修改/etc/security/limits.conf
echo >> /etc/security/limits.conf
echo \* soft nofile 65535 >> /etc/security/limits.conf
echo \* hard nofile 65535 >> /etc/security/limits.conf
修改/etc/pam.d/login
echo session required /lib/security/pam_limits.so >> /etc/pam.d/login
修改/etc/sysctl.conf
net.core.rmem_max=16777216
net.core.wmem_max=16777216
net.ipv4.tcp_rmem=4096 87380 16777216
net.ipv4.tcp_wmem=4096 65536 16777216
net.ipv4.tcp_fin_timeout = 10
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_window_scaling = 0
net.ipv4.tcp_sack = 0
net.core.netdev_max_backlog = 30000
net.ipv4.tcp_no_metrics_save=1
net.core.somaxconn = 262144
net.ipv4.tcp_syncookies = 0
net.ipv4.tcp_max_orphans = 262144
net.ipv4.tcp_max_syn_backlog = 262144
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.nf_conntrack_max = 5120
net.ipv4.ip_local_port_range = 1024 65000
kernel.max_lock_depth = 2046
net.ipv4.neigh.default.gc_thresh3 = 2046
net.ipv4.ip_local_port_range = 1024 65000
net.ipv6.neigh.default.gc_thresh3 = 2046
net.ipv6.route.gc_thresh = 2046
修改arp参数
echo 120 > /proc/sys/net/ipv4/neigh/default/gc_stale_time
echo 512 > /proc/sys/net/ipv4/neigh/default/gc_thresh1
echo 2048 > /proc/sys/net/ipv4/neigh/default/gc_thresh2
echo 4096 > /proc/sys/net/ipv4/neigh/default/gc_thresh3