A yau na zo ne don sake yin magana da ku game da ɗayan ayyukan yanar gizon da aka fi amfani da su a duniya: Gidan yanar gizon Apache2.
Batu ne da aka yi magana kansa sau da yawa, amma yanzu na zo ne in gaya muku game da wani fasalin don la'akari da wannan sabis ɗin: Iyakar haɗin lokaci ɗaya. Babu matsala idan muna da asali ko sararin samaniya tare da mai sarrafa i7 da 32 GB na rago ...
Iyakan haɗin haɗin kai lokaci ɗaya zai kasance iri ɗaya sai dai idan mun ɗauki matakan da suka dace, wanda ke nufin cewa idan muna son samun mutane da yawa da ke haɗe a lokaci guda, ba kawai muna buƙatar kayan aiki mai kyau ba, amma kuma kyakkyawan tsari.
A wannan yanayin ba lallai ba ne a girka komai, komai ya dogara ne da sauƙaƙan ra'ayoyi waɗanda dole ne a kula da su don daidaita apache; ra'ayoyin da dole ne su kasance bayyane sosai kafin a so yin kowane canje-canje.
Abu na farko da za ayi tunani akai shine: Wane irin ƙarfin aiki ƙungiyar tawa take da shi? Yaya yawan haɗin haɗin lokaci ɗaya na iya kayan aiki na tallafawa idan na tilasta shi kamar yadda ya yiwu? Duk wannan ya dogara da abu guda ɗaya; RAM (Memory Access Memory).
Mafi girman RAM, ya fi yawan adadin hanyoyin haɗi, kodayake babu ƙayyadadden ƙimar (wato, abokan cinikin X ga kowane ragon X), shi ya sa da farko yana da mahimmanci a yi wasu ƙananan ƙididdiga akan sabar yanar gizonmu, tare da domin sanin iyakokinmu.
Abu na farko da yakamata ka sani shine nawa RAM yake amfani dashi a matsakaicn kowane alaƙa da Apache, tunda kowane haɗin da aka kafa yana ɗauke da wani amfani na RAM a cikin tsarin ... A bayyane yake ba duk haɗin ke cinye rago ɗaya ba, wanda wanda zaiyi kafofin watsa labarai ... Duk wannan ana iya samun sa tare da umarnin mai zuwa:
ps -ylC apache2 --sort: rss | awk '{SUM + = $ 8; NI + = 1} KARSHE {buga SUM / I / 1024} '
Sakamakon da aka samu zai kasance yana wakilta a cikin megabytes kuma yana iya bambanta dangane da adadin haɗin haɗin aiki, nau'in shafukan da aka samu, da dai sauransu ... Saboda haka, yana da kyau a gudanar da gwajin tare da buɗe shafuka daban-daban; kowannensu yana nuna abubuwan da suke ciki daban-daban idan zai yiwu. A nawa, alal misali, sakamakon ya kasance 9.5458, wanda idan muka zagaye shi zuwa sama zai kasance 10 MB RAM ya cinye a matsakaita ta hanyar haɗin.
Hakanan yana da mahimmanci a san nawa RAM yake cinyewa ta sauran hanyoyin da suke aiki a cikin tsarin, tunda sabis ɗin yanar gizo ba shine kawai yake gudana a cikin tsarin aiki ba kuma ya zama dole a bar ƙwaƙwalwar RAM kyauta akan sabar don ta iya aiwatar da sauran ayyukan. Ana iya samun wannan tare da umarnin da aka nuna a ƙasa:
ps -N -ylC apache2 --sort: rss | awk '{SUM + = $ 8} KARSHE {buga SUM / 1024}'
Sakamakon da aka samu kuma za'a wakilta shi a cikin megabytes, kuma zai nuna mana daidai adadin RAM ɗin da sauran hanyoyin ke cinyewa; a harkaina 800 MB. Tare da wannan bayanin zamu iya yin cikakken lissafin yawan haɗin lokaci guda da zamu iya samu; Na kirga cewa zamu samu ta hanyar aiki mai sauki.
