优化配置主机

一、网络配置
1、添加网卡
2、编写网卡配置信息

[root@ kitty ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens37

TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=none
IPADDR=172.168.0.141
PREFIX=24
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens37
UUID=92b89355-b16b-3eaf-a714-2f65f4d8d0b1
DEVICE=ens37
ONBOOT=yes
AUTOCONNECT_PRIORITY=-999
~                             

3、确认网络配置
配置完毕，重启网卡。
检查配置信息

 [root@ kitty ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:cb:3b:5d brd ff:ff:ff:ff:ff:ff
    inet 192.168.149.141/24 brd 192.168.149.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::aa8c:f2a7:e03d:737/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:cb:3b:67 brd ff:ff:ff:ff:ff:ff
    inet 172.168.0.141/24 brd 172.168.0.255 scope global noprefixroute ens37
       valid_lft forever preferred_lft forever
    inet6 fe80::f3df:923a:c3eb:5417/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

二、优化系统过程
1、hosts文件配置

[root@ kitty ~]# \cp /etc/hosts{.,bak}
[root@ kitty ~]# cat >/etc/hosts<<EOF
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
172.168.0.5  lb01
172.168.0.6  lb02
172.168.0.7  web01
172.168.0.8  web02
172.168.0.9  web03
172.168.0.51 db01
172.168.0.31 nfs01
172.168.0.41 backup
172.168.0.61 m01

EOF

三、yum源优化

[root@ kitty ~]# mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
[root@ kitty ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
[root@ kitty ~]# wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
ps：没安装wget 首先安装 yum install -y wget

四、关闭selinux与firewalld

[root@ kitty ~]# sed -i.bak 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
[root@ kitty ~]# systemctl stop firewalld
[root@ kitty ~]# systemctl disable firewalld
[root@ kitty ~]# systemctl status  firewalld

五、加大字符集

[root@ kitty ~]# echo '*               -       nofile          65536' >>/etc/security/limits.conf 

六、SSH链接优化

 [root@ kitty ~]# vim /etc/ssh/sshd_config 
GSSAPIAuthentication no
UseDNS no