\u9032\u968e\u8a18\u61b6\u9ad4\u548c\u5feb\u53d6\u7b56\u7565<\/strong><\/h2>\n

\u73fe\u4ee3\u5feb\u53d6\u7b56\u7565\u5df2\u8d85\u8d8a\u7c21\u55ae\u7684\u9375\u503c\u5132\u5b58\u3002\u5be6\u65bd\u5e36\u6709Redis\u7684\u591a\u5c64\u5feb\u53d6\u67b6\u69cb\u53ef\u5927\u5e45\u63d0\u9ad8\u56de\u61c9\u6642\u9593\u4e26\u6e1b\u5c11\u4f3a\u670d\u5668\u8ca0\u8f09\u3002\u4ee5\u4e0b\u662f\u8a73\u7d30\u5be6\u73fe\uff1a<\/p>\n

\r\n# Redis\u4f01\u696d\u7d1a\u5feb\u53d6\u914d\u7f6e\r\nmaxmemory 4gb\r\nmaxmemory-policy allkeys-lru\r\nio-threads 4\r\nio-threads-do-reads yes\r\nactive-defrag yes\r\nactive-defrag-threshold-lower 10\r\nactive-defrag-threshold-upper 100\r\nrepl-diskless-sync yes\r\nlazyfree-lazy-eviction yes\r\n\r\n# PHP Redis\u9032\u968e\u529f\u80fd\u5be6\u73fe\r\nclass AdvancedCache {\r\n    private $redis;\r\n    private $prefix;\r\n    \r\n    public function __construct($host = '127.0.0.1', $port = 6379) {\r\n        $this->redis = new Redis();\r\n        $this->redis->connect($host, $port);\r\n        $this->redis->setOption(Redis::OPT_SERIALIZER, Redis::SERIALIZER_JSON);\r\n    }\r\n    \r\n    public function getCached($key, $callback, $ttl = 3600) {\r\n        $cached = $this->redis->get($key);\r\n        if ($cached === false) {\r\n            $data = $callback();\r\n            $this->redis->setex($key, $ttl, $data);\r\n            return $data;\r\n        }\r\n        return $cached;\r\n    }\r\n    \r\n    public function invalidatePattern($pattern) {\r\n        $keys = $this->redis->keys($pattern);\r\n        if (!empty($keys)) {\r\n            return $this->redis->del($keys);\r\n        }\r\n        return 0;\r\n    }\r\n}\r\n\r\n# \u4f7f\u7528\u793a\u4f8b\r\n$cache = new AdvancedCache();\r\n$data = $cache->getCached('user:profile:123', function() {\r\n    return fetchUserDataFromDatabase(123);\r\n}, 1800);\r\n<\/code><\/pre>\n
\u7db2\u8def\u8def\u7531\u512a\u5316<\/strong><\/h2>\n
\u9032\u968e\u7db2\u8def\u8def\u7531\u4e0d\u50c5\u50c5\u662f\u9078\u64c7\u6700\u77ed\u8def\u5f91\uff0c\u66f4\u91cd\u8981\u7684\u662f\u57fa\u65bc\u5373\u6642\u7db2\u8def\u72c0\u6cc1\u9078\u64c7\u6700\u53ef\u9760\u548c\u6700\u9ad8\u6548\u7684\u8def\u7531\u3002\u73fe\u4ee3BGP\u5be6\u65bd\u61c9\u8a72\u5305\u542b\u667a\u6167\u8def\u7531\u6c7a\u7b56\u548c\u81ea\u52d5\u6545\u969c\u8f49\u79fb\u6a5f\u5236\u3002<\/p>\n
