日本免费全黄少妇一区二区三区-高清无码一区二区三区四区-欧美中文字幕日韩在线观看-国产福利诱惑在线网站-国产中文字幕一区在线-亚洲欧美精品日韩一区-久久国产精品国产精品国产-国产精久久久久久一区二区三区-欧美亚洲国产精品久久久久

  1. 首頁(yè) > 云知道 > >

FreeBSD 升級(jí)和優(yōu)化全攻略( 二 )

云知道


options IPFIREWALL_DEFAULT_TO_ACCEPT
options ICMP_BANDLIM
options ACCEPT_FILTER_DATA
options ACCEPT_FILTER_HTTP
#ipfilter support
#options IPFILTER
#options IPFILTER_LOG
#options IPFILTER_DEFAULT_BLOCK
再執(zhí)行：
/usr/sbin/config onlinecq
cd ../../compile/onlinecq
make depend
make
make install
重新啟動(dòng)服務(wù)器
到此為止，服務(wù)器操作系統(tǒng)及內(nèi)核升級(jí)成功
reboot
優(yōu)化FREEBSD
檢查升級(jí)情況
使用ssh進(jìn)入系統(tǒng)，使用uname –a 可以查到是否升級(jí)成功﹔
打開(kāi)防火墻
更新rc.conf里面的設(shè)置，加上：
#enable_quotas="YES"
#check_quotas="YES"
firewall_enable="YES"
firewall_script="/etc/rc.firewall"
firewall_type="/etc/ipfw.rules" #create it!
firewall_quiet="NO"
firewall_logging_enable="YES"
log_in_vain="NO"
tcp_drop_synfin="NO"
tcp_restrict_rst="YES"
icmp_drop_redirect="YES"
優(yōu)化內(nèi)核參數(shù)
修改系統(tǒng)內(nèi)核參數(shù)，實(shí)現(xiàn)微調(diào)：vi /etc/sysctl.conf
kern.ipc.somaxconn=8192
kern.ipc.maxsockbuf=2097152
kern.maxfilesperproc=32768
kern.maxfiles=65536
kern.securelevel=-1
net.inet.tcp.sendspace=65536
net.inet.tcp.recvspace=32768
net.inet.udp.maxdgram=57344
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=0
net.inet.ip.redirect=0
net.inet6.ip6.redirect=0
net.inet.icmp.icmplim=100
net.inet.tcp.always_keepalive=0
net.inet.tcp.delayed_ack=0
net.inet.tcp.log_in_vain=0
net.inet.udp.log_in_vain=0
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.local.stream.sendspace=65535
net.local.stream.recvspace=32768
net.inet.ip.fastforwarding=1
vfs.vmiodirenable=1
安裝防火墻
防火墻在上面已經(jīng)編譯入了內(nèi)核，并且在上面的rc.conf里面已經(jīng)打開(kāi)了，所以在此只要設(shè)置一下即可！
允許所有IP通過(guò)，免得把自己給擋在外面了 。
ipfw add all from any to any
其它規(guī)則根據(jù)實(shí)際情況來(lái)做，如果您想系統(tǒng)每次啟動(dòng)都使用上一次的規(guī)則，可以把這些內(nèi)容加到：
vi /etc/ipfw.rules
里面，語(yǔ)法規(guī)則同ipfw 。
安裝數(shù)據(jù)庫(kù)MYSQL
安裝mysql40-server和mysql40-client
進(jìn)入/usr/ports/databases/mysql40-server
執(zhí)行：
make clean
make deinstall
make WITH_OPENSSL=yes WITH_LinuxTHREADS=yes BUILD_OPTIMIZED=yes install
或者使用下面可參考的編譯參數(shù)：BUILD_STATIC=yes
編譯成靜態(tài)執(zhí)行版本
make clean
更改mysql的root密碼：
mysqladmin –uroot –p passWord 123456
生成/etc/my.cnf，使用如下命令：
vi /etc/my.cnf
[client]
#password = your_password
port = 3306
socket = /tmp/mysql.sock
[mysqld]
skip-innodb
skip-locking
skip-networking
set-variable = port=3306
set-variable = socket=/tmp/mysql.sock
set-variable = back_log=50
set-variable = connect_timeout=3
set-variable = key_buffer=128M
set-variable = max_connections=1000
set-variable = max_allowed_packet=1M
set-variable = net_buffer_length=8K
set-variable = wait_timeout=3
set-variable = read_buffer_size=1M
set-variable = sort_buffer_size=1M
set-variable = table_cache=256
set-variable = myisam_sort_buffer_size=32M
set-variable = log_slow_queries=/var/log/log_slow_queries.log
#log-bin
server-id = 1
[mysqldump]
quick
set-variable = max_allowed_packet=16M
[mysql]
no-auto-rehash
# Remove the next comment character if you are not familiar with SQL
#safe-updates
[isamchk]
set-variable = key_buffer=20M
set-variable = sort_buffer=20M
set-variable = read_buffer=2M
set-variable = write_buffer=2M
[myisamchk]
set-variable = key_buffer=20M
set-variable = sort_buffer=20M
set-variable = read_buffer=2M
set-variable = write_buffer=2M
[mysqlhotcopy]
interactive-timeout
安裝phpmyadmin
注意，此步驟需要在apache和php之后再執(zhí)行

推薦閱讀