![\"cover\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725072649-6a646539e71be.jpg\")
<\/p>\n<\/p>\n
\u4e00\u53f0 32 \u6838 64GB \u5185\u5b58\u7684\u670d\u52a1\u5668，\u8fd0\u884c Java \u5fae\u670d\u52a1\u96c6\u7fa4\u3002\u67d0\u6b21\u5927\u4fc3\u671f\u95f4，\u670d\u52a1\u54cd\u5e94\u5ef6\u8fdf\u98d9\u5347，\u6392\u67e5\u53d1\u73b0\u5e76\u975e\u5e94\u7528\u5c42\u95ee\u9898，\u800c\u662f\u5185\u6838\u53c2\u6570\u672a\u4f18\u5316：TCP \u8fde\u63a5\u961f\u5217\u6ea2\u51fa\u5bfc\u81f4\u5927\u91cf SYN \u88ab\u4e22\u5f03，\u6587\u4ef6\u63cf\u8ff0\u7b26\u8017\u5c3d\u5bfc\u81f4\u65b0\u8fde\u63a5\u65e0\u6cd5\u5efa\u7acb，SWAP \u9891\u7e41\u6362\u9875\u5bfc\u81f4 GC \u505c\u987f\u52a0\u5267\u3002\u8fd9\u4e9b\u95ee\u9898\u5728\u4f4e\u8d1f\u8f7d\u65f6\u4e0d\u660e\u663e，\u9ad8\u5e76\u53d1\u4e0b\u77ac\u95f4\u66b4\u9732\u3002<\/p>\n
Linux \u5185\u6838\u9ed8\u8ba4\u53c2\u6570\u9762\u5411\u901a\u7528\u573a\u666f，\u4e0d\u9002\u5408\u9ad8\u5e76\u53d1\u670d\u52a1\u5668\u3002\u672c\u6587\u5c06\u4ece\u7f51\u7edc\u3001\u6587\u4ef6\u7cfb\u7edf\u3001\u5185\u5b58\u4e09\u4e2a\u7ef4\u5ea6，\u7ed9\u51fa\u751f\u4ea7\u7ea7\u5185\u6838\u8c03\u4f18\u65b9\u6848\u3002<\/p>\n
\u5185\u6838\u8c03\u4f18\u7684\u672c\u8d28\u662f\u8c03\u6574\u8d44\u6e90\u5206\u914d\u7b56\u7565，\u8ba9\u7cfb\u7edf\u5728\u9ad8\u8d1f\u8f7d\u4e0b\u4f9d\u7136\u4fdd\u6301\u7a33\u5b9a\u3002\u7406\u89e3\u5e95\u5c42\u673a\u5236\u624d\u80fd\u907f\u514d\u76f2\u76ee\u8c03\u53c2\u3002<\/p>\n
flowchart TD
\n subgraph \u7f51\u7edc\u6808
\n N1[\u5ba2\u6237\u7aef SYN] –> N2[SYN \u961f\u5217<br\/>net.ipv4.tcp_max_syn_backlog]
\n N2 –> N3[ACCEPT \u961f\u5217<br\/>net.core.somaxconn]
\n N3 –> N4[\u5e94\u7528\u5c42 accept]
\n N2 –>|\u961f\u5217\u6ee1| N5[SYN \u4e22\u5f03<br\/>\u89e6\u53d1\u91cd\u4f20]
\n N3 –>|\u961f\u5217\u6ee1| N6[\u8fde\u63a5\u88ab\u62d2]
\n end<\/p>\n
subgraph \u6587\u4ef6\u63cf\u8ff0\u7b26
\n F1[\u7cfb\u7edf\u7ea7\u9650\u5236<br\/>fs.file-max]
\n F2[\u7528\u6237\u7ea7\u9650\u5236<br\/>nofile (limits.conf)]
\n F3[\u8fdb\u7a0b\u7ea7\u9650\u5236<br\/>RLIMIT_NOFILE]
\n F1 –> F2 –> F3
\n end<\/p>\n
subgraph \u5185\u5b58\u7ba1\u7406
\n M1[\u7269\u7406\u5185\u5b58] –> M2[Page Cache<br\/>\u6587\u4ef6\u7f13\u5b58]
\n M1 –> M3[SWAP \u7a7a\u95f4<br\/>\u6362\u9875\u7f13\u51b2]
\n M2 –>|swappiness \u9ad8| M3
\n M3 –>|\u6362\u9875| M4[GC \u505c\u987f<br\/>IO \u7b49\u5f85]
\n end<\/p>\n
\u5173\u952e\u673a\u5236\u89e3\u6790：<\/p>\n
