\u5feb\u901f\u53c3\u8003\uff1a<\/strong>\u5c0d\u65bc\u904a\u6232\u548c\u5373\u6642\u61c9\u7528\u7a0b\u5f0f\uff0c\u5f9e\u6771\u4e9e\u9023\u63a5\u5230\u65e5\u672c\u4f3a\u670d\u5668\u6642\uff0c\u61c9\u5c07ping\u503c\u63a7\u5236\u5728100ms\u4ee5\u4e0b\u3002\u5177\u9ad4\u671f\u671b\u503c\u61c9\u6839\u64da\u5730\u7406\u8ddd\u96e2\u548c\u7db2\u8def\u72c0\u6cc1\u9032\u884c\u8abf\u6574\u3002<\/p>\n<\/div>\n

\u7406\u89e3Ping\u503c\uff1a\u6280\u8853\u5206\u6790<\/strong><\/h2>\n

Ping\u503c\u4ee5\u6beb\u79d2(ms)\u70ba\u55ae\u4f4d\uff0c\u8868\u793a\u8cc7\u6599\u5c01\u5305\u5728\u60a8\u7684\u4f4d\u7f6e\u8207\u65e5\u672c\u4f3a\u670d\u5668\u4e4b\u9593\u7684\u5f80\u8fd4\u6642\u9593(RTT)\u3002\u9019\u500b\u57fa\u672c\u7684\u7db2\u8def\u6307\u6a19\u70ba\u7db2\u8def\u6548\u80fd\u548c\u4f7f\u7528\u8005\u9ad4\u9a57\u54c1\u8cea\u63d0\u4f9b\u4e86\u91cd\u8981\u898b\u89e3\u3002\u8207\u884c\u92b7\u6307\u6a19\u6216\u7406\u8ad6\u983b\u5bec\u6578\u64da\u4e0d\u540c\uff0cping\u503c\u63d0\u4f9b\u4e86\u5177\u9ad4\u7684\u3001\u771f\u5be6\u4e16\u754c\u7684\u6548\u80fd\u6578\u64da\u3002<\/p>\n

\n

Ping\u6e2c\u91cf\u7684\u95dc\u9375\u7d44\u6210\u90e8\u5206\uff1a<\/h3>\n

\n
• \u5f80\u8fd4\u6642\u9593(RTT)\uff1a<\/strong>\n
  \n
  • \u521d\u59cb\u8cc7\u6599\u5c01\u5305\u50b3\u8f38\u6642\u9593<\/li>\n
  • \u4f3a\u670d\u5668\u8655\u7406\u6642\u9593<\/li>\n
  • \u8fd4\u56de\u8cc7\u6599\u5c01\u5305\u50b3\u8f38\u6642\u9593<\/li>\n
  • \u7db2\u8def\u958b\u92b7\u548c\u8655\u7406\u5ef6\u9072<\/li>\n<\/ul>\n<\/li>\n
  • \u7db2\u8def\u8df3\u6578\uff1a<\/strong>\n
    \n
    • \u6bcf\u500b\u8def\u7531\u5668\u589e\u52a00.1-2ms\u5ef6\u9072<\/li>\n
    • \u5178\u578b\u8def\u7531\u6d89\u53ca10-20\u500b\u8df3\u6578<\/li>\n
    • \u908a\u754c\u9598\u9053\u8f49\u63db<\/li>\n
    • \u7db2\u969b\u7db2\u8def\u4ea4\u63db\u9ede(IXPs)<\/li>\n<\/ul>\n<\/li>\n
    • \u7269\u7406\u8ddd\u96e2\u56e0\u7d20\uff1a<\/strong>\n
      \n
      • \u5149\u7e96\u7e9c\u7dda\u9577\u5ea6<\/li>\n
      • \u5730\u7406\u8def\u7531\u8def\u5f91<\/li>\n
      • \u6d77\u5e95\u96fb\u7e9c\u7cfb\u7d71<\/li>\n
      • \u6700\u5f8c\u4e00\u516c\u91cc\u9023\u63a5<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n

        \u65e5\u672c\u4f3a\u670d\u5668\u7684\u6b63\u5e38Ping\u503c<\/strong><\/h2>\n

        \u57fa\u65bc\u5c0d\u4e0d\u540c\u5730\u5340\u548c\u7db2\u8def\u689d\u4ef6\u7684\u5ee3\u6cdb\u6e2c\u8a66\uff0c\u4ee5\u4e0b\u662f\u9023\u63a5\u65e5\u672c\u4f3a\u670d\u5668\u6642\u7684\u9810\u671fping\u503c\u8a73\u7d30\u5206\u6790\uff1a<\/p>\n\n\n\n\n\n\n\n\n

        \u5730\u5340<\/th>\n	\u6700\u4f73\u7bc4\u570d(ms)<\/th>\n	\u53ef\u63a5\u53d7\u7bc4\u570d(ms)<\/th>\n	\u5c16\u5cf0\u6642\u6bb5\u5f71\u97ff<\/th>\n<\/tr>\n
        \u65e5\u672c\u570b\u5167<\/td>\n	5-20<\/td>\n	20-40<\/td>\n	+10-15ms<\/td>\n<\/tr>\n
