zoukankan      html  css  js  c++  java
  • k8s内核参数调优

    cat /etc/sysctl.conf 
    kernel.core_uses_pid=1
    kernel.pid_max=4194303
    kernel.ctrl-alt-del=1
    # kernel.core_pattern = /disk/ssd00/cores/core
    
    kernel.msgmnb=65536
    kernel.msgmax=65536
    kernel.shmmni=4096
    kernel.shmmax=8589934592
    kernel.shmall=8589934592
    kernel.sem=250 32000 100 128
    
    # Increase number of incoming connections.max=65535
    net.core.somaxconn=65535
    net.core.rmem_default=8388608
    net.core.wmem_default=8388608
    net.core.rmem_max=33554432
    net.core.wmem_max=33554432
    net.core.dev_weight=512
    net.core.optmem_max=262144
    net.core.netdev_budget=1024
    net.core.netdev_max_backlog=300000
    
    net.ipv4.neigh.default.gc_thresh1=10240
    net.ipv4.neigh.default.gc_thresh2=40960
    net.ipv4.neigh.default.gc_thresh3=81920
    
    # for lvs tunnel mode
    net.ipv4.conf.all.proxy_arp=0
    
    # http://blog.clanzx.net/2013/10/30/arp-filter.html
    net.ipv4.conf.all.arp_announce=2
    net.ipv4.conf.default.arp_announce=2
    net.ipv4.conf.all.arp_ignore=1
    net.ipv4.conf.default.arp_ignore=1
    net.ipv4.conf.all.arp_filter=1
    net.ipv4.conf.default.arp_filter=1
    
    net.ipv4.conf.default.rp_filter=0
    net.ipv4.conf.all.rp_filter=0
    
    # https://mellowd.co.uk/ccie/?tag=pmtud
    # Warning,if MTU=9000 set 1, else 0 is good
    net.ipv4.tcp_mtu_probing=0
    net.ipv4.ip_no_pmtu_disc=0
    
    net.ipv4.tcp_slow_start_after_idle=0
    # Do not cache metrics on closing connections
    net.ipv4.tcp_no_metrics_save=1
    # Protect Against TCP Time-Wait
    net.ipv4.tcp_rfc1337=1
    
    net.ipv4.conf.default.accept_source_route=0
    net.ipv4.conf.default.accept_redirects=0
    net.ipv4.conf.default.secure_redirects=0
    net.ipv4.conf.all.accept_source_route=0
    net.ipv4.conf.all.accept_redirects=0
    net.ipv4.conf.all.secure_redirects=0
    
    net.ipv4.ip_forward=1
    net.ipv4.ip_nonlocal_bind=1
    net.ipv4.ip_local_port_range=9000 65535
    net.ipv4.icmp_echo_ignore_broadcasts=1
    net.ipv4.icmp_ignore_bogus_error_responses=1
    
    net.ipv4.tcp_timestamps=0
    net.ipv4.tcp_sack=1
    net.ipv4.tcp_dsack=1
    net.ipv4.tcp_window_scaling=1
    net.ipv4.tcp_rmem=4096 102400 16777216
    net.ipv4.tcp_wmem=4096 102400 16777216
    net.ipv4.tcp_mem=786432 1048576 1572864
    net.ipv4.tcp_syncookies=1
    net.ipv4.tcp_syn_retries=3
    net.ipv4.tcp_synack_retries=3
    net.ipv4.tcp_retries1=3
    net.ipv4.tcp_retries2=5
    net.ipv4.tcp_fin_timeout=15
    net.ipv4.tcp_max_syn_backlog=262144
    net.ipv4.tcp_max_orphans=262144
    
    net.ipv4.tcp_frto=2
    net.ipv4.tcp_thin_dupack=0
    net.ipv4.tcp_reordering=3
    net.ipv4.tcp_early_retrans=2
    
    net.ipv4.tcp_tw_recycle=1
    net.ipv4.tcp_tw_reuse=1
    net.ipv4.tcp_moderate_rcvbuf = 1
    net.ipv4.tcp_keepalive_time=30
    net.ipv4.tcp_keepalive_intvl=30
    net.ipv4.tcp_keepalive_probes=3
    net.ipv4.tcp_max_tw_buckets=300000
    net.ipv4.tcp_congestion_control=cubic
    
    # net.ipv4.netfilter.ip_conntrack_max=300000
    # net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait=1
    # net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait=1
    # net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait=1
    # net.ipv4.netfilter.ip_conntrack_tcp_timeout_established=15
    
    net.netfilter.nf_conntrack_max=300000
    net.netfilter.nf_conntrack_tcp_timeout_close_wait=1
    net.netfilter.nf_conntrack_tcp_timeout_fin_wait=1
    net.netfilter.nf_conntrack_tcp_timeout_time_wait=1
    net.netfilter.nf_conntrack_tcp_timeout_established=15
    
    vm.swappiness=0
    vm.dirty_writeback_centisecs=100
    vm.dirty_expire_centisecs=200
    vm.dirty_background_ratio=0
    vm.dirty_background_bytes = 209715200
    vm.dirty_ratio=40
    vm.dirty_bytes = 0
    vm.overcommit_memory=1
    vm.overcommit_ratio=50
    vm.max_map_count=262144
    
    fs.file-max=262144
    fs.aio-max-nr=1048576
    fs.inotify.max_user_watches=102400
    fs.inotify.max_user_instances=1024
    

      

  • 相关阅读:
    部署DNS正向解析-使域名和ip互相认识能够友好的访问
    部署NTP时间服务器-使时间同步
    Linux系统中常见的目录名称以及相应内容及用户管理相关文件
    systemctl常用操作
    部署NFS
    配置本地用户模式ftp服务 差个网上的
    js预解析
    jquery 三级联动
    js事件冒泡
    jquery 判断checkbox是否选中
  • 原文地址:https://www.cnblogs.com/weifeng1463/p/10032560.html
Copyright © 2011-2022 走看看