# \/etc\/sysctl.d\/99-production.conf
\n# \u7f51\u7edc\u53c2\u6570\u4f18\u5316 – \u9ad8\u5e76\u53d1 TCP \u670d\u52a1\u5668<\/p>\n
# === \u8fde\u63a5\u961f\u5217 ===
\n# SYN \u961f\u5217\u6700\u5927\u957f\u5ea6（\u534a\u8fde\u63a5\u961f\u5217）
\nnet.ipv4.tcp_max_syn_backlog = 65535
\n# ACCEPT \u961f\u5217\u6700\u5927\u957f\u5ea6（\u5168\u8fde\u63a5\u961f\u5217）
\nnet.core.somaxconn = 65535
\n# \u6bcf\u4e2a\u7aef\u53e3\u7684 SYN \u961f\u5217\u957f\u5ea6（\u8986\u76d6 somaxconn）
\nnet.ipv4.tcp_syncookies = 1 # \u542f\u7528 SYN Cookie \u9632\u5fa1 SYN Flood<\/p>\n
# === TCP \u7f13\u51b2\u533a ===
\n# TCP \u8bfb\u5199\u7f13\u51b2\u533a\u6700\u5c0f\/\u9ed8\u8ba4\/\u6700\u5927\u503c（\u5b57\u8282）
\nnet.ipv4.tcp_rmem = 4096 87380 16777216
\nnet.ipv4.tcp_wmem = 4096 65536 16777216
\n# Socket \u8bfb\u5199\u7f13\u51b2\u533a\u9ed8\u8ba4\u503c
\nnet.core.rmem_default = 262144
\nnet.core.wmem_default = 262144
\n# Socket \u8bfb\u5199\u7f13\u51b2\u533a\u6700\u5927\u503c
\nnet.core.rmem_max = 16777216
\nnet.core.wmem_max = 16777216<\/p>\n
# === TCP \u8d85\u65f6\u4e0e\u56de\u6536 ===
\n# FIN_WAIT-2 \u72b6\u6001\u8d85\u65f6\u65f6\u95f4（\u79d2），\u9ed8\u8ba4 60s \u592a\u957f
\nnet.ipv4.tcp_fin_timeout = 15
\n# TIME_WAIT \u72b6\u6001\u8d85\u65f6\u65f6\u95f4（\u79d2），\u9ed8\u8ba4 60s
\n# \u6ce8\u610f：\u6b64\u53c2\u6570\u5728 Linux 4.12+ \u4e2d\u5df2\u5e9f\u5f03，\u6539\u7528 tcp_tw_reuse
\nnet.ipv4.tcp_tw_reuse = 1 # \u5141\u8bb8\u590d\u7528 TIME_WAIT \u8fde\u63a5
\n# \u7cfb\u7edf\u6700\u5927 TIME_WAIT \u5957\u63a5\u5b57\u6570
\nnet.ipv4.tcp_max_tw_buckets = 65535<\/p>\n
# === TCP Keepalive ===
\n# TCP Keepalive \u63a2\u6d4b\u95f4\u9694（\u79d2）
\nnet.ipv4.tcp_keepalive_time = 600
\nnet.ipv4.tcp_keepalive_intvl = 30
\nnet.ipv4.tcp_keepalive_probes = 5<\/p>\n
# === \u8fde\u63a5\u8ddf\u8e2a（Conntrack）===
\n# \u8fde\u63a5\u8ddf\u8e2a\u8868\u6700\u5927\u6761\u76ee\u6570（\u9ad8\u5e76\u53d1\u5fc5\u987b\u8c03\u5927）
\nnet.netfilter.nf_conntrack_max = 1048576
\n# \u8fde\u63a5\u8ddf\u8e2a\u8d85\u65f6（\u79d2）
\nnet.netfilter.nf_conntrack_tcp_timeout_established = 7200<\/p>\n
# === \u672c\u5730\u7aef\u53e3\u8303\u56f4 ===
\n# \u4e34\u65f6\u7aef\u53e3\u8303\u56f4（\u7528\u4e8e\u51fa\u7ad9\u8fde\u63a5）
\nnet.ipv4.ip_local_port_range = 1024 65535<\/p>\n
# === \u7f51\u5361\u961f\u5217 ===
\n# \u7f51\u5361\u63a5\u6536\u961f\u5217\u6700\u5927\u957f\u5ea6