        \u6771\u4e9e<\/td>\n	30-70<\/td>\n	70-100<\/td>\n	+15-25ms<\/td>\n<\/tr>\n
        \u6771\u5357\u4e9e<\/td>\n	50-100<\/td>\n	100-150<\/td>\n	+20-30ms<\/td>\n<\/tr>\n
        \u5317\u7f8e(\u897f\u90e8)<\/td>\n	100-150<\/td>\n	150-200<\/td>\n	+25-40ms<\/td>\n<\/tr>\n
        \u5317\u7f8e(\u6771\u90e8)<\/td>\n	150-200<\/td>\n	200-250<\/td>\n	+30-50ms<\/td>\n<\/tr>\n
        \u6b50\u6d32<\/td>\n	200-300<\/td>\n	300-400<\/td>\n	+40-60ms<\/td>\n<\/tr>\n<\/table>\n \n \u5340\u57df\u5dee\u7570\uff1a<\/strong>\u5c0d\u65bc\u4e2d\u570b\u5927\u9678\u4f7f\u7528\u8005\uff0c\u4e0d\u540c\u5730\u5340\u548c\u7db2\u8def\u71df\u904b\u5546\u7684\u5178\u578bping\u503c\u5dee\u7570\u986f\u8457\uff1a<\/p>\n \n \u83ef\u6771\u5730\u5340\uff08\u4e0a\u6d77\u3001\u676d\u5dde\uff09\uff1a40-80ms<\/li>\n \u83ef\u5357\u5730\u5340\uff08\u5ee3\u5dde\u3001\u6df1\u5733\uff09\uff1a50-90ms<\/li>\n \u83ef\u5317\u5730\u5340\uff08\u5317\u4eac\u3001\u5929\u6d25\uff09\uff1a60-100ms<\/li>\n \u897f\u90e8\u5730\u5340\uff08\u6210\u90fd\u3001\u897f\u5b89\uff09\uff1a70-120ms<\/li>\n<\/ul>\n<\/div>\n \u6e2c\u8a66\u65b9\u6cd5\u8ad6<\/strong><\/h2>\n \u5be6\u65bd\u7cfb\u7d71\u5316\u7684ping\u6e2c\u8a66\u65b9\u6cd5\u53ef\u78ba\u4fdd\u7372\u5f97\u6e96\u78ba\u53ef\u9760\u7684\u7d50\u679c\u3002\u5c08\u696d\u7db2\u8def\u5de5\u7a0b\u5e2b\u63a1\u7528\u5168\u9762\u7684\u6e2c\u8a66\u5354\u5b9a\uff0c\u8003\u616e\u5404\u7a2e\u7db2\u8def\u689d\u4ef6\u548c\u6642\u9593\u6bb5\u3002<\/p>\n \n \u57fa\u672c\u547d\u4ee4\u5217\u6e2c\u8a66\uff1a<\/h3>\n # Linux\/MacOS\u57fa\u790e\u6e2c\u8a66\r\nping -c 50 [server_ip]\r\n\r\n# Windows\u57fa\u790e\u6e2c\u8a66\r\nping -n 50 [server_ip]\r\n\r\n# \u9032\u968eMTR\u5206\u6790\r\nmtr -c 100 -r [server_ip]\r\n\r\n# TCP\u9023\u63a5\u6e2c\u8a66\r\ntcpping -x 5 [server_ip] [port]<\/code><\/pre>\n<\/div>\n \u5168\u9762\u6e2c\u8a66\u53c3\u6578<\/h3>\n \n \u8cc7\u6599\u5c01\u5305\u5927\u5c0f\u8b8a\u5316\uff1a<\/strong>\n \n \u6a19\u6e96ICMP\uff1a56\u4f4d\u5143\u7d44<\/li>\n \u5c0f\u8cc7\u6599\u5c01\u5305\uff1a32\u4f4d\u5143\u7d44<\/li>\n \u5927\u8cc7\u6599\u5c01\u5305\uff1a1472\u4f4d\u5143\u7d44\uff08\u8003\u616eMTU\uff09<\/li>\n \u81ea\u8a02\u5927\u5c0f\u7528\u65bc\u61c9\u7528\u6a21\u64ec<\/li>\n<\/ul>\n<\/li>\n \u6e2c\u8a66\u6642\u9593\u9593\u9694\uff1a<\/strong>\n \n \u5c16\u5cf0\u6642\u6bb5\uff08\u65e5\u672c\u6642\u959320:00-22:00\uff09<\/li>\n \u5de5\u4f5c\u6642\u9593\uff08\u65e5\u672c\u6642\u959309:00-17:00\uff09<\/li>\n \u96e2\u5cf0\u6642\u6bb5\uff08\u65e5\u672c\u6642\u959302:00-06:00\uff09<\/li>\n \u9031\u672b\u8b8a\u5316<\/li>\n<\/ul>\n<\/li>\n \u5354\u5b9a\u8986\u84cb\uff1a<\/strong>\n \n ICMP\uff08\u6a19\u6e96ping\uff09<\/li>\n TCP\uff08\u61c9\u7528\u5c64\uff09<\/li>\n UDP\uff08\u904a\u6232\/\u4e32\u6d41\u5a92\u9ad4\uff09<\/li>\n HTTP\/HTTPS\u5ef6\u9072<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n \u65e5\u672c\u7db2\u8def\u57fa\u790e\u8a2d\u65bd\u5206\u6790<\/strong><\/h2>\n \n \u4e3b\u8981\u7db2\u969b\u7db2\u8def\u4ea4\u63db\u9ede\uff1a<\/h3>\n\n\n\n\n\n\n \u4ea4\u63db\u9ede<\/th>\n \u4f4d\u7f6e<\/th>\n \u5c16\u5cf0\u6d41\u91cf<\/th>\n \u9023\u63a5ASN\u6578\u91cf<\/th>\n<\/tr>\n JPIX\u6771\u4eac<\/td>\n \u6771\u4eac\uff08\u591a\u9ede\uff09<\/td>\n 1.2+ Tbps<\/td>\n 200+<\/td>\n<\/tr>\n JPNAP\u6771\u4eac<\/td>\n \u6771\u4eac<\/td>\n 900+ Gbps<\/td>\n 150+<\/td>\n<\/tr>\n BBIX<\/td>\n \u6771\u4eac\/\u5927\u962a<\/td>\n 800+ Gbps<\/td>\n 100+<\/td>\n<\/tr>\n JPIX\u5927\u962a<\/td>\n \u5927\u962a<\/td>\n 400+ Gbps<\/td>\n 80+<\/td>\n<\/tr>\n<\/table>\n<\/div>\n \u6d77\u5e95\u96fb\u7e9c\u7cfb\u7d71<\/h3>\n \u65e5\u672c\u7684\u9023\u63a5\u6027\u5f88\u5927\u7a0b\u5ea6\u4e0a\u4f9d\u8cf4\u65bc\u6d77\u5e95\u96fb\u7e9c\u57fa\u790e\u8a2d\u65bd\uff0c\u9019\u986f\u8457\u5f71\u97ff\u4e86ping\u503c\uff1a<\/p>\n \n\n\n\n\n\n\n \u96fb\u7e9c\u7cfb\u7d71<\/th>\n \u8def\u7dda<\/th>\n \u5bb9\u91cf<\/th>\n \u5ef6\u9072\u5f71\u97ff<\/th>\n<\/tr>\n PC-1<\/td>\n \u65e5\u672c – \u7f8e\u570b\u897f\u6d77\u5cb8<\/td>\n 10 Tbps<\/td>\n ~83-98ms<\/td>\n<\/tr>\n FASTER<\/td>\n \u65e5\u672c – \u53f0\u7063 – \u7f8e\u570b<\/td>\n 60 Tbps<\/td>\n ~85-100ms<\/td>\n<\/tr>\n APG<\/td>\n \u6771\u4e9e\u74b0\u7db2<\/td>\n 54 Tbps<\/td>\n ~25-45ms<\/td>\n<\/tr>\n SJC2<\/td>\n \u65e5\u672c – \u65b0\u52a0\u5761<\/td>\n 28 Tbps<\/td>\n ~65-80ms<\/td>\n<\/tr>\n<\/table>\n<\/div>\n \u65e5\u672c\u4f3a\u670d\u5668\u512a\u5316\u6280\u8853<\/strong><\/h2>\n \u7db2\u8def\u512a\u5316\u9700\u8981\u5c08\u6ce8\u65bc\u786c\u9ad4\u548c\u8edf\u9ad4\u5143\u4ef6\u7684\u591a\u5c64\u6b21\u65b9\u6cd5\u3002\u4ee5\u4e0b\u662f\u5be6\u73fe\u6700\u4f73\u6548\u80fd\u7684\u8a73\u7d30\u914d\u7f6e\uff1a<\/p>\n \n \u6838\u5fc3\u7d1a\u7db2\u8def\u512a\u5316\uff1a<\/h3>\n # TCP\u5806\u758a\u512a\u5316\r\nsysctl -w net.ipv4.tcp_window_scaling=1\r\nsysctl -w net.ipv4.tcp_timestamps=1\r\nsysctl -w net.core.rmem_max=16777216\r\nsysctl -w net.core.wmem_max=16777216\r\nsysctl -w net.ipv4.tcp_rmem=\"4096 87380 16777216\"\r\nsysctl -w net.ipv4.tcp_wmem=\"4096 65536 16777216\"\r\nsysctl -w net.ipv4.tcp_max_syn_backlog=8192\r\nsysctl -w net.ipv4.tcp_max_tw_buckets=2000000\r\nsysctl -w net.ipv4.tcp_tw_reuse=1\r\nsysctl -w net.ipv4.tcp_fin_timeout=10\r\n\r\n# UDP\u512a\u5316\r\nsysctl -w net.ipv4.udp_rmem_min=8192\r\nsysctl -w net.ipv4.udp_wmem_min=8192\r\nsysctl -w net.core.netdev_max_backlog=5000<\/code><\/pre>\n \u61c9\u7528\u5c64\u512a\u5316\uff1a<\/h3>\n # \u91dd\u5c0d\u65e5\u672c\u6d41\u91cf\u7684Nginx\u914d\u7f6e\r\nhttp {\r\n tcp_nodelay on;\r\n tcp_nopush on;\r\n keepalive_timeout 65;\r\n keepalive_requests 100000;\r\n \r\n # \u6700\u4f73\u7de9\u885d\u5340\u5927\u5c0f\r\n client_body_buffer_size 