리눅스 튜닝 ( 네트워크 Buffer overrun, drop 발생시 네트워크 튜닝 케이스 )

## ----------------------------------------------------------------------- ## 0) THP 비활성화  ## ----------------------------------------------------------------------- echo " for i in /sys/kernel/mm/*transparent_hugepage/enabled; do      echo never > $i; done    for i in /sys/kernel/mm/*transparent_hugepage/defrag; do      echo never > $i; done " >> /etc/rc.local ## ----------------------------------------------------------------------- ## 1) ethernet queue (1000 -> 2000 증가) ## ----------------------------------------------------------------------- echo "ifconfig em1 txqueuelen 2000" >> /etc/rc.local echo "ifconfig em2 txqueuelen 2000" >> /etc/rc.local echo "ifconfig em3 txqueuelen 2000" >> /etc/rc.local echo "ifconfig em4 txqueuelen 2000" >> /etc/rc.local echo "ifconfig bond0 txqueuelen 8000" >> /etc/rc.local ## ----------------------------------------------------------------------- ## 2) ringbuffer 를 최대치 ## 확인 명령어 : ethtool --show-ring em2 ## ----------------------------------------------------------------------- echo "ethtool -G em1 rx 2040" >> /etc/rc.local echo "ethtool -G em2 rx 2040" >> /etc/rc.local echo "ethtool -G em3 rx 2040" >> /etc/rc.local echo "ethtool -G em4 rx 2040" >> /etc/rc.local ## 소켓단에서 패킷을 더쌓을수있게 receive queue echo "net.core.netdev_max_backlog=250000" >> /etc/sysctl.conf echo "net.core.netdev_budget=600" >> /etc/sysctl.conf ## ----------------------------------------------------------------------- ## 3) SOFTIRQ 분산 ## ----------------------------------------------------------------------- /sbin/chkconfig --add irqbalance /sbin/chkconfig --level 345  irqbalance on /sbin/service irqbalance start ## ----------------------------------------------------------------------- ## 4) 네트워크 사용량 보기 ## ----------------------------------------------------------------------- cd /home/ ./nicstat -M -i p4p1 1 ## ----------------------------------------------------------------------- ## 5) audit 몇가지 보안 정책을 주석 처리 (cpu 5% 사용량 감소) ## service auditd restart ## ----------------------------------------------------------------------- vi /etc/audit/audit.rules