稍微調幾樣..
kern.ipc.somaxconn=1024
The kern.ipc.somaxconn sysctl variable limits the size of the listen queue for accepting new TCP connections. The default value of 128 is typically too low for robust handling of new connections in a heavily loaded web server environment. For such environments, it is recommended to increase this value to 1024 or higher. The service daemon may itself limit the listen queue size (e.g. sendmail(8), or Apache) but will often have a directive in its configuration file to adjust the queue size. Large listen queues also do a better job of avoiding Denial of Service (DoSDoSDoSDoSDoS) attacks.
#禁止看到對方
security.bsd.see_other_uids=0
#防止Dos
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
文章標籤
全站熱搜