(RAMTOTAL - RAM_RESTOPROCESOS) / RAM_POR_CONNEXIÓN
Tare da wannan fom din a hannu, bari muyi tunanin cewa muna da kwamfutar da take da 4 GB RAM, wato, 4096 MB kuma kwamfutarmu ta nuna sakamakon da aka ambata; lissafin zai zama:
(4096 - 800) / 10 = 329 haɗi lokaci guda
Matsalar wannan lissafin ita ce, mutum ya wuce gona da iri, tunda zai cinye dukkan RAM (sanya uwar garken ya cinye swap) sannan kuma, idan akwai bayanan, kamar su MySQL ko wani, haɗi da shi kuma zai cinye RAM , don haka lambar da aka samu zata iya zama ƙwararriyar lambar utopian. Sabili da haka, don yantar da ƙwaƙwalwar don ƙarin hanyoyin aiwatarwa sannan kuma kuyi la'akari da yiwuwar haɗuwa da bayanai ana aiwatar da su, zamu rage adadin haɗin zuwa 250.
Yanzu muna da iyakar adadin haɗinmu lokaci ɗaya, dole ne mu shirya Apache don samun damar karɓar wannan lambar, wanda aka yi a cikin fayil ɗin sanyi na wannan kiran apache2.conf, wanda aka shirya a / sauransu / apache2.
Fayil din da ake magana akai yana bin tsari ne bisa kayayyaki, kowannensu da sunan da ya dace, amma za mu yi sha'awar ɗayansu, wanda sunansa yake mpm_prefork_module. Kayan aikin da ake magana yana da bayanan mai zuwa ta tsohuwa:
StartServers 5 MinSpareServers 5 MaxSpareServers 10 MaxClients 150 MaxRequestsPerChild 0
Wannan tsarin yana da jerin sigogi masu matukar mahimmanci, kodayake akwai ɗayansu wanda zai ba mu sha'awa musamman, wanda ake kira Babban Abokin ciniki. Wannan ma'aunin yana ƙayyade iyakar adadin haɗin lokaci ɗaya kuma ya kamata a canza shi zuwa 250.
Detailaya daga cikin bayanan da za a tuna shi ne cewa lokacin da aka ƙayyade wani darajar da ba ta tsoho ba a cikin abin da aka faɗa, ya zama dole a ƙara wani ƙari KAFIN wannan. Ana kiran wannan ma'aunin Sabis na Sabis kuma yana saita iyakar haɗin da sabar zata iya "riƙe" koda kuwa yana wajen iyakar.
Saitin ServerLimit koyaushe ya kasance ya ɗan fi MaxClients girma kuma a nan, saboda akwai ɗan sarari don motsawa, iyakar 270. Wannan zai sa tsarin ya zama kamar wannan:
StartServers 5 MinSpareServers 5 MaxSpareServers 10 ServerLimit 270 MaxClients 250 MaxRequestsPerChild 0
Yanzu zai zama dole ne kawai don sake kunna sabis na Apache ta amfani da umarnin:
/etc/init.d/apache2 sake farawa
Da wannan zamu iya jin daɗin ingantaccen sabar gidan yanar sadarwarmu.
Na gode.
Godiya ga post!
Na yi farin ciki da kuka same shi da amfani.
Na gode.
Akwai hanyar da zaku tara Apache da sabobin guda biyu, zaku iya bayanin yadda yake aiki?
Kodayake na karanta wasu ka'idoji game da shi, ban taba amfani da shi don aiwatarwa ba. Duk da haka, wataƙila wannan labarin na iya ba ku jagora game da wannan, kodayake na maimaita cewa ban sami damar aiwatar da shi ba:
http://www.muspells.net/blog/2011/04/alta-disponibilidad-con-apache2-y-heartbeat-en-debian-squeeze/
Kun yi roƙo na dogon lokaci, idan ba ku warware ba; Ina da tsarin daidaitawa tare da wani na uku da ke aiki azaman tsarin fayil, kuna nuna manyan fayilolin da suke var / www / html / (a cikin akwati na) zuwa tsarin fayil ɗin, saboda haka suna raba wannan bayanin, kuma mai yiwuwa kuna buƙatar ip mai amfani wanda yake amsawa kuma ka koma zuwa ga abubuwan hawa, saboda wannan zaka iya mallakar haproxy kuma idan kana son shi cikin wadatarwa zaka iya haɗawa da kiyayewa idan ɗayan ya faɗi, ɗayan ya ci gaba da amsawa, ko kuma idan kana da yanki don aikace-aikacen, zaka iya daidaitawa da fam yin baya ga duka sabobin, don takamaiman lamura kamar moodle ko wasu aikace-aikacen da suka haɗu zuwa rumbun adana bayanai a cikin mysql, dole ne ku ƙirƙiri mai amfani da wata sabar aikace-aikacen da ke nuni zuwa wannan rumbun bayanan.
