1. bios
CPU Power and Performance Policy =》performance
enable every prefetch
enable NUMA support
enable x2apic
2. 内核启动参数
selinux=0
tsc=reliable
nohz=off
intel_idle.max_cstate=0
kvm.ignore_msrs=1
disable_ipv6=1 (这个没有验证过,理论上disable ipv6会降低CPU开销)
elevator=cfq (centos7默认是cfq)
3. sysctl参数
kernel.panic_on_oops = 1
kernel.softlockup_panic = 1
kernel.print-fatal-signals=1
vm.zone_reclaim_mode=1
vm.dirty_background_ratio=2
vm.dirty_ratio = 10
vm.dirty_writeback_centisecs = 50
vm.dirty_expire_centisecs = 50
net.ipv4.tcp_sack = 1
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_reuse = 1
net.ipv4.tcp_recycle = 0
net.ipv4.ip_local_port_range = 1024 65500
net.core.somaxconn = 2048
net.netfilter.nf_conntrack_max = 655350
net.nf_conntrack_max = 655350
net.netfilter.nf_conntrack_tcp_timeout_established = 3600
4. 系统服务
1)disable ksm
systemctl stop ksmtuned.service && systemctl disable ksmtuned.service
systemctl stop ksm.service && systemctl disable ksm.service
2)disable swap
/etc/fstab中的swap分区挂载行注释掉
3)配置kdump
4)利用tuned service
tuned service中将配置governor=performance
5. libvirt配置
1)支持热迁移
配置/etc/libvirt/libvirtd.conf
开启tcp监听,关闭tls监听
listen_tcp=1
listen_tls=0
设置监听端口
tcp_port = "16509"
关闭认证
auth_tcp = “none"
2)设置logfile
6. 其他配置
1) 配置coredump(注意转储)
/etc/security/limits.conf 里面添加:
* hard core unlimited
* soft core unlimited
设置core的命名方式
在/etc /sysctl.conf里面添加:
kernel.core_pattern = /var/cores/core.%e.%p.%h.%t
7. 预安装工具
1)system
perf
top
vmstat
mpstat
pidstat
slabtop
numactl
strace
sar
gdb
crash
pmap
virt-top
dstat
libcgroup-tools
sysstat (sysstat是一个工具集,包含很多工具,例如mpstat,pidstat,sar,iostat等)
2)network
netstat
tcpdump
netperf
vnstat
ip
ethtool
ss
dropwatch
iperf
qperf
3)storage
iotop
iostat
fio
ionice
blktrace & btt & blkparse
lslblk
注:上面很多命令系统一般默认安装,例如(top, vmstat, mpstat, pidstat, slabtop, strace, pmap, netstat, ip, ethtool, ss, iostat, ionice, lsblk),
以实际确认结果为准,没安装的都预安装下。