稍微調幾樣..
kern.ipc.somaxconn=1024

The kern.ipc.somaxconn sysctl variable limits the size of the listen queue for accepting new TCP connections. The default value of 128 is typically too low for robust handling of new connections in a heavily loaded web server environment. For such environments, it is recommended to increase this value to 1024 or higher. The service daemon may itself limit the listen queue size (e.g. sendmail(8), or Apache) but will often have a directive in its configuration file to adjust the queue size. Large listen queues also do a better job of avoiding Denial of Service (DoSDoSDoSDoSDoS) attacks.


#禁止看到對方
security.bsd.see_other_uids=0

#防止Dos
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1 
文章標籤
全站熱搜
創作者介紹
創作者 darren2000 的頭像
darren2000

四個字 堅持到底

darren2000 發表在 痞客邦 留言(0) 人氣(47)