Na gode sosai da sakon, hakika kun yi daidai, rago shi ne lissafin farko, kodayake ina tunanin cewa mu ma muna lissafin matsakaicin adadin ayyukan da mai sarrafa mu zai iya rikewa (hakika, da farko yin lissafin babban ƙwaƙwalwar) da kuma yadda za'a rarraba faifan da karfi (Misali bangare / var = 1TR).
Kuna da gaskiya; komai yana da mahimmanci, kamar sarrafa zafin jiki tsakanin sauran abubuwa. Babu shakka mai sarrafa sarrafawa mai iko yana iya aiwatar da ayyuka da yawa da yawa a lokaci guda tare da ingantaccen aiki, amma makasudin wannan post ɗin shine don bayyana mahimmancin RAM dangane da yawan haɗin lokaci ɗaya.
Hanya mai kyau don sarrafa duk waɗannan abubuwan kuma duba idan mai sarrafa mu bai cika ba ko kuma idan muna da ƙaramin RAM kyauta, zai kasance ta amfani da rubutun bash. Wataƙila wannan rubutun da na yi kwanakin baya game da shi yana da ban sha'awa a gare ku, wanda na bar ku a cikin mahaɗin mai zuwa; Kulawa ce ta duniya amma yana iya zama da ban sha'awa ga wani:
http://bytelearning.blogspot.com.es/2015/07/controlando-la-salud-del-equipo-con-bash.html
gaisuwa
Bayani mai kyau, na gode sosai!
Godiya mai yawa! Ina fatan kun sami damar amfanuwa da shi.
Ba na son zama dan iska ...
Amma ta hanyar haɓaka adadin haɗin haɗin da baku barin mafi saukin kamuwa da harin DDoS?
Ba tambaya ba ne. Gaskiyar ita ce ta hanyar ƙara yawan haɗin lokaci ɗaya, muna ƙara ƙarfafa Apache akan hare-haren DDOS, saboda dole ne kuyi la'akari da cewa yawan adadin haɗin haɗin da aka kafa akan sabar shine yawan adadin haɗin kai, ba waɗanda ke zuwa ba mai amfani daya. Don haka, yayin da a farkon zamu iya tallafawa haɗin haɗin 150 lokaci ɗaya (ko suna haɗi daga asalin asali ko a'a) a yanzu zamu iya dogaro da yawa kamar yadda sabarmu ke tallafawa, muna buƙatar mafi yawan haɗin lokaci a lokaci guda don zama ba tare da sabis. A bayyane yake, ƙara yawan adadin haɗin haɗin ba wata hanya ce ta kare kanka daga irin wannan harin ba, amma dai dole ne ku aiwatar da manufofin bango. Idan, alal misali, sabis na yanar gizo da kake son sakawa za a fallasa shi zuwa intanet, matakan tsaro da za a iya aiwatarwa zai zama ƙari ne na waɗannan layukan zuwa bangon mu:
iptables -A INPUT -p tcp –syn –dport 80 -m connlimit –daidaitawa-har zuwa 10 -m state –state NEW -j ACCEPT
iptables -A INPUT -p tcp –dport 80 -m state –tatsa Kafa, RELATED -j ACCEPT
iptables -A INPUT -p tcp –darwa 80 -j DROP
Ofaya daga cikin halayen harin DDoS shine mai kawo hari zai iya bayyana don aika fakitoci daga wurare daban-daban, wanda ke hana kwararar fakiti daga zuwa kawai ta hanya ɗaya.
Kuna da gaskiya a ma'anar cewa katangar bango kamar wacce na kafa ba ta da inganci sosai game da harin DDOS, tunda ya fito daga tushe daban-daban. Duk da haka, ya fi kyau a iyakance adadin haɗin zuwa 10 ga kowane ɗayan waɗannan hanyoyin ba tare da iyakancewa ba, wanda zai sa kowane tushe ya iya kafa haɗin ɗari ko fiye.
A kowane hali, kayan tambayar shine cewa yawan haɗin haɗin da sabar ke goyan baya, zai zama da wuya ya buge shi tare da harin DDOS, wanda zai sa ya zama da wahala ga mai kai hari ga saukar da shafin. .
Na gode.
Yayi kyau. A yanzu na ci gaba da NGINX akan shafin don kar azabtar da VPS da nake da shi.
Nice post @Drassill!
Ina so in ba da gudummawa tare da wani abu mai yiwuwa fiye da ƙididdiga fiye da daidaitawa.
