#cat /etc/sysctl.conf
fs.file-max = 1048576
net.core.netdev_max_backlog = 262144
net.core.somaxconn = 4096
net.ipv4.tcp_max_orphans = 65536
net.ipv4.ip_local_port_range = 1024 65000
net.ipv4.tcp_no_metrics_save = 1
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_fin_timeout = 5
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_max_syn_backlog = 3240000
net.ipv4.tcp_max_tw_buckets = 1048576
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_slow_start_after_idle = 0
net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_keepalive_probes = 2
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_retries2 = 5
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_synack_retries = 2
##ssh
Protocol 2
ChallengeResponseAuthentication no
GSSAPIAuthentication no
GSSAPICleanupCredentials no
UsePAM yes
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS
X11Forwarding yes
Subsystem sftp /usr/libexec/openssh/sftp-server
UseDNS no
AddressFamily inet
SyslogFacility AUTHPRIV
PasswordAuthentication no
##ntp
driftfile /var/lib/ntp/drift
pidfile /var/run/ntpd.pid
logfile /var/log/ntp.log
# Access Control Support
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
restrict 127.0.0.1
# local clock
server 127.127.1.0
fudge 127.127.1.0 stratum 10
# server
server 10.10.252.113 iburst minpoll 4 maxpoll 10
restrict 10.10.252.113 nomodify notrap nopeer noquery
server 10.10.253.124 iburst minpoll 4 maxpoll 10
restrict 10.10.253.124 nomodify notrap nopeer noquery
server 10.10.253.94 iburst minpoll 4 maxpoll 10
restrict 10.10.253.94 nomodify notrap nopeer noquery
#/etc/files/limits.conf
# End of file
* soft nofile 65535
* hard nofile 65536
* soft nproc 65535
* hard nproc 65536
###
echo 'HISTTIMEFORMAT="%F %T "' >> /root/.bashrc
echo 'export HISTTIMEFORMAT' >> /root/.bashrc
source /root/.bashrc