新服务器优化

1.yum update 更新

遇到网络问题，ping 一下网站。
CentOS报name or service not known错误怎么解决

遇到问题：One of the configured repositories failed (Unknown)xxxxxxxxxxxxxxxxxxxxxx

进入到 vi 编辑界面：
vi /etc/yum.repos.d/epel.repo
进入编辑  按 i

// 将下面的这一段代码修改为：
 
[epel]
name=Extra Packages for Enterprise Linux 7 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch
 
 
// 改为：
 
[epel]
name=Extra Packages for Enterprise Linux 7 - $basearch
baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch
#mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch

保存退出 vi 编辑：
按Esc键，输入 :wq  回车 

2.优化ulimit

echo -e “\tsoft\tnofile\t65535" >> /etc/security/limits.conf
echo -e "\thard\tnofile\t65535” >> /etc/security/limits.conf

echo -e “\tsoft\tnofile\t65535" >> /etc/security/limits.d/20-nproc.conf
echo -e "\thard\tnofile\t65535” >> /etc/security/limits.d/20-nproc.conf

3.优化内核参数

echo “#-------------insert-------------” >> /etc/sysctl.conf
echo “net.core.netdev_max_backlog = 32768” >> /etc/sysctl.conf
echo “net.core.rmem_default = 8388608” >> /etc/sysctl.conf
echo “net.core.rmem_max = 16777216” >> /etc/sysctl.conf
echo “net.core.somaxconn = 32768” >> /etc/sysctl.conf
echo “net.core.wmem_default = 8388608” >> /etc/sysctl.conf
echo “net.core.wmem_max = 16777216” >> /etc/sysctl.conf
echo “net.ipv4.ip_local_port_range = 5000 65000” >> /etc/sysctl.conf
echo “net.ipv4.tcp_fin_timeout = 30” >> /etc/sysctl.conf
echo “net.ipv4.tcp_keepalive_time = 300” >> /etc/sysctl.conf
echo “net.ipv4.tcp_max_orphans = 3276800” >> /etc/sysctl.conf
echo “net.ipv4.tcp_max_syn_backlog = 65536” >> /etc/sysctl.conf
echo “net.ipv4.tcp_max_tw_buckets = 5000” >> /etc/sysctl.conf
echo “net.ipv4.tcp_mem = 94500000 915000000 927000000” >> /etc/sysctl.conf
echo “net.ipv4.tcp_syn_retries = 2” >> /etc/sysctl.conf
echo “net.ipv4.tcp_synack_retries = 2” >> /etc/sysctl.conf
echo “net.ipv4.tcp_syncookies = 1” >> /etc/sysctl.conf
echo “net.ipv4.tcp_timestamps = 0” >> /etc/sysctl.conf
echo “net.ipv4.tcp_tw_reuse = 1” >> /etc/sysctl.conf

echo “fs.file-max = 6553500” >> /etc/sysctl.conf

echo “fs.inotify.max_user_watches = 1048576” >> /etc/sysctl.conf
echo “fs.inotify.max_user_instances = 1048576” >> /etc/sysctl.conf

/sbin/sysctl -p

4.挂载数据盘

https://www.bt.cn/bbs/thread-3187-1-1.html

5.配置nginx日志

mkdir /www/wwwlogs/oldlogs (root需要有写权限)
vi /etc/logrotate.d/nginx

/www/wwwlogs/*.log {
daily
rotate 186
nocompress
missingok
notifempty
dateext
sharedscripts
olddir /www/wwwlogs/oldlogs
postrotate
    if [ -f /www/server/nginx/logs/nginx.pid ]; then
        kill -USR1 `cat /www/server/nginx/logs/nginx.pid`
    fi
endscript
}

debug测试配置文件是否正确

logrotate -d /etc/logrotate.d/nginx

强制执行

logrotate -vf /etc/logrotate.d/nginx

6.系统日志保留180天

https://www.jianshu.com/p/858624be4e5e