centos服务器安装配置

centos服务器安装配置

一、安装系统完毕后关闭以下服务1、firewall和configuration-disable2、sysytem services 保留：crond、network、sshd二、新建账户，并设置允许新账户能sudo到root，禁止root账户ssh远程登陆#useradd lswang#passwd lswang#chmod 777 /etc/sudoers#vim /etc/sudoers查找/root yyp 修改lswang#chmod 440 /etc/sudoers#vim /etc/ssh/sshd_config 查找/#PermitRootLogin 去掉#，改yes为no#/etc/init.d/sshd restart三、Web服务器装机优化步骤
1、打开/etc/security/limits.conf文件，在End of file上面加上两句 （打开最大文件连接数）* soft nofile 51200* hard nofile 51200

2、打开/etc/sysctl.conf文件，在最后边插入如下语句：（优化内核）kernel.shmall = 268435456
net.ipv4.tcp_max_syn_backlog = 65536
net.core.netdev_max_backlog = 32768
net.core.somaxconn = 32768

net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216

net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2

net.ipv4.tcp_tw_recycle = 1
#net.ipv4.tcp_tw_len = 1
net.ipv4.tcp_tw_reuse = 1

net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_max_orphans = 3276800

net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 120
net.ipv4.ip_local_port_range = 1024 65535
然后执行以下命令使配置生效： #/sbin/sysctl -p

本文出自 “linux” 博客，谢绝转载！