[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n

\u9999\u6e2f\u4e13\u5c5e\u7f51\u7edc\u4f18\u5316\u65b9\u6848<\/strong><\/h2>\n

\u8de8\u5883\u8fde\u63a5\u8c03\u4f18\uff08\u9999\u6e2f \u2194 \u4e2d\u56fd\u5927\u9646\/\u4e1c\u5357\u4e9a\uff09<\/h3>\n

\u9488\u5bf9\u9999\u6e2f\u8de8\u5883\u94fe\u8def\u7684\u72ec\u7279\u5ef6\u8fdf\u7279\u5f81\u8fdb\u884c\u4f18\u5316\uff1a<\/p>\n

\n
1. TCP SYN\u91cd\u8bd5\u8c03\u6574\uff1a\u5c06net.ipv4.tcp_syn_retries<\/code>\u8bbe\u4e3a\u9002\u4e2d\u503c\uff0c\u7f29\u77ed\u9999\u6e2f\u4e0e\u4e2d\u56fd\u5927\u9646\u8def\u7531\u7684\u8fde\u63a5\u5efa\u7acb\u65f6\u95f4<\/li>\n
2. MSS\u94b3\u5236\uff1a\u914d\u7f6enet.ipv4.tcp_mss_clamp<\/code>\u53c2\u6570\uff0c\u5339\u914d\u9999\u6e2f\u6807\u51c6MTU\u5927\u5c0f\uff0c\u907f\u514d\u6570\u636e\u5305\u5206\u7247\u5bfc\u81f4\u8de8\u5883\u541e\u5410\u91cf\u4e0b\u964d<\/li>\n
3. \u4f4e\u5ef6\u8fdf\u6a21\u5f0f\uff1a\u542f\u7528net.ipv4.tcp_low_latency<\/code>\uff0c\u9002\u7528\u4e8e\u9999\u6e2f\u670d\u52a1\u5668\u6258\u7ba1\u7684\u5b9e\u65f6\u5e94\u7528\uff08\u6e38\u620f\u3001\u76f4\u64ad\uff09\uff0c\u4f18\u5148\u4fdd\u969c\u54cd\u5e94\u901f\u5ea6<\/li>\n<\/ol>\n

   \u9999\u6e2f\u670d\u52a1\u5668\u5e26\u5bbd\u5229\u7528\u7387\u4f18\u5316<\/h3>\n

   \u5728\u4e0d\u989d\u5916\u6269\u5bb9\u7684\u524d\u63d0\u4e0b\u6700\u5927\u5316\u5e26\u5bbd\u4f7f\u7528\u6548\u7387\uff1a<\/p>\n

   \n
   • \u7f51\u7edc\u961f\u5217\u957f\u5ea6\uff1a\u6839\u636e\u9999\u6e2f\u670d\u52a1\u5668\u5e26\u5bbd\u7b49\u7ea7\u8c03\u6574net.core.netdev_max_backlog<\/code>\uff0c\u786e\u4fdd\u6d41\u91cf\u5cf0\u503c\u65f6\u6570\u636e\u5305\u4e0d\u4e22\u5931<\/li>\n
   • \u672c\u5730\u7aef\u53e3\u8303\u56f4\u6269\u5c55\uff1a\u6269\u5927net.ipv4.ip_local_port_range<\/code>\u53c2\u6570\u503c\uff0c\u652f\u6301\u66f4\u591a\u5e76\u53d1\u51fa\u7ad9\u8fde\u63a5\uff0c\u5bf9\u4ee3\u7406\u6216\u8def\u7531\u7c7b\u9999\u6e2f\u670d\u52a1\u5668\u81f3\u5173\u91cd\u8981<\/li>\n
   • IP\u8f6c\u53d1\u4f18\u5316\uff1a\u82e5\u5c06\u9999\u6e2f\u670d\u52a1\u5668\u7528\u4f5c\u8de8\u5883\u8def\u7531\u8282\u70b9\uff0c\u542f\u7528net.ipv4.ip_forward<\/code>\u5e76\u4f18\u5316\u6570\u636e\u5305\u8f6c\u53d1\u6548\u7387\u76f8\u5173\u53c2\u6570<\/li>\n<\/ul>\n

