_reuse 开启重用 允许将状态为TIME-WAIT的sockets 重新用于新的tcp连接，默认为0(关闭)
#  net.ipv4.tcp_tw_recycle 开启tcp连接中TIME-WAIT状态的socket的快速回收,默认0(关闭) 
#  net.ipv4.ip_local_port_range 用于向外连接的端口范围，默认 32768 61000
#  net.ipv4.tcp_max_tw_buckets 表示系统同时保持TIME-WAIT状态的socket连接的最大数量，超过则清除TIME-WAIT状态socket连接，并打印警告信息，默认18000
#  net.ipv4.route_max_size 路由缓存最大值
#

kernel.core_pattern=/data/logs/core_files/core-%e-%p-%t

net.core.wmem_default=8388608
net.core.rmem_default=8388608
net.core.wmem_max=16777216
net.core.rmem_max=16777216

net.unix.max_dgram_qlen = 100

net.ipv4.tcp_syncookies=1
net.ipv4.tcp_max_syn_backlog = 81920
net.ipv4.tcp_synack_retries = 3
net.ipv4.tcp_syn_retries = 3
net.ipv4.tcp_fin_timeout = 3
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 20000 65000
net.ipv4.tcp_max_tw_buckets = 200000
net.ipv4.route.max_size = 5242880