\r\n# \u5177\u6709\u8def\u7531\u512a\u5316\u7684\u9032\u968eBGP\u914d\u7f6e\r\nrouter bgp 64512\r\n bgp log-neighbor-changes\r\n bgp graceful-restart\r\n neighbor 192.0.2.1 remote-as 64513\r\n neighbor 192.0.2.1 description \"\u4e3b\u8981\u4e0a\u6e38\"\r\n neighbor 192.0.2.1 route-map PREFER_FASTER_PATH in\r\n neighbor 192.0.2.1 prefix-list CUSTOMER_NETWORKS out\r\n \r\n neighbor 198.51.100.1 remote-as 64514\r\n neighbor 198.51.100.1 description \"\u5099\u7528\u4e0a\u6e38\"\r\n neighbor 198.51.100.1 route-map BACKUP_PATH in\r\n \r\n address-family ipv4\r\n  network 192.0.2.0 mask 255.255.255.0\r\n  maximum-paths 4\r\n  bgp dampening 15 750 2000 60\r\n exit-address-family\r\n\r\n# \u8def\u5f91\u9078\u64c7\u8def\u7531\u5716\r\nip prefix-list FASTER_PATH seq 10 permit 192.0.2.0\/24\r\nip prefix-list CUSTOMER_NETWORKS seq 10 permit 172.16.0.0\/12\r\n\r\nroute-map PREFER_FASTER_PATH permit 10\r\n match ip address prefix-list FASTER_PATH\r\n set local-preference 200\r\n set community 64512:100\r\n\r\nroute-map BACKUP_PATH permit 10\r\n set local-preference 100\r\n set community 64512:200\r\n<\/code><\/pre>\n
\u9032\u968e\u6548\u80fd\u76e3\u63a7\u89e3\u6c7a\u65b9\u6848<\/strong><\/h2>\n
\u73fe\u4ee3\u4f3a\u670d\u5668\u6548\u80fd\u76e3\u63a7\u9700\u8981\u63a1\u7528\u8907\u96dc\u7684\u65b9\u6cd5\uff0c\u7d50\u5408\u5373\u6642\u6307\u6a19\u6536\u96c6\u3001\u9810\u6e2c\u5206\u6790\u548c\u81ea\u52d5\u56de\u61c9\u7cfb\u7d71\u3002\u4f7f\u7528Prometheus\u548cGrafana\u5be6\u65bd\u5168\u9762\u7684\u76e3\u63a7\u5806\u758a\uff0c\u53ef\u63d0\u4f9b\u6df1\u5165\u7684\u7cfb\u7d71\u6548\u80fd\u6d1e\u5bdf\u4e26\u5be6\u73fe\u4e3b\u52d5\u512a\u5316\u3002<\/p>\n
\r\n# \u9032\u968ePrometheus\u914d\u7f6e\r\nglobal:\r\n  scrape_interval: 15s\r\n  evaluation_interval: 15s\r\n  scrape_timeout: 10s\r\n\r\nalerting:\r\n  alertmanagers:\r\n    - static_configs:\r\n        - targets: ['alertmanager:9093']\r\n\r\nrule_files:\r\n  - \"rules\/alert.rules\"\r\n  - \"rules\/recording.rules\"\r\n\r\nscrape_configs:\r\n  - job_name: 'node_exporter'\r\n    static_configs:\r\n      - targets: ['localhost:9100']\r\n    relabel_configs:\r\n      - source_labels: [__address__]\r\n        regex: '(.*):'\r\n        target_label: instance\r\n        replacement: '${1}'\r\n  \r\n  - job_name: 'nginx_exporter'\r\n    metrics_path: \/metrics\r\n    static_configs:\r\n      - targets: ['localhost:9113']\r\n    metric_relabel_configs:\r\n      - source_labels: [status]\r\n        regex: '4..'\r\n        target_label: http_4xx_errors\r\n        \r\n  - job_name: 'blackbox'\r\n    metrics_path: \/probe\r\n    params:\r\n      module: [http_2xx]\r\n    static_configs:\r\n      - targets:\r\n        - https:\/\/example.com\r\n    relabel_configs:\r\n      - source_labels: [__address__]\r\n        target_label: __param_target\r\n      - source_labels: [__param_target]\r\n        target_label: instance\r\n      - target_label: __address__\r\n        replacement: blackbox:9115\r\n<\/code><\/pre>\n
\u5be6\u65bd\u81ea\u8a02Grafana\u5100\u8868\u677f\u9032\u884c\u8996\u89ba\u5316\uff1a<\/p>\n