     \u9999\u6e2f\u670d\u52a1\u5668DNS\u4f18\u5316<\/h3>\n

     \u964d\u4f4eDNS\u5ef6\u8fdf\uff08\u9999\u6e2f\u6258\u7ba1\u670d\u52a1\u5e38\u89c1\u6027\u80fd\u74f6\u9888\uff09\uff1a<\/p>\n

     \n
     • DNS\u7f13\u5b58\u4fdd\u7559\uff1a\u7981\u7528net.ipv4.tcp_no_metrics_save<\/code>\uff0c\u4fdd\u7559DNS\u89e3\u6790\u7f13\u5b58\uff0c\u51cf\u5c11\u5bf9\u8fdc\u7a0bDNS\u670d\u52a1\u5668\u7684\u91cd\u590d\u67e5\u8be2<\/li>\n
     • \u672c\u5730DNS\u914d\u7f6e\uff1a\u5728\/etc\/resolv.conf<\/code>\u4e2d\u914d\u7f6e\u9999\u6e2f\u672c\u5730DNS\u89e3\u6790\u5668\uff0c\u7f29\u77ed\u57df\u540d\u89e3\u6790\u5f80\u8fd4\u65f6\u95f4<\/li>\n<\/ul>\n

       [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n

       \u8f85\u52a9\u4f18\u5316\uff1a\u9632\u706b\u5899\u4e0e\u7f51\u7edc\u670d\u52a1<\/strong><\/h2>\n

       \u51cf\u5c11\u975e\u5fc5\u8981\u670d\u52a1\u548c\u9632\u706b\u5899\u89c4\u5219\u5e26\u6765\u7684\u6027\u80fd\u5f00\u9500\uff1a<\/p>\n

       \n
       1. iptables\u4f18\u5316\uff1a\u6e05\u7406\u65e0\u7528\u89c4\u5219\u5e76\u589e\u5927net.netfilter.nf_conntrack_max<\/code>\uff0c\u652f\u6301\u66f4\u591a\u5e76\u53d1\u8fde\u63a5\u4e14\u907f\u514d\u8fde\u63a5\u8ddf\u8e2a\u74f6\u9888<\/li>\n
       2. firewalld\u8c03\u4f18\uff1a\u4f18\u5148\u914d\u7f6e\u5e38\u7528\u7aef\u53e3\u89c4\u5219\uff0c\u964d\u4f4e\u9999\u6e2f\u670d\u52a1\u5668\u6570\u636e\u5305\u5904\u7406\u5ef6\u8fdf<\/li>\n
       3. \u670d\u52a1\u7981\u7528\uff1a\u505c\u6b62\u975e\u5fc5\u8981\u7f51\u7edc\u670d\u52a1\uff08\u5982rpcbind\u3001nfs\uff09\uff0c\u91ca\u653e\u7f51\u7edc\u8d44\u6e90\u5e76\u51cf\u5c11\u653b\u51fb\u9762<\/li>\n
       4. NIC\u591a\u961f\u5217\u914d\u7f6e\uff1a\u542f\u7528RSS\uff08\u63a5\u6536\u7aef\u7f29\u653e\uff09\u6280\u672f\uff0c\u5c06\u7f51\u7edc\u4e2d\u65ad\u5206\u6563\u5230\u591a\u4e2aCPU\u6838\u5fc3\uff0c\u63d0\u5347\u591a\u6838\u9999\u6e2f\u670d\u52a1\u5668\u7684\u5e76\u884c\u5904\u7406\u80fd\u529b<\/li>\n<\/ol>\n

          [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n

          \u5b9e\u64cd\u5b9e\u65bd\u6d41\u7a0b<\/strong><\/h2>\n

          \u9075\u5faa\u4ee5\u4e0b\u7ed3\u6784\u5316\u65b9\u6848\u5b89\u5168\u5e94\u7528\u4f18\u5316\u914d\u7f6e\uff1a<\/p>\n

