【总结】阿里ECS/Linux大量TIME_WAIT解决方案

拼搏现实的明天。 2022-05-08 00:10 348阅读 0赞

> 在阿里云默认的系统TCP参数情况下，会导致大量的TIME\_WAIT出现

### 查看 ###

![70][]

![70 1][]

### 优化方法 ###

修改内核参数

# vi /etc/sysctl.conf  
    net.ipv4.tcp_syncookies = 1  
    net.ipv4.tcp_tw_reuse=1 #让TIME_WAIT状态可以重用，这样即使TIME_WAIT占满了所有端口，也不会拒绝新的请求造成障碍 默认是0  
    net.ipv4.tcp_tw_recycle=1 #让TIME_WAIT尽快回收 默认0  
    net.ipv4.tcp_fin_timeout=5
    
    # sysctl -p 使更新生效

最后所有参数如下：

![70 2][]

net.ipv6.conf.all.disable_ipv6 = 1
    net.ipv6.conf.default.disable_ipv6 = 1
    net.ipv6.conf.lo.disable_ipv6 = 1
    vm.swappiness = 0
    net.ipv4.neigh.default.gc_stale_time = 120
    net.ipv4.conf.all.rp_filter = 0
    net.ipv4.conf.default.rp_filter = 0
    net.ipv4.conf.default.arp_announce = 2
    net.ipv4.conf.lo.arp_announce = 2
    net.ipv4.conf.all.arp_announce = 2
    net.ipv4.tcp_max_tw_buckets = 5000
    net.ipv4.tcp_syncookies = 1
    net.ipv4.tcp_max_syn_backlog = 2048
    net.ipv4.tcp_synack_retries = 1
    net.ipv4.tcp_tw_reuse = 1
    net.ipv4.tcp_tw_recycle = 1
    net.ipv4.tcp_fin_timeout = 10

参考资料：

1. [Linux下高并发socket最大连接数所受的各种限制][Linux_socket]

2. [TCP/IP及内核参数优化调优][TCP_IP]

3. [优化Linux下的内核TCP参数以提高系统性能][Linux_TCP]

4. [nginx大量TIME\_WAIT的解决办法][nginx_TIME_WAIT]

本博客中Nginx相关文章：

1、[用Nginx实现https转http][Nginx_https_http]

2、[【总结】Nginx实现HTTPS设置][Nginx_HTTPS]

\------------------------------------------------------

[关于我][Link 1]（个人域名）

[我的开源项目集Github][Github]

期望和大家一起学习，共同进步，共勉，O(∩\_∩)O谢谢

欢迎交流问题，可加个人QQ 469580884，

或者，加我的群号 **751925591**，一起探讨交流问题

不讲虚的，只做实干家

Talk is cheap，show me the code

![20180411181545874][]

[70]: /images/20220508/fe06a6f72354436db732927588e206c5.png
[70 1]: /images/20220508/99dfab5421fd4ba7b3e047583db49bf4.png
[70 2]: /images/20220508/c9dac3d01e074bc4b3a9108486a667d3.png
[Linux_socket]: https://www.cnblogs.com/dasn/articles/5566001.html
[TCP_IP]: https://www.cnblogs.com/jking10/p/5472386.html
[Linux_TCP]: https://book.2cto.com/201208/1299.html
[nginx_TIME_WAIT]: https://blog.csdn.net/u012207077/article/details/72841909
[Nginx_https_http]: https://blog.csdn.net/hemin1003/article/details/78062481
[Nginx_HTTPS]: https://blog.csdn.net/hemin1003/article/details/83792017
[Link 1]: http://heminit.com/about/
[Github]: https://github.com/hemin1003
[20180411181545874]: /images/20220508/3f7b284ab7e243b9b08ac18a81ecbc4f.png