您好,登錄后才能下訂單哦!
[root@test ~]# cat /proc/sys/kernel/sem
250 32000 100 142
[root@test ~]# ipcs -sl
------ Semaphore Limits --------
max number of arrays = 142
max semaphores per array = 250
max semaphores system wide = 32000
max ops per semop call = 100
semaphore max value = 32767
NAME | DESCRIPTION | MIN VALUE
-------+--------------------------------------------------+----------
SEMMSL | maximum number of semaphores in a semphore set | 250
SEMMNS | maximum number of semphores in the system | 32000
SEMOPM | maximum number of operations per semop(P) call | 100
SEMMNI | maximum number of semaphore sets in system | 128
SEMMSL:10+ processes
四個數字:第1個數字應約大于Oracle進程數,第2個數字建議是第1和第4個數字的乘積。這個參數能夠滿足大部分使用,但對于連接數較高(比如單節點8000個連接)可以設置為:
10000 1280000 512 1024
信號量(Semaphore)和Mutex類似,表示可用資源的數量,和Mutex不同的是這個數量可以大于1。
本文介紹的是POSIX semaphore庫函數,詳見sem_overview(7),這種信號量不僅可用于同一進程的線程間同步,也可用于不同進程間的同步。
相關函數:
int sem_init(sem_t *sem, intpshared, unsigned int value);
int sem_wait(sem_t *sem);
int sem_trywait(sem_t *sem);
int sem_post(sem_t * sem);
int sem_destroy(sem_t * sem);
semaphore變量的類型為sem_t
sem_init()初始化一個semaphore變量,value參數表示可用資源的數量,pshared參數為0表示信號量用于同一進程的線程間同步。
在用完semaphore變量之后應該調用sem_destroy()釋放與semaphore相關的資源。
調用sem_wait()可以獲得資源,使semaphore的值減1,如果調用sem_wait()時semaphore的值已經是0,則掛起等待。如果不希望掛起等待,可以調用sem_trywait()。調用sem_post()可以釋放資源,使semaphore的值加1,同時喚醒掛起等待的線程。
# cat /proc/sys/kernel/shmmax
# cat /proc/sys/kernel/shmmni
kernel.shmmax = 2147483648
kernel.shmmni = 100
NAME | DESCRIPTION | MIN VALUE
-------+--------------------------------------------------+-------------
SHMMAX | maximum bytes in one shared memory segment| 4294967295
SHMMNI | maximum count of shared memorysegments | 4096
SHMSEG | maximum count of shared memorysegments per proc | TBD
SHMALL | maximum total shared memorysystem-wide | 2097152
shmmni:共享內存段的最大數量,一般是夠用的
kernel.shmmni 默認為4096
fs.file-max:設置 系統所有進程一共可以打開的文件數量
cat /proc/sys/fs/file-max
該參數建議值:fs.file-max = 6815744
系統范圍內異步IO并發請求的最大個數
fs.aio-max-nr = 1048576
net.ipv4.ip_local_port_range:指定區間端口的總數
net.ipv4.ip_local_port_range = 9000 65500
#讓TIME_WAIT狀態可以重用,這樣即使TIME_WAIT占滿了所有端口,也不會拒絕新的請求造成障礙
echo "1" >/proc/sys/net/ipv4/tcp_tw_reuse
#讓TIME_WAIT盡快回收,我也不知是多久,觀察大概是一秒鐘
echo "1" >/proc/sys/net/ipv4/tcp_tw_recycle
net.core.rmem_default表示套接字接收緩沖區大小的缺省值
/proc/sys/net/core/rmem_default
/proc/sys/net/core/rmem_max
使用udp接收數據時:
若沒有調用setsockopt設置系統接收緩存,則接收緩存的大小為rmem_default.
若程序調用setsockopt設置系統接收緩存,設置值不能超過rmem_max.
系統會為每個udp socket申請一份緩存空間,而不是共用同一份緩存.
即每個udp socket都會有一個rmem_default大小的緩存空間(假設沒有setsockopt設置).
oracle建議的最小值為:
net.core.rmem_default = 262144
net.core.rmem_max:表示套接字接收緩沖區大小的最大值。
oracle建議的最小值為:
net.core.rmem_max = 4194304
cat /proc/sys/net/core/wmem_default
net.core.wmem_default :udp socket默認的用于發送緩沖區大小的缺省值
net.core.wmem_default = 262144
net.core.wmem_max :udp socket默認的用于發送緩沖區大小的最大值
net.core.wmem_max = 1048576
echo 1 > /proc/sys/vm/drop_caches
[oracle@db1 ~]$ ulimit -a
core file size (blocks, -c) 0
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 257380
max locked memory (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files (-n) 1024
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) 8192
cpu time (seconds, -t) unlimited
max user processes (-u) 1024
virtual memory (kbytes, -v) unlimited
file locks (-x) unlimited
[root@test ~]# su - oracle
[oracle@test ~]$ ulimit -a
core file size (blocks, -c) 0
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 15984
max locked memory (kbytes, -l) 50000000
max memory size (kbytes, -m) unlimited
open files (-n) 65536
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) 10240
cpu time (seconds, -t) unlimited
max user processes (-u) 16384
virtual memory (kbytes, -v) unlimited
file locks (-x) unlimited
[oracle@dm01db01 ~]$ ulimit -a
core file size (blocks, -c) 0
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 802816
max locked memory (kbytes, -l) 74136141
max memory size (kbytes, -m) unlimited
open files (-n) 65536
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) 10240
cpu time (seconds, -t) unlimited
max user processes (-u) 131072
virtual memory (kbytes, -v) unlimited
file locks (-x) unlimited
kernel.sched_child_runs_first = 0
kernel.sched_min_granularity_ns = 4000000
kernel.sched_latency_ns = 20000000
kernel.sched_wakeup_granularity_ns =4000000
kernel.sched_shares_ratelimit = 1000000
kernel.sched_shares_thresh = 4
kernel.sched_features = 32611451
kernel.sched_migration_cost = 500000
kernel.sched_nr_migrate = 32
kernel.sched_time_avg = 1000
kernel.timer_migration = 1
kernel.sched_rt_period_us = 1000000
kernel.sched_rt_runtime_us = 950000
kernel.sched_compat_yield = 1
kernel.panic = 0
kernel.core_uses_pid = 1
kernel.core_pattern =|/usr/libexec/abrt-hook-ccpp %s %c %p %u %g %t e
kernel.core_pipe_limit = 4
kernel.tainted = 512
kernel.latencytop = 0
kernel.real-root-dev = 0
kernel.print-fatal-signals = 0
kernel.ctrl-alt-del = 0
kernel.ftrace_enabled = 1
kernel.stack_tracer_enabled = 0
kernel.ftrace_dump_on_oops = 0
kernel.modprobe = /sbin/modprobe
kernel.modules_disabled = 0
kernel.hotplug =
kernel.sg-big-buff = 32768
kernel.acct = 4 2 30
kernel.sysrq = 0
error: permission denied on key'kernel.cad_pid'
kernel.threads-max = 514761
kernel.random.poolsize = 4096
kernel.random.entropy_avail = 3474
kernel.random.read_wakeup_threshold = 64
kernel.random.write_wakeup_threshold = 128
kernel.random.boot_id =dfdbf1c1-7dcb-462a-a311-9109eb51e12a
kernel.random.uuid =6ce1f1b9-b09b-4372-a913-086d113eedbc
kernel.overflowuid = 65534
kernel.overflowgid = 65534
kernel.pid_max = 32768
kernel.panic_on_oops = 1
kernel.printk = 4 4 1 7
kernel.printk_ratelimit = 5
kernel.printk_ratelimit_burst = 10
kernel.printk_delay = 0
kernel.ngroups_max = 65536
kernel.unknown_nmi_panic = 0
kernel.nmi_watchdog = 0
kernel.panic_on_unrecovered_nmi = 0
kernel.panic_on_io_nmi = 0
kernel.bootloader_type = 113
kernel.bootloader_version = 1
kernel.kstack_depth_to_print = 12
kernel.io_delay_type = 0
kernel.randomize_va_space = 2