128k;\r\n client_max_body_size 10m;\r\n client_header_buffer_size 1k;\r\n large_client_header_buffers 4 4k;\r\n \r\n # \u58d3\u7e2e\u8a2d\u5b9a\r\n gzip on;\r\n gzip_min_length 1000;\r\n gzip_proxied expired no-cache no-store private auth;\r\n gzip_types text\/plain text\/css application\/json application\/javascript;\r\n}<\/code><\/pre>\n<\/div>\n \u6548\u80fd\u76e3\u63a7\u8207\u5206\u6790<\/strong><\/h2>\n \n \u57fa\u672c\u76e3\u63a7\u6307\u6a19\uff1a<\/h3>\n\n\n\n\n\n\n \u6307\u6a19<\/th>\n \u6700\u4f73\u503c<\/th>\n \u8b66\u544a\u95be\u503c<\/th>\n \u56b4\u91cd\u95be\u503c<\/th>\n<\/tr>\n Ping\u503c(ms)<\/td>\n < 50<\/td>\n 50-100<\/td>\n > 100<\/td>\n<\/tr>\n \u6296\u52d5(ms)<\/td>\n < 5<\/td>\n 5-15<\/td>\n > 15<\/td>\n<\/tr>\n \u4e1f\u5305\u7387(%)<\/td>\n 0<\/td>\n 0.1-1.0<\/td>\n > 1.0<\/td>\n<\/tr>\n TCP\u91cd\u50b3\u7387(%)<\/td>\n < 0.1<\/td>\n 0.1-1.0<\/td>\n > 1.0<\/td>\n<\/tr>\n<\/table>\n \u76e3\u63a7\u5de5\u5177\u914d\u7f6e\uff1a<\/h3>\n # Zabbix\u4ee3\u7406\u914d\u7f6e\u7528\u65bc\u7db2\u8def\u76e3\u63a7\r\nServer=zabbix.monitor.jp\r\nServerActive=zabbix.monitor.jp\r\nHostname=jp-server-01\r\nStartAgents=5\r\nTimeout=30\r\nBufferSize=100\r\nEnableRemoteCommands=1\r\n\r\n# \u81ea\u8a02\u7db2\u8def\u76e3\u63a7\u9805\u76ee\r\nUserParameter=net.latency[*],\/usr\/local\/bin\/check_latency.sh $1\r\nUserParameter=net.jitter[*],\/usr\/local\/bin\/check_jitter.sh $1\r\nUserParameter=net.packet_loss[*],\/usr\/local\/bin\/check_packet_loss.sh $1<\/code><\/pre>\n<\/div>\n \u65e5\u672c\u5340\u57dfCDN\u7b56\u7565<\/strong><\/h2>\n \u5167\u5bb9\u50b3\u905e\u7db2\u8def(CDN)\u7684\u5be6\u65bd\u5c0d\u65bc\u5728\u65e5\u672c\u5404\u5730\u7406\u5340\u57df\u4fdd\u6301\u4f4e\u5ef6\u9072\u81f3\u95dc\u91cd\u8981\uff1a<\/p>\n \n \u6700\u4f73\u63a5\u5165\u9ede\u4f4d\u7f6e\uff1a<\/h3>\n \n \u4e3b\u8981\u5340\u57df\uff1a<\/strong>\n \n \u6771\u4eac\uff08\u6771\u4eac\uff09- \u591a\u500b\u63a5\u5165\u9ede\n \n \u65b0\u5bbf\u5340<\/li>\n \u54c1\u5ddd\u5340<\/li>\n \u5343\u4ee3\u7530\u5340<\/li>\n<\/ul>\n<\/li>\n \u5927\u962a\uff08\u5927\u962a\uff09- \u96d9\u63a5\u5165\u9ede\n \n \u6885\u7530\u5340<\/li>\n \u96e3\u6ce2\u5340<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n \u6b21\u8981\u5340\u57df\uff1a<\/strong>\n \n \u798f\u5ca1\uff08\u798f\u5ca1\uff09<\/li>\n \u540d\u53e4\u5c4b\uff08\u540d\u53e4\u5c4b\uff09<\/li>\n \u672d\u5e4c\uff08\u672d\u5e4c\uff09<\/li>\n \u4ed9\u53f0\uff08\u4ed9\u53f0\uff09<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n CDN\u914d\u7f6e\u7bc4\u4f8b\uff1a<\/h3>\n # Nginx CDN\u914d\u7f6e\r\nlocation ~* \\.