From 2870a24fc40b56ddd2623bb47478ff11a9f97742 Mon Sep 17 00:00:00 2001
From: PaperDragon <2678885646@qq.com>
Date: Tue, 17 Oct 2023 10:28:02 +0800
Subject: [PATCH] =?UTF-8?q?Nginx=E6=AD=A3=E5=90=91=E4=BB=A3=E7=90=86?=
 =?UTF-8?q?=E9=AB=98=E5=B9=B6=E5=8F=91?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ...06\351\253\230\345\271\266\345\217\221.md" | 81 +++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 "src/note-book/Nginx/Nginx\346\255\243\345\220\221\344\273\243\347\220\206\351\253\230\345\271\266\345\217\221.md"

diff --git "a/src/note-book/Nginx/Nginx\346\255\243\345\220\221\344\273\243\347\220\206\351\253\230\345\271\266\345\217\221.md" "b/src/note-book/Nginx/Nginx\346\255\243\345\220\221\344\273\243\347\220\206\351\253\230\345\271\266\345\217\221.md"
new file mode 100644
index 00000000000..0e778a092bf
--- /dev/null
+++ "b/src/note-book/Nginx/Nginx\346\255\243\345\220\221\344\273\243\347\220\206\351\253\230\345\271\266\345\217\221.md"
@@ -0,0 +1,81 @@
+# Nginx正向代理高并发
+
+## Proxy
+
+```bash
+#!/bin/bash
+yum update && yum install nginx -y && yum clean all
+
+# 检查是否已经存在listen 3126;字段
+
+if grep -q "listen 3126;" /etc/nginx.conf; then
+  echo "代理服务器 listen 3126; 已经安装"
+else
+  # 在http字段后插入新的server块
+  sed -i '/http {/a\    server {\n    listen 3126;\n    server_name _;\n    location / {\n    resolver 8.8.8.8;\n    proxy_pass $scheme://$http_host$request_uri;\n    }\n}' /etc/nginx.conf
+  echo "已配置代理服务器"
+fi
+nginx -s reload
+
+# 将以下配置写入 /etc/sysctl.conf
+
+cat <<EOF >/etc/sysctl.conf
+net.ipv4.tcp_fin_timeout = 5
+net.ipv4.tcp_keepalive_time = 5
+net.ipv4.tcp_syncookies = 1
+net.ipv4.tcp_tw_reuse = 1
+net.ipv4.tcp_tw_recycle = 1
+net.ipv4.tcp_max_syn_backlog = 3240000
+net.ipv4.tcp_max_tw_buckets = 10000
+
+net.ipv4.tcp_mem = 768432 2097152 15242880
+net.ipv4.tcp_rmem = 4096 4096 33554432
+net.ipv4.tcp_wmem = 4096 4096 33554432
+net.ipv4.ip_local_port_range = 2048 64500
+net.core.wmem_default = 183888608
+net.core.rmem_default = 183888608
+net.core.rmem_max = 33554432
+net.core.wmem_max = 33554432
+net.core.netdev_max_backlog = 2621244
+
+kernel.sem=250 65536 100 2048
+kernel.msgmax = 65536
+kernel.msgmnb = 65536
+kernel.perf_cpu_time_max_percent = 60
+kernel.perf_event_max_sample_rate = 6250
+net.ipv4.tcp_max_orphans = 1048576
+kernel.sched_migration_cost_ns = 5000000
+net.core.optmem_max = 25165824
+net.core.somaxconn = 60000
+net.ipv4.tcp_window_scaling = 1
+EOF
+
+# 应用新的配置
+sysctl -p && echo "应用系统优化策略成功" || echo "部分系统优化策略应用失败"
+```
+
+## Client && Server
+
+```bash
+#!/bin/bash
+# 将以下配置写入 /etc/sysctl.conf  
+
+cat <<EOF >/etc/sysctl.conf
+net.ipv6.conf.all.accept_ra=1
+net.ipv6.conf.default.accept_ra=1
+net.ipv6.conf.eth0.accept_ra=1
+net.ipv4.tcp_fin_timeout = 10
+net.ipv4.tcp_keepalive_time = 1200
+net.ipv4.tcp_syncookies = 1
+net.ipv4.tcp_tw_reuse = 1
+net.ipv4.tcp_tw_recycle = 1
+net.ipv4.ip_local_port_range = 1024    65000
+net.ipv4.tcp_max_syn_backlog = 8192
+net.ipv4.tcp_max_tw_buckets = 5000
+EOF
+
+# 应用新的配置  
+sysctl -p && echo "应用系统优化策略成功" || echo "部分系统优化策略应用失败"
+
+```
+