          \n
          1. \u6267\u884c\u4f18\u5316\u524d\u57fa\u51c6\u6d4b\u8bd5\uff0c\u5efa\u7acb\u8de8\u5883\u5ef6\u8fdf\u3001\u541e\u5410\u91cf\u548c\u5e76\u53d1\u8fde\u63a5\u6570\u7684\u6027\u80fd\u57fa\u7ebf<\/li>\n
          2. \u7f16\u8f91\/etc\/sysctl.conf<\/code>\u6587\u4ef6\uff0c\u6dfb\u52a0\u6216\u4fee\u6539\u76ee\u6807\u53c2\u6570\uff0c\u6309\u529f\u80fd\u5206\u7ec4\u4fbf\u4e8e\u7ef4\u62a4<\/li>\n
          3. \u901a\u8fc7sysctl -p<\/code>\u5e94\u7528\u914d\u7f6e\u53d8\u66f4\uff0c\u91cd\u542f\u7f51\u7edc\u670d\u52a1\uff08\u5982systemctl restart network<\/code>\u6216netplan apply<\/code>\uff09<\/li>\n
          4. \u4f7f\u7528\u76f8\u540c\u57fa\u51c6\u6d4b\u8bd5\u5de5\u5177\u9a8c\u8bc1\u4f18\u5316\u6548\u679c\uff0c\u5bf9\u6bd4\u4f18\u5316\u524d\u540e\u6307\u6807\u5dee\u5f02<\/li>\n
          5. \u6301\u7eed\u76d1\u63a724-48\u5c0f\u65f6\u7a33\u5b9a\u6027\uff0c\u82e5\u51fa\u73b0\u5f02\u5e38\u884c\u4e3a\uff0c\u9010\u6b65\u56de\u6eda\u975e\u5173\u952e\u4f18\u5316\u9879<\/li>\n<\/ol>\n

             [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n

             \u5e38\u89c1\u95ee\u9898\u6392\u67e5<\/strong><\/h2>\n

             \n
             • \u4f18\u5316\u540e\u7a33\u5b9a\u6027\u95ee\u9898\uff1a\u68c0\u67e5\u53c2\u6570\u51b2\u7a81\uff08\u5982tcp_tw_recycle<\/code>\u4e0eNAT\u73af\u5883\u4e0d\u517c\u5bb9\uff09\uff0c\u9010\u4e00\u56de\u6eda\u53d8\u66f4\u6392\u67e5\u539f\u56e0<\/li>\n
             • \u8de8\u5883\u8fde\u63a5\u6301\u7eed\u8d85\u65f6\uff1a\u4f7f\u7528traceroute<\/code>\u5b9a\u4f4d\u95ee\u9898\u8def\u7531\uff0c\u9488\u5bf9\u6027\u8c03\u6574tcp_syn_retries<\/code>\u6216tcp_retries2<\/code><\/li>\n
             • \u9ad8\u8d1f\u8f7d\u4e0bCPU\u5360\u7528\u8fc7\u9ad8\uff1a\u4f18\u5316\u7f51\u7edc\u4e2d\u65ad\u5747\u8861\uff08\u7981\u7528irqbalance\u670d\u52a1\uff0c\u5c06\u7f51\u5361\u4e2d\u65ad\u7ed1\u5b9a\u5230\u7279\u5b9aCPU\u6838\u5fc3\uff09<\/li>\n
             • \u8fd0\u8425\u5546\u7279\u5b9a\u517c\u5bb9\u6027\u95ee\u9898\uff1a\u6839\u636e\u7f51\u7edc\u63d0\u4f9b\u5546\u8def\u7531\u7279\u6027\u8c03\u6574\u53c2\u6570\uff08\u5982\u90e8\u5206\u8fd0\u8425\u5546\u9700\u9002\u914d\u4e0d\u540cMSS\u503c\uff09<\/li>\n<\/ul>\n

