Ubuntu server 18.04优化，Ubuntu及Centos双网卡绑定及桥接

目录

一. Ubuntu安装

1. Ubuntu镜像下载地址

2.安装过程

二. Ubuntu优化

1. 系统资源限制优化：

2. 内核参数优化：

三. Ubuntu双网卡绑定与桥接

1. ubuntu 18.04的双网卡绑定

2.  双网卡绑定+桥接

四. Centos双网卡绑定与桥接

1. centos的双网卡绑定

2. centos的双网卡绑定+桥接

---

一. Ubuntu安装

1. Ubuntu镜像下载地址

http://cdimage.ubuntu.com/releases/ #ubuntu server(服务器版)

http://releases.ubuntu.com/ #ubuntu desktop(桌面版)

2.安装过程

略

二. Ubuntu优化

1. 系统资源限制优化：

# cat /etc/security/limits.conf

# root账户的资源软限制和硬限制

root soft core unlimited

root hard core unlimited

root soft nproc 1000000

root hard nproc 1000000

root soft nofile 1000000

root hard nofile 1000000

root soft memlock 32000

root hard memlock 32000

root soft msgqueue 8192000

root hard msgqueue 8192000

#其他账户的资源软限制和硬限制

* soft core unlimited

* hard core unlimited

* soft nproc 1000000

* hard nproc 1000000

* soft nofile 1000000

* hard nofile 1000000

* soft memlock 32000

* hard memlock 32000

* soft msgqueue 8192000

* hard msgqueue 8192000

2. 内核参数优化：

# Controls source route verification

net.ipv4.conf.default.rp_filter = 1

net.ipv4.ip_nonlocal_bind = 1

net.ipv4.ip_forward = 1

# Do not accept source routing

net.ipv4.conf.default.accept_source_route = 0

# Controls the System Request debugging functionality of the kernel

kernel.sysrq = 0

# Controls whether core dumps will append the PID to the core filename.

# Useful for debugging multi-threaded applications.

kernel.core_uses_pid = 1

# Controls the use of TCP syncookies

net.ipv4.tcp_syncookies = 1

# Disable netfilter on bridges.

net.bridge.bridge-nf-call-ip6tables = 0

net.bridge.bridge-nf-call-iptables = 0

net.bridge.bridge-nf-call-arptables = 0

# Controls the default maxmimum size of a mesage queue

kernel.msgmnb = 65536

# Controls the maximum size of a message, in bytes

kernel.msgmax = 65536

# Controls the maximum shared segment size, in bytes

kernel.shmmax = 68719476736

# Controls the maximum number of shared memory segments, in pages

kernel.shmall = 4294967296

# TCP kernel paramater

net.ipv4.tcp_mem = 786432 1048576 1572864

net.ipv4.tcp_rmem = 4096 87380 4194304

net.ipv4.tcp_wmem = 4096 16384 4194304

net.ipv4.tcp_window_scaling = 1

net.ipv4.tcp_sack = 1

# socket buffer

net.core.wmem_default = 8388608

net.core.rmem_default = 8388608

net.core.rmem_max = 16777216

net.core.wmem_max = 16777216

net.core.netdev_max_backlog = 262144

net.core.somaxconn = 20480

net.core.optmem_max = 81920

# TCP conn

net.ipv4.tcp_max_syn_backlog = 262144

net.ipv4.tcp_syn_retries = 3

net.ipv4.tcp_retries1 = 3

net.ipv4.tcp_retries2 = 15

# tcp conn reuse

net.ipv4.tcp_timestamps = 0

net.ipv4.tcp_tw_reuse = 0

net.ipv4.tcp_tw_recycle = 0

net.ipv4.tcp_fin_timeout = 1

net.ipv4.tcp_max_tw_buckets = 20000

net.ipv4.tcp_max_orphans = 3276800

net.ipv4.tcp_synack_retries = 1

net.ipv4.tcp_syncookies = 1

# keepalive conn

net.ipv4.tcp_keepalive_time = 300

net.ipv4.tcp_keepalive_intvl = 30

net.ipv4.tcp_keepalive_probes = 3

