LinuxByte » 服务器应用 http://www.linuxbyte.org 一个Linux Blog Thu, 26 Jan 2012 08:13:08 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 网吧Linux 网关设置记录补充 http://www.linuxbyte.org/wang-ba-linux-wang-guan-she-zhi-ji-lu-bu-chong.html http://www.linuxbyte.org/wang-ba-linux-wang-guan-she-zhi-ji-lu-bu-chong.html#comments Thu, 03 Nov 2011 02:23:43 +0000 xiao H http://www.linuxbyte.org/?p=766 很早之前写过这篇博文网吧Linux 网关设置记录，现在这台服务器终于玩完了，所以又要重新配置一台了。这次系统用的是CentOS 6 所以，有些东西变了，要记录一下。

squid.conf 中原来的 acl all src 0.0.0.0/0，现在不需要定义了，squid 3.0 以后all 字段是默认设置了。

sysctl.conf 优化中

net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 900

net.ipv4.netfilter.ip_conntrack_tcp_timeout_established 已经改名了，改为net.netfilter.nf_conntrack_tcp_timeout_established 。

其实这一系列网络参数现在都改为net.netfilter.nf 开头了，所以原来的sysctl.conf 优化语句要改一下了。
我的优化语句

net.netfilter.nf_conntrack_tcp_timeout_established= 180
net.netfilter.nf_conntrack_tcp_timeout_fin_wait= 120
net.netfilter.nf_conntrack_tcp_timeout_close_wait= 60
net.netfilter.nf_conntrack_tcp_timeout_last_ack= 30
net.netfilter.nf_conntrack_tcp_timeout_time_wait= 120
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_fin_timeout = 30
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.conf.all.proxy_arp = 1
net.ipv4.tcp_synack_retries = 3

另外加一条

iptables -t nat -A PREROUTING -s 192.168.0.0/24 -i eth1 -p upd --dport 53 -j REDIRECT --to-port 53

强制所有内网DNS请求都有网关解析。

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: 网吧Linux 网关设置记录补充
Post tags: , , ,

标签：, , ,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/wang-ba-linux-wang-guan-she-zhi-ji-lu-bu-chong.html/feed 0 备份VPS数据到Dropbox http://www.linuxbyte.org/bei-fen-vps-shu-ju-dao-dropbox.html http://www.linuxbyte.org/bei-fen-vps-shu-ju-dao-dropbox.html#comments Sun, 08 May 2011 09:34:14 +0000 xiao H http://www.linuxbyte.org/?p=722 数据备份的重要性我想不用强调大家都知道，而把数据异地备份更是提高数据安全的好手段。Dropbox 一个众所周知的好东西，跨平台，服务稳定，访问方式多样，免费2G空间。虽然在景德镇被和谐的但在国外还是速度杠杠的好。所以用它备份VPS 上的数据再好不过 。本文分两部分讨论，一本地的数据备份，二数据同步到Dropbox。

一.备份你的数据
用tar 做本博客的附件的增量备份。

#第一次备份
tar cvPf /backup/xxx/linuxbyte.tar /xxx/web/linuxbyte.org/uploads/
#之后的增量备份
tar uPf /backup/xxx/linuxbyte.tar /xxx/web/linuxbyte.org/uploads/

加入crontab 任务，每周1，3，5 凌晨3：10时备份。

10 3 * * 1,3,5 tar uPf /backup/xxx/linuxbyte.tar /xxx/web/linuxbyte.org/uploads/

注意这里tar 用了绝对路径解压时加 ‘-C’ 解压到指定目录，避免直接覆盖。

数据库备份
创建 mysql.sh 内容为

#!/bin/bash
bakTime=`date +%w`
mysqldump  -uroot -ppassword linuxbyte_db > /backup/mysql-datea/linuxbyte.sql-$bakTime

加入crontab 任务，每周1，3，5 凌晨3：30时备份。

30 3 * * 1,3,5 /backup/mysql.sh

二.安装配置Dropbox
登录系统然后运行如下命令

cd   
#32位系统：
wget -O dropbox.tar.gz "http://www.dropbox.com/download/?plat=lnx.x86"   
#64位系统：
wget -O dropbox.tar.gz "http://www.dropbox.com/download/?plat=lnx.x86_64"   
 
#解压测试安装dropbox
tar -tzf dropbox.tar.gz   
tar -xvzf dropbox.tar.gz
~/.dropbox-dist/dropboxd   
#然后你会得到如下输出
This client is not linked to any account...
Please visit https://www.dropbox.com/cli_link?host_id=7d44a557aa58f285f2da0x67334d02c1 &cl=en_US to link this machine.