               [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n

               \u603b\u7ed3\u4e0e\u8fdb\u9636\u65b9\u5411<\/strong><\/h2>\n

               \u9999\u6e2fLinux\u670d\u52a1\u5668\u7f51\u7edc\u53c2\u6570\u4f18\u5316\u7684\u6838\u5fc3\u662f\u8ba9\u5185\u6838\u884c\u4e3a\u4e0e\u5730\u533a\u72ec\u7279\u7f51\u7edc\u5c5e\u6027\uff08BGP\u591a\u7ebf\u8fde\u63a5\u3001\u8de8\u5883\u5ef6\u8fdf\u3001\u9ad8\u5e76\u53d1\u9700\u6c42\uff09\u76f8\u5339\u914d\u3002\u672c\u6587\u6240\u8ff0\u4f18\u5316\u65b9\u6848\u2014\u2014\u805a\u7126TCP\/IP\u534f\u8bae\u6808\u4f18\u5316\u3001\u5e26\u5bbd\u5229\u7528\u7387\u63d0\u5347\u53ca\u7a33\u5b9a\u6027\u589e\u5f3a\u2014\u2014\u65e0\u9700\u786c\u4ef6\u6295\u5165\u5373\u53ef\u5b9e\u73b0\u663e\u8457\u6027\u80fd\u6539\u5584\u3002\u8fdb\u9636\u7528\u6237\u53ef\u63a2\u7d22\u786c\u4ef6\u7ea7\u4f18\u5316\u624b\u6bb5\uff0c\u5982SR-IOV\uff08\u5355\u6839I\/O\u865a\u62df\u5316\uff09\u6280\u672f\u7ed5\u5f00\u5185\u6838\u7f51\u7edc\u6808\uff0c\u6216\u96c6\u6210\u7f51\u7edc\u76d1\u63a7\u5de5\u5177\u5b9e\u73b0\u57fa\u4e8e\u5b9e\u65f6\u6d41\u91cf\u7684\u52a8\u6001\u53c2\u6570\u8c03\u6574\u3002\u968f\u7740\u9999\u6e2f\u6301\u7eed\u4f5c\u4e3a\u533a\u57df\u53ca\u5168\u7403\u8fde\u63a5\u67a2\u7ebd\uff0c\u638c\u63e1\u8fd9\u4e9b\u4e13\u4e1a\u4f18\u5316\u6280\u5de7\u5bf9\u7ba1\u7406\u670d\u52a1\u5668\u79df\u7528\u548c\u670d\u52a1\u5668\u6258\u7ba1\u73af\u5883\u7684\u5de5\u7a0b\u5e08\u81f3\u5173\u91cd\u8981\u3002\u9700\u6ce8\u610f\uff0c\u9999\u6e2fLinux\u670d\u52a1\u5668\u7f51\u7edc\u6027\u80fd\u4f18\u5316\u662f\u4e00\u4e2a\u8fed\u4ee3\u8fc7\u7a0b\u2014\u2014\u9700\u5b9a\u671f\u91cd\u65b0\u8fdb\u884c\u57fa\u51c6\u6d4b\u8bd5\uff0c\u5e76\u6839\u636e\u4e1a\u52a1\u8d1f\u8f7d\u6216\u7f51\u7edc\u73af\u5883\u53d8\u5316\u8c03\u6574\u914d\u7f6e\u3002<\/p>\n

