Guest User

Configurations

a guest
Jan 31st, 2016
60
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. [root@cw005 ~/scripts]# netstat -Lan
  2. Current listen queue sizes (qlen/incqlen/maxqlen)
  3. Proto Listen Local Address
  4. tcp4 0/0/6000 *.80
  5. tcp4 0/0/6000 *.443
  6. tcp4 0/0/10 127.0.0.1.25
  7. tcp4 0/0/128 *.1880
  8. tcp6 0/0/128 *.1880
  9. tcp4 0/0/5 *.5666
  10. tcp6 0/0/5 *.5666
  11. tcp4 0/0/128 *.199
  12. unix 0/0/6000 /var/run/www.socket
  13. unix 0/0/4 /var/run/devd.pipe
  14. unix 0/0/4 /var/run/devd.seqpacket.pipe
  15.  
  16. Here is the output of mbcluster :
  17.  
  18. 119747/550133/669880/6127378 mbuf clusters in use (current/cache/total/max)
  19. 661065/1410183/2071248/6063689 4k (page size) jumbo clusters in use (current/cache/total/max)
  20.  
  21. Here is the sysctl.conf :
  22.  
  23. kern.ipc.somaxconn=6000
  24. # set to at least 16MB for 10GE hosts
  25. kern.ipc.maxsockbuf=16777216
  26. # socket buffers
  27.  
  28. net.inet.tcp.recvspace=4194304
  29. net.inet.tcp.sendspace=4197152
  30. net.inet.tcp.sendbuf_max=16777216
  31. net.inet.tcp.recvbuf_max=16777216
  32. net.inet.tcp.sendbuf_auto=1
  33. net.inet.tcp.recvbuf_auto=1
  34. net.inet.tcp.sendbuf_inc=16384
  35. net.inet.tcp.recvbuf_inc=524288
  36. # security
  37. security.bsd.see_other_uids=0
  38. security.bsd.see_other_gids=0
  39. # drop UDP packets destined for closed sockets
  40. net.inet.udp.blackhole=1
  41. # drop TCP packets destined for closed sockets
  42. net.inet.tcp.blackhole=2
  43. # ipfw
  44. net.inet.ip.fw.verbose_limit=3
  45. # maximum incoming and outgoing IPv4 network queue sizes
  46. net.inet.ip.intr_queue_maxlen=2048
  47. net.route.netisr_maxqlen=2048
  48.  
  49. net.inet.icmp.icmplim: 2048
  50. net.inet.tcp.fast_finwait2_recycle=1
  51. kern.random.sys.harvest.ethernet=0
  52. net.inet.ip.portrange.randomized=0
  53. net.link.lagg.0.use_flowid=0
  54.  
  55. Here is the bootloader.conf :
  56.  
  57. zpool_cache_load="YES"
  58. zpool_cache_type="/boot/zfs/zpool.cache"
  59. zpool_cache_name="/boot/zfs/zpool.cache"
  60. aio_load="YES"
  61. zfs_load="YES"
  62. ipmi_load="YES"
  63.  
  64. Here is the nginx.conf :
  65.  
  66. user www www;
  67. worker_processes 48;
  68. worker_rlimit_nofile 900000; #2 filehandlers for each connection
  69. error_log /var/log/nginx-error.log error;
  70. #pid logs/nginx.pid;
  71.  
  72. events {
  73. worker_connections 10240;
  74. multi_accept on;
  75.  
  76. }
  77. http {
  78. include mime.types;
  79. default_type application/octet-stream;
  80. add_header X-Content-Type-Options nosniff;
  81. add_header X-XSS-Protection "1; mode=block";
  82. client_max_body_size 4096M;
  83. client_body_buffer_size 800M;
  84. output_buffers 1 512k;
  85. sendfile_max_chunk 128k;
  86.  
  87.  
  88. fastcgi_connect_timeout 30;
  89. fastcgi_send_timeout 30;
  90. fastcgi_read_timeout 30;
  91. proxy_read_timeout 30;
  92. fastcgi_buffer_size 64k;
  93. fastcgi_buffers 16 64k;
  94. fastcgi_temp_file_write_size 256k;
  95.  
  96.  
  97. server_tokens off; #Conceals nginx version
  98. access_log off;
  99. sendfile off;
  100. tcp_nodelay on;
  101. aio on;
  102. client_header_timeout 30s;
  103. client_body_timeout 30s;
  104. send_timeout 30s;
  105. keepalive_timeout 15s;
  106. ssl_session_cache shared:SSL:10m;
  107. ssl_session_timeout 10m;
  108. gzip off;
  109. gzip_vary on;
  110. gzip_disable "MSIE [1-6]\.";
  111. gzip_proxied any;
  112. gzip_http_version 1.0;
  113. gzip_min_length 1280;
  114. gzip_comp_level 6;
  115. gzip_buffers 16 8k;
  116. gzip_types text/plain text/xml text/css application/x-javascript image/png image/x-icon image/gif image/jpeg image/jpg application/xml application/xml+rss text/javascr ipt application/atom+xml;
  117. include /usr/local/etc/nginx/vhosts/*.conf;
  118. }
  119.  
  120. Here is the vhost :
  121.  
  122. server {
  123. listen 80 sndbuf=16k;
  124. server_name cw005.files.com cw005.domain.com www.cw005.files.com www.cw005.domain.com cw005.domain.net www.cw005.domain.net;
  125. location / {
  126. root /files;
  127. index index.html index.htm index.php;
  128. autoindex off;
  129. }
  130. location ~ \.(jpg)$ {
  131. sendfile on;
  132. tcp_nopush on;
  133. aio off;
  134. root /files;
  135. try_files $uri /thumbs.php;
  136. expires 1y;
  137. }
  138.  
  139. location ~* \.(js|css|png|gif|ico)$ {
  140. root /files;
  141. expires 1y;
  142. log_not_found off;
  143. }
  144.  
  145.  
  146. location ~ \.(flv)$ {
  147. flv;
  148. root /files;
  149. expires 7d;
  150. include hotlink.inc;
  151. }
  152.  
  153. location ~ \.(mp4)$ {
  154. mp4;
  155. mp4_buffer_size 4M;
  156. mp4_max_buffer_size 20M;
  157. expires 1y;
  158. add_header Cache-Control "public";
  159. root /files;
  160. include hotlink.inc;
  161. }
  162.  
  163. # pass the PHP scripts to FastCGI server listening on unix:/var/run/www.socket
  164. location ~ \.php$ {
  165. root /files;
  166. fastcgi_pass unix:/var/run/www.socket;
  167. fastcgi_index index.php;
  168. fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  169. include fastcgi_params;
  170. fastcgi_read_timeout 10000;
  171. }
  172.  
  173. location ~ /\.ht {
  174. deny all;
  175. }
  176. }
RAW Paste Data Copied