\nnet.core.netdev_max_backlog = 65536
\n# \u7f51\u5361\u53d1\u9001\u961f\u5217\u957f\u5ea6
\nnet.core.dev_weight = 64<\/p>\n
# \/etc\/sysctl.d\/99-production.conf（\u7eed）<\/p>\n
# === \u6587\u4ef6\u63cf\u8ff0\u7b26 ===
\n# \u7cfb\u7edf\u7ea7\u6700\u5927\u6587\u4ef6\u63cf\u8ff0\u7b26\u6570
\nfs.file-max = 2097152
\n# Inotify \u6700\u5927\u5b9e\u4f8b\u6570（\u65e5\u5fd7\u91c7\u96c6\u573a\u666f\u9700\u8981）
\nfs.inotify.max_user_instances = 8192
\nfs.inotify.max_user_watches = 524288<\/p>\n
# === \u5185\u5b58\u7ba1\u7406 ===
\n# SWAP \u503e\u5411：0 = \u5c3d\u91cf\u4e0d\u7528 SWAP，100 = \u79ef\u6781\u4f7f\u7528 SWAP
\n# Java\/\u6570\u636e\u5e93\u670d\u52a1\u5668\u5efa\u8bae\u8bbe\u4e3a 1-10
\nvm.swappiness = 1
\n# \u810f\u9875\u56de\u5199\u9608\u503c（\u767e\u5206\u6bd4）
\n# \u810f\u9875\u5360\u6bd4\u8d85\u8fc7\u6b64\u503c\u89e6\u53d1\u540e\u53f0\u56de\u5199
\nvm.dirty_background_ratio = 5
\n# \u810f\u9875\u5360\u6bd4\u8d85\u8fc7\u6b64\u503c\u89e6\u53d1\u540c\u6b65\u56de\u5199（\u963b\u585e\u5199\u5165）
\nvm.dirty_ratio = 10
\n# \u810f\u9875\u6700\u5927\u5b58\u6d3b\u65f6\u95f4（\u767e\u5206\u4e4b\u4e00\u79d2）
\nvm.dirty_expire_centisecs = 3000<\/p>\n
# === \u5185\u5b58\u8fc7\u91cf\u5206\u914d\u7b56\u7565 ===
\n# 0 = \u4e0d\u5141\u8bb8\u8fc7\u91cf\u5206\u914d，1 = \u5141\u8bb8\u8fc7\u91cf\u5206\u914d，2 = \u4e25\u683c\u9650\u5236
\n# \u6570\u636e\u5e93\u670d\u52a1\u5668\u5efa\u8bae\u8bbe\u4e3a 2，\u5e94\u7528\u670d\u52a1\u5668\u5efa\u8bae\u8bbe\u4e3a 0
\nvm.overcommit_memory = 0<\/p>\n
# === \u5927\u9875\u5185\u5b58（HugePages）===
\n# \u9002\u7528\u4e8e\u6570\u636e\u5e93\u548c JVM，\u51cf\u5c11 TLB Miss
\n# \u9884\u7559 8GB \u5927\u9875（\u6bcf\u9875 2MB，\u5171 4096 \u9875）
\nvm.nr_hugepages = 4096<\/p>\n
# === \u5185\u6838\u4fe1\u53f7\u91cf ===
\n# \u4fe1\u53f7\u91cf\u6570\u7ec4\u6570 | \u6bcf\u6570\u7ec4\u4fe1\u53f7\u91cf\u6570 | \u4fe1\u53f7\u91cf\u603b\u6570 | | \u89e3\u9664\u4fe1\u53f7\u91cf\u9650\u5236
\nkernel.sem = 250 32000 100 128<\/p>\n
# \/etc\/security\/limits.d\/99-production.conf
\n# \u7528\u6237\u7ea7\u8d44\u6e90\u9650\u5236\u914d\u7f6e<\/p>\n
# \u6587\u4ef6\u63cf\u8ff0\u7b26\u8f6f\u786c\u9650\u5236
\n* soft nofile 1048576
\n* hard nofile 1048576<\/p>\n
# \u8fdb\u7a0b\u6570\u8f6f\u786c\u9650\u5236
\n* soft nproc 65535
\n* hard nproc 65535<\/p>\n
# \u6838\u5fc3\u8f6c\u50a8\u6587\u4ef6\u5927\u5c0f（unlimited = \u4e0d\u9650\u5236）
\n* soft core unlimited