在你的本地客户机上用Firefox+autoproxy 配合ssh 翻墙访问这个“https://www.dropbox.com/cli_link?host_id=7d44a557aa58f285f2da0x67334d02c1 &cl=en_US”，关联你的dropbox账户。不要告诉我你不会用ssh 翻墙，你难道不是景德镇用户？

再回到你的服务器上在你的主目录下创建一个Dropbox目录，如此中间没什么错的话你就能成功同步了。

cd Dropbox
ln -s /backup/ centos #为备份目录创建一个软链接到Dropbox下。

创建/etc/init.d/dropbox文件，内容看这里

创建/etc/sysconfig/dropbox 文件，内容为

DROPBOX_USERS="username"

这个”username” 是你服务器上的用户名不是你的，Dropbox 用户名。

/etc/init.d/dropbox start

启动 dropbox 。

自此你的系统就能自动备份，并自动把备份同步到Dropbox了。Dropbox 服务吃内存还是很多的，所以还是有必要有限使用可以用Crontab 设置在特定时段启动而不是时时刻刻运行浪费内存。

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: 备份VPS数据到Dropbox
Post tags: , ,

标签：, ,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/bei-fen-vps-shu-ju-dao-dropbox.html/feed 0 使用 Awstats 后的一些小修改 http://www.linuxbyte.org/shi-yong-awstats-hou-de-yi-xie-xiao-xiu-gai.html http://www.linuxbyte.org/shi-yong-awstats-hou-de-yi-xie-xiao-xiu-gai.html#comments Fri, 29 Apr 2011 03:24:08 +0000 xiao H http://www.linuxbyte.org/?p=709 本位是上一篇用 awstats分析 Nginx 日志的一些记录的补充。
出现以下错误提示的

Error: LogFile parameter is not defined in config/domain file
 
Setup ('www.linuxbyte.org' file, web server or permissions) may be wrong.
Check config file, permissions and AWStats documentation (in 'docs' directory).

文件权限问题，检查生成的文件的权限和文件宿主，不行直接chmod 777.

默认字体大小
Awstats默认字体设置符合英文习惯的，所以需要改一下CSS，编辑/usr/local/awstats/wwwroot/cgi-bin/awstats.pl 文件，调整里面的字体和字体大小。

编码问题，生成的文件默认是GBK 编码，但是搜索进来的关键字是UTF-8所以会出现乱码。

修改配置文件awstats.www.linuxbyte.org.conf
在配置文件中把decodeutfkeys这个plugin打开就可以了。在配置文件中找到：

 #LoadPlugin="decodeutfkeys"

去掉“#” 解除注释，开启这一模块。

禁止蜘蛛抓取
千万在robots.txt 设置禁止蜘蛛抓取，不然它来来回回给你抓个遍也是很浪费系统资源的。

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: 使用 Awstats 后的一些小修改
Post tags:

标签：

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/shi-yong-awstats-hou-de-yi-xie-xiao-xiu-gai.html/feed 6 用 awstats分析 Nginx 日志的一些记录 http://www.linuxbyte.org/yong-awstats-fen-xi-nginx-ri-zhi-de-yi-xie-ji-lu.html http://www.linuxbyte.org/yong-awstats-fen-xi-nginx-ri-zhi-de-yi-xie-ji-lu.html#comments Wed, 27 Apr 2011 08:55:12 +0000 xiao H http://www.linuxbyte.org/?p=701 系统环境为Cenots+Nginx 详细请阅读之前的日志《Centos yum 安装nginx+PHP-FPM+eAccelerator+mysql》。
Awstats 是目前最流行的日志分析工具，它提供比第三方日志更方便更详实的日志分析。

