centos7.3 基础配置

• 1. 更改主机名

hostnamectl set-hostname [主机名]
reboot

• 2. 更新系统的版本和内核 , 所有的包以及配置

yum -y update

• 3. 优化内核参数

打开 /etc/sysctl.conf

  vim /etc/sysctl.conf

更换其中内容如下

  # Kernel sysctl configuration file for Red Hat Linux
  # For binary values, 0 is disabled, 1 is enabled.  See sysctl(8) and
  # sysctl.conf(5) for more details.
  # Controls IP packet forwarding
  net.ipv4.ip_forward = 0
  # Controls source route verification
  net.ipv4.conf.all.rp_filter=0
  net.ipv4.conf.default.rp_filter=0
  # Do not accept source routing
  net.ipv4.conf.default.accept_source_route = 0
  # Controls the System Request debugging functionality of the kernel
  kernel.sysrq = 0
  # Controls whether core dumps will append the PID to the core filename.
  # Useful for debugging multi-threaded applications.
  kernel.core_uses_pid = 1
  # Controls the use of TCP syncookies
  net.ipv4.tcp_syncookies = 1
  net.ipv4.tcp_tw_reuse = 1
  net.ipv4.tcp_tw_recycle = 1
  net.ipv4.tcp_fin_timeout = 12
  net.ipv4.tcp_keepalive_time = 1200
  net.ipv4.ip_local_port_range = 1024 65000
  net.ipv4.tcp_max_syn_backlog = 8192
  # Disable netfilter on bridges.
  net.bridge.bridge-nf-call-ip6tables = 0
  net.bridge.bridge-nf-call-iptables = 0
  net.bridge.bridge-nf-call-arptables = 0
  # Controls the default maxmimum size of a mesage queue
  kernel.msgmnb = 65536
  # Controls the maximum size of a message, in bytes
  kernel.msgmax = 65536
  # Controls the maximum shared segment size, in bytes
  kernel.shmmax = 68719476736
  # Controls the maximum number of shared memory segments, in pages
  kernel.shmall = 4294967296
  # Disable IPv6
  net.ipv6.conf.all.disable_ipv6 = 1
  net.ipv6.conf.default.disable_ipv6 = 1
  # Determines how often to check for stale neighbor entries. 
  net.ipv4.neigh.default.gc_stale_time=120
  # Using arp_announce/arp_ignore to solve the ARP Problem
  net.ipv4.conf.default.arp_announce = 2
  net.ipv4.conf.all.arp_announce=2
  vm.swappiness = 0
  net.ipv4.tcp_max_tw_buckets = 50000
  net.ipv4.tcp_max_syn_backlog = 1024
  net.ipv4.tcp_synack_retries = 2
  net.ipv4.conf.lo.arp_announce=2
  # Controls the application is able to bind to not belong to the local network address
  net.ipv4.ip_nonlocal_bind=1
  fs.file-max = 1700000

使修改生效

  sysctl -p /etc/sysctl.conf

打开 /etc/security/limits.conf

  vim /etc/security/limits.conf

添加内容如下

  * hard nofile 1024000
  * soft nofile 1024000

打开 /etc/security/limits.d/20-nproc.conf

vim /etc/security/limits.d/20-nproc.conf

添加内容如下

  * hard nproc unlimited
  * soft nproc unlimited

重启

  reboot