\u5feb\u901f\u53c2\u8003\uff1a<\/strong>\u5bf9\u4e8e\u6e38\u620f\u548c\u5b9e\u65f6\u5e94\u7528\u7a0b\u5e8f\uff0c\u4ece\u4e1c\u4e9a\u8fde\u63a5\u5230\u65e5\u672c\u670d\u52a1\u5668\u65f6\uff0c\u5e94\u5c06ping\u503c\u63a7\u5236\u5728100ms\u4ee5\u4e0b\u3002\u5177\u4f53\u671f\u671b\u503c\u5e94\u6839\u636e\u5730\u7406\u8ddd\u79bb\u548c\u7f51\u7edc\u72b6\u51b5\u8fdb\u884c\u8c03\u6574\u3002<\/p>\n<\/div>\n

\u7406\u89e3Ping\u503c\uff1a\u6280\u672f\u5206\u6790<\/strong><\/h2>\n

Ping\u503c\u4ee5\u6beb\u79d2(ms)\u4e3a\u5355\u4f4d\uff0c\u8868\u793a\u6570\u636e\u5305\u5728\u60a8\u7684\u4f4d\u7f6e\u4e0e\u65e5\u672c\u670d\u52a1\u5668\u4e4b\u95f4\u7684\u5f80\u8fd4\u65f6\u95f4(RTT)\u3002\u8fd9\u4e2a\u57fa\u672c\u7684\u7f51\u7edc\u6307\u6807\u4e3a\u7f51\u7edc\u6027\u80fd\u548c\u7528\u6237\u4f53\u9a8c\u8d28\u91cf\u63d0\u4f9b\u4e86\u91cd\u8981\u89c1\u89e3\u3002\u4e0e\u8425\u9500\u6307\u6807\u6216\u7406\u8bba\u5e26\u5bbd\u6570\u636e\u4e0d\u540c\uff0cping\u503c\u63d0\u4f9b\u4e86\u5177\u4f53\u7684\u3001\u771f\u5b9e\u4e16\u754c\u7684\u6027\u80fd\u6570\u636e\u3002<\/p>\n

\n

Ping\u6d4b\u91cf\u7684\u5173\u952e\u7ec4\u6210\u90e8\u5206\uff1a<\/h3>\n

\n
• \u5f80\u8fd4\u65f6\u95f4(RTT)\uff1a<\/strong>\n
  \n
  • \u521d\u59cb\u6570\u636e\u5305\u4f20\u8f93\u65f6\u95f4<\/li>\n
  • \u670d\u52a1\u5668\u5904\u7406\u65f6\u95f4<\/li>\n
  • \u8fd4\u56de\u6570\u636e\u5305\u4f20\u8f93\u65f6\u95f4<\/li>\n
  • \u7f51\u7edc\u5f00\u9500\u548c\u5904\u7406\u5ef6\u8fdf<\/li>\n<\/ul>\n<\/li>\n
  • \u7f51\u7edc\u8df3\u6570\uff1a<\/strong>\n
    \n
    • \u6bcf\u4e2a\u8def\u7531\u5668\u589e\u52a00.1-2ms\u5ef6\u8fdf<\/li>\n
    • \u5178\u578b\u8def\u7531\u6d89\u53ca10-20\u4e2a\u8df3\u6570<\/li>\n
    • \u8fb9\u754c\u7f51\u5173\u8f6c\u6362<\/li>\n
    • \u4e92\u8054\u7f51\u4ea4\u6362\u70b9(IXPs)<\/li>\n<\/ul>\n<\/li>\n
    • \u7269\u7406\u8ddd\u79bb\u56e0\u7d20\uff1a<\/strong>\n
      \n
      • \u5149\u7ea4\u7535\u7f06\u957f\u5ea6<\/li>\n
      • \u5730\u7406\u8def\u7531\u8def\u5f84<\/li>\n
      • \u6d77\u5e95\u7535\u7f06\u7cfb\u7edf<\/li>\n
      • \u6700\u540e\u4e00\u516c\u91cc\u8fde\u63a5<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n

        \u65e5\u672c\u670d\u52a1\u5668\u7684\u6b63\u5e38Ping\u503c<\/strong><\/h2>\n

        \u57fa\u4e8e\u5bf9\u4e0d\u540c\u5730\u533a\u548c\u7f51\u7edc\u6761\u4ef6\u7684\u5e7f\u6cdb\u6d4b\u8bd5\uff0c\u4ee5\u4e0b\u662f\u8fde\u63a5\u65e5\u672c\u670d\u52a1\u5668\u65f6\u7684\u9884\u671fping\u503c\u8be6\u7ec6\u5206\u6790\uff1a<\/p>\n\n\n\n\n\n\n\n\n

        \u5730\u533a<\/th>\n	\u6700\u4f73\u8303\u56f4(ms)<\/th>\n	\u53ef\u63a5\u53d7\u8303\u56f4(ms)<\/th>\n	\u9ad8\u5cf0\u65f6\u6bb5\u5f71\u54cd<\/th>\n<\/tr>\n
        \u65e5\u672c\u56fd\u5185<\/td>\n	5-20<\/td>\n	20-40<\/td>\n	+10-15ms<\/td>\n<\/tr>\n
        \u4e1c\u4e9a<\/td>\n	30-70<\/td>\n	70-100<\/td>\n	+15-25ms<\/td>\n<\/tr>\n
        \u4e1c\u5357\u4e9a<\/td>\n	50-100<\/td>\n	100-150<\/td>\n	+20-30ms<\/td>\n<\/tr>\n
        \u5317\u7f8e(\u897f\u90e8)<\/td>\n	100-150<\/td>\n	150-200<\/td>\n	+25-40ms<\/td>\n<\/tr>\n
        \u5317\u7f8e(\u4e1c\u90e8)<\/td>\n	150-200<\/td>\n	200-250<\/td>\n	+30-50ms<\/td>\n<\/tr>\n