               [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

               [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] \u9999\u6e2f\u4f5c\u4e3a\u4e9a\u592a\u5730\u533a\u7f51\u7edc\u67a2\u7ebd\uff0c\u51ed\u501f\u6218\u7565\u5730\u7406\u4f4d\u7f6e\u4e3a\u4e2d\u56fd\u5927\u9646\u3001\u4e1c\u5357\u4e9a\u53ca\u5168\u7403\u5730\u533a\u63d0\u4f9b\u4f4e\u5ef6\u8fdf\u8de8\u5883\u8fde\u63a5\u3002Linux\u670d\u52a1\u5668\u56e0\u5176\u7a33\u5b9a\u6027\u548c\u7075\u6d3b\u6027\uff0c\u5728\u670d\u52a1\u5668\u79df\u7528\u548c\u670d\u52a1\u5668\u6258\u7ba1\u573a\u666f\u4e2d\u5907\u53d7\u9752\u7750\uff0c\u4f46\u9ed8\u8ba4\u5185\u6838\u914d\u7f6e\u5f80\u5f80\u4e0e\u9999\u6e2fBGP\u591a\u7ebf\u7f51\u7edc\u67b6\u6784\u4e0d\u5339\u914d\uff0c\u5bfc\u81f4\u6027\u80fd\u672a\u80fd\u5145\u5206\u53d1\u6325\u3002\u672c\u6587\u6df1\u5165\u89e3\u6790\u9488\u5bf9\u9999\u6e2f\u7f51\u7edc\u7279\u6027\u7684\u53c2\u6570\u8c03\u6574\u65b9\u6848\uff0c\u5e2e\u52a9\u5de5\u7a0b\u5e08\u65e0\u9700\u5347\u7ea7\u786c\u4ef6\u5373\u53ef\u91ca\u653e\u670d\u52a1\u5668\u6f5c\u5728\u6027\u80fd\u3002\u6838\u5fc3\u805a\u7126\u9999\u6e2fLinux\u670d\u52a1\u5668\u7f51\u7edc\u6027\u80fd\u4f18\u5316\u2014\u2014\u89e3\u51b3TCP\/IP\u534f\u8bae\u6808\u4f4e\u6548\u3001\u5e26\u5bbd\u5229\u7528\u7387\u74f6\u9888\u53ca\u8de8\u5883\u8fde\u63a5\u7a33\u5b9a\u6027\u95ee\u9898\u3002 [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] \u9999\u6e2f\u670d\u52a1\u5668Linux\u7f51\u7edc\u6027\u80fd\u57fa\u7840 \u8981\u5b9e\u73b0\u9ad8\u6548\u4f18\u5316\uff0c\u9996\u5148\u9700\u7406\u89e3\u9999\u6e2f\u7f51\u7edc\u73af\u5883\u4e0eLinux\u7f51\u7edc\u6808\u7684\u4ea4\u4e92\u903b\u8f91\uff1a \u9999\u6e2f\u670d\u52a1\u5668\u4f9d\u8d56BGP\u591a\u7ebf\u7f51\u7edc\uff0c\u6574\u5408\u56fd\u9645\u5e26\u5bbd\u4e0e\u672c\u5730\u5e26\u5bbd\uff0c\u5e76\u4e3a\u4e2d\u56fd\u7535\u4fe1\u3001\u4e2d\u56fd\u8054\u901a\u3001\u4e2d\u56fd\u79fb\u52a8\u7b49\u4e3b\u6d41\u8fd0\u8425\u5546\u4f18\u5316\u8def\u7531 Linux\u7f51\u7edc\u6027\u80fd\u6838\u5fc3\u5f71\u54cd\u56e0\u7d20\uff1a\u5185\u6838\u53c2\u6570\u3001TCP\/IP\u534f\u8bae\u884c\u4e3a\u3001DNS\u89e3\u6790\u6548\u7387\u53ca\u9632\u706b\u5899\u5f00\u9500 \u4f18\u5316\u524d\u8bca\u65ad\u9700\u4f7f\u7528ifstat\uff08\u5e26\u5bbd\u76d1\u63a7\uff09\u3001netstat\uff08\u8fde\u63a5\u8ddf\u8e2a\uff09\u3001tcpdump\uff08\u6570\u636e\u5305\u5206\u6790\uff09\u7b49\u5de5\u5177\uff0c\u642d\u914diPerf3\u6216Apache Bench\u8fdb\u884c\u6027\u80fd\u57fa\u51c6\u6d4b\u8bd5 \u5173\u952e\u51c6\u5907\u6b65\u9aa4\uff1a\u4fee\u6539\u524d\u5907\u4efd\/etc\/sysctl.conf\u6587\u4ef6\uff0c\u5e76\u6839\u636e\u64cd\u4f5c\u7cfb\u7edf\u5dee\u5f02\uff08CentOS\u3001Ubuntu\u3001Debian\uff09\u8c03\u6574\u53c2\u6570\u5e94\u7528\u65b9\u5f0f [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] \u6838\u5fc3\u4f18\u5316\uff1aLinux\u7f51\u7edc\u5185\u6838\u53c2\u6570\u8c03\u4f18 \u9762\u5411\u9999\u6e2f\u8de8\u5883\u8fde\u63a5\u7684TCP\/IP\u534f\u8bae\u6808\u8c03\u6574 \u9ed8\u8ba4TCP\/IP\u8bbe\u7f6e\u9002\u7528\u4e8e\u901a\u7528\u7f51\u7edc\u73af\u5883\u2014\u2014\u9999\u6e2f\u8de8\u5883\u5ef6\u8fdf\u7279\u6027\u9700\u9488\u5bf9\u6027\u4f18\u5316\uff1a \u8fde\u63a5\u961f\u5217\u4f18\u5316\uff1a\u589e\u5927net.core.somaxconn\u53c2\u6570\uff0c\u6269\u5c55\u6700\u5927\u7b49\u5f85\u8fde\u63a5\u961f\u5217\u957f\u5ea6\uff0c\u5bf9\u9999\u6e2f\u670d\u52a1\u5668\u9ad8\u5e76\u53d1\u8d1f\u8f7d\u81f3\u5173\u91cd\u8981 TIME_WAIT\u72b6\u6001\u7ba1\u7406\uff1a\u542f\u7528net.ipv4.tcp_tw_reuse\u5e76\u8c03\u6574net.ipv4.tcp_tw_recycle\uff0c\u51cf\u5c11\u8de8\u5883\u8fde\u63a5\u9891\u7e41\u5efa\u7acb\u91ca\u653e\u5bfc\u81f4\u7684\u5957\u63a5\u5b57\u8017\u5c3d\u95ee\u9898 \u7f13\u51b2\u533a\u5927\u5c0f\u6821\u51c6\uff1a\u4fee\u6539net.core.wmem_max\uff08\u5199\u7f13\u51b2\u533a\uff09\u548cnet.core.rmem_max\uff08\u8bfb\u7f13\u51b2\u533a\uff09\uff0c\u5339\u914d\u9999\u6e2f\u56fd\u9645\u5e26\u5bbd\u5bb9\u91cf\uff0c\u907f\u514d\u5e26\u5bbd\u5229\u7528\u7387\u4e0d\u8db3 \u62e5\u585e\u63a7\u5236\u7b97\u6cd5\uff1a\u5207\u6362\u81f3BBR\u7b97\u6cd5\uff08tcp_congestion_control = bbr\uff09\uff0c\u63d0\u5347\u9999\u6e2f\u4e0e\u5168\u7403\u5730\u533a\u9ad8\u5ef6\u8fdf\u8de8\u5883\u94fe\u8def\u7684\u541e\u5410\u91cf \u9002\u914d\u9999\u6e2f\u591a\u7ebf\u8def\u7531\u7684\u7f51\u7edc\u7a33\u5b9a\u6027\u53c2\u6570 \u9999\u6e2fBGP\u8def\u7531\u591a\u6837\u6027\u8981\u6c42\u53c2\u6570\u5177\u5907\u8def\u7531\u6ce2\u52a8\u9002\u5e94\u80fd\u529b\u548c\u516c\u7f51\u5b89\u5168\u9632\u62a4\u80fd\u529b\uff1a \u4e22\u5305\u6062\u590d\u4f18\u5316\uff1a\u8c03\u6574net.ipv4.tcp_retries2\u53c2\u6570\uff0c\u5e73\u8861\u4e0d\u7a33\u5b9a\u8de8\u5883\u8def\u7531\u7684\u91cd\u8bd5\u6b21\u6570\uff0c\u907f\u514d\u4e0d\u5fc5\u8981\u7684\u8fde\u63a5\u4e2d\u65ad SYN\u6d2a\u6c34\u9632\u62a4\uff1a\u542f\u7528net.ipv4.tcp_syncookies\uff0c\u7f13\u89e3\u9999\u6e2f\u516c\u7f51\u670d\u52a1\u5668\u9762\u4e34\u7684DDoS\u653b\u51fb\u98ce\u9669 \u8def\u7531\u7f13\u5b58\u4f18\u5316\uff1a\u4fee\u6539net.ipv4.route.gc_timeout\uff0c\u52a0\u5feb\u7f13\u5b58\u5931\u6548\u901f\u5ea6\uff0c\u9002\u5e94\u9999\u6e2f\u7f51\u7edc\u751f\u6001\u4e2d\u9891\u7e41\u7684BGP\u8def\u7531\u5207\u6362 [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] \u9999\u6e2f\u4e13\u5c5e\u7f51\u7edc\u4f18\u5316\u65b9\u6848 \u8de8\u5883\u8fde\u63a5\u8c03\u4f18\uff08\u9999\u6e2f \u2194 \u4e2d\u56fd\u5927\u9646\/\u4e1c\u5357\u4e9a\uff09 \u9488\u5bf9\u9999\u6e2f\u8de8\u5883\u94fe\u8def\u7684\u72ec\u7279\u5ef6\u8fdf\u7279\u5f81\u8fdb\u884c\u4f18\u5316\uff1a