Nhasi ndauya kuzotaura newe zvakare nezve imwe yeanonyanya kushandiswa webhu masevhisi munyika: Iyo dura rewebhu Apache2.
Iwo musoro wenyaya wakambotaurwa nezvayo kakawanda, asi ikozvino ndauya kuzokuudza nezve chimwe chikamu chekufunga nezvesevhisi iyi: Muganhu wekubatana panguva imwe chete. Izvo hazvina basa kana isu tine yakakosha kana spacehip ine i7 processor uye 32 GB yegondohwe ...
Muganho wekubatana panguva imwe chete unogara wakaenzana kunze kwekunge titora matanho akakodzera, zvinoreva kuti kana tichida kuva nevanhu vazhinji vakabatana panguva imwe chete, isu hatizongoda chete Hardware yakanaka, asiwo kurongeka kwakanaka.
Mune ino kesi hazvidiwe kumisikidza chero chinhu, zvese zvinoenderana nepfungwa dzakareruka dzinofanirwa kutariswa kugadzirisa apache; pfungwa dzinofanirwa kuve dzakajeka vasati vada kuita chero shanduko.
Chinhu chekutanga kufunga nezvacho ndechekuti: Ndeapi masimba ane timu yangu? Ndeapi mangano akabatana panguva imwe chete anogona kutsigirwa nemidziyo yangu kana ndikaimanikidza zvakanyanya sezvinobvira? Zvese izvi zvinoenderana nechinhu chimwe chete; RAM (Random Kuwana Yekuyeuka).
Iyo yakawedzera iyo RAM, inowedzera huwandu hwekubatana, kunyangwe pasina kukosha kwakatarwa (ndokuti, X vatengi kune yega yega X gondohwe), ndosaka kutanga kwezvose zvichikosha kuita dzimwe diki kuverenga pane yedu dura rewebhu, ne iyo kuitira kuti tizive miganhu yedu.
Chinhu chekutanga iwe chaunofanirwa kuziva ndechekuti yakawanda sei RAM pavhareji kubatana kwese kune Apache kunodya, nekuti kubatana kwese kwakamisikidzwa kunofungidzira kumwe kudyiwa kwe RAM muchirongwa ... Zviripachena kuti hakusi kubatana kwese kunodya gondobwe rimwe chete, iro raizofanira kugadzirwa naro. midhiya ... Zvese izvi zvinogona kuwanikwa nemutemo unotevera:
ps -ylC apache2 --sort: rss | awk '{SUM + = $ 8; Ini + = 1} END {print SUM / I / 1024} '
Mhedzisiro inowanikwa inogona kumiririrwa mumamegabytes uye inogona kusiyana zvichienderana nenhamba yekubatana kwakabatana, mhando yemapeji akawanikwa, nezvimwe ... Nechikonzero ichi zvinokurudzirwa kuita bvunzo uine akasiyana tabo akavhurwa; imwe neimwe yadzo inoratidza zvakasiyana zvemukati kana zvichibvira. Mune yangu kesi, semuenzaniso, mhedzisiro yave iri 9.5458, iyo kana tikatenderedza kusvika kumusoro ingadai iri 10 MB RAM inodyiwa paavhareji pakabatana.
Izvo zvakakoshawo kuti uzive kuti mangani RAM anodyiwa neese mamwe maitirwo ari kushanda muhurongwa, nekuti webhu sevhisi haisi iyo yega inomhanya mune yekushandisa system uye zvinodikanwa kusiya yemahara RAM ndangariro pane sevha kuitira kuti igone kuita mamwe ese mabasa. Izvi zvinogona kuwanikwa nemurairo unoratidzwa pazasi:
ps -N -ylC apache2 --sort: rss | awk '{SUM + = $ 8} END {print SUM / 1024}'
Mhedzisiro yakawanikwa yaizomiririrwawo mumamegabyte, uye yaizotiratidza chaizvo huwandu hweRAM unodyiwa nemamwe masisitimu; kwandiri 800 MB. Neruzivo urwu tinogona kuita kuverenga kwese kwenhamba yekubatana panguva imwe chete kwatingave nako; Ini ndinoverenga kuti isu taizowana nenzira yekureruka mashandiro.