\r\n{\r\n  \"dashboard\": {\r\n    \"id\": null,\r\n    \"title\": \"\u4f3a\u670d\u5668\u6548\u80fd\u6982\u89bd\",\r\n    \"panels\": [\r\n      {\r\n        \"title\": \"\u4e0b\u8f09\u901f\u5ea6\u8da8\u52e2\",\r\n        \"type\": \"graph\",\r\n        \"datasource\": \"Prometheus\",\r\n        \"targets\": [\r\n          {\r\n            \"expr\": \"rate(nginx_http_request_duration_seconds_sum[5m])\",\r\n            \"legendFormat\": \"{{path}}\"\r\n          }\r\n        ],\r\n        \"gridPos\": {\r\n          \"h\": 8,\r\n          \"w\": 12,\r\n          \"x\": 0,\r\n          \"y\": 0\r\n        }\r\n      }\r\n    ],\r\n    \"refresh\": \"5s\",\r\n    \"schemaVersion\": 31\r\n  }\r\n}\r\n<\/code><\/pre>\n
\u589e\u5f37\u5b89\u5168\u8003\u91cf<\/strong><\/h2>\n
\u5728\u512a\u5316\u901f\u5ea6\u7684\u540c\u6642\uff0c\u7dad\u8b77\u5f37\u5927\u7684\u5b89\u5168\u6027\u81f3\u95dc\u91cd\u8981\u3002\u73fe\u4ee3\u5b89\u5168\u5be6\u65bd\u5fc5\u9808\u5728\u6548\u80fd\u548c\u4fdd\u8b77\u4e4b\u9593\u53d6\u5f97\u5e73\u8861\uff0c\u5229\u7528\u667a\u6167\u901f\u7387\u9650\u5236\u3001\u81ea\u9069\u61c9DDoS\u4fdd\u8b77\u548c\u57fa\u65bc\u6a5f\u5668\u5b78\u7fd2\u7684\u5a01\u8105\u6aa2\u6e2c\u3002<\/p>\n
\r\n# \u9032\u968eNginx\u5b89\u5168\u914d\u7f6e\r\nhttp {\r\n    # \u5177\u6709\u5340\u57df\u7684\u52d5\u614b\u901f\u7387\u9650\u5236\r\n    limit_req_zone $binary_remote_addr zone=one:10m rate=10r\/s;\r\n    limit_req_zone $binary_remote_addr zone=api:10m rate=20r\/s;\r\n    limit_conn_zone $binary_remote_addr zone=addr:10m;\r\n    \r\n    # \u81ea\u8a02\u5b89\u5168\u6a19\u982d\r\n    add_header X-Frame-Options \"SAMEORIGIN\" always;\r\n    add_header X-XSS-Protection \"1; mode=block\" always;\r\n    add_header X-Content-Type-Options \"nosniff\" always;\r\n    add_header Referrer-Policy \"no-referrer-when-downgrade\" always;\r\n    add_header Content-Security-Policy \"default-src 'self' http: https: data: blob: 'unsafe-inline'\" always;\r\n    \r\n    server {\r\n        # \u9032\u968e\u901f\u7387\u9650\u5236\u5be6\u65bd\r\n        location \/api\/ {\r\n            limit_req zone=api burst=20 nodelay;\r\n            limit_conn addr 10;\r\n            \r\n            # \u689d\u4ef6\u901f\u7387\u9650\u5236\r\n            if ($http_user_agent ~* (bot|crawler|spider)) {\r\n                limit_req zone=one burst=5 nodelay;\r\n            }\r\n            \r\n            # API\u7684\u5b89\u5168\u6a19\u982d\r\n            add_header Strict-Transport-Security \"max-age=31536000; includeSubDomains\" always;\r\n        }\r\n        \r\n        # WebSocket\u5b89\u5168\r\n        location \/ws\/ {\r\n            proxy_set_header X-Real-IP $remote_addr;\r\n            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\r\n            proxy_set_header Host $http_host;\r\n            proxy_set_header X-NginX-Proxy true;\r\n            \r\n            proxy_pass http:\/\/websocket_backend;\r\n            proxy_redirect off;\r\n            \r\n            proxy_http_version 1.1;\r\n            proxy_set_header Upgrade $http_upgrade;\r\n            proxy_set_header Connection \"upgrade\";\r\n        }\r\n    }\r\n}\r\n<\/code><\/pre>\n
\u672a\u4f86\u512a\u5316\u8da8\u52e2<\/strong><\/h2>\n
\u5c55\u671b\u4f3a\u670d\u5668\u512a\u5316\u7684\u672a\u4f86\uff0c\u591a\u9805\u65b0\u8208\u6280\u8853\u548c\u65b9\u6cd5\u6b63\u5728\u91cd\u5851\u9ad8\u6548\u80fd\u4f3a\u670d\u5668\u79df\u7528\u57fa\u790e\u8a2d\u65bd\u7684\u683c\u5c40\u3002\u4e3b\u8981\u767c\u5c55\u5305\u62ec\uff1a<\/p>\n
\n
HTTP\/3\u548cQUIC\u5354\u5b9a\u63a1\u7528\uff0c\u7528\u65bc\u6539\u5584\u4e0d\u7a69\u5b9a\u7db2\u8def\u4e0a\u7684\u6548\u80fd<\/li>\n
\u908a\u7de3\u904b\u7b97\u89e3\u6c7a\u65b9\u6848\uff0c\u7528\u65bc\u964d\u4f4e\u5ef6\u9072\u548c\u6539\u5584\u5167\u5bb9\u5206\u767c<\/li>\n
AI\u9a45\u52d5\u7684\u6d41\u91cf\u8def\u7531\u548c\u8ca0\u8f09\u5e73\u8861<\/li>\n
\u91cf\u5b50\u5b89\u5168\u52a0\u5bc6\u6e96\u5099<\/li>\n
\u5bb9\u5668\u539f\u751f\u7db2\u8def\u512a\u5316<\/li>\n<\/ul>\n
\u8981\u5728\u4f3a\u670d\u5668\u512a\u5316\u548c\u7db2\u8def\u6548\u80fd\u65b9\u9762\u4fdd\u6301\u7af6\u722d\u529b\uff0c\u7d44\u7e54\u5fc5\u9808\u5728\u7dad\u8b77\u5f37\u5927\u7684\u5b89\u5168\u63aa\u65bd\u548c\u9ad8\u6548\u8cc7\u6e90\u5229\u7528\u7684\u540c\u6642\uff0c\u6301\u7e8c\u8a55\u4f30\u548c\u5be6\u65bd\u9019\u4e9b\u65b0\u8208\u6280\u8853\u3002\u7f8e\u570b\u4f3a\u670d\u5668\u512a\u5316\u7684\u672a\u4f86\u5728\u65bc\u5c07\u9019\u4e9b\u5148\u9032\u6280\u8853\u8207\u73fe\u6709\u57fa\u790e\u8a2d\u65bd\u9032\u884c\u667a\u6167\u6574\u5408\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u4f3a\u670d\u5668\u512a\u5316\u548c\u4e0b\u8f09\u901f\u5ea6\u63d0\u5347\u662f\u7dad\u8b77\u9ad8\u6548\u80fd\u7f8e\u570b\u4f3a\u670d\u5668\u79df\u7528\u57fa\u790e\u8a2d\u65bd\u7684\u95dc\u9375\u8981\u7d20\u3002\u5728\u7576\u4eca\u8cc7\u6599\u9a45\u52d5\u7684\u74b0\u5883\u4e2d\uff0c\u5be6\u73fe\u6700\u4f73\u4f3a\u670d\u5668\u6548 […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":21069,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4815],"tags":[5564,5565,5180,4430,1242],"class_list":["post-21076","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-america-dedicated-server-tc","tag-download-speed-tc","tag-cdn-configuration-tc","tag-us-server-optimization-tc","tag-network-protocols-tc","tag-server-performance-tc"],"acf":[],"yoast_head":"\n