TIME_Linux

sysctl增加如下参数解决：sysctl -p生效

net.ipv4.tcp_keepalive_time = 1200
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1

[root@hsfwkt1 syslog]# sysctl -a|grep net.ipv4.tcp_keep
net.ipv4.tcp_keepalive_time = 7200
net.ipv4.tcp_keepalive_probes = 9
net.ipv4.tcp_keepalive_intvl = 75
[root@hsfwkt1 syslog]# sysctl -a|grep net.ipv4.ip_local
net.ipv4.ip_local_port_range = 32768 60999
net.ipv4.ip_local_reserved_ports =
[root@hsfwkt1 syslog]# sysctl -a|grep net.ipv4.tcp_max
net.ipv4.tcp_max_orphans = 262144
net.ipv4.tcp_max_tw_buckets = 262144
net.ipv4.tcp_max_syn_backlog = 2048
net.ipv4.tcp_max_ssthresh = 0
[root@hsfwkt1 syslog]# sysctl -a|grep net.ipv4.tcp_fin_time
net.ipv4.tcp_fin_timeout = 60
[root@hsfwkt1 syslog]# vi /etc/sysctl.conf
# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.
#
# Use '/sbin/sysctl -a' to list all possible parameters.

# Controls IP packet forwarding
net.ipv4.ip_forward = 0

# Controls source route verification
net.ipv4.conf.default.rp_filter = 1

# Do not accept source routing
net.ipv4.conf.default.accept_source_route = 0

# Controls the System Request debugging functionality of the kernel
kernel.sysrq = 0

# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1

# Controls the use of TCP syncookies
net.ipv4.tcp_syncookies = 1

# Controls the default maxmimum size of a mesage queue
kernel.msgmnb = 65536

# Controls the maximum size of a message, in bytes
kernel.msgmax = 65536

# Controls the maximum shared segment size, in bytes
kernel.shmmax = 68719476736

# Controls the maximum number of shared memory segments, in pages
kernel.shmall = 4294967296
vm.swappiness=5
net.ipv4.tcp_keepalive_time = 1200
~
~
"/etc/sysctl.conf" 39L, 1108C written
[root@hsfwkt1 syslog]# sysctl -p
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
vm.swappiness = 5
net.ipv4.tcp_keepalive_time = 1200
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1770
CLOSE_WAIT 25
FIN_WAIT2 77
ESTABLISHED 439
LISTEN 41
[root@hsfwkt1 syslog]# date
Fri Nov 26 10:29:28 CST 2021
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1543
CLOSE_WAIT 12
FIN_WAIT2 72
ESTABLISHED 442
LISTEN 41
[root@hsfwkt1 syslog]# date
Fri Nov 26 10:29:32 CST 2021
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1592
CLOSE_WAIT 12
FIN_WAIT2 77
ESTABLISHED 433
LISTEN 41
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1618
CLOSE_WAIT 12
FIN_WAIT2 73
ESTABLISHED 437
LISTEN 41
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1653
CLOSE_WAIT 12
FIN_WAIT2 81
ESTABLISHED 435
LISTEN 41
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1410
CLOSE_WAIT 12
FIN_WAIT2 87
ESTABLISHED 429
LISTEN 41
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1440
CLOSE_WAIT 12
FIN_WAIT2 93
ESTABLISHED 405
LISTEN 41
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1471
CLOSE_WAIT 12
FIN_WAIT2 88
ESTABLISHED 405
LISTEN 41
[root@hsfwkt1 syslog]# sysctl -a|grep net.ipv4.tcp_tw
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_tw_reuse = 0
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1200
CLOSE_WAIT 12
FIN_WAIT2 83
ESTABLISHED 397
LISTEN 41
[root@hsfwkt1 syslog]# netstat -ant|awk '/^tcp/ {++S[$NF]} END {for(a in S) print (a,S[a])}'
TIME_WAIT 1245
CLOSE_WAIT 12
FIN_WAIT2 83
ESTABLISHED 420
LISTEN 41
[root@hsfwkt1 syslog]# vi /etc/sysctl.conf
# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.
#
# Use '/sbin/sysctl -a' to list all possible parameters.