(RAMTOTAL - RAM_RESTOPROCESOS) / RAM_POR_CONNEXIÓN
Tine fomula iyi iri muruoko, ngatifungei kuti tine komputa ine 4 GB RAM, iri 4096 MB uye kuti komputa yedu yaratidza zvataurwa pamusoro; kuverenga kungave:
(4096 - 800) / 10 = 329 zvakabatana panguva imwe chete
Dambudziko nekuverenga uku nderekuti rakanyanyisa, nekuti raizodya RAM rese (zvichiita kuti server ishandise swap) uyezve, kana paine dhatabhesi, senge MySQL kana chero imwe, zvinongedzo nazvo zvaizodyawo RAM, iyo iyo nhamba yakawanikwa inogona kuve inokodzera senhamba yekutopian. Naizvozvo, kuti usunungure ndangariro nezvezvinogona kuwedzera maitiro uye zvakare funga nezve mukana wekuti kubatana kune dhatabhesi kunoitwa, isu tinodzora huwandu hwekubatana ne 250.
Izvozvi sezvo isu tave nenhamba yedu yepamusoro yekubatana panguva imwe chete, isu taizofanirwa kugadzirira Apache kuti igamuchire iyi nhamba, inoitwa mune yekumisikidza faira yeiyi kufona. apache2.conf, which is hosted in / etc / apache2.
Iyo faira iri mubvunzo inotevera chimiro chakavakirwa pa modules, imwe neimwe iine zita rinoenderana nayo, asi isu tinongofarira mumwe wavo, ane zita rekuti mpm_prefork_module. Iyo module iri kubvunzwa ine inotevera dhata nekutadza:
StartServers 5 MinSpareServers 5 MaxSpareServers 10 MaxClients 150 MaxRequestsPerChild 0
Iyi module ine nhevedzano yezvakakosha parameter, kunyangwe paine chimwe chazvo chinganyanya kutifadza, chinonzi MaxClients. Iyi paramende inotsanangura huwandu hwakanyanya hwekubatana panguva imwe chete uye inofanira kuchinjirwa ku 250.
Imwe tsananguro yekuchengeta mundangariro ndeyekuti kana kukosha kusiri kwekutadza kuchinge kwataurwa muparamende, zvinodikanwa kuti uwedzere imwezve PASI peiyi. Iyi paramende inonzi ServerLimit uye inoisa muganho wekubatanidza uyo sevha yaigona "kubata" kunyangwe iri kunze kwemuganhu.
Iyo ServerLimit paramende inogara ichifanira kuve yakati rebei kupfuura maMaxClients uye pano, sezvo paine nzvimbo diki yekufambisa, muganho we 270. Izvi zvaizoita kuti module iite seiyi:
StartServers 5 MinSpareServers 5 MaxSpareServers 10 ServerLimit 270 MaxClients 250 MaxRequestsPerChild 0
Zvino zvaizongodiwa chete kuti utangezve iyo Apache sevhisi uchishandisa rairo:
/etc/init.d/apache2 inotangazve
Nezvo isu taigona kutonakidzwa neyedu yakagadziridzwa webhu server.
Thanks.
Kutenda nekutumira!
Ndiri kufara kuti wakazviwana zvichibatsira.
Thanks.
Pane nzira yekubatanidza Apache nemaseva maviri, unogona here kutsanangura mashandiro ayo?
Kunyangwe ini ndamboverenga imwe dzidziso nezvazvo, handisati ndamboishandisa iko kudzidzira. Zvakadaro, pamwe chinyorwa ichi chinogona kukupa imwe nhungamiro mune izvi, asi ini ndichidzokorora kuti handina kuwana mukana wekuishandisa.
http://www.muspells.net/blog/2011/04/alta-disponibilidad-con-apache2-y-heartbeat-en-debian-squeeze/
wabvunza kwechinguva, kana usina kugadzirisa; Ndine chirongwa chekuenzanisa pamwe nechetatu chinoshanda sefaira system, unonongedza maforodha ari mu var / www / html / (mune yangu) kune iyo faira system, saka vanogovana ruzivo rwakafanana, uye pamwe ucha zvinoda iyo chaiyo ip inopindura uye kuendesa kune ips yemapache, nekuti izvi unogona kutora haproxy uye kana iwe uchichiida mukuwanika kwepamusoro unogona kusanganisa kuchengetedza kana imwe ikawa, imwe ichienderera ichipindura, kana zvakare kana uchitova dura rekushandisa, iwe unogona kuyera nepondo uchidzosera kumashure kumaseva ese ari maviri, kune mamwe makesi senge mamodule kana zvimwe zvinoshandiswa zvinobatana kune dhatabhesi mune mysql, iwe unofanirwa kugadzira mushandisi pane sevha yeapps iyo inonongedzera kune imwecheteyo dhatabhesi. .
Ndatenda kwazvo neshoko, mataura chokwadi, gondohwe ndiyo kuverenga kwekutanga, kunyangwe ndichifungidzira kuti isu tinoverengawo huwandu hwakawanda hwemaitiro anokwanisa kugadziriswa neprosesa yedu (zvechokwadi, kutanga kuita kuverenga kwekuyeuka kukuru) uye kuti dhisiki raizogoverwa sei zvakaoma (Semuenzaniso zvikamu / var = 1TR).