\n* hard core unlimited<\/p>\n
# \u5185\u5b58\u9501\u5b9a\u9650\u5236（\u7528\u4e8e HugePages \u573a\u666f）
\n* soft memlock unlimited
\n* hard memlock unlimited<\/p>\n
# Stack \u5927\u5c0f
\n* soft stack 8192
\n* hard stack 8192<\/p>\n
#!\/bin\/bash
\n# sysctl-check.sh – \u5185\u6838\u53c2\u6570\u9a8c\u8bc1\u811a\u672c
\n# \u5728\u8c03\u4f18\u524d\u540e\u8fd0\u884c，\u5bf9\u6bd4\u53c2\u6570\u503c\u4e0e\u63a8\u8350\u503c<\/p>\n
set -euo pipefail<\/p>\n
# \u989c\u8272\u5b9a\u4e49
\nRED='\\\\033[0;31m'
\nGREEN='\\\\033[0;32m'
\nYELLOW='\\\\033[1;33m'
\nNC='\\\\033[0m'<\/p>\n
# \u63a8\u8350\u53c2\u6570\u503c
\ndeclare -A RECOMMENDED=(
\n ["net.core.somaxconn"]="65535"
\n ["net.ipv4.tcp_max_syn_backlog"]="65535"
\n ["net.ipv4.tcp_tw_reuse"]="1"
\n ["net.ipv4.tcp_fin_timeout"]="15"
\n ["net.ipv4.ip_local_port_range"]="1024 65535"
\n ["vm.swappiness"]="1"
\n ["fs.file-max"]="2097152"
\n ["net.netfilter.nf_conntrack_max"]="1048576"
\n ["vm.dirty_ratio"]="10"
\n ["vm.dirty_background_ratio"]="5"
\n)<\/p>\n
echo "========================================"
\necho " Linux \u5185\u6838\u53c2\u6570\u9a8c\u8bc1\u62a5\u544a"
\necho "========================================"
\necho ""<\/p>\n
PASS=0
\nWARN=0
\nFAIL=0<\/p>\n
for param in "${!RECOMMENDED[@]}"; do
\n current=$(sysctl -n "$param" 2>\/dev\/null || echo "NOT_FOUND")
\n recommended="${RECOMMENDED[$param]}"<\/p>\n
if [[ "$current" == "NOT_FOUND" ]]; then
\n echo -e "${YELLOW}[WARN]${NC} $param – \u53c2\u6570\u4e0d\u5b58\u5728"
\n ((WARN++))
\n elif [[ "$current" == "$recommended" ]]; then
\n echo -e "${GREEN}[PASS]${NC} $param = $current"
\n ((PASS++))
\n else
\n echo -e "${RED}[FAIL]${NC} $param = $current (\u63a8\u8350: $recommended)"
\n ((FAIL++))
\n fi
\ndone<\/p>\n
echo ""
\necho "========================================"
\necho " \u9a8c\u8bc1\u7ed3\u679c: PASS=$PASS WARN=$WARN FAIL=$FAIL"
\necho "========================================"<\/p>\n
# \u989d\u5916\u68c0\u67e5：\u6587\u4ef6\u63cf\u8ff0\u7b26\u9650\u5236
\necho ""
\necho "— \u6587\u4ef6\u63cf\u8ff0\u7b26\u9650\u5236 —"
\necho "\u7cfb\u7edf\u7ea7: $(sysctl -n fs.file-max)"
\necho "\u7528\u6237\u7ea7 (soft): $(ulimit -Sn)"
\necho "\u7528\u6237\u7ea7 (hard): $(ulimit -Hn)"<\/p>\n
# \u989d\u5916\u68c0\u67e5：\u5f53\u524d\u8fde\u63a5\u8ddf\u8e2a\u4f7f\u7528\u7387
\nif sysctl -n net.netfilter.nf_conntrack_count &>\/dev\/null; then