kernel.acpi_video_flags = 0
kernel.softlockup_panic = 0
kernel.softlockup_thresh = 60
kernel.hung_task_panic = 0
kernel.hung_task_check_count = 4194304
kernel.hung_task_timeout_secs = 120
kernel.hung_task_warnings = 0
kernel.compat-log = 1
kernel.max_lock_depth = 1024
kernel.poweroff_cmd = /sbin/poweroff
kernel.keys.maxkeys = 200
kernel.keys.maxbytes = 20000
kernel.keys.root_maxkeys = 200
kernel.keys.root_maxbytes = 20000
kernel.keys.gc_delay = 300
kernel.slow-work.min-threads = 2
kernel.slow-work.max-threads = 32
kernel.slow-work.vslow-percentage = 50
kernel.perf_event_paranoid = 1
kernel.perf_event_mlock_kb = 516
kernel.perf_event_max_sample_rate = 100000
kernel.blk_iopoll = 1
kernel.vsyscall64 = 1
kernel.ostype = Linux
kernel.osrelease =2.6.32-300.3.1.el6uek.x86_64
kernel.version = #1 SMP Fri Dec 9 18:57:35EST 2011
kernel.hostname = db1
kernel.domainname = (none)
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
kernel.shmmni = 4096
kernel.msgmax = 65536
kernel.msgmni = 32768
kernel.msgmnb = 65536
kernel.sem = 250 32000 32 128
kernel.auto_msgmni = 1
kernelNaNy.max = 4096
kernelNaNy.nr = 1050
kernel.sched_domain.cpu0.domain0.min_interval= 1
kernel.sched_domain.cpu0.domain0.max_interval= 4
kernel.sched_domain.cpu0.domain0.busy_idx =2
kernel.sched_domain.cpu0.domain0.idle_idx =0
kernel.sched_domain.cpu0.domain0.newidle_idx= 0
kernel.sched_domain.cpu0.domain0.wake_idx =0
kernel.sched_domain.cpu0.domain0.forkexec_idx= 0
kernel.sched_domain.cpu0.domain0.busy_factor= 64
kernel.sched_domain.cpu0.domain0.imbalance_pct= 125
kernel.sched_domain.cpu0.domain0.cache_nice_tries= 1
kernel.sched_domain.cpu0.domain0.flags =4655
kernel.sched_domain.cpu0.domain0.name = MC
kernel.sched_domain.cpu0.domain1.min_interval= 8
kernel.sched_domain.cpu0.domain1.max_interval= 32
kernel.sched_domain.cpu0.domain1.busy_idx =3
kernel.sched_domain.cpu0.domain1.idle_idx =2
kernel.sched_domain.cpu0.domain1.newidle_idx= 0
kernel.sched_domain.cpu0.domain1.wake_idx =0
kernel.sched_domain.cpu0.domain1.forkexec_idx= 0
kernel.sched_domain.cpu0.domain1.busy_factor= 32
kernel.sched_domain.cpu0.domain1.imbalance_pct= 125
kernel.sched_domain.cpu0.domain1.cache_nice_tries= 2
kernel.sched_domain.cpu0.domain1.flags =1071
kernel.sched_domain.cpu0.domain1.name =NODE
kernel.sched_domain.cpu1.domain0.min_interval= 1
kernel.sched_domain.cpu1.domain0.max_interval= 4
kernel.sched_domain.cpu1.domain0.busy_idx =2
kernel.sched_domain.cpu1.domain0.idle_idx =0
kernel.sched_domain.cpu1.domain0.newidle_idx= 0
kernel.sched_domain.cpu1.domain0.wake_idx =0
kernel.sched_domain.cpu1.domain0.forkexec_idx= 0
kernel.sched_domain.cpu1.domain0.busy_factor= 64
kernel.sched_domain.cpu1.domain0.imbalance_pct= 125
kernel.sched_domain.cpu1.domain0.cache_nice_tries= 1
kernel.sched_domain.cpu1.domain0.flags =4655
kernel.sched_domain.cpu1.domain0.name = MC
kernel.sched_domain.cpu1.domain1.min_interval= 8
kernel.sched_domain.cpu1.domain1.max_interval= 32
kernel.sched_domain.cpu1.domain1.busy_idx =3
kernel.sched_domain.cpu1.domain1.idle_idx =2
kernel.sched_domain.cpu1.domain1.newidle_idx= 0
kernel.sched_domain.cpu1.domain1.wake_idx =0
kernel.sched_domain.cpu1.domain1.forkexec_idx= 0
kernel.sched_domain.cpu1.domain1.busy_factor= 32
kernel.sched_domain.cpu1.domain1.imbalance_pct= 125
kernel.sched_domain.cpu1.domain1.cache_nice_tries= 2
kernel.sched_domain.cpu1.domain1.flags =1071
kernel.sched_domain.cpu1.domain1.name =NODE
kernel.sched_domain.cpu2.domain0.min_interval= 1
kernel.sched_domain.cpu2.domain0.max_interval= 4
kernel.sched_domain.cpu2.domain0.busy_idx =2
kernel.sched_domain.cpu2.domain0.idle_idx =0
kernel.sched_domain.cpu2.domain0.newidle_idx= 0
kernel.sched_domain.cpu2.domain0.wake_idx =0
kernel.sched_domain.cpu2.domain0.forkexec_idx= 0
kernel.sched_domain.cpu2.domain0.busy_factor= 64
kernel.sched_domain.cpu2.domain0.imbalance_pct= 125
kernel.sched_domain.cpu2.domain0.cache_nice_tries= 1
kernel.sched_domain.cpu2.domain0.flags =4655
kernel.sched_domain.cpu2.domain0.name = MC
kernel.sched_domain.cpu2.domain1.min_interval= 8
kernel.sched_domain.cpu2.domain1.max_interval= 32
kernel.sched_domain.cpu2.domain1.busy_idx =3
kernel.sched_domain.cpu2.domain1.idle_idx =2
kernel.sched_domain.cpu2.domain1.newidle_idx= 0
kernel.sched_domain.cpu2.domain1.wake_idx =0
kernel.sched_domain.cpu2.domain1.forkexec_idx= 0
kernel.sched_domain.cpu2.domain1.busy_factor= 32
kernel.sched_domain.cpu2.domain1.imbalance_pct= 125
kernel.sched_domain.cpu2.domain1.cache_nice_tries= 2
kernel.sched_domain.cpu2.domain1.flags =1071
kernel.sched_domain.cpu2.domain1.name =NODE
kernel.sched_domain.cpu3.domain0.min_interval= 1
kernel.sched_domain.cpu3.domain0.max_interval= 4
kernel.sched_domain.cpu3.domain0.busy_idx =2
kernel.sched_domain.cpu3.domain0.idle_idx =0
kernel.sched_domain.cpu3.domain0.newidle_idx= 0
kernel.sched_domain.cpu3.domain0.wake_idx =0
kernel.sched_domain.cpu3.domain0.forkexec_idx= 0
kernel.sched_domain.cpu3.domain0.busy_factor= 64
kernel.sched_domain.cpu3.domain0.imbalance_pct= 125
kernel.sched_domain.cpu3.domain0.cache_nice_tries= 1
kernel.sched_domain.cpu3.domain0.flags =4655
kernel.sched_domain.cpu3.domain0.name = MC
kernel.sched_domain.cpu3.domain1.min_interval= 8
kernel.sched_domain.cpu3.domain1.max_interval= 32
kernel.sched_domain.cpu3.domain1.busy_idx =3
kernel.sched_domain.cpu3.domain1.idle_idx =2
kernel.sched_domain.cpu3.domain1.newidle_idx= 0
kernel.sched_domain.cpu3.domain1.wake_idx =0
kernel.sched_domain.cpu3.domain1.forkexec_idx= 0
kernel.sched_domain.cpu3.domain1.busy_factor= 32
kernel.sched_domain.cpu3.domain1.imbalance_pct= 125
kernel.sched_domain.cpu3.domain1.cache_nice_tries= 2
kernel.sched_domain.cpu3.domain1.flags =1071
kernel.sched_domain.cpu3.domain1.name =NODE
kernel.sched_domain.cpu4.domain0.min_interval= 1
kernel.sched_domain.cpu4.domain0.max_interval= 4
kernel.sched_domain.cpu4.domain0.busy_idx =2
kernel.sched_domain.cpu4.domain0.idle_idx =0
kernel.sched_domain.cpu4.domain0.newidle_idx= 0