        \u6b27\u6d32<\/td>\n	200-300<\/td>\n	300-400<\/td>\n	+40-60ms<\/td>\n<\/tr>\n<\/table>\n \n \u533a\u57df\u5dee\u5f02\uff1a<\/strong>\u5bf9\u4e8e\u4e2d\u56fd\u5927\u9646\u7528\u6237\uff0c\u4e0d\u540c\u5730\u533a\u548c\u7f51\u7edc\u8fd0\u8425\u5546\u7684\u5178\u578bping\u503c\u5dee\u5f02\u663e\u8457\uff1a<\/p>\n \n \u534e\u4e1c\u5730\u533a\uff08\u4e0a\u6d77\u3001\u676d\u5dde\uff09\uff1a40-80ms<\/li>\n \u534e\u5357\u5730\u533a\uff08\u5e7f\u5dde\u3001\u6df1\u5733\uff09\uff1a50-90ms<\/li>\n \u534e\u5317\u5730\u533a\uff08\u5317\u4eac\u3001\u5929\u6d25\uff09\uff1a60-100ms<\/li>\n \u897f\u90e8\u5730\u533a\uff08\u6210\u90fd\u3001\u897f\u5b89\uff09\uff1a70-120ms<\/li>\n<\/ul>\n<\/div>\n \u6d4b\u8bd5\u65b9\u6cd5\u8bba<\/strong><\/h2>\n \u5b9e\u65bd\u7cfb\u7edf\u5316\u7684ping\u6d4b\u8bd5\u65b9\u6cd5\u53ef\u786e\u4fdd\u83b7\u5f97\u51c6\u786e\u53ef\u9760\u7684\u7ed3\u679c\u3002\u4e13\u4e1a\u7f51\u7edc\u5de5\u7a0b\u5e08\u91c7\u7528\u5168\u9762\u7684\u6d4b\u8bd5\u534f\u8bae\uff0c\u8003\u8651\u5404\u79cd\u7f51\u7edc\u6761\u4ef6\u548c\u65f6\u95f4\u6bb5\u3002<\/p>\n \n \u57fa\u672c\u547d\u4ee4\u884c\u6d4b\u8bd5\uff1a<\/h3>\n # Linux\/MacOS\u57fa\u7840\u6d4b\u8bd5\r\nping -c 50 [server_ip]\r\n\r\n# Windows\u57fa\u7840\u6d4b\u8bd5\r\nping -n 50 [server_ip]\r\n\r\n# \u9ad8\u7ea7MTR\u5206\u6790\r\nmtr -c 100 -r [server_ip]\r\n\r\n# TCP\u8fde\u63a5\u6d4b\u8bd5\r\ntcpping -x 5 [server_ip] [port]<\/code><\/pre>\n<\/div>\n \u5168\u9762\u6d4b\u8bd5\u53c2\u6570<\/h3>\n \n \u6570\u636e\u5305\u5927\u5c0f\u53d8\u5316\uff1a<\/strong>\n \n \u6807\u51c6ICMP\uff1a56\u5b57\u8282<\/li>\n \u5c0f\u6570\u636e\u5305\uff1a32\u5b57\u8282<\/li>\n \u5927\u6570\u636e\u5305\uff1a1472\u5b57\u8282\uff08\u8003\u8651MTU\uff09<\/li>\n \u81ea\u5b9a\u4e49\u5927\u5c0f\u7528\u4e8e\u5e94\u7528\u6a21\u62df<\/li>\n<\/ul>\n<\/li>\n \u6d4b\u8bd5\u65f6\u95f4\u95f4\u9694\uff1a<\/strong>\n \n \u9ad8\u5cf0\u65f6\u6bb5\uff08\u65e5\u672c\u65f6\u95f420:00-22:00\uff09<\/li>\n \u5de5\u4f5c\u65f6\u95f4\uff08\u65e5\u672c\u65f6\u95f409:00-17:00\uff09<\/li>\n \u4f4e\u5cf0\u65f6\u6bb5\uff08\u65e5\u672c\u65f6\u95f402:00-06:00\uff09<\/li>\n \u5468\u672b\u53d8\u5316<\/li>\n<\/ul>\n<\/li>\n \u534f\u8bae\u8986\u76d6\uff1a<\/strong>\n \n ICMP\uff08\u6807\u51c6ping\uff09<\/li>\n TCP\uff08\u5e94\u7528\u5c42\uff09<\/li>\n UDP\uff08\u6e38\u620f\/\u6d41\u5a92\u4f53\uff09<\/li>\n HTTP\/HTTPS\u5ef6\u8fdf<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n \u65e5\u672c\u7f51\u7edc\u57fa\u7840\u8bbe\u65bd\u5206\u6790<\/strong><\/h2>\n \n \u4e3b\u8981\u4e92\u8054\u7f51\u4ea4\u6362\u70b9\uff1a<\/h3>\n\n\n\n\n\n\n \u4ea4\u6362\u70b9<\/th>\n \u4f4d\u7f6e<\/th>\n \u5cf0\u503c\u6d41\u91cf<\/th>\n \u8fde\u63a5ASN\u6570\u91cf<\/th>\n<\/tr>\n JPIX\u4e1c\u4eac<\/td>\n \u4e1c\u4eac\uff08\u591a\u70b9\uff09<\/td>\n 1.2+ Tbps<\/td>\n 200+<\/td>\n<\/tr>\n JPNAP\u4e1c\u4eac<\/td>\n \u4e1c\u4eac<\/td>\n 900+ Gbps<\/td>\n 150+<\/td>\n<\/tr>\n BBIX<\/td>\n \u4e1c\u4eac\/\u5927\u962a<\/td>\n 800+ Gbps<\/td>\n 100+<\/td>\n<\/tr>\n JPIX\u5927\u962a<\/td>\n \u5927\u962a<\/td>\n 400+ Gbps<\/td>\n 80+<\/td>\n<\/tr>\n<\/table>\n<\/div>\n \u6d77\u5e95\u7535\u7f06\u7cfb\u7edf<\/h3>\n \u65e5\u672c\u7684\u8fde\u63a5\u6027\u5f88\u5927\u7a0b\u5ea6\u4e0a\u4f9d\u8d56\u4e8e\u6d77\u5e95\u7535\u7f06\u57fa\u7840\u8bbe\u65bd\uff0c\u8fd9\u663e\u8457\u5f71\u54cd\u4e86ping\u503c\uff1a<\/p>\n \n\n\n\n\n\n\n \u7535\u7f06\u7cfb\u7edf<\/th>\n \u8def\u7ebf<\/th>\n \u5bb9\u91cf<\/th>\n \u5ef6\u8fdf\u5f71\u54cd<\/th>\n<\/tr>\n PC-1<\/td>\n \u65e5\u672c – \u7f8e\u56fd\u897f\u6d77\u5cb8<\/td>\n 10 Tbps<\/td>\n ~83-98ms<\/td>\n<\/tr>\n FASTER<\/td>\n \u65e5\u672c – \u53f0\u6e7e – \u7f8e\u56fd<\/td>\n 60 Tbps<\/td>\n ~85-100ms<\/td>\n<\/tr>\n APG<\/td>\n \u4e1c\u4e9a\u73af\u7f51<\/td>\n 54 Tbps<\/td>\n ~25-45ms<\/td>\n<\/tr>\n SJC2<\/td>\n \u65e5\u672c – \u65b0\u52a0\u5761<\/td>\n 28 Tbps<\/td>\n ~65-80ms<\/td>\n<\/tr>\n<\/table>\n<\/div>\n \u65e5\u672c\u670d\u52a1\u5668\u4f18\u5316\u6280\u672f<\/strong><\/h2>\n \u7f51\u7edc\u4f18\u5316\u9700\u8981\u4e13\u6ce8\u4e8e\u786c\u4ef6\u548c\u8f6f\u4ef6\u7ec4\u4ef6\u7684\u591a\u5c42\u6b21\u65b9\u6cd5\u3002\u4ee5\u4e0b\u662f\u5b9e\u73b0\u6700\u4f73\u6027\u80fd\u7684\u8be6\u7ec6\u914d\u7f6e\uff1a<\/p>\n \n \u5185\u6838\u7ea7\u7f51\u7edc\u4f18\u5316\uff1a<\/h3>\n # TCP\u6808\u4f18\u5316\r\nsysctl -w net.ipv4.tcp_window_scaling=1\r\nsysctl -w net.ipv4.tcp_timestamps=1\r\nsysctl -w net.core.rmem_max=16777216\r\nsysctl -w net.core.wmem_max=16777216\r\nsysctl -w net.ipv4.tcp_rmem=\"4096 87380 16777216\"\r\nsysctl -w net.ipv4.tcp_wmem=\"4096 65536 16777216\"\r\nsysctl -w net.ipv4.tcp_max_syn_backlog=8192\r\nsysctl -w net.ipv4.tcp_max_tw_buckets=2000000\r\nsysctl -w net.ipv4.tcp_tw_reuse=1\r\nsysctl -w net.ipv4.tcp_fin_timeout=10\r\n\r\n# UDP\u4f18\u5316\r\nsysctl -w net.ipv4.udp_rmem_min=8192\r\nsysctl -w net.ipv4.udp_wmem_min=8192\r\nsysctl -w net.core.netdev_max_backlog=5000<\/code><\/pre>\n \u5e94\u7528\u5c42\u4f18\u5316\uff1a<\/h3>\n # \u9488\u5bf9\u65e5\u672c\u6d41\u91cf\u7684Nginx\u914d\u7f6e\r\nhttp {\r\n tcp_nodelay on;\r\n tcp_nopush on;\r\n keepalive_timeout 65;\r\n keepalive_requests 100000;\r\n \r\n # \u6700\u4f18\u7f13\u51b2\u533a\u5927\u5c0f\r\n client_body_buffer_size 128k;\r\n client_max_body_size 10m;\r\n client_header_buffer_size 1k;\r\n large_client_header_buffers 4 4k;\r\n \r\n # \u538b\u7f29\u8bbe\u7f6e\r\n gzip on;\r\n gzip_min_length 1000;\r\n gzip_proxied expired no-cache no-store private auth;\r\n gzip_types text\/plain text\/css application\/json application\/javascript;\r\n}<\/code><\/pre>\n<\/div>\n \u6027\u80fd\u76d1\u63a7\u4e0e\u5206\u6790<\/strong><\/h2>\n \n \u57fa\u672c\u76d1\u63a7\u6307\u6807\uff1a<\/h3>\n\n\n\n\n\n\n \u6307\u6807<\/th>\n \u6700\u4f73\u503c<\/th>\n \u8b66\u544a\u9608\u503c<\/th>\n \u4e25\u91cd\u9608\u503c<\/th>\n<\/tr>\n Ping\u503c(ms)<\/td>\n < 50<\/td>\n 50-100<\/td>\n > 100<\/td>\n<\/tr>\n \u6296\u52a8(ms)<\/td>\n < 5<\/td>\n 5-15<\/td>\n > 15<\/td>\n<\/tr>\n \u4e22\u5305\u7387(%)<\/td>\n 0<\/td>\n 0.1-1.0<\/td>\n > 1.0<\/td>\n<\/tr>\n TCP\u91cd\u4f20\u7387(%)<\/td>\n < 0.1<\/td>\n 0.1-1.0<\/td>\n > 1.0<\/td>\n<\/tr>\n<\/table>\n \u76d1\u63a7\u5de5\u5177\u914d\u7f6e\uff1a<\/h3>\n # Zabbix\u4ee3\u7406\u914d\u7f6e\u7528\u4e8e\u7f51\u7edc\u76d1\u63a7\r\nServer=zabbix.monitor.jp\r\nServerActive=zabbix.monitor.jp\r\nHostname=jp-server-01\r\nStartAgents=5\r\nTimeout=30\r\nBufferSize=100\r\nEnableRemoteCommands=1\r\n\r\n# \u81ea\u5b9a\u4e49\u7f51\u7edc\u76d1\u63a7\u9879\r\nUserParameter=net.latency[*],\/usr\/local\/bin\/check_latency.sh $1\r\nUserParameter=net.jitter[*],\/usr\/local\/bin\/check_jitter.sh $1\r\nUserParameter=net.packet_loss[*],\/usr\/local\/bin\/check_packet_loss.sh $1<\/code><\/pre>\n<\/div>\n \u65e5\u672c\u533a\u57dfCDN\u7b56\u7565<\/strong><\/h2>\n \u5185\u5bb9\u5206\u53d1\u7f51\u7edc(CDN)\u7684\u5b9e\u65bd\u5bf9\u4e8e\u5728\u65e5\u672c\u5404\u5730\u7406\u533a\u57df\u4fdd\u6301\u4f4e\u5ef6\u8fdf\u81f3\u5173\u91cd\u8981\uff1a<\/p>\n \n \u6700\u4f73\u63a5\u5165\u70b9\u4f4d\u7f6e\uff1a<\/h3>\n \n \u4e3b\u8981\u533a\u57df\uff1a<\/strong>\n \n \u4e1c\u4eac\uff08\u6771\u4eac\uff09- \u591a\u4e2a\u63a5\u5165\u70b9\n \n \u65b0\u5bbf\u533a<\/li>\n \u54c1\u5ddd\u533a<\/li>\n \u5343\u4ee3\u7530\u533a<\/li>\n<\/ul>\n<\/li>\n \u5927\u962a\uff08\u5927\u962a\uff09- \u53cc\u63a5\u5165\u70b9\n \n \u6885\u7530\u533a<\/li>\n \u96be\u6ce2\u533a<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n \u6b21\u8981\u533a\u57df\uff1a<\/strong>\n \n \u798f\u5188\uff08\u798f\u5ca1\uff09<\/li>\n \u540d\u53e4\u5c4b\uff08\u540d\u53e4\u5c4b\uff09<\/li>\n \u672d\u5e4c\uff08\u672d\u5e4c\uff09<\/li>\n \u4ed9\u53f0\uff08\u4ed9\u53f0\uff09<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n CDN\u914d\u7f6e\u793a\u4f8b\uff1a<\/h3>\n # Nginx CDN\u914d\u7f6e\r\nlocation ~* \\.(jpg|jpeg|png|gif|ico|css|js)$ {\r\n expires 7d;\r\n add_header Cache-Control \"public, no-transform\";\r\n add_header X-Cache-Status $upstream_cache_status;\r\n proxy_cache zone1;\r\n proxy_cache_use_stale error timeout http_500 http_502 http_503 http_504;\r\n proxy_cache_valid 200 301 302 7d;\r\n proxy_cache_valid 404 1m;\r\n proxy_cache_key $scheme$request_method$host$request_uri;\r\n}<\/code><\/pre>\n<\/div>\n \u65e5\u672c\u7f51\u7edc\u5b89\u5168\u8003\u8651<\/strong><\/h2>\n \n DDoS\u9632\u62a4\u914d\u7f6e\uff1a<\/h3>\n # IP Tables DDoS\u9632\u62a4\r\n# \u9650\u5236TCP\u8fde\u63a5\u901f\u7387\r\niptables -A INPUT -p tcp --dport 80 -m recent \\\r\n --name HTTP_FLOOD --update --seconds 1 --hitcount 20 -j DROP\r\niptables -A INPUT -p tcp --dport 443 -m recent \\\r\n --name HTTPS_FLOOD --update --seconds 1 --hitcount 20 -j DROP\r\n\r\n# SYN\u6d2a\u6c34\u9632\u62a4\r\niptables -N syn_flood\r\niptables -A INPUT -p tcp --syn -j syn_flood\r\niptables -A syn_flood -m limit --limit 1\/s --limit-burst 3 -j RETURN\r\niptables -A syn_flood -j DROP\r\n\r\n# UDP\u6d2a\u6c34\u9632\u62a4\r\niptables -A INPUT -p udp -m limit --limit 50\/s -j ACCEPT<\/code><\/pre>\n \u9488\u5bf9\u65e5\u672c\u6d41\u91cf\u7279\u5f81\u7684WAF\u89c4\u5219\uff1a<\/h3>\n # ModSecurity\u89c4\u5219\u7528\u4e8e\u65e5\u6587\u5b57\u7b26\u96c6\r\nSecRule REQUEST_HEADERS:Content-Type \"text\/.*(?:utf-8|shift[-_]?jis|euc-jp)\" \\\r\n \"id:1000,phase:1,pass,nolog,t:none\"\r\n\r\nSecRule REQUEST_COOKIES:\/.*\/ \"!@rx ^[\\x20-\\x7E\\xA1-\\xFE]+$\" \\\r\n \"id:1001,phase:1,deny,status:400,msg:'Cookie\u4e2d\u5b58\u5728\u65e0\u6548\u5b57\u7b26'\"\r\n\r\n# \u9488\u5bf9\u65e5\u6587\u7684SQL\u6ce8\u5165\u9632\u62a4\r\nSecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|!REQUEST_COOKIES:\/__utm\/|REQUEST_COOKIES_NAMES|REQUEST_BODY|REQUEST_HEADERS \\\r\n \"@rx (?i:(?:\\x27|')\\s*(?:or|and)\\s*\\x27?[0-9]+\\x27?