\n current=$(sysctl -n net.netfilter.nf_conntrack_count)
\n max=$(sysctl -n net.netfilter.nf_conntrack_max)
\n usage=$(echo "scale=2; $current * 100 \/ $max" | bc)
\n echo ""
\n echo "— \u8fde\u63a5\u8ddf\u8e2a\u4f7f\u7528\u7387 —"
\n echo "\u5f53\u524d: $current \/ \u6700\u5927: $max (${usage}%)"
\n if (( $(echo "$usage > 80" | bc -l) )); then
\n echo -e "${RED}[ALERT]${NC} \u8fde\u63a5\u8ddf\u8e2a\u4f7f\u7528\u7387\u8d85\u8fc7 80%"
\n fi
\nfi<\/p>\n
#!\/bin\/bash
\n# irq-affinity.sh – \u7f51\u5361\u4e2d\u65ad\u4eb2\u548c\u6027\u4f18\u5316
\n# \u5c06\u7f51\u5361\u4e2d\u65ad\u5206\u6563\u5230\u4e0d\u540c CPU \u6838\u5fc3，\u907f\u514d\u5355\u6838\u74f6\u9888<\/p>\n
INTERFACE="eth0"<\/p>\n
# \u83b7\u53d6\u7f51\u5361\u961f\u5217\u6570
\nQUEUE_COUNT=$(ethtool -l "$INTERFACE" 2>\/dev\/null | grep -A1 "Combined" | tail -1 | awk '{print $2}')
\nif [[ -z "$QUEUE_COUNT" || "$QUEUE_COUNT" -eq 0 ]]; then
\n echo "\u65e0\u6cd5\u83b7\u53d6\u7f51\u5361\u961f\u5217\u6570，\u4f7f\u7528\u9ed8\u8ba4\u503c 4"
\n QUEUE_COUNT=4
\nfi<\/p>\n
# \u8bbe\u7f6e\u7f51\u5361\u961f\u5217\u6570（\u9700\u8981\u7f51\u5361\u652f\u6301）
\nethtool -L "$INTERFACE" combined "$QUEUE_COUNT" 2>\/dev\/null || true<\/p>\n
echo "\u7f51\u5361 $INTERFACE \u961f\u5217\u6570: $QUEUE_COUNT"<\/p>\n
# \u83b7\u53d6 CPU \u6838\u5fc3\u6570
\nCPU_COUNT=$(nproc)
\necho "CPU \u6838\u5fc3\u6570: $CPU_COUNT"<\/p>\n
# \u8bbe\u7f6e\u4e2d\u65ad\u4eb2\u548c\u6027
\nfor ((i=0; i<QUEUE_COUNT; i++)); do
\n # \u8ba1\u7b97\u76ee\u6807 CPU \u6838\u5fc3（\u5206\u6563\u5230\u4e0d\u540c\u6838\u5fc3）
\n TARGET_CPU=$((i % CPU_COUNT))
\n # \u8ba1\u7b97 CPU \u4eb2\u548c\u6027\u63a9\u7801
\n CPU_MASK=$((1 << TARGET_CPU))<\/p>\n
# \u67e5\u627e\u5bf9\u5e94\u7684\u4e2d\u65ad\u53f7
\n IRQS=$(grep "$INTERFACE-TxRx-$i" \/proc\/interrupts 2>\/dev\/null | awk -F: '{print $1}' | tr -d ' ')
\n if [[ -z "$IRQS" ]]; then
\n IRQS=$(grep "$INTERFACE-$i" \/proc\/interrupts 2>\/dev\/null | awk -F: '{print $1}' | tr -d ' ')
\n fi<\/p>\n
for irq in $IRQS; do
\n printf "%x" "$CPU_MASK" > "\/proc\/irq\/$irq\/smp_affinity" 2>\/dev\/null
\n echo "\u961f\u5217 $i (IRQ $irq) \u2192 CPU $TARGET_CPU"
\n done
\ndone<\/p>\n
echo "\u4e2d\u65ad\u4eb2\u548c\u6027\u914d\u7f6e\u5b8c\u6210"<\/p>\n