kernel.sched_domain.cpu4.domain0.wake_idx =0
kernel.sched_domain.cpu4.domain0.forkexec_idx= 0
kernel.sched_domain.cpu4.domain0.busy_factor= 64
kernel.sched_domain.cpu4.domain0.imbalance_pct= 125
kernel.sched_domain.cpu4.domain0.cache_nice_tries= 1
kernel.sched_domain.cpu4.domain0.flags =4655
kernel.sched_domain.cpu4.domain0.name = MC
kernel.sched_domain.cpu4.domain1.min_interval= 8
kernel.sched_domain.cpu4.domain1.max_interval= 32
kernel.sched_domain.cpu4.domain1.busy_idx =3
kernel.sched_domain.cpu4.domain1.idle_idx =2
kernel.sched_domain.cpu4.domain1.newidle_idx= 0
kernel.sched_domain.cpu4.domain1.wake_idx =0
kernel.sched_domain.cpu4.domain1.forkexec_idx= 0
kernel.sched_domain.cpu4.domain1.busy_factor= 32
kernel.sched_domain.cpu4.domain1.imbalance_pct= 125
kernel.sched_domain.cpu4.domain1.cache_nice_tries= 2
kernel.sched_domain.cpu4.domain1.flags =1071
kernel.sched_domain.cpu4.domain1.name =NODE
kernel.sched_domain.cpu5.domain0.min_interval= 1
kernel.sched_domain.cpu5.domain0.max_interval= 4
kernel.sched_domain.cpu5.domain0.busy_idx =2
kernel.sched_domain.cpu5.domain0.idle_idx =0
kernel.sched_domain.cpu5.domain0.newidle_idx= 0
kernel.sched_domain.cpu5.domain0.wake_idx =0
kernel.sched_domain.cpu5.domain0.forkexec_idx= 0
kernel.sched_domain.cpu5.domain0.busy_factor= 64
kernel.sched_domain.cpu5.domain0.imbalance_pct= 125
kernel.sched_domain.cpu5.domain0.cache_nice_tries= 1
kernel.sched_domain.cpu5.domain0.flags =4655
kernel.sched_domain.cpu5.domain0.name = MC
kernel.sched_domain.cpu5.domain1.min_interval= 8
kernel.sched_domain.cpu5.domain1.max_interval= 32
kernel.sched_domain.cpu5.domain1.busy_idx =3
kernel.sched_domain.cpu5.domain1.idle_idx =2
kernel.sched_domain.cpu5.domain1.newidle_idx= 0
kernel.sched_domain.cpu5.domain1.wake_idx =0
kernel.sched_domain.cpu5.domain1.forkexec_idx= 0
kernel.sched_domain.cpu5.domain1.busy_factor= 32
kernel.sched_domain.cpu5.domain1.imbalance_pct= 125
kernel.sched_domain.cpu5.domain1.cache_nice_tries= 2
kernel.sched_domain.cpu5.domain1.flags =1071
kernel.sched_domain.cpu5.domain1.name =NODE
kernel.sched_domain.cpu6.domain0.min_interval= 1
kernel.sched_domain.cpu6.domain0.max_interval= 4
kernel.sched_domain.cpu6.domain0.busy_idx =2
kernel.sched_domain.cpu6.domain0.idle_idx =0
kernel.sched_domain.cpu6.domain0.newidle_idx= 0
kernel.sched_domain.cpu6.domain0.wake_idx =0
kernel.sched_domain.cpu6.domain0.forkexec_idx= 0
kernel.sched_domain.cpu6.domain0.busy_factor= 64
kernel.sched_domain.cpu6.domain0.imbalance_pct= 125
kernel.sched_domain.cpu6.domain0.cache_nice_tries= 1
kernel.sched_domain.cpu6.domain0.flags =4655
kernel.sched_domain.cpu6.domain0.name = MC
kernel.sched_domain.cpu6.domain1.min_interval= 8
kernel.sched_domain.cpu6.domain1.max_interval= 32
kernel.sched_domain.cpu6.domain1.busy_idx =3
kernel.sched_domain.cpu6.domain1.idle_idx =2
kernel.sched_domain.cpu6.domain1.newidle_idx= 0
kernel.sched_domain.cpu6.domain1.wake_idx =0
kernel.sched_domain.cpu6.domain1.forkexec_idx= 0
kernel.sched_domain.cpu6.domain1.busy_factor= 32
kernel.sched_domain.cpu6.domain1.imbalance_pct= 125
kernel.sched_domain.cpu6.domain1.cache_nice_tries= 2
kernel.sched_domain.cpu6.domain1.flags =1071
kernel.sched_domain.cpu6.domain1.name =NODE
kernel.sched_domain.cpu7.domain0.min_interval= 1
kernel.sched_domain.cpu7.domain0.max_interval= 4
kernel.sched_domain.cpu7.domain0.busy_idx =2
kernel.sched_domain.cpu7.domain0.idle_idx =0
kernel.sched_domain.cpu7.domain0.newidle_idx= 0
kernel.sched_domain.cpu7.domain0.wake_idx =0
kernel.sched_domain.cpu7.domain0.forkexec_idx= 0
kernel.sched_domain.cpu7.domain0.busy_factor= 64
kernel.sched_domain.cpu7.domain0.imbalance_pct= 125
kernel.sched_domain.cpu7.domain0.cache_nice_tries= 1
kernel.sched_domain.cpu7.domain0.flags =4655
kernel.sched_domain.cpu7.domain0.name = MC
kernel.sched_domain.cpu7.domain1.min_interval= 8
kernel.sched_domain.cpu7.domain1.max_interval= 32
kernel.sched_domain.cpu7.domain1.busy_idx =3
kernel.sched_domain.cpu7.domain1.idle_idx =2
kernel.sched_domain.cpu7.domain1.newidle_idx= 0
kernel.sched_domain.cpu7.domain1.wake_idx =0
kernel.sched_domain.cpu7.domain1.forkexec_idx= 0
kernel.sched_domain.cpu7.domain1.busy_factor= 32
kernel.sched_domain.cpu7.domain1.imbalance_pct= 125
kernel.sched_domain.cpu7.domain1.cache_nice_tries= 2
kernel.sched_domain.cpu7.domain1.flags =1071
kernel.sched_domain.cpu7.domain1.name =NODE
vm.overcommit_memory = 0
vm.panic_on_oom = 0
vm.oom_kill_allocating_task = 0
vm.oom_dump_tasks = 0
vm.overcommit_ratio = 50
vm.page-cluster = 3
vm.dirty_background_ratio = 10
vm.dirty_background_bytes = 0
vm.dirty_ratio = 20
vm.dirty_bytes = 0
vm.dirty_writeback_centisecs = 500
vm.dirty_expire_centisecs = 3000
vm.nr_pdflush_threads = 0
vm.swappiness = 60
vm.nr_hugepages = 0
vm.hugetlb_shm_group = 0
vm.hugepages_treat_as_movable = 0
vm.nr_overcommit_hugepages = 0
vm.lowmem_reserve_ratio = 256 256 32
vm.drop_caches = 0
vm.min_free_kbytes = 22991
vm.percpu_pagelist_fraction = 0
vm.max_map_count = 65530
vm.laptop_mode = 0
vm.block_dump = 0
vm.vfs_cache_pressure = 100
vm.legacy_va_layout = 0
vm.zone_reclaim_mode = 0
vm.min_unmapped_ratio = 1
vm.min_slab_ratio = 5
vm.stat_interval = 1
vm.mmap_min_addr = 4096
vm.numa_zonelist_order = default
vm.scan_unevictable_pages = 0
fs.inode-nr = 154650 22116
fs.inode-state = 154650 22116 0 0 0 0 0
fs.file-nr = 8096 0 6815744
fs.file-max = 6815744
fs.nr_open = 1048576
fs.dentry-state = 187669 177721 45 0 0 0
fs.overflowuid = 65534
fs.overflowgid = 65534
fs.leases-enable = 1
fs.dir-notify-enable = 1
fs.lease-break-time = 45
fs.aio-nr = 61935
fs.aio-max-nr = 65536
fs.inotify.max_user_instances = 128
fs.inotify.max_user_watches = 8192
fs.inotify.max_queued_events = 16384
fs.epoll.max_user_watches = 6747074
fs.suid_dumpable = 0
fs.binfmt_misc.status = enabled
fs.quota.lookups = 0
fs.quota.drops = 0
fs.quota.reads = 0
fs.quota.writes = 0
fs.quota.cache_hits = 0
fs.quota.allocated_dquots = 0
fs.quota.free_dquots = 0
fs.quota.syncs = 40
