net ipv4

Detailed description of LVS Server Load balancer cluster service establishment I. LVS Overview 1. LVS: Linux Virtual Server Layer-4 Switching (Routing): forwards request packets to a server in the backend host Cluster Based on the target IP address

#### Close Service Timeservermaster = "192.168.6.13" Sshport = "58522" Echored () { Echo-ne "\ 033 [31 m" $1 "\ 033 [0m \ n" } Echogreen () { Echo-ne "\ 033 [32 m" $1 "\ 033 [0m \ n" } IPN = 'ifconfig | grep 192.168 | awk '{print $2}' | cut-D:-F2

Optimize TCP/IP connections to reduce the TIME-WAIT command (1) the status and number of TCP/IP connections: # netstat-an | awk '/^ tcp/{++ s [$ NF]} END {for (a in s) print a, s [a]}' (2) improve server load capabilities: # vim/etc/sysctl. conf and

18.11 LVS Dr Mode Setup (recommended)Dr Mode Setup – Preparation workThree machinesDispatcher, also known as the Scheduler (dir)133.130Rs1133.132Rs2133.133Vip133.200Dr Mode SetupDir writes script vim/usr/local/sbin/lvs_dr.sh//content as follows#!

The code is as follows Copy Code #!/bin/sh#------------------------------------------------------------------------------# for debugging use Iptables-v.Iptables= "/sbin/iptables"Ip6tables= "/sbin/ip6tables"Modprobe=

Mysterious little strong & 1943 Squid is a port ing function that can be used to convert port 80. In fact, common DDOS attacks can be used to modify the parameters in/proc/sys/net/ipv4/tcp_max_syn_backlog, the default parameters are usually very

Centos7.0 system lvs installation and deployment System: CentOS Linux release 7.0.1406 (Core) First, set the system language format and use the yum command that comes with the system to install and upgrade the required library. # LANG = C Yuminstall

Vim/etc/sysctl. conf1, net. ipv4.tcp _ max_syn_backlog = 65536 records the maximum number of connection requests that have not received confirmation from the client. For systems with over 1024 MB of memory, the default value is 128. for systems with

Users who often play with Linux systems know more or less about system parameter optimization and how to enhance system security. some of the default system parameters are conservative, therefore, we can adjust system parameters to increase the

Optimize the TCP parameter vi/etc/sysctl of the nginx server kernel. add the following content at the end of conf: www.2cto. comnet. ipv4.tcp _ timeout... optimize the TCP parameter vi/etc/sysctl of the nginx server kernel. add the following content

Here, we use iptables as a firewall, which is completely powerless in the face of attacks of a certain scale. if you encounter such attacks, based on the scale and characteristics, targeted Selection of hardware firewalls and anti-denial-of-service

Attach sudomount-tvboxsfdown/mnt/share the shared file mode to sudomount-tvboxsfdown/mnt/share the virtualbox of the oracle used by the virtual machine. Therefore, the file system is vboxsf, and the virtual machine is installed with the enhanced

Introduction to the LVS clusterLVS works on the fourth layer of TCP/IP and can be distributed by Director_server to different backend rs_server depending on the IP or port requested by the user, because it works on layer fourth, so it only resolves

Tuning 1 Tuning 2 tuning 3vm.swappiness = Tennet.ipv4.tcp_syncookies = 1net.ipv4.tcp_tw_reuse = 1net.ipv4.tcp_tw_recycle = 1net.ipv4.tcp_fin_timeout =Net.ipv4.tcp_keepalive_time =Net.ipv4.ip_local_port_range = 1024x768

Customer requirements, do not want to allow foreign IP to access the server, would have to let the computer room in the upper route to solve, but those people do not bird you!!! ~~~~In this case, you can only use iptables to solve the ~~~~~~~~~About

MySQL Database optimization Framework System1. Hardware-Level optimization2. Operating system level optimization3.MySQL Database Level optimization4.MySQL Security Optimization5. Optimization on the site cluster architecture6.MySQL process, System

The CentOS server is supported by many netizens. How to set the security of the CentOS server? Next, let's talk about centos6's security settings from the following aspects: System security record files, startup and login security, network access

The customer does not want to allow foreign ip addresses to access the server. The data center was supposed to be routed at the upper end of the server room, but those people did not miss you !!!~~~~ In this case, you can only use iptables to solve

Linux IPC parameter settings-command method: Echo 80>/proc/sys/Vm/overcommit_ratio, etc Msgmnb Maximum byte limit for each message queue. Msgmni The maximum number of message queues of the entire system. Msggsz The size (in bytes) of the message

Linux TCP system parameter configuration Here we apply centos5.3, and the kernel uses 2.6.18-128. el5pae #1 SMP. Some of the modifications to TCP are aimed at improving performance and load, but there is a risk of reducing stability. Some are