SWAP \u7981\u7528\u7684 OOM \u98ce\u9669：\u5c06 swappiness \u8bbe\u4e3a 0 \u6216 1 \u53ef\u4ee5\u907f\u514d SWAP \u6362\u9875，\u4f46\u5f53\u5185\u5b58\u771f\u6b63\u8017\u5c3d\u65f6，\u5185\u6838\u4f1a\u89e6\u53d1 OOM Killer \u76f4\u63a5\u6740\u8fdb\u7a0b，\u800c\u4e0d\u662f\u6362\u9875\u5ef6\u7f13\u3002\u5efa\u8bae\u914d\u5408\u76d1\u63a7，\u5728\u5185\u5b58\u4f7f\u7528\u7387\u8d85\u8fc7 85% \u65f6\u63d0\u524d\u544a\u8b66，\u9884\u7559\u6269\u5bb9\u65f6\u95f4\u3002<\/p>\n
TCP \u53c2\u6570\u7684\u517c\u5bb9\u6027：tcp_tw_reuse=1 \u5141\u8bb8\u590d\u7528 TIME_WAIT \u8fde\u63a5，\u4f46\u5728 NAT \u73af\u5883\u4e0b\u53ef\u80fd\u5bfc\u81f4\u8fde\u63a5\u6df7\u4e71\u3002\u5982\u679c\u670d\u52a1\u5668\u5728 NAT \u540e\u9762\u6216\u4f7f\u7528\u77ed\u8fde\u63a5\u5927\u91cf\u8bbf\u95ee\u5916\u90e8\u670d\u52a1，\u9700\u8981\u8c28\u614e\u542f\u7528\u3002<\/p>\n
HugePages \u7684\u5185\u5b58\u9501\u5b9a：HugePages \u5728\u542f\u52a8\u65f6\u9884\u5206\u914d，\u5206\u914d\u540e\u4e0d\u53ef\u91ca\u653e\u7ed9\u5176\u4ed6\u7528\u9014\u3002\u5982\u679c\u5206\u914d\u8fc7\u591a，\u4f1a\u5bfc\u81f4\u666e\u901a\u5185\u5b58\u4e0d\u8db3\u3002\u5efa\u8bae\u6839\u636e\u5b9e\u9645\u9700\u6c42\u8ba1\u7b97，\u9884\u7559 10% \u7684\u666e\u901a\u5185\u5b58\u4f59\u91cf\u3002<\/p>\n
\u6587\u4ef6\u63cf\u8ff0\u7b26\u7684\u4e09\u7ea7\u9650\u5236：\u53ea\u8c03\u5927 fs.file-max \u4e0d\u591f，\u7528\u6237\u7ea7（limits.conf）\u548c\u8fdb\u7a0b\u7ea7（\u5bb9\u5668\u5185 ulimit）\u4e5f\u5fc5\u987b\u540c\u6b65\u8c03\u6574\u3002K8s \u73af\u5883\u4e2d，\u5bb9\u5668\u7684 ulimit \u7ee7\u627f\u81ea docker daemon \u914d\u7f6e，\u9700\u8981\u5728 containerd\/docker \u914d\u7f6e\u4e2d\u7edf\u4e00\u8bbe\u7f6e\u3002<\/p>\n
\u4e2d\u65ad\u4eb2\u548c\u6027\u4e0e CPU \u70ed\u70b9：\u5c06\u7f51\u5361\u4e2d\u65ad\u7ed1\u5b9a\u5230\u7279\u5b9a CPU \u53ef\u4ee5\u51cf\u5c11\u7f13\u5b58\u6296\u52a8，\u4f46\u5982\u679c\u7ed1\u5b9a\u7684 CPU \u8fd8\u8fd0\u884c\u5176\u4ed6\u9ad8\u8d1f\u8f7d\u4efb\u52a1，\u53cd\u800c\u4f1a\u9020\u6210 CPU \u70ed\u70b9\u3002\u5efa\u8bae\u5c06\u7f51\u5361\u4e2d\u65ad\u7ed1\u5b9a\u5230\u9694\u79bb\u7684 CPU \u6838\u5fc3（\u901a\u8fc7 isolcpus \u53c2\u6570\u9694\u79bb）\u3002<\/p>\n
Linux \u5185\u6838\u8c03\u4f18\u662f\u9ad8\u5e76\u53d1\u670d\u52a1\u5668\u7684\u5fc5\u4fee\u8bfe，\u6838\u5fc3\u539f\u5219\u662f"\u8ba9\u5185\u6838\u4e3a\u4f60\u7684\u573a\u666f\u670d\u52a1，\u800c\u4e0d\u662f\u4e3a\u901a\u7528\u573a\u666f\u670d\u52a1"\u3002\u4e09\u4e2a\u4f18\u5316\u7ef4\u5ea6\u6309\u5f71\u54cd\u6392\u5e8f：\u7f51\u7edc\u53c2\u6570 > \u5185\u5b58\u53c2\u6570 > \u6587\u4ef6\u7cfb\u7edf\u53c2\u6570\u3002\u7f51\u7edc\u53c2\u6570\u76f4\u63a5\u5f71\u54cd\u8fde\u63a5\u5904\u7406\u80fd\u529b，\u5185\u5b58\u53c2\u6570\u5f71\u54cd GC \u548c IO \u6027\u80fd，\u6587\u4ef6\u7cfb\u7edf\u53c2\u6570\u5f71\u54cd\u8fde\u63a5\u6570\u4e0a\u9650\u3002<\/p>\n
