优化备忘录

性能优化

net.ipv4.tcp_syncookies = 1

net.ipv4.tcp_tw_reuse = 1

net.ipv4.tcp_tw_recycle = 1

net.ipv4.tcp_fin_timeout=30

net.ipv4.tcp_max+syn_backlog = 4096

net.ipv4.ip_local_port_range = 1024 65535

net.core.somaxconn = 32768

* hard nofile 655360

* soft nofile 655360

* hard nproc 655360

* soft nproc 655360

* hard core 655360

* soft core 655360

sed -i 's/4096/unlimited/g' /etc/security/limits.d/20-nproc.conf

5，开启嵌套虚拟化

cat /sys/modprobe.d/kvm-nested.conf

rmmod kvm_intel

modprobe kvm-intel ept =0 unrestricted_guest=0