fs.mqueue.queues_max = 256
fs.mqueue.msg_max = 10
fs.mqueue.msgsize_max = 8192
debug.exception-trace = 1
dev.scsi.logging_level = 0
dev.raid.speed_limit_min = 1000
dev.raid.speed_limit_max = 200000
dev.hpet.max-user-freq = 64
dev.mac_hid.mouse_button_emulation = 0
dev.mac_hid.mouse_button2_keycode = 97
dev.mac_hid.mouse_button3_keycode = 100
dev.cdrom.info = CD-ROM information, Id:cdrom.c 3.20 2003/12/17
dev.cdrom.info =
dev.cdrom.info = drive name:
dev.cdrom.info = drive speed:
dev.cdrom.info = drive # of slots:
dev.cdrom.info = Can close tray:
dev.cdrom.info = Can open tray:
dev.cdrom.info = Can lock tray:
dev.cdrom.info = Can change speed:
dev.cdrom.info = Can select disk:
dev.cdrom.info = Can read multisession:
dev.cdrom.info = Can read MCN:
dev.cdrom.info = Reports media changed:
dev.cdrom.info = Can play audio:
dev.cdrom.info = Can write CD-R:
dev.cdrom.info = Can write CD-RW:
dev.cdrom.info = Can read DVD:
dev.cdrom.info = Can write DVD-R:
dev.cdrom.info = Can write DVD-RAM:
dev.cdrom.info = Can read MRW:
dev.cdrom.info = Can write MRW:
dev.cdrom.info = Can write RAM:
dev.cdrom.info =
dev.cdrom.info =
dev.cdrom.autoclose = 1
dev.cdrom.autoeject = 0
dev.cdrom.debug = 0
dev.cdrom.lock = 1
dev.cdrom.check_media = 0
net.netfilter.nf_log.0 = NONE
net.netfilter.nf_log.1 = NONE
net.netfilter.nf_log.2 = NONE
net.netfilter.nf_log.3 = NONE
net.netfilter.nf_log.4 = NONE
net.netfilter.nf_log.5 = NONE
net.netfilter.nf_log.6 = NONE
net.netfilter.nf_log.7 = NONE
net.netfilter.nf_log.8 = NONE
net.netfilter.nf_log.9 = NONE
net.netfilter.nf_log.10 = NONE
net.netfilter.nf_log.11 = NONE
net.netfilter.nf_log.12 = NONE
net.netfilter.nf_conntrack_generic_timeout= 600
net.netfilter.nf_conntrack_tcp_timeout_syn_sent= 120
net.netfilter.nf_conntrack_tcp_timeout_syn_recv= 60
net.netfilter.nf_conntrack_tcp_timeout_established= 432000
net.netfilter.nf_conntrack_tcp_timeout_fin_wait= 120
net.netfilter.nf_conntrack_tcp_timeout_close_wait= 60
net.netfilter.nf_conntrack_tcp_timeout_last_ack= 30
net.netfilter.nf_conntrack_tcp_timeout_time_wait= 120
net.netfilter.nf_conntrack_tcp_timeout_close= 10
net.netfilter.nf_conntrack_tcp_timeout_max_retrans= 300
net.netfilter.nf_conntrack_tcp_timeout_unacknowledged= 300
net.netfilter.nf_conntrack_tcp_loose = 1
net.netfilter.nf_conntrack_tcp_be_liberal =0
net.netfilter.nf_conntrack_tcp_max_retrans= 3
net.netfilter.nf_conntrack_udp_timeout = 30
net.netfilter.nf_conntrack_udp_timeout_stream= 180
net.netfilter.nf_conntrack_icmpv6_timeout =30
net.netfilter.nf_conntrack_frag6_timeout =60
net.netfilter.nf_conntrack_frag6_low_thresh= 196608
net.netfilter.nf_conntrack_frag6_high_thresh= 262144
net.netfilter.nf_conntrack_icmp_timeout =30
net.netfilter.nf_conntrack_acct = 1
net.netfilter.nf_conntrack_events = 1
net.netfilter.nf_conntrack_events_retry_timeout= 15
net.netfilter.nf_conntrack_max = 65536
net.netfilter.nf_conntrack_count = 412
net.netfilter.nf_conntrack_buckets = 16384
net.netfilter.nf_conntrack_checksum = 1
net.netfilter.nf_conntrack_log_invalid = 0
net.netfilter.nf_conntrack_expect_max = 256
net.core.somaxconn = 128
net.core.xfrm_aevent_etime = 10
net.core.xfrm_aevent_rseqth = 2
net.core.xfrm_larval_drop = 1
net.core.xfrm_acq_expires = 30
net.core.wmem_max = 131071
net.core.rmem_max = 131071
net.core.wmem_default = 126976
net.core.rmem_default = 126976
net.core.dev_weight = 64
net.core.netdev_max_backlog = 1000
net.core.message_cost = 5
net.core.message_burst = 10
net.core.optmem_max = 20480
net.core.rps_sock_flow_entries = 0
net.core.netdev_budget = 300
net.core.warnings = 1
net.ipv4.route.gc_thresh = 524288
net.ipv4.route.max_size = 8388608
net.ipv4.route.gc_min_interval = 0
net.ipv4.route.gc_min_interval_ms = 500
net.ipv4.route.gc_timeout = 300
net.ipv4.route.gc_interval = 60
net.ipv4.route.redirect_load = 20
net.ipv4.route.redirect_number = 9
net.ipv4.route.redirect_silence = 20480
net.ipv4.route.error_cost = 1000
net.ipv4.route.error_burst = 5000
net.ipv4.route.gc_elasticity = 8
net.ipv4.route.mtu_expires = 600
net.ipv4.route.min_pmtu = 552
net.ipv4.route.min_adv_mss = 256
net.ipv4.route.secret_interval = 600
net.ipv4.neigh.default.mcast_solicit = 3
net.ipv4.neigh.default.ucast_solicit = 3
net.ipv4.neigh.default.app_solicit = 0
net.ipv4.neigh.default.retrans_time = 99
net.ipv4.neigh.default.base_reachable_time= 30
net.ipv4.neigh.default.delay_first_probe_time= 5
net.ipv4.neigh.default.gc_stale_time = 60
net.ipv4.neigh.default.unres_qlen = 3
net.ipv4.neigh.default.proxy_qlen = 64
net.ipv4.neigh.default.anycast_delay = 99
net.ipv4.neigh.default.proxy_delay = 79
net.ipv4.neigh.default.locktime = 99
net.ipv4.neigh.default.retrans_time_ms =1000
net.ipv4.neigh.default.base_reachable_time_ms= 30000
net.ipv4.neigh.default.gc_interval = 30
net.ipv4.neigh.default.gc_thresh2 = 128
net.ipv4.neigh.default.gc_thresh3 = 512
net.ipv4.neigh.default.gc_thresh4 = 1024
net.ipv4.neigh.lo.mcast_solicit = 3
net.ipv4.neigh.lo.ucast_solicit = 3
net.ipv4.neigh.lo.app_solicit = 0
net.ipv4.neigh.lo.retrans_time = 99
net.ipv4.neigh.lo.base_reachable_time = 30
net.ipv4.neigh.lo.delay_first_probe_time =5
net.ipv4.neigh.lo.gc_stale_time = 60
net.ipv4.neigh.lo.unres_qlen = 3
net.ipv4.neigh.lo.proxy_qlen = 64
net.ipv4.neigh.lo.anycast_delay = 99
net.ipv4.neigh.lo.proxy_delay = 79
net.ipv4.neigh.lo.locktime = 99
net.ipv4.neigh.lo.retrans_time_ms = 1000
net.ipv4.neigh.lo.base_reachable_time_ms =30000
net.ipv4.neigh.em2.mcast_solicit = 3
net.ipv4.neigh.em2.ucast_solicit = 3
net.ipv4.neigh.em2.app_solicit = 0
net.ipv4.neigh.em2.retrans_time = 99
net.ipv4.neigh.em2.base_reachable_time = 30
net.ipv4.neigh.em2.delay_first_probe_time =5
net.ipv4.neigh.em2.gc_stale_time = 60
net.ipv4.neigh.em2.unres_qlen = 3
net.ipv4.neigh.em2.proxy_qlen = 64
net.ipv4.neigh.em2.anycast_delay = 99
net.ipv4.neigh.em2.proxy_delay = 79
net.ipv4.neigh.em2.locktime = 99
net.ipv4.neigh.em2.retrans_time_ms = 1000
net.ipv4.neigh.em2.base_reachable_time_ms =30000
net.ipv4.neigh.em1.mcast_solicit = 3