\u843d\u5730\u8def\u7ebf\u5efa\u8bae：\u7b2c\u4e00\u6b65，\u8fd0\u884c sysctl-check.sh \u8bc4\u4f30\u5f53\u524d\u53c2\u6570\u4e0e\u63a8\u8350\u503c\u7684\u5dee\u8ddd；\u7b2c\u4e8c\u6b65，\u6309\u4f18\u5148\u7ea7\u8c03\u6574\u7f51\u7edc\u53c2\u6570，\u91cd\u70b9\u5173\u6ce8\u8fde\u63a5\u961f\u5217\u548c TIME_WAIT \u56de\u6536；\u7b2c\u4e09\u6b65，\u8c03\u6574\u5185\u5b58\u53c2\u6570，\u7981\u7528 SWAP\u3001\u4f18\u5316\u810f\u9875\u56de\u5199；\u7b2c\u56db\u6b65，\u8c03\u6574\u6587\u4ef6\u63cf\u8ff0\u7b26\u9650\u5236，\u786e\u4fdd\u4e09\u7ea7\u9650\u5236\u4e00\u81f4；\u7b2c\u4e94\u6b65，\u4f18\u5316\u7f51\u5361\u4e2d\u65ad\u4eb2\u548c\u6027，\u5206\u6563\u4e2d\u65ad\u5904\u7406\u8d1f\u8f7d\u3002\u6bcf\u6b21\u8c03\u4f18\u540e\u90fd\u8981\u8fdb\u884c\u538b\u529b\u6d4b\u8bd5，\u9a8c\u8bc1\u6548\u679c\u5e76\u89c2\u5bdf\u662f\u5426\u6709\u526f\u4f5c\u7528\u3002\u8c03\u4f18\u4e0d\u662f\u4e00\u6b21\u6027\u5de5\u4f5c，\u968f\u7740\u4e1a\u52a1\u589e\u957f\u9700\u8981\u5b9a\u671f\u590d\u8bc4\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
Linux \u670d\u52a1\u5668\u5185\u6838\u8c03\u4f18\u5b9e\u6218：\u4ece\u7cfb\u7edf\u74f6\u9888\u5230\u9ad8\u6027\u80fd\u8fd0\u884c\u7684\u53c2\u6570\u4f18\u5316\u8def\u5f84\u4e00\u3001\u9ed8\u8ba4\u5185\u6838\u53c2\u6570\u7684\u751f\u4ea7\u9690\u60a3：\u90a3\u4e9b\u88ab\u5ffd\u89c6\u7684\u7cfb\u7edf\u74f6\u9888
\n\u4e00\u53f0 32 \u6838 64GB \u5185\u5b58\u7684\u670d\u52a1\u5668，\u8fd0\u884c Java \u5fae\u670d\u52a1\u96c6\u7fa4\u3002\u67d0\u6b21\u5927\u4fc3\u671f\u95f4，\u670d\u52a1\u54cd\u5e94\u5ef6\u8fdf\u98d9\u5347，\u6392\u67e5\u53d1\u73b0\u5e76\u975e\u5e94\u7528\u5c42\u95ee\u9898，\u800c\u662f\u5185\u6838\u53c2\u6570\u672a\u4f18\u5316：TCP \u8fde\u63a5\u961f\u5217\u6ea2\u51fa\u5bfc\u81f4\u5927\u91cf SYN \u88ab\u4e22\u5f03，\u6587\u4ef6\u63cf\u8ff0\u7b26\u8017\u5c3d\u5bfc\u81f4\u65b0\u8fde\u63a5\u65e0\u6cd5\u5efa\u7acb，SWAP \u9891<\/p>\n","protected":false},"author":2,"featured_media":82974,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1493,121,1348],"topic":[],"class_list":["post-82975","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-k8s","tag-121","tag-1348"],"yoast_head":"\n