适用于： Ubuntu / Debian / CentOS / Rocky / AlmaLinux 等常用服务器环境。

sudo apt update && sudo apt upgrade -y
sudo yum update -y

sudo apt install -y vim curl wget net-tools htop lsof

fs.file-max = 1000000
net.core.somaxconn = 65535
net.core.netdev_max_backlog = 65535
net.ipv4.tcp_fin_timeout = 10
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_max_syn_backlog = 8096
net.ipv4.tcp_syncookies = 1
net.core.default_qdisc = fq
net.ipv4.tcp_congestion_control = bbr

sudo sysctl –system

* soft nofile 1000000
* hard nofile 1000000
* soft nproc 65535
* hard nproc 65535

lsmod | grep bbr
echo “net.ipv4.tcp_congestion_control = bbr” | sudo tee -a /etc/sysctl.conf
sudo sysctl -p

UseDNS no
LoginGraceTime 20
PermitRootLogin prohibit-password

cat /sys/block/sda/queue/scheduler
echo mq-deadline | sudo tee /sys/block/sda/queue/scheduler

vm.swappiness = 10
vm.vfs_cache_pressure = 50
sudo sysctl -p

⚠️ 清理缓存可能引发性能波动，请谨慎执行。

sync
echo 3 | sudo tee /proc/sys/vm/drop_caches

sudo ufw default deny incoming
sudo ufw allow OpenSSH
sudo ufw enable

sudo apt install fail2ban -y
sudo systemctl enable –now fail2ban

worker_processes auto;
worker_rlimit_nofile 1000000;events {
worker_connections 20480;
multi_accept on;
}http {
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
client_max_body_size 50M;
gzip on;
}