(jpg|jpeg|png|gif|ico|css|js)$ {\r\n expires 7d;\r\n add_header Cache-Control \"public, no-transform\";\r\n add_header X-Cache-Status $upstream_cache_status;\r\n proxy_cache zone1;\r\n proxy_cache_use_stale error timeout http_500 http_502 http_503 http_504;\r\n proxy_cache_valid 200 301 302 7d;\r\n proxy_cache_valid 404 1m;\r\n proxy_cache_key $scheme$request_method$host$request_uri;\r\n}<\/code><\/pre>\n<\/div>\n \u65e5\u672c\u7db2\u8def\u5b89\u5168\u8003\u91cf<\/strong><\/h2>\n \n DDoS\u9632\u8b77\u914d\u7f6e\uff1a<\/h3>\n # IP Tables DDoS\u9632\u8b77\r\n# \u9650\u5236TCP\u9023\u63a5\u901f\u7387\r\niptables -A INPUT -p tcp --dport 80 -m recent \\\r\n --name HTTP_FLOOD --update --seconds 1 --hitcount 20 -j DROP\r\niptables -A INPUT -p tcp --dport 443 -m recent \\\r\n --name HTTPS_FLOOD --update --seconds 1 --hitcount 20 -j DROP\r\n\r\n# SYN\u6d2a\u6c34\u9632\u8b77\r\niptables -N syn_flood\r\niptables -A INPUT -p tcp --syn -j syn_flood\r\niptables -A syn_flood -m limit --limit 1\/s --limit-burst 3 -j RETURN\r\niptables -A syn_flood -j DROP\r\n\r\n# UDP\u6d2a\u6c34\u9632\u8b77\r\niptables -A INPUT -p udp -m limit --limit 50\/s -j ACCEPT<\/code><\/pre>\n \u91dd\u5c0d\u65e5\u672c\u6d41\u91cf\u7279\u5fb5\u7684WAF\u898f\u5247\uff1a<\/h3>\n # ModSecurity\u898f\u5247\u7528\u65bc\u65e5\u6587\u5b57\u96c6\r\nSecRule REQUEST_HEADERS:Content-Type \"text\/.*(?:utf-8|shift[-_]?jis|euc-jp)\" \\\r\n \"id:1000,phase:1,pass,nolog,t:none\"\r\n\r\nSecRule REQUEST_COOKIES:\/.*\/ \"!@rx ^[\\x20-\\x7E\\xA1-\\xFE]+$\" \\\r\n \"id:1001,phase:1,deny,status:400,msg:'Cookie\u4e2d\u5b58\u5728\u7121\u6548\u5b57\u5143'\"\r\n\r\n# \u91dd\u5c0d\u65e5\u6587\u7684SQL\u6ce8\u5165\u9632\u8b77\r\nSecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|!REQUEST_COOKIES:\/__utm\/|REQUEST_COOKIES_NAMES|REQUEST_BODY|REQUEST_HEADERS \\\r\n \"@rx (?i:(?:\\x27|')\\s*(?:or|and)\\s*\\x27?[0-9]+\\x27?(?:\\s*--|\/\\*))\" \\\r\n \"id:1002,phase:2,deny,status:403,msg:'\u6aa2\u6e2c\u5230SQL\u6ce8\u5165\u653b\u64ca'\"<\/code><\/pre>\n<\/div>\n \u65e5\u672c\u5408\u898f\u6027\u548c\u76e3\u7ba1\u8981\u6c42<\/strong><\/h2>\n \n \u65e5\u672c\u4f3a\u670d\u5668\u71df\u904b\u7684\u95dc\u9375\u5408\u898f\u8003\u91cf\uff1a<\/p>\n \n \u500b\u4eba\u8cc7\u8a0a\u4fdd\u8b77\u6cd5\uff08PIPA\/APPI\uff09\uff1a<\/strong>\n \n \u8cc7\u6599\u52a0\u5bc6\u8981\u6c42<\/li>\n \u4f7f\u7528\u8005\u540c\u610f\u7ba1\u7406<\/li>\n \u8cc7\u6599\u4fdd\u7559\u653f\u7b56<\/li>\n \u8de8\u5883\u50b3\u8f38\u9650\u5236<\/li>\n<\/ul>\n<\/li>\n \u7522\u696d\u7279\u5b9a\u898f\u5b9a\uff1a<\/strong>\n \n \u91d1\u878d\u670d\u52d9\u5ef3(FSA)\u8981\u6c42<\/li>\n \u91ab\u7642\u8cc7\u6599\u4fdd\u8b77\u6a19\u6e96<\/li>\n \u96fb\u4fe1\u696d\u52d9\u6cd5\u5408\u898f<\/li>\n \u96f2\u7aef\u670d\u52d9\u63d0\u4f9b\u5546\u8981\u6c42<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n \u5408\u898f\u914d\u7f6e\u7bc4\u4f8b\uff1a<\/h3>\n # APPI\u5408\u898f\u7684SSL\u914d\u7f6e\r\nssl_protocols TLSv1.2 TLSv1.3;\r\nssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;\r\nssl_prefer_server_ciphers