(?:\\s*--|\/\\*))\" \\\r\n \"id:1002,phase:2,deny,status:403,msg:'\u68c0\u6d4b\u5230SQL\u6ce8\u5165\u653b\u51fb'\"<\/code><\/pre>\n<\/div>\n \u65e5\u672c\u5408\u89c4\u6027\u548c\u76d1\u7ba1\u8981\u6c42<\/strong><\/h2>\n \n \u65e5\u672c\u670d\u52a1\u5668\u8fd0\u8425\u7684\u5173\u952e\u5408\u89c4\u8003\u8651\uff1a<\/p>\n \n \u4e2a\u4eba\u4fe1\u606f\u4fdd\u62a4\u6cd5\uff08PIPA\/APPI\uff09\uff1a<\/strong>\n \n \u6570\u636e\u52a0\u5bc6\u8981\u6c42<\/li>\n \u7528\u6237\u540c\u610f\u7ba1\u7406<\/li>\n \u6570\u636e\u4fdd\u7559\u653f\u7b56<\/li>\n \u8de8\u5883\u4f20\u8f93\u9650\u5236<\/li>\n<\/ul>\n<\/li>\n \u884c\u4e1a\u7279\u5b9a\u89c4\u5b9a\uff1a<\/strong>\n \n \u91d1\u878d\u670d\u52a1\u5385(FSA)\u8981\u6c42<\/li>\n \u533b\u7597\u6570\u636e\u4fdd\u62a4\u6807\u51c6<\/li>\n \u7535\u4fe1\u4e1a\u52a1\u6cd5\u5408\u89c4<\/li>\n \u4e91\u670d\u52a1\u63d0\u4f9b\u5546\u8981\u6c42<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n \u5408\u89c4\u914d\u7f6e\u793a\u4f8b\uff1a<\/h3>\n # APPI\u5408\u89c4\u7684SSL\u914d\u7f6e\r\nssl_protocols TLSv1.2 TLSv1.3;\r\nssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;\r\nssl_prefer_server_ciphers off;\r\nssl_session_timeout 1d;\r\nssl_session_cache shared:SSL:50m;\r\nssl_session_tickets off;\r\nssl_stapling on;\r\nssl_stapling_verify on;<\/code><\/pre>\n<\/div>\n \u707e\u96be\u6062\u590d\u548c\u4e1a\u52a1\u8fde\u7eed\u6027<\/strong><\/h2>\n \n \u8003\u8651\u5230\u65e5\u672c\u72ec\u7279\u7684\u5730\u7406\u6311\u6218\uff0c\u5168\u9762\u7684\u707e\u96be\u6062\u590d\u89c4\u5212\u81f3\u5173\u91cd\u8981\uff1a<\/p>\n \u591a\u533a\u57df\u90e8\u7f72\u7b56\u7565\uff1a<\/h3>\n\n\n\n\n\n\n \u533a\u57df<\/th>\n \u6570\u636e\u4e2d\u5fc3<\/th>\n \u89d2\u8272<\/th>\n \u6545\u969c\u8f6c\u79fb\u4f18\u5148\u7ea7<\/th>\n<\/tr>\n \u4e1c\u4eac<\/td>\n TY3\/NTT<\/td>\n \u4e3b\u8981<\/td>\n 1<\/td>\n<\/tr>\n \u5927\u962a<\/td>\n OS1\/KDDI<\/td>\n \u6b21\u8981<\/td>\n 2<\/td>\n<\/tr>\n \u798f\u5188<\/td>\n FU1\/QTNet<\/td>\n \u707e\u5907\u7ad9\u70b9<\/td>\n 3<\/td>\n<\/tr>\n \u672d\u5e4c<\/td>\n SP1\/NTT<\/td>\n \u51b7\u5907\u4efd<\/td>\n 4<\/td>\n<\/tr>\n<\/table>\n \u6545\u969c\u8f6c\u79fb\u914d\u7f6e\uff1a<\/h3>\n # Keepalived VRRP\u914d\u7f6e\r\nvrrp_script chk_haproxy {\r\n script \"killall -0 haproxy\"\r\n interval 2\r\n weight 2\r\n}\r\n\r\nvrrp_instance VI_1 {\r\n state MASTER\r\n interface eth0\r\n virtual_router_id 51\r\n priority 100\r\n authentication {\r\n auth_type PASS\r\n auth_pass j@p@n2025\r\n }\r\n virtual_ipaddress {\r\n 192.168.1.10\r\n }\r\n track_script {\r\n chk_haproxy\r\n }\r\n notify_master \"\/etc\/keepalived\/notify.sh master\"\r\n notify_backup \"\/etc\/keepalived\/notify.sh backup\"\r\n notify_fault \"\/etc\/keepalived\/notify.sh fault\"\r\n}<\/code><\/pre>\n \u6570\u636e\u590d\u5236\u7b56\u7565\uff1a<\/h3>\n # PostgreSQL\u6d41\u590d\u5236\r\nprimary_conninfo = 'host=standby1.example.jp port=5432 user=repl password=xxx'\r\nwal_level = replica\r\nmax_wal_senders = 10\r\nwal_keep_segments = 32\r\nhot_standby = on\r\nsynchronous_commit = on\r\nsynchronous_standby_names = 'standby1'<\/code><\/pre>\n<\/div>\n \u7279\u5b9a\u7528\u4f8b\u6027\u80fd\u4f18\u5316<\/strong><\/h2>\n \u6e38\u620f\u670d\u52a1\u5668<\/h3>\n \n # \u6e38\u620f\u670d\u52a1\u5668TCP\u4f18\u5316\r\nsysctl -w net.ipv4.tcp_no_metrics_save=1\r\nsysctl -w net.ipv4.tcp_moderate_rcvbuf=1\r\nsysctl -w net.core.netdev_max_backlog=5000\r\nsysctl -w net.ipv4.tcp_congestion_control=bbr\r\n\r\n# UDP\u6e38\u620f\u6d41\u91cf\u4f18\u5148\u7ea7\r\ntc qdisc add dev eth0 root handle 1: prio bands 3\r\ntc filter add dev eth0 parent 1: protocol ip prio 1 u32 \\\r\n match ip dport 27015 0xffff flowid 1:1\r\ntc filter add dev eth0 parent 1: protocol ip prio 1 u32 \\\r\n match ip dport 27016 0xffff flowid 1:1<\/code><\/pre>\n \u5404\u7c7b\u6e38\u620f\u63a8\u8350\u8bbe\u7f6e\uff1a<\/strong><\/p>\n\n\n\n\n\n\n \u6e38\u620f\u7c7b\u578b<\/th>\n \u6700\u4f73Ping\u503c<\/th>\n \u7f13\u51b2\u533a\u5927\u5c0f<\/th>\n \u4f18\u5148\u7ea7\u8bbe\u7f6e<\/th>\n<\/tr>\n FPS\u6e38\u620f<\/td>\n <50ms<\/td>\n 64KB<\/td>\n \u6700\u9ad8<\/td>\n<\/tr>\n MMORPG<\/td>\n <100ms<\/td>\n 128KB<\/td>\n \u9ad8<\/td>\n<\/tr>\n \u7ade\u901f\u6e38\u620f<\/td>\n <75ms<\/td>\n 96KB<\/td>\n \u9ad8<\/td>\n<\/tr>\n \u7b56\u7565\u6e38\u620f<\/td>\n <150ms<\/td>\n 256KB<\/td>\n \u4e2d\u7b49<\/td>\n<\/tr>\n<\/table>\n<\/div>\n \u91d1\u878d\u4ea4\u6613\u7cfb\u7edf<\/h3>\n \n # \u4f4e\u5ef6\u8fdf\u4ea4\u6613\u914d\u7f6e\r\n# \u7f51\u7edc\u63a5\u53e3\u914d\u7f6e\r\nethtool -G eth0 rx 4096 tx 4096\r\nethtool -C eth0 rx-usecs 0 rx-frames 1 tx-usecs 0 tx-frames 1\r\n\r\n# IRQ\u4eb2\u548c\u6027\r\necho 1 > \/proc\/irq\/$(cat \/proc\/interrupts | grep eth0-TxRx-0 | cut -d: -f1)\/smp_affinity\r\n\r\n# \u8fdb\u7a0b\u4f18\u5148\u7ea7\r\nchrt -f -p 99 ${TRADING_PROCESS_PID}<\/code><\/pre>\n \u5ef6\u8fdf\u4f18\u5316\u5c42\u6b21\uff1a<\/strong><\/p>\n \n \u786c\u4ef6\u5c42\uff1a<\/strong>\n \n FPGA\u52a0\u901f<\/li>\n \u5185\u6838\u7ed5\u8fc7\u7f51\u7edc<\/li>\n TCP\u5378\u8f7d\u5f15\u64ce(TOE)<\/li>\n \u76f4\u63a5\u5185\u5b58\u8bbf\u95ee(DMA)<\/li>\n<\/ul>\n<\/li>\n \u8f6f\u4ef6\u5c42\uff1a<\/strong>\n \n \u5b9e\u65f6\u5185\u6838\u8865\u4e01<\/li>\n CPU\u7ed1\u5b9a<\/li>\n \u5185\u5b58\u9501\u5b9a<\/li>\n \u96f6\u590d\u5236\u7f51\u7edc<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n \u672a\u6765\u6280\u672f\u6574\u5408<\/strong><\/h2>\n \n 5G\u7f51\u7edc\u6574\u5408\uff1a<\/h3>\n \n \u7f51\u7edc\u5207\u7247\u914d\u7f6e\uff1a<\/strong>\n \n \u8d85\u53ef\u9760\u4f4e\u5ef6\u8fdf\u901a\u4fe1(URLLC)\u5207\u7247<\/li>\n \u589e\u5f3a\u578b\u79fb\u52a8\u5bbd\u5e26(eMBB)\u5207\u7247<\/li>\n \u6d77\u91cf\u7269\u8054\u7f51(mMTC)\u5207\u7247<\/li>\n<\/ul>\n<\/li>\n \u8fb9\u7f18\u8ba1\u7b97\u6574\u5408\uff1a<\/strong>\n # \u8fb9\u7f18\u8282\u70b9\u914d\u7f6e\r\nlocation \/edge\/ {\r\n proxy_pass http:\/\/edge-cluster;\r\n proxy_set_header Host $host;\r\n proxy_set_header X-Real-IP $remote_addr;\r\n proxy_http_version 1.1;\r\n proxy_set_header Connection \"\";\r\n proxy_buffering off;\r\n proxy_cache_bypass $http_upgrade;\r\n}<\/code><\/pre>\n<\/li>\n<\/ul>\n AI\u9a71\u52a8\u7684\u7f51\u7edc\u4f18\u5316\uff1a<\/h3>\n # \u57fa\u4e8e\u673a\u5668\u5b66\u4e60\u7684\u6d41\u91cf\u9884\u6d4b\r\nmodel_config = {\r\n 'input_features': ['time', 'day', 'traffic_pattern'],\r\n 'output_features': ['predicted_load'],\r\n 'learning_rate': 0.001,\r\n 'batch_size': 32,\r\n 'epochs': 100\r\n}\r\n\r\n# \u52a8\u6001\u8d44\u6e90\u5206\u914d\r\nresource_threshold = {\r\n 'cpu_high': 80,\r\n 'cpu_low': 20,\r\n 'memory_high': 85,\r\n 'memory_low': 30\r\n}<\/code><\/pre>\n<\/div>\n \u603b\u7ed3\u4e0e\u5c55\u671b<\/strong><\/h2>\n \u65e5\u672c\u670d\u52a1\u5668\u57fa\u7840\u8bbe\u65bd\u7684\u683c\u5c40\u6b63\u5728\u5feb\u901f\u53d1\u5c55\uff0c\u4ee5\u4e0b\u51e0\u4e2a\u5173\u952e\u8d8b\u52bf\u6b63\u5728\u5851\u9020\u672a\u6765\uff1a<\/p>\n \n \u65b0\u5174\u6280\u672f\u4e0e\u8d8b\u52bf\uff1a<\/h3>\n \n \u7f51\u7edc\u6f14\u8fdb\uff1a<\/strong>\n \n 5G\u548c6G\u6574\u5408<\/li>\n \u91cf\u5b50\u7f51\u7edc\u80fd\u529b<\/li>\n \u9ad8\u7ea7\u8fb9\u7f18\u8ba1\u7b97<\/li>\n AI\u9a71\u52a8\u7684\u7f51\u7edc\u4f18\u5316<\/li>\n<\/ul>\n<\/li>\n \u57fa\u7840\u8bbe\u65bd\u53d1\u5c55\uff1a<\/strong>\n \n \u7eff\u8272\u6570\u636e\u4e2d\u5fc3\u8ba1\u5212<\/li>\n \u81ea\u52a8\u5316\u6269\u5c55\u89e3\u51b3\u65b9\u6848<\/li>\n \u6df7\u5408\u4e91\u67b6\u6784<\/li>\n \u5bb9\u5668\u539f\u751f\u7f51\u7edc<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n \n \u6700\u7ec8\u5efa\u8bae\uff1a<\/h3>\n \n \u5373\u65f6\u884c\u52a8\uff1a<\/strong>\n \n \u5b9e\u65bd\u57fa\u7ebf\u76d1\u63a7<\/li>\n \u914d\u7f6e\u6700\u4f18\u7f51\u7edc\u8bbe\u7f6e<\/li>\n \u5efa\u7acb\u6027\u80fd\u57fa\u51c6<\/li>\n \u90e8\u7f72\u5b89\u5168\u63aa\u65bd<\/li>\n<\/ul>\n<\/li>\n \u957f\u671f\u7b56\u7565\uff1a<\/strong>\n \n \u89c4\u5212\u591a\u533a\u57df\u5f39\u6027<\/li>\n \u6295\u8d44\u81ea\u52a8\u5316\u5de5\u5177<\/li>\n \u91c7\u7528\u65b0\u5174\u6280\u672f<\/li>\n \u5b9a\u671f\u6027\u80fd\u5ba1\u8ba1<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n \u7406\u89e3\u548c\u4f18\u5316\u65e5\u672c\u670d\u52a1\u5668\u7684ping\u503c\u9700\u8981\u4e00\u4e2a\u5168\u9762\u7684\u65b9\u6cd5\uff0c\u8be5\u65b9\u6cd5\u8981\u8003\u8651\u6280\u672f\u3001\u5730\u7406\u548c\u6587\u5316\u56e0\u7d20\u3002\u901a\u8fc7\u9075\u5faa\u672c\u6307\u5357\u4e2d\u7684\u6307\u5bfc\u65b9\u9488\u5e76\u5b9e\u65bd\u63a8\u8350\u7684\u914d\u7f6e\uff0c\u7ec4\u7ec7\u53ef\u4ee5\u5728\u65e5\u672c\u670d\u52a1\u5668\u8fd0\u8425\u4e2d\u5b9e\u73b0\u6700\u4f73\u6027\u80fd\uff0c\u540c\u65f6\u4fdd\u6301\u6210\u672c\u6548\u76ca\u548c\u53ef\u9760\u6027\u3002<\/p>\n","protected":false},"excerpt":{"rendered":" \u5bf9\u4e8e\u5bfb\u6c42\u670d\u52a1\u5668\u79df\u7528\u548c\u670d\u52a1\u5668\u6258\u7ba1\u670d\u52a1\u6700\u4f73\u6027\u80fd\u7684\u6280\u672f\u4e13\u4e1a\u4eba\u58eb\u6765\u8bf4\uff0c\u4e86\u89e3\u65e5\u672c\u670d\u52a1\u5668\u7684ping\u503c\u81f3\u5173\u91cd\u8981\u3002\u5728\u5f53\u4eca\u4e92\u8054\u7f51\u7d27\u5bc6\u76f8\u8fde\u7684\u6570\u5b57\u73af\u5883\u4e2d\uff0c\u6beb\u79d2\u7ea7\u7684\u5dee\u5f02\u53ef\u80fd\u610f\u5473\u7740\u6210\u529f\u4e0e\u5931\u8d25\u7684\u533a\u522b\uff0c\u4f18\u5316\u670d\u52a1\u5668\u54cd\u5e94\u65f6\u95f4\u53d8\u5f97\u6bd4\u4ee5\u5f80\u4efb\u4f55\u65f6\u5019\u90fd\u66f4\u52a0\u91cd\u8981\u3002\u672c\u7efc\u5408\u6307\u5357\u5c06\u6df1\u5165\u63a2\u8ba8\u670d\u52a1\u5668\u5ef6\u8fdf\u7684\u7ec6\u8282\uff0c\u7279\u522b\u5173\u6ce8\u65e5\u672c\u7684\u57fa\u7840\u8bbe\u65bd\u3002 \u5feb\u901f\u53c2\u8003\uff1a\u5bf9\u4e8e\u6e38\u620f\u548c\u5b9e\u65f6\u5e94\u7528\u7a0b\u5e8f\uff0c\u4ece\u4e1c\u4e9a\u8fde\u63a5\u5230\u65e5\u672c\u670d\u52a1\u5668\u65f6\uff0c\u5e94\u5c06ping\u503c\u63a7\u5236\u5728100ms\u4ee5\u4e0b\u3002\u5177\u4f53\u671f\u671b\u503c\u5e94\u6839\u636e\u5730\u7406\u8ddd\u79bb\u548c\u7f51\u7edc\u72b6\u51b5\u8fdb\u884c\u8c03\u6574\u3002 \u7406\u89e3Ping\u503c\uff1a\u6280\u672f\u5206\u6790 Ping\u503c\u4ee5\u6beb\u79d2(ms)\u4e3a\u5355\u4f4d\uff0c\u8868\u793a\u6570\u636e\u5305\u5728\u60a8\u7684\u4f4d\u7f6e\u4e0e\u65e5\u672c\u670d\u52a1\u5668\u4e4b\u95f4\u7684\u5f80\u8fd4\u65f6\u95f4(RTT)\u3002\u8fd9\u4e2a\u57fa\u672c\u7684\u7f51\u7edc\u6307\u6807\u4e3a\u7f51\u7edc\u6027\u80fd\u548c\u7528\u6237\u4f53\u9a8c\u8d28\u91cf\u63d0\u4f9b\u4e86\u91cd\u8981\u89c1\u89e3\u3002\u4e0e\u8425\u9500\u6307\u6807\u6216\u7406\u8bba\u5e26\u5bbd\u6570\u636e\u4e0d\u540c\uff0cping\u503c\u63d0\u4f9b\u4e86\u5177\u4f53\u7684\u3001\u771f\u5b9e\u4e16\u754c\u7684\u6027\u80fd\u6570\u636e\u3002 Ping\u6d4b\u91cf\u7684\u5173\u952e\u7ec4\u6210\u90e8\u5206\uff1a \u5f80\u8fd4\u65f6\u95f4(RTT)\uff1a \u521d\u59cb\u6570\u636e\u5305\u4f20\u8f93\u65f6\u95f4 \u670d\u52a1\u5668\u5904\u7406\u65f6\u95f4 \u8fd4\u56de\u6570\u636e\u5305\u4f20\u8f93\u65f6\u95f4 \u7f51\u7edc\u5f00\u9500\u548c\u5904\u7406\u5ef6\u8fdf \u7f51\u7edc\u8df3\u6570\uff1a \u6bcf\u4e2a\u8def\u7531\u5668\u589e\u52a00.1-2ms\u5ef6\u8fdf \u5178\u578b\u8def\u7531\u6d89\u53ca10-20\u4e2a\u8df3\u6570 \u8fb9\u754c\u7f51\u5173\u8f6c\u6362 \u4e92\u8054\u7f51\u4ea4\u6362\u70b9(IXPs) \u7269\u7406\u8ddd\u79bb\u56e0\u7d20\uff1a \u5149\u7ea4\u7535\u7f06\u957f\u5ea6 \u5730\u7406\u8def\u7531\u8def\u5f84 \u6d77\u5e95\u7535\u7f06\u7cfb\u7edf \u6700\u540e\u4e00\u516c\u91cc\u8fde\u63a5 \u65e5\u672c\u670d\u52a1\u5668\u7684\u6b63\u5e38Ping\u503c \u57fa\u4e8e\u5bf9\u4e0d\u540c\u5730\u533a\u548c\u7f51\u7edc\u6761\u4ef6\u7684\u5e7f\u6cdb\u6d4b\u8bd5\uff0c\u4ee5\u4e0b\u662f\u8fde\u63a5\u65e5\u672c\u670d\u52a1\u5668\u65f6\u7684\u9884\u671fping\u503c\u8be6\u7ec6\u5206\u6790\uff1a \u5730\u533a \u6700\u4f73\u8303\u56f4(ms) \u53ef\u63a5\u53d7\u8303\u56f4(ms) \u9ad8\u5cf0\u65f6\u6bb5\u5f71\u54cd \u65e5\u672c\u56fd\u5185 5-20 20-40 +10-15ms \u4e1c\u4e9a 30-70 70-100 +15-25ms \u4e1c\u5357\u4e9a 50-100 100-150 +20-30ms \u5317\u7f8e(\u897f\u90e8) 100-150 150-200 +25-40ms \u5317\u7f8e(\u4e1c\u90e8) 150-200 200-250 +30-50ms \u6b27\u6d32 200-300 300-400 +40-60ms \u533a\u57df\u5dee\u5f02\uff1a\u5bf9\u4e8e\u4e2d\u56fd\u5927\u9646\u7528\u6237\uff0c\u4e0d\u540c\u5730\u533a\u548c\u7f51\u7edc\u8fd0\u8425\u5546\u7684\u5178\u578bping\u503c\u5dee\u5f02\u663e\u8457\uff1a \u534e\u4e1c\u5730\u533a\uff08\u4e0a\u6d77\u3001\u676d\u5dde\uff09\uff1a40-80ms \u534e\u5357\u5730\u533a\uff08\u5e7f\u5dde\u3001\u6df1\u5733\uff09\uff1a50-90ms \u534e\u5317\u5730\u533a\uff08\u5317\u4eac\u3001\u5929\u6d25\uff09\uff1a60-100ms \u897f\u90e8\u5730\u533a\uff08\u6210\u90fd\u3001\u897f\u5b89\uff09\uff1a70-120ms […]<\/p>\n Read More…<\/a><\/p>\n","protected":false},"author":2,"featured_media":25972,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[8117],"tags":[8316,8317,5255,4086,516],"class_list":["post-25975","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-japan-dedicated-server-sc","tag-japan-server-ping-sc","tag-hosting-japan-sc","tag-server-latency-sc","tag-ping-test-sc","tag-network-latency-sc"],"acf":[],"yoast_head":"\n