net.ipv4.neigh.em1.ucast_solicit = 3
net.ipv4.neigh.em1.app_solicit = 0
net.ipv4.neigh.em1.retrans_time = 99
net.ipv4.neigh.em1.base_reachable_time = 30
net.ipv4.neigh.em1.delay_first_probe_time =5
net.ipv4.neigh.em1.gc_stale_time = 60
net.ipv4.neigh.em1.unres_qlen = 3
net.ipv4.neigh.em1.proxy_qlen = 64
net.ipv4.neigh.em1.anycast_delay = 99
net.ipv4.neigh.em1.proxy_delay = 79
net.ipv4.neigh.em1.locktime = 99
net.ipv4.neigh.em1.retrans_time_ms = 1000
net.ipv4.neigh.em1.base_reachable_time_ms =30000
net.ipv4.neigh.bond0.mcast_solicit = 3
net.ipv4.neigh.bond0.ucast_solicit = 3
net.ipv4.neigh.bond0.app_solicit = 0
net.ipv4.neigh.bond0.retrans_time = 99
net.ipv4.neigh.bond0.base_reachable_time =30
net.ipv4.neigh.bond0.delay_first_probe_time= 5
net.ipv4.neigh.bond0.gc_stale_time = 60
net.ipv4.neigh.bond0.unres_qlen = 3
net.ipv4.neigh.bond0.proxy_qlen = 64
net.ipv4.neigh.bond0.anycast_delay = 99
net.ipv4.neigh.bond0.proxy_delay = 79
net.ipv4.neigh.bond0.locktime = 99
net.ipv4.neigh.bond0.retrans_time_ms = 1000
net.ipv4.neigh.bond0.base_reachable_time_ms= 30000
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_sack = 1
net.ipv4.tcp_retrans_collapse = 1
net.ipv4.ip_default_ttl = 64
net.ipv4.ip_no_pmtu_disc = 0
net.ipv4.ip_nonlocal_bind = 0
net.ipv4.tcp_syn_retries = 5
net.ipv4.tcp_synack_retries = 5
net.ipv4.tcp_max_orphans = 262144
net.ipv4.tcp_max_tw_buckets = 262144
net.ipv4.ip_dynaddr = 0
net.ipv4.tcp_keepalive_time = 7200
net.ipv4.tcp_keepalive_probes = 9
net.ipv4.tcp_keepalive_intvl = 75
net.ipv4.tcp_retries1 = 3
net.ipv4.tcp_retries2 = 15
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_abort_on_overflow = 0
net.ipv4.tcp_stdurg = 0
net.ipv4.tcp_rfc1337 = 0
net.ipv4.tcp_max_syn_backlog = 2048
net.ipv4.ip_local_port_range = 32768 61000
net.ipv4.igmp_max_memberships = 20
net.ipv4.igmp_max_msf = 10
net.ipv4.inet_peer_threshold = 65664
net.ipv4.inet_peer_minttl = 120
net.ipv4.inet_peer_maxttl = 600
net.ipv4.inet_peer_gc_mintime = 10
net.ipv4.inet_peer_gc_maxtime = 120
net.ipv4.tcp_orphan_retries = 0
net.ipv4.tcp_fack = 1
net.ipv4.tcp_reordering = 3
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_dsack = 1
net.ipv4.tcp_mem = 3088512 4118016 6177024
net.ipv4.tcp_wmem = 4096 16384 4194304
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_app_win = 31
net.ipv4.tcp_adv_win_scale = 2
net.ipv4.tcp_tw_reuse = 0
net.ipv4.tcp_frto = 2
net.ipv4.tcp_frto_response = 0
net.ipv4.tcp_low_latency = 0
net.ipv4.tcp_no_metrics_save = 0
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_tso_win_divisor = 3
net.ipv4.tcp_congestion_control = cubic
net.ipv4.tcp_abc = 0
net.ipv4.tcp_mtu_probing = 0
net.ipv4.tcp_base_mss = 512
net.ipv4.tcp_workaround_signed_windows = 0
net.ipv4.tcp_dma_copybreak = 4096
net.ipv4.tcp_slow_start_after_idle = 1
net.ipv4.cipso_cache_enable = 1
net.ipv4.cipso_cache_bucket_size = 10
net.ipv4.cipso_rbm_optfmt = 0
net.ipv4.cipso_rbm_strictvalid = 1
net.ipv4.tcp_available_congestion_control =cubic reno
net.ipv4.tcp_allowed_congestion_control =cubic reno
net.ipv4.tcp_max_ssthresh = 0
net.ipv4.udp_mem = 3088512 4118016 6177024
net.ipv4.udp_rmem_min = 4096
net.ipv4.udp_wmem_min = 4096
net.ipv4.conf.all.forwarding = 0
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.all.accept_redirects = 1
net.ipv4.conf.all.secure_redirects = 1
net.ipv4.conf.all.shared_media = 1
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.accept_local = 1
net.ipv4.conf.all.src_valid_mark = 0
net.ipv4.conf.all.proxy_arp = 0
net.ipv4.conf.all.medium_id = 0
net.ipv4.conf.all.bootp_relay = 0
net.ipv4.conf.all.log_martians = 0
net.ipv4.conf.all.tag = 0
net.ipv4.conf.all.arp_filter = 0
net.ipv4.conf.all.arp_announce = 0
net.ipv4.conf.all.arp_ignore = 0
net.ipv4.conf.all.arp_accept = 0
net.ipv4.conf.all.arp_notify = 0
net.ipv4.conf.all.disable_xfrm = 0
net.ipv4.conf.all.disable_policy = 0
net.ipv4.conf.all.force_igmp_version = 0
net.ipv4.conf.all.promote_secondaries = 0
net.ipv4.conf.default.forwarding = 0
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.default.accept_redirects = 1
net.ipv4.conf.default.secure_redirects = 1
net.ipv4.conf.default.shared_media = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.default.accept_source_route =0
net.ipv4.conf.default.accept_local = 0
net.ipv4.conf.default.src_valid_mark = 0
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.default.medium_id = 0
net.ipv4.conf.default.bootp_relay = 0
net.ipv4.conf.default.log_martians = 0
net.ipv4.conf.default.tag = 0
net.ipv4.conf.default.arp_filter = 0
net.ipv4.conf.default.arp_announce = 0
net.ipv4.conf.default.arp_ignore = 0
net.ipv4.conf.default.arp_accept = 0
net.ipv4.conf.default.arp_notify = 0
net.ipv4.conf.default.disable_xfrm = 0
net.ipv4.conf.default.disable_policy = 0
net.ipv4.conf.default.force_igmp_version =0
net.ipv4.conf.default.promote_secondaries =0
net.ipv4.conf.lo.forwarding = 0
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.lo.accept_redirects = 1
net.ipv4.conf.lo.secure_redirects = 1
net.ipv4.conf.lo.shared_media = 1
net.ipv4.conf.lo.rp_filter = 1
net.ipv4.conf.lo.send_redirects = 1
net.ipv4.conf.lo.accept_source_route = 0
net.ipv4.conf.lo.accept_local = 0
net.ipv4.conf.lo.src_valid_mark = 0
net.ipv4.conf.lo.proxy_arp = 0
net.ipv4.conf.lo.medium_id = 0
net.ipv4.conf.lo.bootp_relay = 0
net.ipv4.conf.lo.log_martians = 0
net.ipv4.conf.lo.tag = 0
net.ipv4.conf.lo.arp_filter = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.lo.arp_accept = 0
net.ipv4.conf.lo.arp_notify = 0
net.ipv4.conf.lo.disable_xfrm = 1
net.ipv4.conf.lo.disable_policy = 1
net.ipv4.conf.lo.force_igmp_version = 0
net.ipv4.conf.lo.promote_secondaries = 0
net.ipv4.conf.em2.forwarding = 0
net.ipv4.conf.em2.mc_forwarding = 0
net.ipv4.conf.em2.accept_redirects = 1
net.ipv4.conf.em2.secure_redirects = 1
net.ipv4.conf.em2.shared_media = 1
net.ipv4.conf.em2.rp_filter = 1
net.ipv4.conf.em2.send_redirects = 1
net.ipv4.conf.em2.accept_source_route = 0