Warevesa; zvese zvakakosha, sekudziya tembiricha pakati pezvimwe zvinhu. Zviripachena processor ine simba inogona kuita huwandu hukuru hwemabasa panguva imwe chete nekugona kukuru, asi chinangwa cheichi posvo kwaive kutsanangura kukosha kwe RAM zvine chekuita nenhamba yekubatana panguva imwe chete.
Nzira yakanaka yekudzora zvese izvi zvinhu uye nekuona kana processor yedu isina kuguta kana kana tiine yemahara RAM, kungave nekushandisa bash script. Iyi posvo yandakaita mazuva mashoma apfuura angave anonakidza iwe, ayo andinokusiya iwe mune inotevera chinongedzo; Iko kuongorora kwepasirese asi kungave kunonakidza kune imwe:
http://bytelearning.blogspot.com.es/2015/07/controlando-la-salud-del-equipo-con-bash.html
Reply with quote
Chinyorwa chakanaka kwazvo, maita basa kwazvo!
Ndotenda zvikuru! Ndinovimba wakakwanisa kutora mukana nazvo.
Handidi kuva jekiseni ...
… Asi nekuwedzera huwandu hwehukama iwe hausiye zvakanyanya kutyisidzirwa neDDoS kurwisa?
Iwo hausi wakanyarara cretin mubvunzo. Ichokwadi ndechekuti nekuwedzera huwandu hwekubatana panguva imwe chete, isu pamwe tinosimbisa Apache kurwisa DDOS kurwiswa, sezvo uchifanira kuziva kuti huwandu hwehuwandu hwekubatana panguva imwe chete hwakagadzwa pane server ndiyo huwandu hwehukama hwakazara, kwete iwo anobva mushandisi mumwe chete. Nekudaro, tichiri pakutanga isu taigona chete kutsigira 150 kubatana panguva imwe chete (kungave kuri kubatana kubva kune chaiko sosi kana kwete) ikozvino isu tinogona kutarisira kune akawanda sekutsigirwa kweseva yedu, ichida huwandu hukuru hwekubatana panguva imwechete kuti ive isina service. Zviripachena, kuwedzera huwandu hwakanyanya hwekubatanidza haisiyo nzira yekudzivirira kubva kurudzi urwu rwekurwiswa, asi zviitwa firewall marongero anofanirwa kuitwa. Kana, semuenzaniso, iyo sevhisi sevhisi iyo iwe yaunoda kuisa iri kuzoburitswa kune internet, chiyero chekuchengetedza icho chingaitwe chingave chiri kuwedzera kwemitsara iyi kune yedu firewall:
iptables -A INPUT -p tcp -syn -port 80 -m connlimit -connlimit-upto 10 -m mamiriro -state NEW -j BATSIRA
iptables -A INPUT -p tcp -port 80 -m mamiriro -state YAKASIMBISWA, RELATED -j BATSIRA
iptables -A INPUT -p tcp -port 80 -j DROP
Imwe yemaitiro eiyo DDoS kurwisa ndeyekuti anorwisa anogona kuoneka achitumira mapaketi kubva kwakasiyana nzira, izvo zvinodzivirira kuyerera kwemapaketi kubva kungouya kubva kudivi rimwe.
Iwe wakarurama mupfungwa yekuti firewall senge yandakamisa haina kunyatsoshanda pakurwisa DDOS kurwisa, nekuti kunobva kwakasiyana masosi. Zvakadaro, zvirinani kudzikisira huwandu hwekubatanidza kusvika gumi kune chimwe nechimwe chezvinhu izvi pane kusava nemuganhu, uchibvumira sosi yega yega kumisikidza zana kana kupfuura ekubatanidza.
Chero zvazvingaitika, iyo kit yemubvunzo ndeyekuti iyo yekubatana panguva imwe chete iyo server inotsigira, zvichanyanya kuoma kuirovera pasi nekurwiswa kweDDOS, izvo zvinoita kuti zvinyanye kuoma kuti peji rirove pasi neanorwisa .
Thanks.
Kugona. Parizvino ndinoenderera neNGINX pane yangu saiti kuti ndisatambudze iyo VPS yandinayo.
Kunaka post @Drassill!