系统默认Nginx 版本为 1.0.0，日志格式 Awstats 可以直接识别，并且由logrotate 做了日志回滚，每日对日志进行截断。为了得到更准确的分析结果并且尽量少占用系统资源，我每天在凌晨分析上一天的日志，并将结果输出为纯静态文件。由于logrotate 压缩了旧日志所以要修改logrotate 设置不压缩就日志。
修改vi /etc/logrotate.d/nginx

/var/log/nginx/*log {
    daily
    rotate 10 #保留10天的日志
    missingok
    notifempty
    nocompress #就是这里默认是compress压缩日志
    sharedscripts
    postrotate
        [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
    endscript
}

下载安装Awstats

wget http://prdownloads.sourceforge.net/awstats/awstats-7.0-1.noarch.rpm
rpm -ivh awstats-7.0-1.noarch.rpm

配置

cd /usr/local/awstats/tools
perl awstats_configure.pl

由于我们的web服务器是Nginx 所以 Check for web server install 我们选 none

-----> Need to create a new config file ?
Do you want me to build a new AWStats config/profile
file (required if first install) [y/N] ? y #这里选Y
 
-----> Define config file name to create
What is the name of your web site or profile analysis ?
Example: www.mysite.com
Example: demo
Your web site, virtual server or profile name:
> www.linuxbyte.org #输入你要统计的网站的域名

编辑/etc/awstats/awstats.www.linuxbyte.org.conf
修改 LogFile 段加入网站日志的路径。

LogFile="/var/log/nginx/www.linuxbyte.org.access.log.1"

生成份分析结果的静态文件

cd /data/web/linuxbyte.org/awstats
cp /usr/local/awstats/wwwroot/icon/ ./ -rf 
/usr/local/awstats/tools/awstats_buildstaticpages.pl -config=www.linuxbyte.org -lang=cn -dir=/web/linuxbyte/awstats -update

自此你可以访问http://www.linuxbyte.org/awstats/awstats.www.linuxbyte.org.html 来查看分析结果。

设置crontable

30 4 * * */usr/local/awstats/tools/awstats_buildstaticpages.pl -config=www.linuxbyte.org -lang=cn -dir=/web/linuxbyte/awstats -update

每天凌晨 4：30 分析日志，因为这个时候是服务器最空闲的时段。

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: 用 awstats分析 Nginx 日志的一些记录
Post tags: , ,

标签：, ,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/yong-awstats-fen-xi-nginx-ri-zhi-de-yi-xie-ji-lu.html/feed 0 Nginx 限制并发连接数 http://www.linuxbyte.org/nginx-xian-zhi-bing-fa-lian-jie-shu.html http://www.linuxbyte.org/nginx-xian-zhi-bing-fa-lian-jie-shu.html#comments Sat, 26 Mar 2011 15:23:29 +0000 xiao H http://www.linuxbyte.org/?p=671 在http 段添加下面语句定义一个记录区

  limit_zone   myzone  $binary_remote_addr  10m;

在server 段加入下面语句，限制并发数为十。

    limit_conn   myzone  10;

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: Nginx 限制并发连接数
Post tags: ,

标签：,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/nginx-xian-zhi-bing-fa-lian-jie-shu.html/feed 0 Centos yum 安装nginx+PHP-FPM+eAccelerator+mysql http://www.linuxbyte.org/centos-yum-an-zhuang-nginx-php-fpm-eaccelerator-mysql.html http://www.linuxbyte.org/centos-yum-an-zhuang-nginx-php-fpm-eaccelerator-mysql.html#comments Tue, 22 Mar 2011 06:59:53 +0000 xiao H http://www.linuxbyte.org/?p=662 记录下我在linodeVPS 的Centos下安装配置nginx+PHP-FPM+eAccelerator+mysql的过程。

