在HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters,添加名为TcpTimedWaitDelay的
DWORD键,设置为60,以缩短TIME_WAIT的等待时间
tcp 0 0 aaaa:53044 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53051 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53050 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53049 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53048 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53055 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53054 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53053 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53052 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53059 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53058 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53057 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53056 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53063 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53062 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53061 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53060 192.168.12.3:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53067 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53066 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53065 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53064 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa53071 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53070 192.168.12.13:mysql TIME_WAIT root 0
tcp 0 0 aaaa:53069 192.168.12.13:mysql TIME_WAIT root 0
发现系统存在大量TIME_WAIT状态的连接,通过调整内核参数解决,
编辑文件,加入以下内容:
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_fin_timeout = 30
然后执行
/sbin/sysctl -p
让参数生效。
net.ipv4.tcp_tw_reuse = 1 表示开启重用。允许将TIME-WAIT sockets重新用于新的TCP连接,默认为0,表示关闭;
net.ipv4.tcp_tw_recycle = 1 表示开启TCP连接中TIME-WAIT sockets的快速回收,默认为0,表示关闭。
net.ipv4.tcp_fin_timeout 修改系統默认的 TIMEOUT 时间
tcp 0 0 aaaa:50417 192.168.12.13:mysql ESTABLISHED nobody 3224673
tcp 0 0 aaaa:50419 192.168.12.13:mysql ESTABLISHED nobody 3224675
发现大量的TIME_WAIT 已不存在,mysql进程的占用率很快就降下来的,各网站访问正常!!
=====
,用ssh 远程登录系统时很慢,很久才进入到系统,进入系统后,发现负载也不是很高,就是mysql占用的资源比较多一点而已,系统运行还是正常的,认真看了一下,发现在系统中出现大量的TIME_WAIT,用netstat -talnp | grep TIME_WAIT | wc -l 一看,竟然有几千个:
[root@localhost ~]# netstat -talnp | grep TIME_WAIT | wc -l
3953
原来是mysql的端口出现了大量的 TIME_WAIT
[root@localhost ~]# netstat -an
192.168.8.8:3306 192.168.8.8:60781 TIME_WAIT
192.168.8.8:3306 192.168.8.8:60782 TIME_WAIT
.
.
.
实在太多TIME_WAIT了,导致用ssh登录系统响应很慢,相信很多朋友也遇到过这种情况。
我用以下方法解决了这个问题,TIME_WAIT变少了很多。
通过调整内核参数:
net.ipv4.tcp_syncookies = 1 表示开启SYN Cookies。当出现SYN等待队列溢出时,启用cookies来处理,可防范少量SYN攻击,默认为0,表示关闭。
net.ipv4.tcp_tw_reuse = 1 表示开启重用。允许将TIME-WAIT sockets重新用于新的TCP连接,默认为0,表示关闭。
net.ipv4.tcp_tw_recycle = 1 表示开启TCP连接中TIME-WAIT sockets的快速回收,默认为0,表示关闭。
net.ipv4.tcp_fin_timeout = 60 修改系統默认的 TIMEOUT 时间
net.ipv4.tcp_syncookies = 0
[root@localhost ~]# sysctl -a | grep net.ipv4.tcp_tw_reuse
net.ipv4.tcp_tw_reuse = 0
[root@localhost ~]# sysctl -a | grep net.ipv4.tcp_tw_recycle
net.ipv4.tcp_tw_recycle = 0
[root@localhost ~]# sysctl -a | grep net.ipv4.tcp_fin_timeout
net.ipv4.tcp_fin_timeout = 60
我们修改为:
[root@localhost ~]# sysctl -w net.ipv4.tcp_syncookies="1"
net.ipv4.tcp_syncookies = 1
[root@localhost ~]# sysctl -w net.ipv4.tcp_tw_reuse="1"
net.ipv4.tcp_tw_reuse= 1
[root@localhost ~]# sysctl -w net.ipv4.tcp_tw_recycle="1"
sysctl -w net.ipv4.tcp_tw_recycle= 1
[root@localhost ~]# net.ipv4.tcp_fin_timeout="30"
net.ipv4.tcp_fin_timeout= 30
修改好后再查看一下:
[root@localhost ~]# netstat -talnp | grep TIME_WAIT | wc -l
1953
[root@localhost ~]# netstat -talnp | grep TIME_WAIT | wc -l
787
[root@localhost ~]# netstat -talnp | grep TIME_WAIT | wc -l
378
[root@localhost ~]# netstat -talnp | grep TIME_WAIT | wc -l
32
明显少了很多。TIME_WAIT已明显下降。
以上只是暂时的解决方法,多数是因为系统中,程序代码中没有使用mysql_close()
,才导致大量的mysql TIME_WAIT。可以参考一下方法做修改:
<?php
$link = mysql_connect('localhost', 'mysql_user', 'mysql_password') ;
if (!$link)
{
die(mysql_error()) ;
}
print 'You are connected';
mysql_close($link) ;
?>