net.ipv4.conf.em2.accept_local = 0
net.ipv4.conf.em2.src_valid_mark = 0
net.ipv4.conf.em2.proxy_arp = 0
net.ipv4.conf.em2.medium_id = 0
net.ipv4.conf.em2.bootp_relay = 0
net.ipv4.conf.em2.log_martians = 0
net.ipv4.conf.em2.tag = 0
net.ipv4.conf.em2.arp_filter = 0
net.ipv4.conf.em2.arp_announce = 0
net.ipv4.conf.em2.arp_ignore = 0
net.ipv4.conf.em2.arp_accept = 0
net.ipv4.conf.em2.arp_notify = 0
net.ipv4.conf.em2.disable_xfrm = 0
net.ipv4.conf.em2.disable_policy = 0
net.ipv4.conf.em2.force_igmp_version = 0
net.ipv4.conf.em2.promote_secondaries = 0
net.ipv4.conf.em1.forwarding = 0
net.ipv4.conf.em1.mc_forwarding = 0
net.ipv4.conf.em1.accept_redirects = 1
net.ipv4.conf.em1.secure_redirects = 1
net.ipv4.conf.em1.shared_media = 1
net.ipv4.conf.em1.rp_filter = 1
net.ipv4.conf.em1.send_redirects = 1
net.ipv4.conf.em1.accept_source_route = 0
net.ipv4.conf.em1.accept_local = 0
net.ipv4.conf.em1.src_valid_mark = 0
net.ipv4.conf.em1.proxy_arp = 0
net.ipv4.conf.em1.medium_id = 0
net.ipv4.conf.em1.bootp_relay = 0
net.ipv4.conf.em1.log_martians = 0
net.ipv4.conf.em1.tag = 0
net.ipv4.conf.em1.arp_filter = 0
net.ipv4.conf.em1.arp_announce = 0
net.ipv4.conf.em1.arp_ignore = 0
net.ipv4.conf.em1.arp_accept = 0
net.ipv4.conf.em1.arp_notify = 0
net.ipv4.conf.em1.disable_xfrm = 0
net.ipv4.conf.em1.disable_policy = 0
net.ipv4.conf.em1.force_igmp_version = 0
net.ipv4.conf.em1.promote_secondaries = 0
net.ipv4.conf.bond0.forwarding = 0
net.ipv4.conf.bond0.mc_forwarding = 0
net.ipv4.conf.bond0.accept_redirects = 1
net.ipv4.conf.bond0.secure_redirects = 1
net.ipv4.conf.bond0.shared_media = 1
net.ipv4.conf.bond0.rp_filter = 1
net.ipv4.conf.bond0.send_redirects = 1
net.ipv4.conf.bond0.accept_source_route = 0
net.ipv4.conf.bond0.accept_local = 0
net.ipv4.conf.bond0.src_valid_mark = 0
net.ipv4.conf.bond0.proxy_arp = 0
net.ipv4.conf.bond0.medium_id = 0
net.ipv4.conf.bond0.bootp_relay = 0
net.ipv4.conf.bond0.log_martians = 0
net.ipv4.conf.bond0.tag = 0
net.ipv4.conf.bond0.arp_filter = 0
net.ipv4.conf.bond0.arp_announce = 0
net.ipv4.conf.bond0.arp_ignore = 0
net.ipv4.conf.bond0.arp_accept = 0
net.ipv4.conf.bond0.arp_notify = 0
net.ipv4.conf.bond0.disable_xfrm = 0
net.ipv4.conf.bond0.disable_policy = 0
net.ipv4.conf.bond0.force_igmp_version = 0
net.ipv4.conf.bond0.promote_secondaries = 0
net.ipv4.ip_forward = 0
net.ipv4.xfrm4_gc_thresh = 4194304
net.ipv4.ipfrag_high_thresh = 262144
net.ipv4.ipfrag_low_thresh = 196608
net.ipv4.ipfrag_time = 30
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses= 1
net.ipv4.icmp_errors_use_inbound_ifaddr = 0
net.ipv4.icmp_ratelimit = 1000
net.ipv4.icmp_ratemask = 6168
net.ipv4.rt_cache_rebuild_count = 4
net.ipv4.ipfrag_secret_interval = 600
net.ipv4.ipfrag_max_dist = 64
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.delay_first_probe_time= 5
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.unres_qlen = 3
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.anycast_delay = 99
net.ipv6.neigh.default.proxy_delay = 79
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.retrans_time_ms =1000
net.ipv6.neigh.default.base_reachable_time_ms= 30000
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_thresh2 = 128
net.ipv6.neigh.default.gc_thresh3 = 512
net.ipv6.neigh.default.gc_thresh4 = 1024
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.delay_first_probe_time =5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.unres_qlen = 3
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.anycast_delay = 99
net.ipv6.neigh.lo.proxy_delay = 79
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.base_reachable_time_ms =30000
net.ipv6.neigh.em1.mcast_solicit = 3
net.ipv6.neigh.em1.ucast_solicit = 3
net.ipv6.neigh.em1.app_solicit = 0
net.ipv6.neigh.em1.delay_first_probe_time =5
net.ipv6.neigh.em1.gc_stale_time = 60
net.ipv6.neigh.em1.unres_qlen = 3
net.ipv6.neigh.em1.proxy_qlen = 64
net.ipv6.neigh.em1.anycast_delay = 99
net.ipv6.neigh.em1.proxy_delay = 79
net.ipv6.neigh.em1.locktime = 0
net.ipv6.neigh.em1.retrans_time_ms = 1000
net.ipv6.neigh.em1.base_reachable_time_ms =30000
net.ipv6.neigh.em2.mcast_solicit = 3
net.ipv6.neigh.em2.ucast_solicit = 3
net.ipv6.neigh.em2.app_solicit = 0
net.ipv6.neigh.em2.delay_first_probe_time =5
net.ipv6.neigh.em2.gc_stale_time = 60
net.ipv6.neigh.em2.unres_qlen = 3
net.ipv6.neigh.em2.proxy_qlen = 64
net.ipv6.neigh.em2.anycast_delay = 99
net.ipv6.neigh.em2.proxy_delay = 79
net.ipv6.neigh.em2.locktime = 0
net.ipv6.neigh.em2.retrans_time_ms = 1000
net.ipv6.neigh.em2.base_reachable_time_ms =30000
net.ipv6.neigh.bond0.mcast_solicit = 3
net.ipv6.neigh.bond0.ucast_solicit = 3
net.ipv6.neigh.bond0.app_solicit = 0
net.ipv6.neigh.bond0.delay_first_probe_time= 5
net.ipv6.neigh.bond0.gc_stale_time = 60
net.ipv6.neigh.bond0.unres_qlen = 3
net.ipv6.neigh.bond0.proxy_qlen = 64
net.ipv6.neigh.bond0.anycast_delay = 99
net.ipv6.neigh.bond0.proxy_delay = 79
net.ipv6.neigh.bond0.locktime = 0
net.ipv6.neigh.bond0.retrans_time_ms = 1000
net.ipv6.neigh.bond0.base_reachable_time_ms= 30000
net.ipv6.xfrm6_gc_thresh = 2048
net.ipv6.conf.all.forwarding = 0
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.accept_ra = 1
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.autoconf = 1
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.router_solicitations = 3
net.ipv6.conf.all.router_solicitation_interval= 4
net.ipv6.conf.all.router_solicitation_delay= 1
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.regen_max_retry = 5
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.accept_ra_defrtr = 1
net.ipv6.conf.all.accept_ra_pinfo = 1
net.ipv6.conf.all.accept_ra_rtr_pref = 1
net.ipv6.conf.all.router_probe_interval =60
net.ipv6.conf.all.accept_ra_rt_info_max_plen= 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.optimistic_dad = 0
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.all.accept_dad = 1
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.accept_ra = 1
net.ipv6.conf.default.accept_redirects = 1
