nginx配置个https+backlog+sysctl.conf

sysctl.conf
内核参数说明  

https://www.cnblogs.com/fczjuever/archive/2013/04/17/3026694.html

/proc/sys/net/core/somaxconn 20480 #定义了系统中每一个端口最大的监听队列的长度，这是个全局的参数。backlog需要设置这个
/proc/sys/net/ipv4/tcp_max_syn_backlog #对于还未获得对方确认的连接请求，可保存在队列中的最大数目。如果服务器经常出现过载，可以尝试增加这个数字。
/proc/sys/net/core/netdev_max_backlog #在每个网络接口接收数据包的速率比内核处理这些包的速率快时，允许送到队列的数据包的最大数目。
 

nginx配置


upstream js_sdk {
        #ip_hash;
        server ******* weight=1 max_fails=3 fail_timeout=10s;
        server ******* weight=1 max_fails=3 fail_timeout=10s;
        keepalive 1000;
}

server {
    listen 80 backlog=20480;
    listen 443 ssl backlog=20480;

    ssl_certificate      /etc/nginx/ssl/all-le.crt;
    ssl_certificate_key  /etc/nginx/ssl/all-le.key;
    #ssl_buffer_size 32k;
    ssl_session_timeout  10m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers   AES128-SHA:AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_session_cache builtin:50000 shared:SSL:500m;

    server_name  ****** ;
    add_header Cache-Control "no-cache,max-age=0";
    if_modified_since off;
    access_log /var/log/nginx/cherry.le.com.a.log main;
    error_log /var/log/nginx/cherry.le.com.e.log;

    location = /favicon.ico {
            log_not_found off;
            log_subrequest off;
    }

    location / {
                proxy_http_version 1.1;
                proxy_set_header Connection "";
                proxy_set_header Host $host;
                proxy_pass              http://js_sdk;
                proxy_send_timeout    18000;
                proxy_read_timeout    18000;
                proxy_next_upstream     error timeout invalid_header http_500;
                proxy_connect_timeout 75;
    }

sysctl.conf

net.core.somaxconn = 20480 #改backlog
net.core.netdev_max_backlog = 20480
net.ipv4.tcp_max_syn_backlog = 20480
net.ipv4.tcp_max_tw_buckets = 800000
————————————————

原文链接：https://blog.csdn.net/Dream_Flying_BJ/article/details/60964939

标签:

上一篇: mongoTemplate实战
下一篇: Linux之TCPIP内核参数优化