添加安装源
Centos 默认官方源中没有nginx 和 php-fpm 所以必须添加第三方源，不然就只能自己编译了。

添加[CentALT]源
在/etc/yum.repo.d 目下创建 alt.ru.repo 文件内容如下：

[CentALT]
name=CentALT Packages for Enterprise Linux 5 - $basearch
baseurl=http://centos.alt.ru/repository/centos/5/$basearch/
enabled=1
gpgcheck=0

启用 EPEL

rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm

32系统的用下面命令

rpm -Uvhhttp://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-4.noarch.rpm

安装 nginx +PHP-FPM +eAccelerator +mysql

yum update
 yum install nginx php-fpm php-cli php-pdo php-mysql php-mcrypt php-mbstring php-gd php-tidy php-xml php-xmlrpc php-pear php-pecl-memcache php-eaccelerator

配置优化Nginx
修改 /etc/nginx/nginx.conf,下面只列出修改的部分。

#根据CPU 核心processes，VPS下几个核心几个processes，独立服务器可x2
worker_processes  4;
 
#启用epoll
worker_rlimit_nofile 51200;
events {
    worker_connections  51200;
    use epoll;
}
#参数调整
    sendfile        on;
    tcp_nopush      on;
    tcp_nodelay     on;
    server_tokens   off;
    keepalive_timeout  50;
    server_names_hash_bucket_size 128;
    client_header_buffer_size 32k;
    large_client_header_buffers 4 32k;
    client_max_body_size 50m;
#fastcgi优化
    fastcgi_connect_timeout 300;
    fastcgi_send_timeout 300;
    fastcgi_read_timeout 300;
    fastcgi_buffer_size 64k;
    fastcgi_buffers 4 64k;
    fastcgi_busy_buffers_size 128k;
    fastcgi_temp_file_write_size 256k;
 
#开启gzip并优化
    gzip on;
    gzip_min_length  1k;
    gzip_buffers     4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types       text/plain application/x-javascript text/css application/xml;
    gzip_vary on;

php-fpm 调整
修改/etc/php-fpm.conf 将max_children 调为20

<value name="max_children">20</value>

mysql 调整
修改/etc/my.conf [mysqld] 段加入如下指令

skip-network
skip-innodb
skip-locking
skip-bdb
 
key_buffer              = 16K
max_allowed_packet      = 3M
thread_stack            = 64K
thread_cache_size       = 8
table_cache             = 3
query_cache_limit       = 1M
query_cache_size        = 16M

系统内核调整
在/etc/sysctl.conf 加入

net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000    65000
net.ipv4.tcp_max_tw_buckets = 6000
echo “ulimit -SHn 65535” >> /etc/rc.local
styctl -p

开启服务并设置系统启动默认启动

ulimit -SHn 65535
/etc/init.d/nginx  start
/etc/init.d/php-fpm start
/etc/init.d/mysqld start
chkconfig nginx on
chkconfig php-fpm on
chkconfig mysqld on

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: Centos yum 安装nginx+PHP-FPM+eAccelerator+mysql
Post tags: , , , , ,

标签：, , , , ,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/centos-yum-an-zhuang-nginx-php-fpm-eaccelerator-mysql.html/feed 4 refresh_pattern 学习范例 http://www.linuxbyte.org/refreshpattern-xue-xi-fan-li.html http://www.linuxbyte.org/refreshpattern-xue-xi-fan-li.html#comments Thu, 03 Mar 2011 09:46:56 +0000 xiao H http://www.linuxbyte.org/?p=627 一份很强的refresh_pattern 规则。关于refresh_pattern 的用法可以阅读扶凯的文章

# $Rev$
# chudy_fernandez@yahoo.com
# 1 year = 525600 mins, 1 month = 43800 mins
refresh_pattern (get_video|videoplayback|videodownload|\.flv).*(begin|start)\=[1-9][0-9]*	0 0% 0
refresh_pattern imeem.*\.flv 		0 0% 0 				override-lastmod override-expire
refresh_pattern ^ftp:				40320	20%	40320 	override-expire reload-into-ims store-stale
refresh_pattern ^gopher:			1440	0%	1440 
refresh_pattern code.googlec.com.*(svn|download)			0	50%	1440	reload-into-ims
 