net.ipv6.conf.default.autoconf = 1
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.router_solicitations= 3
net.ipv6.conf.default.router_solicitation_interval= 4
net.ipv6.conf.default.router_solicitation_delay= 1
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.default.temp_valid_lft =604800
net.ipv6.conf.default.temp_prefered_lft =86400
net.ipv6.conf.default.regen_max_retry = 5
net.ipv6.conf.default.max_desync_factor =600
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.accept_ra_defrtr = 1
net.ipv6.conf.default.accept_ra_pinfo = 1
net.ipv6.conf.default.accept_ra_rtr_pref =1
net.ipv6.conf.default.router_probe_interval= 60
net.ipv6.conf.default.accept_ra_rt_info_max_plen= 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.accept_source_route =0
net.ipv6.conf.default.optimistic_dad = 0
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.default.accept_dad = 1
net.ipv6.conf.lo.forwarding = 0
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.mtu = 16436
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.router_solicitations = 3
net.ipv6.conf.lo.router_solicitation_interval= 4
net.ipv6.conf.lo.router_solicitation_delay= 1
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.regen_max_retry = 5
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.accept_ra_rt_info_max_plen= 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.optimistic_dad = 0
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.disable_ipv6 = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.em1.forwarding = 0
net.ipv6.conf.em1.hop_limit = 64
net.ipv6.conf.em1.mtu = 1500
net.ipv6.conf.em1.accept_ra = 1
net.ipv6.conf.em1.accept_redirects = 1
net.ipv6.conf.em1.autoconf = 1
net.ipv6.conf.em1.dad_transmits = 1
net.ipv6.conf.em1.router_solicitations = 3
net.ipv6.conf.em1.router_solicitation_interval= 4
net.ipv6.conf.em1.router_solicitation_delay= 1
net.ipv6.conf.em1.force_mld_version = 0
net.ipv6.conf.em1.use_tempaddr = 0
net.ipv6.conf.em1.temp_valid_lft = 604800
net.ipv6.conf.em1.temp_prefered_lft = 86400
net.ipv6.conf.em1.regen_max_retry = 5
net.ipv6.conf.em1.max_desync_factor = 600
net.ipv6.conf.em1.max_addresses = 16
net.ipv6.conf.em1.accept_ra_defrtr = 1
net.ipv6.conf.em1.accept_ra_pinfo = 1
net.ipv6.conf.em1.accept_ra_rtr_pref = 1
net.ipv6.conf.em1.router_probe_interval =60
net.ipv6.conf.em1.accept_ra_rt_info_max_plen= 0
net.ipv6.conf.em1.proxy_ndp = 0
net.ipv6.conf.em1.accept_source_route = 0
net.ipv6.conf.em1.optimistic_dad = 0
net.ipv6.conf.em1.mc_forwarding = 0
net.ipv6.conf.em1.disable_ipv6 = 0
net.ipv6.conf.em1.accept_dad = 1
net.ipv6.conf.em2.forwarding = 0
net.ipv6.conf.em2.hop_limit = 64
net.ipv6.conf.em2.mtu = 1500
net.ipv6.conf.em2.accept_ra = 1
net.ipv6.conf.em2.accept_redirects = 1
net.ipv6.conf.em2.autoconf = 1
net.ipv6.conf.em2.dad_transmits = 1
net.ipv6.conf.em2.router_solicitations = 3
net.ipv6.conf.em2.router_solicitation_interval= 4
net.ipv6.conf.em2.router_solicitation_delay= 1
net.ipv6.conf.em2.force_mld_version = 0
net.ipv6.conf.em2.use_tempaddr = 0
net.ipv6.conf.em2.temp_valid_lft = 604800
net.ipv6.conf.em2.temp_prefered_lft = 86400
net.ipv6.conf.em2.regen_max_retry = 5
net.ipv6.conf.em2.max_desync_factor = 600
net.ipv6.conf.em2.max_addresses = 16
net.ipv6.conf.em2.accept_ra_defrtr = 1
net.ipv6.conf.em2.accept_ra_pinfo = 1
net.ipv6.conf.em2.accept_ra_rtr_pref = 1
net.ipv6.conf.em2.router_probe_interval =60
net.ipv6.conf.em2.accept_ra_rt_info_max_plen= 0
net.ipv6.conf.em2.proxy_ndp = 0
net.ipv6.conf.em2.accept_source_route = 0
net.ipv6.conf.em2.optimistic_dad = 0
net.ipv6.conf.em2.mc_forwarding = 0
net.ipv6.conf.em2.disable_ipv6 = 0
net.ipv6.conf.em2.accept_dad = 1
net.ipv6.conf.bond0.forwarding = 0
net.ipv6.conf.bond0.hop_limit = 64
net.ipv6.conf.bond0.mtu = 1500
net.ipv6.conf.bond0.accept_ra = 1
net.ipv6.conf.bond0.accept_redirects = 1
net.ipv6.conf.bond0.autoconf = 1
net.ipv6.conf.bond0.dad_transmits = 1
net.ipv6.conf.bond0.router_solicitations =3
net.ipv6.conf.bond0.router_solicitation_interval= 4
net.ipv6.conf.bond0.router_solicitation_delay= 1
net.ipv6.conf.bond0.force_mld_version = 0
net.ipv6.conf.bond0.use_tempaddr = 0
net.ipv6.conf.bond0.temp_valid_lft = 604800
net.ipv6.conf.bond0.temp_prefered_lft =86400
net.ipv6.conf.bond0.regen_max_retry = 5
net.ipv6.conf.bond0.max_desync_factor = 600
net.ipv6.conf.bond0.max_addresses = 16
net.ipv6.conf.bond0.accept_ra_defrtr = 1
net.ipv6.conf.bond0.accept_ra_pinfo = 1
net.ipv6.conf.bond0.accept_ra_rtr_pref = 1
net.ipv6.conf.bond0.router_probe_interval =60
net.ipv6.conf.bond0.accept_ra_rt_info_max_plen= 0
net.ipv6.conf.bond0.proxy_ndp = 0
net.ipv6.conf.bond0.accept_source_route = 0
net.ipv6.conf.bond0.optimistic_dad = 0
net.ipv6.conf.bond0.mc_forwarding = 0
net.ipv6.conf.bond0.disable_ipv6 = 0
net.ipv6.conf.bond0.accept_dad = 1
net.ipv6.ip6frag_high_thresh = 262144
net.ipv6.ip6frag_low_thresh = 196608
net.ipv6.ip6frag_time = 60
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.max_size = 4096
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_timeout = 60
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_elasticity = 0
net.ipv6.route.mtu_expires = 600
net.ipv6.route.min_adv_mss = 1
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.icmp.ratelimit = 1000
net.ipv6.bindv6only = 0
net.ipv6.ip6frag_secret_interval = 600
net.ipv6.mld_max_msf = 64
net.nf_conntrack_max = 65536
net.bridge.bridge-nf-call-arptables = 1
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-filter-vlan-tagged = 0
net.bridge.bridge-nf-filter-pppoe-tagged =0
net.unix.max_dgram_qlen = 10
abi.vsyscall32 = 1
crypto.fips_enabled = 0
sunrpc.rpc_debug = 0
sunrpc.nfs_debug = 0
sunrpc.nfsd_debug = 0
sunrpc.nlm_debug = 0
sunrpc.transports = tcp 1048576
sunrpc.transports = udp 32768
sunrpc.udp_slot_table_entries = 16
sunrpc.tcp_slot_table_entries = 16
sunrpc.min_resvport = 665
sunrpc.max_resvport = 1023
sunrpc.tcp_fin_timeout = 15
#
########### BEGIN DO NOT REMOVE Added byOracle Exadata ###########