net.ipv4.ip_local_port_range = 10001 65000

# swap

vm.overcommit_memory = 0

vm.swappiness = 10

#net.ipv4.conf.eth1.rp_filter = 0

#net.ipv4.conf.lo.arp_ignore = 1

#net.ipv4.conf.lo.arp_announce = 2

#net.ipv4.conf.all.arp_ignore = 1

#net.ipv4.conf.all.arp_announce = 2

三. Ubuntu双网卡绑定与桥接

1. ubuntu 18.04的双网卡绑定

需要提前安装好bridge命令

~# sudo vim /etc/netplan/01-netcfg.yaml

# This file describes the network interfaces available on your system

# For more information, see netplan(5).

network:

    version: 2

    renderer: networkd

    ethernets:

      eth0:

          dhcp4: no

          dhcp6: no

      eth1:

          dhcp4: no

          dhcp6: no

    bonds:

        bond0:

          interfaces:

              - eth0

              - eth1

          addresses: [172.18.3.18/16]

          gateway4: 172.18.0.1

          nameservers:

              addresses: [223.6.6.6,223.5.5.5]

          parameters:

              mode: active-backup

              mii-monitor-interval: 100

~# sudo netplan apply

2.  双网卡绑定+桥接

网卡绑定用于提供网卡接口冗余以及高可用和端口聚合功能，桥接网卡再给需要桥接设备的服务使用。

~# sudo cat /etc/netplan/01-netcfg.yaml

# This file describes the network interfaces available on your system

# For more information, see netplan(5).

network:

    version: 2

    renderer: networkd

    ethernets:

      eth0:

          dhcp4: no

          dhcp6: no

      eth1:

        dhcp4: no

        dhcp6: no

    bonds:

        bond0:

            interfaces:

              - eth0

              - eth1

          #addresses: [172.18.3.18/16]

          #gateway4: 172.18.0.1

          #nameservers:

          #  addresses: [223.6.6.6,223.5.5.5]

            parameters:

              mode: active-backup

              mii-monitor-interval: 100

    bridges:

      br0:

        dhcp4: no

        dhcp6: no

        addresses: [172.18.3.18/16]

        gateway4: 172.18.0.1

        nameservers:

            addresses: [223.6.6.6,223.5.5.5]

        interfaces:

            - bond0

~#reboot

四. Centos双网卡绑定与桥接

1. centos的双网卡绑定

# cat ifcfg-eth0
TYPE=Ethernet
BOOTPROTO=none
DEVICE=eth0
ONBOOT=yes
MASTER=bond0
DEFROUTE=yes
SLAVE=yes

# cat ifcfg-eth1
TYPE=Ethernet
BOOTPROTO=none
DEVICE=eth1
ONBOOT=yes
MASTER=bond0
DEFROUTE=yes
SLAVE=yes

# cat ifcfg-bond0 
TYPE=Bond
BOOTPROTO=none
DEVICE=bond0
BONDING_MASTER=yes
ONBOOT=yes
BONDING_OPTS="miimon=100 mode=1"
IPADDR=10.10.1.240
NETMASK=255.255.255.0
GATEWAY=10.10.1.1
DNS1=10.113.18.20
DNS2=10.113.18.23

2. centos的双网卡绑定+桥接

# cat ifcfg-eth0
TYPE=Ethernet
BOOTPROTO=none
DEVICE=eth0
ONBOOT=yes
MASTER=bond0
SLAVE=yes

# cat ifcfg-eth1
TYPE=Ethernet
BOOTPROTO=none
DEVICE=eth1
ONBOOT=yes
MASTER=bond0
SLAVE=yes

# cat ifcfg-bond0 
TYPE=Bond
BOOTPROTO=none
DEVICE=bond0
BONDING_MASTER=yes
ONBOOT=yes
BONDING_OPTS="miimon=100 mode=1"
BRIDGE=br0

# cat ifcfg-br0
TYPE=Bridge
BOOTPROTO=static
DEVICE=br0
ONBOOT=yes
IPADDR=10.10.1.240
NETMASK=255.255.255.0
GATEWAY=10.10.1.1
DNS1=10.113.18.20
DNS2=10.113.18.23