#ads
refresh_pattern ^.*(streamate.doublepimp.com.*\.js\?|utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\.cubics\.com|ad\.xtendmedia\.com|\.googlesyndication\.com|advertising\.com|yieldmanager|game-advertising\.com|pixel\.quantserve\.com|adperium\.com|doubleclick\.net|adserving\.cpxinteractive\.com|syndication\.com|media.fastclick.net).* 5259487 20% 5259487 ignore-no-cache ignore-no-store ignore-private override-expire ignore-reload ignore-auth ignore-must-revalidate store-stale negative-ttl=40320 max-stale=1440
 
#antivirus
refresh_pattern avast.com.*\.vpx																			40320 50% 161280		store-stale reload-into-ims
refresh_pattern (avgate|avira).*\.(idx|gz)$																	1440 90% 1440 			ignore-reload ignore-no-cache ignore-no-store store-stale ignore-must-revalidate 
refresh_pattern kaspersky.*\.avc$																			5259487 999999% 5259487	ignore-reload store-stale
refresh_pattern kaspersky																					1440 50% 161280			ignore-no-cache store-stale
refresh_pattern mbamupdates.com.*\.ref																		1440 50% 161280			reload-into-ims store-stale
 
#specific sites
refresh_pattern \.rapidshare.*\/[0-9]*\/.*\/[^\/]* 															161280	90%	161280 ignore-reload store-stale
refresh_pattern (get_video\?|videoplayback\?|videodownload\?|\.flv\?|\.fid\?) 										5259487 99999999% 5259487 override-expire ignore-reload store-stale ignore-private negative-ttl=0
refresh_pattern \.(ico|video-stats) 																		5259487 999999% 5259487	override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod ignore-must-revalidate negative-ttl=10080 store-stale
refresh_pattern \.etology\?	 																				5259487 999999% 5259487	override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern galleries\.video(\?|sz) 																	5259487 999999% 5259487	override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern brazzers\?	 																				5259487 999999% 5259487	override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern \.adtology\?																				5259487 999999% 5259487	override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern ^.*safebrowsing.*google 																	5259487 999999% 5259487	override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth ignore-must-revalidate negative-ttl=10080 store-stale
refresh_pattern ^http://((cbk|mt|khm|mlt)[0-9]?)\.google\.co(m|\.uk) 										5259487 999999% 5259487	override-expire ignore-reload store-stale ignore-private negative-ttl=10080
refresh_pattern ytimg\.com.*\.(jpg|png)																		5259487 999999% 5259487	override-expire ignore-reload store-stale
refresh_pattern images\.friendster\.com.*\.(png|gif) 														5259487 999999% 5259487	override-expire ignore-reload store-stale
refresh_pattern ((facebook.com)|(85.131.151.39)).*\.(png|gif)												5259487 999999% 5259487	override-expire ignore-reload store-stale
refresh_pattern garena\.com																					5259487 999999% 5259487	override-expire reload-into-ims store-stale
refresh_pattern photobucket.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png) 												5259487 999999% 5259487	override-expire ignore-reload store-stale
refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\? 														5259487 999999% 5259487	ignore-no-cache override-expire override-lastmod store-stale
refresh_pattern .fbcdn.net.*\.(jpg|gif|png)																	5259487 999999% 5259487	ignore-no-cache override-expire ignore-reload store-stale negative-ttl=0
refresh_pattern ^http:\/\/images|pics|thumbs[0-9]\. 														5259487 999999% 5259487	ignore-no-cache ignore-no-store ignore-reload override-expire store-stale
refresh_pattern ^http:\/\/www.onemanga.com.*\/ 																5259487 999999% 5259487	reload-into-ims override-expire store-stale
refresh_pattern mediafire.com\/images.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png) 									5259487 999999% 5259487	reload-into-ims override-expire ignore-private store-stale
 