TCP SYN\u91cd\u8bd5\u8c03\u6574\uff1a\u5c06net.ipv4.tcp_syn_retries\u8bbe\u4e3a\u9002\u4e2d\u503c\uff0c\u7f29\u77ed\u9999\u6e2f\u4e0e\u4e2d\u56fd\u5927\u9646\u8def\u7531\u7684\u8fde\u63a5\u5efa\u7acb\u65f6\u95f4 MSS\u94b3\u5236\uff1a\u914d\u7f6enet.ipv4.tcp_mss_clamp\u53c2\u6570\uff0c\u5339\u914d\u9999\u6e2f\u6807\u51c6MTU\u5927\u5c0f\uff0c\u907f\u514d\u6570\u636e\u5305\u5206\u7247\u5bfc\u81f4\u8de8\u5883\u541e\u5410\u91cf\u4e0b\u964d \u4f4e\u5ef6\u8fdf\u6a21\u5f0f\uff1a\u542f\u7528net.ipv4.tcp_low_latency\uff0c\u9002\u7528\u4e8e\u9999\u6e2f\u670d\u52a1\u5668\u6258\u7ba1\u7684\u5b9e\u65f6\u5e94\u7528\uff08\u6e38\u620f\u3001\u76f4\u64ad\uff09\uff0c\u4f18\u5148\u4fdd\u969c\u54cd\u5e94\u901f\u5ea6 \u9999\u6e2f\u670d\u52a1\u5668\u5e26\u5bbd\u5229\u7528\u7387\u4f18\u5316 \u5728\u4e0d\u989d\u5916\u6269\u5bb9\u7684\u524d\u63d0\u4e0b\u6700\u5927\u5316\u5e26\u5bbd\u4f7f\u7528\u6548\u7387\uff1a \u7f51\u7edc\u961f\u5217\u957f\u5ea6\uff1a\u6839\u636e\u9999\u6e2f\u670d\u52a1\u5668\u5e26\u5bbd\u7b49\u7ea7\u8c03\u6574net.core.netdev_max_backlog\uff0c\u786e\u4fdd\u6d41\u91cf\u5cf0\u503c\u65f6\u6570\u636e\u5305\u4e0d\u4e22\u5931 \u672c\u5730\u7aef\u53e3\u8303\u56f4\u6269\u5c55\uff1a\u6269\u5927net.ipv4.ip_local_port_range\u53c2\u6570\u503c\uff0c\u652f\u6301\u66f4\u591a\u5e76\u53d1\u51fa\u7ad9\u8fde\u63a5\uff0c\u5bf9\u4ee3\u7406\u6216\u8def\u7531\u7c7b\u9999\u6e2f\u670d\u52a1\u5668\u81f3\u5173\u91cd\u8981 IP\u8f6c\u53d1\u4f18\u5316\uff1a\u82e5\u5c06\u9999\u6e2f\u670d\u52a1\u5668\u7528\u4f5c\u8de8\u5883\u8def\u7531\u8282\u70b9\uff0c\u542f\u7528net.ipv4.ip_forward\u5e76\u4f18\u5316\u6570\u636e\u5305\u8f6c\u53d1\u6548\u7387\u76f8\u5173\u53c2\u6570 \u9999\u6e2f\u670d\u52a1\u5668DNS\u4f18\u5316 \u964d\u4f4eDNS\u5ef6\u8fdf\uff08\u9999\u6e2f\u6258\u7ba1\u670d\u52a1\u5e38\u89c1\u6027\u80fd\u74f6\u9888\uff09\uff1a DNS\u7f13\u5b58\u4fdd\u7559\uff1a\u7981\u7528net.ipv4.tcp_no_metrics_save\uff0c\u4fdd\u7559DNS\u89e3\u6790\u7f13\u5b58\uff0c\u51cf\u5c11\u5bf9\u8fdc\u7a0bDNS\u670d\u52a1\u5668\u7684\u91cd\u590d\u67e5\u8be2 \u672c\u5730DNS\u914d\u7f6e\uff1a\u5728\/etc\/resolv.conf\u4e2d\u914d\u7f6e\u9999\u6e2f\u672c\u5730DNS\u89e3\u6790\u5668\uff0c\u7f29\u77ed\u57df\u540d\u89e3\u6790\u5f80\u8fd4\u65f6\u95f4 [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] […]<\/p>\n

               Read More…<\/a><\/p>\n","protected":false},"author":1,"featured_media":29523,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[62],"tags":[9779,9780,9781,9782,248],"class_list":["post-29526","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-sc","tag-network-performance-optimization","tag-linux-kernel-tweaks","tag-cross-border-server-access","tag-hong-kong-linux-server","tag-hong-kong-server-rental-sc"],"acf":[],"yoast_head":"\n