off;\r\nssl_session_timeout 1d;\r\nssl_session_cache shared:SSL:50m;\r\nssl_session_tickets off;\r\nssl_stapling on;\r\nssl_stapling_verify on;<\/code><\/pre>\n<\/div>\n \u707d\u96e3\u5fa9\u539f\u548c\u696d\u52d9\u6301\u7e8c\u6027<\/strong><\/h2>\n \n \u8003\u616e\u5230\u65e5\u672c\u7368\u7279\u7684\u5730\u7406\u6311\u6230\uff0c\u5168\u9762\u7684\u707d\u96e3\u5fa9\u539f\u898f\u5283\u81f3\u95dc\u91cd\u8981\uff1a<\/p>\n \u591a\u5340\u57df\u90e8\u7f72\u7b56\u7565\uff1a<\/h3>\n\n\n\n\n\n\n \u5340\u57df<\/th>\n \u8cc7\u6599\u4e2d\u5fc3<\/th>\n \u89d2\u8272<\/th>\n \u6545\u969c\u8f49\u79fb\u512a\u5148\u9806\u5e8f<\/th>\n<\/tr>\n \u6771\u4eac<\/td>\n TY3\/NTT<\/td>\n \u4e3b\u8981<\/td>\n 1<\/td>\n<\/tr>\n \u5927\u962a<\/td>\n OS1\/KDDI<\/td>\n \u6b21\u8981<\/td>\n 2<\/td>\n<\/tr>\n \u798f\u5ca1<\/td>\n FU1\/QTNet<\/td>\n \u707d\u5099\u7ad9\u9ede<\/td>\n 3<\/td>\n<\/tr>\n \u672d\u5e4c<\/td>\n SP1\/NTT<\/td>\n \u51b7\u5099\u4efd<\/td>\n 4<\/td>\n<\/tr>\n<\/table>\n \u6545\u969c\u8f49\u79fb\u914d\u7f6e\uff1a<\/h3>\n # Keepalived VRRP\u914d\u7f6e\r\nvrrp_script chk_haproxy {\r\n script \"killall -0 haproxy\"\r\n interval 2\r\n weight 2\r\n}\r\n\r\nvrrp_instance VI_1 {\r\n state MASTER\r\n interface eth0\r\n virtual_router_id 51\r\n priority 100\r\n authentication {\r\n auth_type PASS\r\n auth_pass j@p@n2025\r\n }\r\n virtual_ipaddress {\r\n 192.168.1.10\r\n }\r\n track_script {\r\n chk_haproxy\r\n }\r\n notify_master \"\/etc\/keepalived\/notify.sh master\"\r\n notify_backup \"\/etc\/keepalived\/notify.sh backup\"\r\n notify_fault \"\/etc\/keepalived\/notify.sh fault\"\r\n}<\/code><\/pre>\n \u8cc7\u6599\u8907\u88fd\u7b56\u7565\uff1a<\/h3>\n # PostgreSQL\u4e32\u6d41\u8907\u88fd\r\nprimary_conninfo = 'host=standby1.example.jp port=5432 user=repl password=xxx'\r\nwal_level = replica\r\nmax_wal_senders = 10\r\nwal_keep_segments = 32\r\nhot_standby = on\r\nsynchronous_commit = on\r\nsynchronous_standby_names = 'standby1'<\/code><\/pre>\n<\/div>\n \u7279\u5b9a\u4f7f\u7528\u6848\u4f8b\u6548\u80fd\u512a\u5316<\/strong><\/h2>\n \u904a\u6232\u4f3a\u670d\u5668<\/h3>\n \n # \u904a\u6232\u4f3a\u670d\u5668TCP\u512a\u5316\r\nsysctl -w net.ipv4.tcp_no_metrics_save=1\r\nsysctl -w net.ipv4.tcp_moderate_rcvbuf=1\r\nsysctl -w net.core.netdev_max_backlog=5000\r\nsysctl -w net.ipv4.tcp_congestion_control=bbr\r\n\r\n# UDP\u904a\u6232\u6d41\u91cf\u512a\u5148\u9806\u5e8f\r\ntc qdisc add dev eth0 root handle 1: prio bands 3\r\ntc filter add dev eth0 parent 1: protocol ip prio 1 u32 \\\r\n match ip dport 27015 0xffff flowid 1:1\r\ntc filter add dev eth0 parent 1: protocol ip prio 1 u32 \\\r\n match ip dport 27016 0xffff flowid 1:1<\/code><\/pre>\n \u5404\u985e\u904a\u6232\u5efa\u8b70\u8a2d\u5b9a\uff1a<\/strong><\/p>\n\n\n\n\n\n\n \u904a\u6232\u985e\u578b<\/th>\n \u6700\u4f73Ping\u503c<\/th>\n \u7de9\u885d\u5340\u5927\u5c0f<\/th>\n \u512a\u5148\u9806\u5e8f\u8a2d\u5b9a<\/th>\n<\/tr>\n FPS\u904a\u6232<\/td>\n <50ms<\/td>\n 64KB<\/td>\n \u6700\u9ad8<\/td>\n<\/tr>\n MMORPG<\/td>\n <100ms<\/td>\n 128KB<\/td>\n \u9ad8<\/td>\n<\/tr>\n \u7af6\u901f\u904a\u6232<\/td>\n <75ms<\/td>\n 96KB<\/td>\n \u9ad8<\/td>\n<\/tr>\n \u7b56\u7565\u904a\u6232<\/td>\n <150ms<\/td>\n 256KB<\/td>\n \u4e2d\u7b49<\/td>\n<\/tr>\n<\/table>\n<\/div>\n \u91d1\u878d\u4ea4\u6613\u7cfb\u7d71<\/h3>\n \n # \u4f4e\u5ef6\u9072\u4ea4\u6613\u914d\u7f6e\r\n# \u7db2\u8def\u4ecb\u9762\u914d\u7f6e\r\nethtool -G eth0 rx 4096 tx 4096\r\nethtool -C eth0 rx-usecs 0 rx-frames 1 tx-usecs 0 tx-frames 1\r\n\r\n# IRQ\u89aa\u548c\u6027\r\necho 1 > \/proc\/irq\/$(cat \/proc\/interrupts | grep eth0-TxRx-0 | cut -d: -f1)\/smp_affinity\r\n\r\n# \u7a0b\u5e8f\u512a\u5148\u9806\u5e8f\r\nchrt -f -p 99 ${TRADING_PROCESS_PID}<\/code><\/pre>\n \u5ef6\u9072\u512a\u5316\u5c64\u6b21\uff1a<\/strong><\/p>\n \n \u786c\u9ad4\u5c64\uff1a<\/strong>\n \n FPGA\u52a0\u901f<\/li>\n \u6838\u5fc3\u7e5e\u904e\u7db2\u8def<\/li>\n TCP\u5378\u8f09\u5f15\u64ce(TOE)<\/li>\n \u76f4\u63a5\u8a18\u61b6\u9ad4\u5b58\u53d6(DMA)<\/li>\n<\/ul>\n<\/li>\n \u8edf\u9ad4\u5c64\uff1a<\/strong>\n \n \u5373\u6642\u6838\u5fc3\u4fee\u88dc<\/li>\n CPU\u7d81\u5b9a<\/li>\n \u8a18\u61b6\u9ad4\u9396\u5b9a<\/li>\n \u96f6\u8907\u88fd\u7db2\u8def<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n \u672a\u4f86\u6280\u8853\u6574\u5408<\/strong><\/h2>\n \n 5G\u7db2\u8def\u6574\u5408\uff1a<\/h3>\n \n \u7db2\u8def\u5207\u7247\u914d\u7f6e\uff1a<\/strong>\n \n \u8d85\u53ef\u9760\u4f4e\u5ef6\u9072\u901a\u8a0a(URLLC)\u5207\u7247<\/li>\n \u589e\u5f37\u578b\u884c\u52d5\u5bec\u983b(eMBB)\u5207\u7247<\/li>\n \u5927\u898f\u6a21\u7269\u806f\u7db2(mMTC)\u5207\u7247<\/li>\n<\/ul>\n<\/li>\n \u908a\u7de3\u904b\u7b97\u6574\u5408\uff1a<\/strong>\n # \u908a\u7de3\u7bc0\u9ede\u914d\u7f6e\r\nlocation \/edge\/ {\r\n proxy_pass http:\/\/edge-cluster;\r\n proxy_set_header Host $host;\r\n proxy_set_header X-Real-IP $remote_addr;\r\n proxy_http_version 1.1;\r\n proxy_set_header Connection \"\";\r\n proxy_buffering off;\r\n proxy_cache_bypass $http_upgrade;\r\n}<\/code><\/pre>\n<\/li>\n<\/ul>\n AI\u9a45\u52d5\u7684\u7db2\u8def\u512a\u5316\uff1a<\/h3>\n # \u57fa\u65bc\u6a5f\u5668\u5b78\u7fd2\u7684\u6d41\u91cf\u9810\u6e2c\r\nmodel_config = {\r\n 'input_features': ['time', 'day', 'traffic_pattern'],\r\n 'output_features': ['predicted_load'],\r\n 'learning_rate': 0.001,\r\n 'batch_size': 32,\r\n 'epochs': 100\r\n}\r\n\r\n# \u52d5\u614b\u8cc7\u6e90\u5206\u914d\r\nresource_threshold = {\r\n 'cpu_high': 80,\r\n 'cpu_low': 20,\r\n 'memory_high': 85,\r\n 'memory_low': 30\r\n}<\/code><\/pre>\n<\/div>\n \u7e3d\u7d50\u8207\u5c55\u671b<\/strong><\/h2>\n \u65e5\u672c\u4f3a\u670d\u5668\u57fa\u790e\u8a2d\u65bd\u7684\u683c\u5c40\u6b63\u5728\u5feb\u901f\u767c\u5c55\uff0c\u4ee5\u4e0b\u5e7e\u500b\u95dc\u9375\u8da8\u52e2\u6b63\u5728\u5851\u9020\u672a\u4f86\uff1a<\/p>\n \n \u65b0\u8208\u6280\u8853\u8207\u8da8\u52e2\uff1a<\/h3>\n \n \u7db2\u8def\u6f14\u9032\uff1a<\/strong>\n \n 5G\u548c6G\u6574\u5408<\/li>\n \u91cf\u5b50\u7db2\u8def\u80fd\u529b<\/li>\n \u9032\u968e\u908a\u7de3\u904b\u7b97<\/li>\n AI\u9a45\u52d5\u7684\u7db2\u8def\u512a\u5316<\/li>\n<\/ul>\n<\/li>\n \u57fa\u790e\u8a2d\u65bd\u767c\u5c55\uff1a<\/strong>\n \n \u7da0\u8272\u8cc7\u6599\u4e2d\u5fc3\u8a08\u756b<\/li>\n \u81ea\u52d5\u5316\u64f4\u5c55\u89e3\u6c7a\u65b9\u6848<\/li>\n \u6df7\u5408\u96f2\u67b6\u69cb<\/li>\n \u5bb9\u5668\u539f\u751f\u7db2\u8def<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n \n \u6700\u7d42\u5efa\u8b70\uff1a<\/h3>\n \n \u5373\u6642\u884c\u52d5\uff1a<\/strong>\n \n \u5be6\u65bd\u57fa\u6e96\u76e3\u63a7<\/li>\n \u914d\u7f6e\u6700\u4f73\u7db2\u8def\u8a2d\u5b9a<\/li>\n \u5efa\u7acb\u6548\u80fd\u57fa\u6e96<\/li>\n \u90e8\u7f72\u5b89\u5168\u63aa\u65bd<\/li>\n<\/ul>\n<\/li>\n \u9577\u671f\u7b56\u7565\uff1a<\/strong>\n \n \u898f\u5283\u591a\u5340\u57df\u5f48\u6027<\/li>\n \u6295\u8cc7\u81ea\u52d5\u5316\u5de5\u5177<\/li>\n \u63a1\u7528\u65b0\u8208\u6280\u8853<\/li>\n \u5b9a\u671f\u6548\u80fd\u7a3d\u6838<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n \u7406\u89e3\u548c\u512a\u5316\u65e5\u672c\u4f3a\u670d\u5668\u7684ping\u503c\u9700\u8981\u4e00\u500b\u5168\u9762\u7684\u65b9\u6cd5\uff0c\u8a72\u65b9\u6cd5\u8981\u8003\u616e\u6280\u8853\u3001\u5730\u7406\u548c\u6587\u5316\u56e0\u7d20\u3002\u900f\u904e\u9075\u5faa\u672c\u6307\u5357\u4e2d\u7684\u6307\u5c0e\u65b9\u91dd\u4e26\u5be6\u65bd\u63a8\u85a6\u7684\u914d\u7f6e\uff0c\u7d44\u7e54\u53ef\u4ee5\u5728\u65e5\u672c\u4f3a\u670d\u5668\u71df\u904b\u4e2d\u5be6\u73fe\u6700\u4f73\u6548\u80fd\uff0c\u540c\u6642\u4fdd\u6301\u6210\u672c\u6548\u76ca\u548c\u53ef\u9760\u6027\u3002<\/p>\n","protected":false},"excerpt":{"rendered":" \u5c0d\u65bc\u5c0b\u6c42\u4f3a\u670d\u5668\u79df\u7528\u548c\u4f3a\u670d\u5668\u8a17\u7ba1\u670d\u52d9\u6700\u4f73\u6548\u80fd\u7684\u6280\u8853\u5c08\u696d\u4eba\u58eb\u4f86\u8aaa\uff0c\u4e86\u89e3\u65e5\u672c\u4f3a\u670d\u5668\u7684ping\u503c\u81f3\u95dc\u91cd\u8981\u3002\u5728\u7576\u4eca\u7db2\u969b\u7db2 […]<\/p>\n Read More…<\/a><\/p>\n","protected":false},"author":2,"featured_media":25971,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[8116],"tags":[8314,8315,5251,4085,511],"class_list":["post-25974","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-japan-dedicated-server-tc","tag-japan-server-ping-tc","tag-hosting-japan-tc","tag-server-latency-tc","tag-ping-test-tc","tag-network-latency-tc"],"acf":[],"yoast_head":"\n