#general
refresh_pattern \.(jp(e?g|e|2)|tiff?|bmp|gif|png) 															5259487 999999% 5259487	ignore-no-cache ignore-no-store reload-into-ims override-expire ignore-must-revalidate store-stale
refresh_pattern \.(z(ip|[0-9]{2})|r(ar|[0-9]{2})|jar|bz2|gz|tar|rpm|vpu) 									5259487 999999% 5259487	override-expire reload-into-ims
refresh_pattern \.(mp3|wav|og(g|a)|flac|midi?|rm|aac|wma|mka|ape) 											5259487 999999% 5259487	override-expire reload-into-ims ignore-reload
refresh_pattern \.(exe|msi|dmg|bin|xpi|iso|swf|mar|psf|cab)													5259487 999999% 5259487	override-expire reload-into-ims ignore-no-cache ignore-must-revalidate
refresh_pattern \.(mpeg|ra?m|avi|mp(g|e|4)|mov|divx|asf|wmv|m\dv|rv|vob|asx|ogm|flv|3gp|on2)				5259487 9999999% 5259487 override-expire reload-into-ims
refresh_pattern -i (cgi-bin) 0 0% 0
refresh_pattern \.(php|jsp|cgi|asx)\? 0 0% 0
refresh_pattern . 0 50% 161280 store-stale

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: refresh_pattern 学习范例
Post tags: ,

标签：,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/refreshpattern-xue-xi-fan-li.html/feed 0 Squid 透明代理优化 http://www.linuxbyte.org/squid-tou-ming-dai-li-you-hua.html http://www.linuxbyte.org/squid-tou-ming-dai-li-you-hua.html#comments Wed, 02 Mar 2011 12:14:20 +0000 xiao H http://www.linuxbyte.org/?p=626 主要记录下用Squid 做正向代理（透明代理）时的优化设置，一切尚在调试中所以下面的优化方式未必都是正确的。

内核调整
/etc/sysctl.conf 下面添加

net.ipv4.netfilter.ip_conntrack_tcp_timeout_established =900
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.conf.all.proxy_arp = 1
net.ipv4.tcp_synack_retries = 3
net.ipv4.ip_conntrack_max = 81920
net.ipv4.tcp_fin_timeout = 5
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 1024 65000
net.ipv4.tcp_max_syn_backlog = 8192
net.ipv4.tcp_max_tw_buckets = 5000

使设置生效

 /sbin/sysctl -p

文件系统设置
将squid缓存放入独立的文件系统中，文件系统格式建议用Reiserfs，挂载时使用’noatime’参数提高IO性能。

LABEL=/squid             /squid               reiserfs    defaults,noatime     0 0

squid.conf

http_port 192.168.0.254:3128 transparent
cache_mgr hew@linuxbyte.org
cache_mem 512 MB
cache_dir ufs /squid/squid 51200 12 256
maximum_object_size_in_memory 128 KB
maximum_object_size 64 MB
 
#cache_access_log /var/log/squid/access.log squid
cache_access_log none
cache_log none
cache_store_log none
#logfile_rotate 4
 
max_filedesc 6144
pipeline_prefetch on
memory_pools off
memory_pools_limit none
mime_table /etc/squid/mime.conf
 
refresh_pattern -i \.css$ 1440 50% 129600 reload-into-ims
refresh_pattern -i \.xml$ 1440 50% 129600 reload-into-ims
refresh_pattern -i \.htm$ 1440 90% 129600 reload-into-ims
refresh_pattern -i \.html$ 1440 90% 129600 reload-into-ims
refresh_pattern -i \.shtml$ 1440 90% 129600 reload-into-ims
refresh_pattern -i \.png$ 1440 90% 129600 reload-into-ims
refresh_pattern -i \.jpg$ 1440 90% 129600 reload-into-ims
refresh_pattern -i \.jpeg$ 1440 90% 129600 reload-into-ims
refresh_pattern -i \.gif$ 1440 90% 129600 reload-into-ims
refresh_pattern -i \.bmp$ 1440 90% 129600 reload-into-ims
refresh_pattern -i \.js$ 1440 90% 129600 reload-into-ims
 
refresh_pattern -i \.mp3$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.wmv$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.rm$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.swf$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.mpeg$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.wma$ 1440 50% 2880 ignore-reload
 
refresh_pattern -i \.exe$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.rar$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.zip$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.gz$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.bz2$ 1440 50% 2880 ignore-reload
refresh_pattern -i \.7z$ 1440 50% 2880 ignore-reload
 
client_lifetime 1 hours
half_closed_clients off
visible_hostname proxy.linuxbyte.org
 
cache_effective_user squid
cache_effective_group squid
 
cache_swap_low 75
cache_swap_high 95
 
dns_nameservers 192.168.0.254
 
acl QUERY urlpath_regex -i cgi-bin \?
cache deny QUERY
 
acl all src 0.0.0.0/0
acl localnet src 192.168.0.0/24
http_access allow localnet
http_access deny all