# 13630226 Maximum shared memory allowed is85 percent of physical RAM
kernel.shmmax = 86038141747
# 13630226 Maximum shared memory pagesallowed are RAM divided by page size
kernel.shmall = 21005405
kernel.exec-shield = 1
kernel.randomize_va_space = 1
kernel.sysrq = 1
# 8778821 system reboots after 60 sec onpanic
kernel.panic = 60
kernel.softlockup_panic = 1
# 13601543 Allow crash dump from ILOM NMI
kernel.unknown_nmi_panic = 1
kernel.core_uses_pid = 1
vm.nr_hugepages = 1024
# 8311668 file-max and aio-max-nr also fromoracle-validated-1.0.0-24.el5.x86_64.rpm
kernel.msgmni = 2878
kernel.msgmax = 8192
kernel.msgmnb = 65536
kernel.shmmni = 4096
fs.file-max = 6815744
fs.aio-max-nr = 3145728
net.ipv4.ip_local_port_range = 9000 65500
vm.min_free_kbytes = 51200
net.core.rmem_default = 4194304
net.core.wmem_default = 262144
net.core.rmem_max = 4194304
net.core.wmem_max = 2097152
# 13800950
kernel.pid_max = 131072
kernel.sem = 1024 60000 1024 256
net.ipv4.ip_forward = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.default.secure_redirects = 0
# 13331647
net.ipv4.tcp_max_syn_backlog = 1280
net.ipv4.conf.default.accept_source_route =0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.log_martians = 1
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses= 1
net.ipv4.tcp_syncookies = 1
net.ipv6.conf.default.router_solicitations= 0
net.ipv6.conf.default.accept_ra_rtr_pref =0
net.ipv6.conf.default.accept_ra_pinfo = 0
net.ipv6.conf.default.accept_ra_defrtr = 0
net.ipv6.conf.default.autoconf = 0
net.ipv6.conf.default.dad_transmits = 0
net.ipv6.conf.default.max_addresses = 1
# 12650500
net.ipv4.tcp_timestamps = 0
net.ipv4.conf.default.rp_filter = 1
# 8976963, 10113636
net.ipv4.neigh.bondib0.locktime = 0
net.ipv4.conf.bondib0.arp_ignore = 1
net.ipv4.conf.bondib0.arp_accept = 1
net.ipv4.neigh.bondib0.base_reachable_time_ms= 10000
net.ipv4.neigh.bondib0.delay_first_probe_time= 1
########### END DO NOT REMOVE Added byOracle Exadata ###########
vm.nr_hugepages=13007s
net.core.netdev_max_backlog = 30000 每個網絡接口接收數據包的速率比內核處理這些包的速率快時,允許送到隊列的數據包的最大數目
net.ipv4.tcp_mem = 786432 1048576 1572864 確定 TCP 棧應該如何反映內存使用,此處分別為3G、4G、6G;每個值的單位都是內存頁(通常是4KB)。第一個值是內存使用的下限。第二個值是內存壓力模式開始對緩沖區使用應用壓力的上限。第三個值是內存上限。在這個層次上可以將報文丟棄,從而減少對內存的使用。
net.ipv4.tcp_rmem=4096 87380 16777216 TCP接收緩沖區,3個字段分別是min,default,max。Min:為TCP socket預留用于接收緩沖的內存數量,即使在內存出現緊張情況下TCP socket都至少會有這么多數量的內存用于接收緩沖。
Default:為TCP socket預留用于接收緩沖的內存數量,默認情況下該值影響其它協議使用的 net.core.wmem中default的值。該值決定了 在tcp_adv_win_scale、tcp_app_win和tcp_app_win的 默認值情況下,TCP 窗口大小為65535。
Max:為TCP socket預留用于接收緩沖的內存最大值。該值不會影響 net.core.wmem中max的值
net.ipv4.tcp_wmem=4096 65536 16777216 TCP發送緩沖區,3個字段分別是min,default,max。Min:為TCP socket預留用于發送緩沖的內存最小值。每個TCP socket都可以使用它。
Default:為TCP socket預留用于發送緩沖的內存數量,默認情況下該值會影響其它協議使用的net.core.wmem中default的值,一般要低于net.core.wmem中default的值。
Max:為TCP socket預留用于發送緩沖的內存最大值。該值不會影響net.core.wmem_max
net.ipv4.tcp_fin_timeout = 10 如果套接字由本端要求關閉,這個參數決定了它保持在FIN-WAIT-2狀態的時間。對端可以出錯并永遠不關閉連接,甚至意外當機。缺省值是60 秒
net.ipv4.tcp_tw_recycle = 1 開啟TCP連接中TIME-WAITsockets的快速回收,默認為0,表示關閉
net.ipv4.tcp_tw_reuse = 1 表示是否允許重新應用處于TIME-WAIT狀態的socket用于新的TCP連接。
net.ipv4.tcp_max_tw_buckets = 6000 系統在同時所處理的最大timewaitsockets 數目。如果超過此數的話,time-wait socket 會被立即砍除并且顯示警告信息。之所以要設定這個限制,純粹為了抵御那些簡單的 DoS ***,千萬不要人為的降低這個限制,不過,如果網絡條件需要比默認值更多,則可以提高它(或許還要增加內存)
net.ipv4.tcp_timestamps = 0 時間戳可以避免序列號的卷繞。一個1Gbps的鏈路肯定會遇到以前用過的序列號。時間戳能夠讓內核接受這種“異常”的數據包。這里需要將其關掉。
net.ipv4.tcp_window_scaling = 1 支持更大的TCP窗口. 如果TCP窗口最大超過65535(64KB),必須設置該數值為1。
net.ipv4.tcp_sack = 1 表示是否啟用有選擇的應答(SelectiveAcknowledgment),這可以通過有選擇地應答亂序接收到的報文來提高性能(這樣可以讓發送者只發送丟失的報文段);(對于廣域網通信來說)這個選項應該啟用,但是這會增加對 CPU 的占用
net.ipv4.tcp_no_metrics_save=1 默認情況下一個tcp連接關閉后,把這個連接曾經有的參數比如慢啟動門限snd_sthresh,擁塞窗口snd_cwnd 還有srtt等信息保存到dst_entry中, 只要dst_entry 沒有失效,下次新建立相同連接的時候就可以使用保存的參數來初始化這個連接.通常情況下是關閉的。
net.ipv4.tcp_keepalive_time = 1200 當keepalive起用的時候,TCP發送keepalive消息的頻度。缺省是2小時,改為20分鐘
net.ipv4.tcp_syncookies = 1 當出現SYN等待隊列溢出時,啟用cookies來處理,可防范少量SYN***,默認為0,表示關閉
net.ipv4.tcp_max_orphans = 262144 系統中最多有多少個TCP 套接字不被關聯到任何一個用戶文件句柄上。如果超過這個數字,孤兒連接將即刻被復位并打印出警告信息。這個限制僅僅是為了防止簡單的DoS ***,不能過分依靠它或者人為地減小這個值,更應該增加這個值(如果增加了內存之后)。
net.ipv4.tcp_max_syn_backlog = 262144 表示那些尚未收到客戶端確認信息的連接(SYN消息)隊列的長度,默認為1024,加大隊列長度為262144,可以容納更多等待連接的網絡連接數。
net.ipv4.tcp_synack_retries = 2 為了打開對端的連接,內核需要發送一個SYN并附帶一個回應前面一個SYN 的ACK。也就是所謂三次握手中的第二次握手。這個設置決定了內核放棄連接之前發送SYN+ACK 包的數量。
net.ipv4.tcp_syn_retries = 2 在內核放棄建立連接之前發送SYN 包的數量
web服務器收到了大量的連接,在啟用了iptables的情況下,iptables會把所有的連接都做鏈接跟蹤處理,這樣iptables就會有一個鏈接跟蹤表
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established=1800 鏈接跟蹤表保存時間,單位:秒
net.ipv4.netfilter.ip_conntrack_max=131070 鏈接跟蹤表最大數目
kernel.sysrq = 0 允許按住Alt + PrtSc鍵打印內核信息,除非是調試,一般要關閉此功能
kernel.core_uses_pid = 1 控制core文件的文件名中是否添加pid作為擴展。文件內容為1,表示添加pid作為擴展名,生成的core文件格式為core.xxxx;為0則表示生成的core文件同一命名為core
kernel.msgmnb = 65536 每個消息隊列的最大字節限制。
kernel.msgmax = 65536 從一個進程發送到另一個進程的消息的最大長度(bytes)。進程間的消息傳遞是在內核的內存中進行的,不會交換到磁盤上,所以如果增加該值,則將增加操作系統所使用的內存數量。
kernel.shmmax = 68719476736 表示內核所允許的最大共享內存段的大小(bytes)
kernel.shmall = 4294967296 系統上可以使用的共享內存的總量(bytes)
kernel.randomize_va_space = 1 將該值設置為 0 可禁用地址空間布局隨機化。DB2數據服務器依賴特定共享內存對象的固定地址,地址空間布局隨機化會導致有些活動發生錯誤
net.ipv4.ip_forward = 0 0表示禁用 IPv4 包轉送
net.ipv4.neigh.default.gc_stale_time=120 ARP參數,檢查一次相鄰層記錄的有效性的周期。當相鄰層記錄失效時,將在給它發送數據前,再解析一次。缺省值是60秒。
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.all.arp_announce=2
net.ipv4.conf.lo.arp_announce=2
以下命令使內核參數生效:
/sbin/sysctl -p 生效
/sbin/sysctl -a | grepnet.core.netdev_max_backlog 查看
如果出現error: "net.ipv4.netfilter.ip_conntrack_max" is an unknownkey
執行下面的命令加載對應模塊:
modprobe ip_conntrack
lsmod |grep conn -- if you see entries itmeans modules have been loaded correctly
sysctl -w -- to write the changes you madeunder /etc/sysctl.conf
sysctl -p -- to view the changes and see ifit was actually loaded.
還不行,把net.ipv4.netfilter.ip_conntrack_max替換為:
net.nf_conntrack_max = 131070試試看
免責聲明:本站發布的內容(圖片、視頻和文字)以原創、轉載和分享為主,文章觀點不代表本網站立場,如果涉及侵權請聯系站長郵箱:is@yisu.com進行舉報,并提供相關證據,一經查實,將立刻刪除涉嫌侵權內容。