Ini ndaida kupa nechimwe chinhu zvimwe chakanyanya kuwanda kupfuura kumisikidzwa
Kunyangwe iyo yakapusa uye inokurumidza nzira yekuverenga iyo paramende yekushandisa iri neyakarerekera, pamwe tinogona kuve vakaomarara uye toshandisa iyo "median" pachinzvimbo che "mean". Chii chingatiponese kubva? Kuti iwo manhamba anoenda kuitira kana kubatana kwakadya yakawanda ndangariro. Semuenzaniso, ngatitii vatengi vanotevera vanoshandisa zvinotevera kukosha, muchikamu chavanoda chendangariro (KB, MB, MiB, nezvimwewo):
10, 15, 150, 5, 7, 10, 11, 12
Ivhareji yaizopa approx ~ 30
Uye izvi nekuti isu tine mugumo wakakura kwazvo (150), uye kuverenga kwacho kupenga. Iye wepakati anoverengera kuraira idzi data, achigovanisa huwandu hwesampuli na2 (yedu yepakati) uyezve nekuwana nhamba yenzvimbo iyoyo. Nezvo isu tingave nechimwe chinhu senge
5, 7, 10, 10, 11, 12, 15, 150
Saka zvatinoreva zvingave: 8/2 = 4 iyo iri ~ 10
Pano iwe unogona kuona kuti kunyangwe kupusa kwakanyanya kungave sei, kunogara kuchitipa kukosha kwechokwadi. Kana tikawedzera mutengi anoshandisa mazana maviri, median wedu anenge ari gumi nerimwe, nepo avhareji angaenda ku …….
Iwo unongova mupiro, uye unonzwisisika, nekuti nekubatana kwacho hakuna kukamurwa.
Vakambundira vanhu linuxera 🙂
Mhoroi, ndanga ndiine dambudziko paserver yangu yakatsaurirwa, uye ndezvekuti pese panosvika nhamba yevanhu vangangoita mazana maviri nemakumi mashanu online, zvinoenderana neGoogle analytics munguva chaiyo, server yangu yakaita seinodonha uye kubatana kwacho kunononoka kudzamara kudonha kubatana kune webhusaiti uye hautomboisa zvinopfuura huwandu hwevashandisi online, asi kana ini ndaona mashandiro evhavha yakatsaurwa iyo iri 250gb ram inoratidza 8% yekushandisa, iyo cpu: 10% yekushandisa uye hard disk mu: 5% zvekushandisa.
Unga ndibatsira here? Ini handisi kuwana chekuita, kuita nhanho idzi mhinduro?
Akanaka Carlos.
Dambudziko raunotsanangura rinowanzoitika kana sevha isina kugadzirirwa zvakanaka. Seva yako ingango gamuchira iyo diki kwazvo nhamba yekubatana panguva imwe chete uye painosvika 250 mahukama inodonha. Kuteedzera bhuku racho iwe unokwanisa kugadzirisa dambudziko, kunyangwe kana iwe uine dhatabhesi pane iyo server iwe zvakare unofanirwa kukwidziridza iyo dhatabhesi.
Thanks.
Drassill, ndaita gadziriso yawataura uye yakagutsa, nezuro ndakasvika vanoshandisa makumi maviri neshanu pamhepo uye sevha haina kuturika, ndinofara nemhedzisiro iyi, uye ndinodawo kuita chimwe chinhu chaunondiudza kuti ndigadzirise Dhatabhesi, ndinozviita sei izvi?
Iyo dhatabhesi pfungwa yakavhurika kwazvo; kushandisa mysql haina kufanana nemapostgres (semuenzaniso). Zviripachena ini handizive dhatabhesi dzese; Ndakaedza mysql uye postgres, uye kuwedzera kwekubatana panguva imwe chete mune izvi kunobva pane paramende max kubatana. mysql optimization yaizoitwa mu /etc/my.conf uye iyo max yekubatanidza paramende yaifanirwa kuchinjwa (pakati pevamwe). Zve postgres pachinzvimbo, ndine chinyorwa pane yangu blog chinotsanangura maitiro ekuchigadzirisa icho chingangokubatsira iwe kana icho iwe chaunogona kushandisa sereferensi kune dhatabhesi
http://bytelearning.blogspot.com.es/2016/02/postgresql-una-alternativa-mysql-en.html
Thanks.
Mhoro, pandinokanda wekutanga kuraira, zvinondiratidza kukosha 0. Chingave chii?
Ndatenda neichi posvo.
Ibhuku rakanaka sei, ruzivo irworwo chikamu chezvandiri kutsvaga... thanks!
Asi ikozvino, kana ini ndichida kuti kana vashanyi mazana maviri nemakumi mashanu vapfuurwa, mushanyi 250 anoenda kune peji rekumirira kana mutsara chaiwo, ndinogona kuzviita kubva kune imwechete gadziriro?
Kwaziso nekutenda!