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: Squid 透明代理优化
Post tags: ,

标签：,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/squid-tou-ming-dai-li-you-hua.html/feed 0 关于squid的一些记录 http://www.linuxbyte.org/guan-yu-squid-de-yi-xie-ji-lu.html http://www.linuxbyte.org/guan-yu-squid-de-yi-xie-ji-lu.html#comments Tue, 01 Mar 2011 06:07:26 +0000 xiao H http://www.linuxbyte.org/?p=624 max_filedesc 问题
CentOS 5 中自带 Squid 是打过REDHAT的fd补丁的，所以可以直接用max_filedesc 参数加大squid 的最大文件打开数，不过在启动squid之前要运行下

ulimit -HSn xxxxx


关于这个问题更多的可阅读下面文章：
http://www.linuxbyte.org/squid-max_filedesc.html

maximum_object_size_in_memory 的大小

查看Cache information for squid:中下面这段

Storage Swap size: 7549104 KB
Storage Mem size: 418804 KB
Mean Object Size: 160.46 KB

Mean Object Size是平均内容大小，一般要把maximum_object_size_in_memory设置成离它最近的128的倍数。在这个例子中maximum_object_size_in_memory 的值应该是256kB。

与本文关系暧昧的文字

© xiao H for LinuxByte, 2011
Source: 关于squid的一些记录
Post tags: ,

标签：,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/guan-yu-squid-de-yi-xie-ji-lu.html/feed 0 mysql slave 配置备份 http://www.linuxbyte.org/mysql-slave-pei-zhi-bei-fen.html http://www.linuxbyte.org/mysql-slave-pei-zhi-bei-fen.html#comments Mon, 14 Jun 2010 08:46:03 +0000 xiao H http://www.linuxbyte.org/?p=568 mysql slave 配置备份
[client]
port = 3306
socket = /tmp/mysql.sock

[mysqld]
port = 3306
socket = /tmp/mysql.sock
skip-locking
key_buffer = 16M
max_allowed_packet = 1M
table_cache = 64
sort_buffer_size = 512K
net_buffer_length = 8K
read_buffer_size = 256K
read_rnd_buffer_size = 512K
myisam_sort_buffer_size = 8M
skip-federated

################### slave ##########################
server-id = 2
master-host=192.168.1.221
master-user=reply
master-password=reply123456
replicate-do-db =mydns
log-bin=n01-bin
slave-net-timeout=60

####################################################

long_query_time = 5
expire_logs_days= 3
thread_concurrency = 8
thread_cache_size = 64
max_connections = 4000
query_cache_size = 256M
open_files_limit = 10000
max_heap_table_size = 64M
innodb_file_per_table
innodb_flush_method=O_DIRECT
innodb_buffer_pool_size=120M
innodb_additional_mem_pool_size=100M
innodb_support_xa=0
innodb_thread_concurrency=0
innodb_flush_log_at_trx_commit=1
#####################################
interactive_timeout=180
wait_timeout=180
#####################################

[mysqldump]
quick
max_allowed_packet = 16M

[mysql]
no-auto-rehash

[isamchk]
key_buffer = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[myisamchk]
key_buffer = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[mysqlhotcopy]
interactive-timeout,u

与本文关系暧昧的文字

© xiao H for LinuxByte, 2010
Source: mysql slave 配置备份
Post tags: ,

标签：,

Feed enhanced by Better Feed from Ozh

]]> http://www.linuxbyte.org/mysql-slave-pei-zhi-bei-fen.html/feed 0