Kodayake hanya mafi sauki kuma mafi sauri don lissafin ma'aunin amfani yana tare da ma'ana, wataƙila zamu iya tsaurarawa kuma muyi amfani da "tsakiyan" maimakon "ma'ana". Me zai cece mu? Lambobin suna harbawa idan haɗi ya cinye ƙwaƙwalwar ajiya da yawa. Misali, a ce masu kwastomomi masu zuwa wadanda suke cin wadannan dabi'u, a bangaren kwakwalwar da suke so (KB, MB, MiB, da sauransu):
10, 15, 150, 5, 7, 10, 11, 12
Matsakaicin zai ba da kusan ~ 30
Kuma wannan saboda muna da ƙarshen ƙarshe (150), kuma lissafin mahaukaci ne. Matsakaici ya ƙunshi yin odar waɗannan bayanai, rarraba lambobin samfurin 2 (cibiyarmu) sannan samun lambar wannan matsayin. Da wannan zamu sami wani abu kamar haka
5, 7, 10, 10, 11, 12, 15, 150
Don haka ma'anarmu zata kasance: 8/2 = 4 wato ~ 10
Anan zaku iya ganin cewa duk yadda girman hauka ya kasance, koyaushe zai bamu darajar da ta dace. Idan muka ƙara abokin ciniki wanda ke cin 200, matsakaiciyarmu zai zama 11, yayin da matsakaita zai iya zuwa …….
Gudummawa ce kawai, kuma ana iya muhawara sosai, saboda tare da haɗin ba a jujjuya ba.
Rungar mutane linuxera 🙂
Barka dai, ina da matsala a sabar sadaukarwa, kuma shine duk lokacin da adadin mutane kusan 250 suka kusanci kan layi, bisa ga binciken google a ainihin lokacin, saburina kamar ya faɗi kuma haɗin yana yin jinkiri har sai ya faɗi haɗin yanar gizo kuma ba a ɗora sama da wannan adadin masu amfani a kan layi ba, amma lokacin da na ga aikin uwar garken sadaukarwa wanda yake 8gb rago sai ya nuna kashi 10% na amfani, da cpu: 5% na amfani da kuma faifai a cikin: 1.99 % na amfani.
Za'a iya taya ni? Ban sami abin da zan yi ba, shin yin waɗannan matakan shine mafita?
Kyakkyawan Carlos.
Matsalar da kuka bayyana ta zama gama gari lokacin da ba a shirya saba sosai ba. Mai yiwuwa sabarku zata karbi karamin lamba mai hadewa kuma lokaci daya idan ya kai 250 zai fadi Biye da littafin yakamata ku iya magance matsalar, kodayake idan kuna da rumbun bayanai a kan sabar, yakamata ku inganta wannan rumbun adana bayanan.
Na gode.
Drassill, Na yi tsarin da kuka ambata kuma ya gamsar, jiya na isa ga masu amfani 280 a kan layi kuma sabar ba ta rataye ba, Ina matukar farin ciki da wannan sakamakon, kuma ina kuma so in yi wani abin da za ku gaya mani don inganta bayanan, ¿ Ta yaya zan cimma wannan?
Manufar bayanan bayanai a buɗe take; amfani da mysql ba daidai yake bane da postgres (misali). Babu shakka ban san dukkan bayanan bayanan ba; Na gwada mysql da postgres, kuma karuwar haɗin lokaci ɗaya a cikin waɗannan zai dogara ne akan abubuwan haɗin haɗi; inganta mysql za'ayi a cikin /etc/my.conf kuma dole ne a canza madaidaitan mahada (a tsakanin wasu). Don postgres a maimakon haka, Ina da labarin a kan shafin yanar gizon na wanda ke bayanin yadda za a inganta shi wanda zai iya zama da amfani a gare ku ko kuma zaku iya amfani dashi azaman ishara don tushen bayanan ku:
http://bytelearning.blogspot.com.es/2016/02/postgresql-una-alternativa-mysql-en.html
Na gode.
Barka dai, lokacin da na jefa umarni na farko, yana nuna min darajar 0. Me zai iya zama?
Na gode da wannan sakon.
Wane kyakkyawan jagora ne, wannan bayanin wani bangare ne na abin da nake nema... godiya!
Amma yanzu, idan ina son lokacin da waɗannan baƙi 250 suka wuce, baƙo 251 ya tafi shafin jira ko jerin gwano, zan iya yin shi daga wannan tsarin?
Gaisuwa da godiya!