Summary of System optimization parameters: Net.ipv4.tcp_syncookies=1indicates that SYN Cookies are turned on. When a SYN wait queue overflow occurs, cookies are enabled to protect against a small number of SYN attacks Net.ipv4.tcp_tw_reuse=1means to turn on reuse. Allow the time-WAIT sockets is re-used for the new TCP connection Net.ipv4.tcp_tw_recycle=1indicates that the time in the TCP connection is turned on-WAIT sockets fast reclaim when Close tcp_tw_reccycle, kernal is not to check the packet timestamp of the end machine in multi-NAT mode, it is necessary to turn off this parameter, otherwise it will cause the user to be unable to connect or the connection timeout net.ipv4.tcp_ Fin_timeout= -indicates that if the socket is closed by a local requirement, this parameter determines that it remains in the fin-wait-2 time of the state Net.core.rmem_default=8388608Net.core.rmem_max=16777216Net.core.wmem_default=8388608Net.core.wmem_max=16777216Net.ipv4.tcp_timestamps=1vm.overcommit_memory=1Net.ipv4.tcp_keepalive_time= -Net.ipv4.tcp_fin_timeout= -Net.ipv4.tcp_max_syn_backlog=6553500Net.core.somaxconn=32768Net.core.netdev_max_backlog=262144net.ipv4.tcp_syn_retries=2net.ipv4.tcp_synack_retries=1Net.ipv4.tcp_keepalive_probes=5NET.IPV4.TCP_KEEPALIVE_INTVL= -Net.ipv4.ip_local_port_range=1024x768 65535Net.ipv4.ip_forward=1turn on NAT forwarding Net.ipv4.tcp_max_tw_buckets=280000Net.netfilter.nf_conntrack_max=65535000net.netfilter.nf_conntrack_tcp_timeout_established= -
Summary of optimization parameters of Linux system