1 views collected around this technical thread.
This guide explains why default Linux kernel settings are insufficient for high‑traffic Nginx servers and provides a curated list of sysctl parameters—such as file‑max, tcp_tw_reuse, and net.core buffers—along with explanations and tuning tips to maximize concurrent connections and overall performance.
This guide shows how to use Ansible to automate Linux sysctl parameter tuning, manage SELinux policies, and configure filesystem mount points, providing step‑by‑step examples and code snippets that simplify operations and improve system stability and security.
This guide walks through eight frequent Kubernetes networking problems in Tencent Cloud Kubernetes Service—such as cross‑VPC NodePort timeouts, low load‑balancer CPS, DNS resolution delays, apiserver access lag, mis‑configured resolv.conf, liveness‑probe failures, and externalTrafficPolicy = Local timeouts—explaining their root causes and providing concrete kernel, iptables, DNS, and configuration fixes.
This article demystifies the common confusion about a server’s maximum concurrent TCP connections, explaining the theoretical limits of the TCP four‑tuple, Linux file‑descriptor restrictions, kernel buffer settings, and demonstrates achieving one million active connections through careful configuration and tuning.
This guide provides a detailed, step‑by‑step hardening strategy for Linux systems, covering distro selection, kernel choices, extensive sysctl tweaks, boot‑loader parameters, MAC policies, sandboxing, memory allocator hardening, compile‑time mitigations, root account protection, firewall rules, swap configuration, PAM policies, microcode updates, IPv6 privacy, partition mounting options, entropy sources, and physical security measures.
This article explains TCP’s connection establishment and termination processes, details the roles of half‑ and full‑connection queues in Linux, demonstrates how to simulate and detect queue overflows using tools like netstat, ss, hping3 and ab, and provides kernel tuning parameters to mitigate SYN flood and TIME_WAIT issues.
This article explains how Linux manages TCP sockets at the kernel level, demonstrates how to adjust port ranges and file‑descriptor limits, and shows the key data structures and lookup functions that enable high‑concurrency TCP connections, providing practical guidance for scaling client connections.
This article explains the true limits of concurrent TCP connections on a server, debunks common misconceptions about port numbers, details the TCP four‑tuple theory, outlines Linux file‑descriptor restrictions, shows how to tune kernel buffers with sysctl, and shares a real‑world test achieving one million active connections.
This article explains the true limits of concurrent TCP connections on a server, debunks common misconceptions about port numbers and TCP four‑tuple space, and shows how Linux file‑descriptor and socket buffer settings affect real‑world scalability, illustrated with a million‑connection experiment.
This article explains how to write and integrate ARM64 inline assembly in iOS applications to implement anti‑debugging checks, discusses the syntax, constraints, calling conventions, common pitfalls, and provides complete assembly‑only solutions for secure runtime detection.
This guide explains how to tune Linux for high‑concurrency workloads by disabling unnecessary iptables, raising the per‑process file descriptor limit, modifying kernel TCP parameters via sysctl, and choosing appropriate I/O event mechanisms such as epoll or AIO.
This article explains how to optimize Nginx Ingress Controller on Tencent Cloud TKE for high‑concurrency workloads by adjusting kernel parameters, sysctl settings, and Nginx configuration values, and provides concrete initContainer and ConfigMap examples to apply these optimizations.
The article explains Linux page cache fundamentals, shows how to inspect and reclaim cache, and provides detailed tuning of vm.dirty_* and vm.swappiness parameters to smooth Kafka write traffic, reduce I/O spikes, and improve overall performance, illustrated with before‑and‑after benchmarks.
This guide explains how to improve web service performance by tuning Linux system parameters and Nginx configuration, covering file descriptor limits, TCP connection queues, temporary port ranges, worker processes, keepalive settings, and access‑log buffering, with concrete sysctl and Nginx directives.
This article explains how to identify and resolve two common factors—port number limits and file descriptor limits—that restrict server connection counts during MQTT performance testing with JMeter, providing step‑by‑step guidance and command‑line adjustments such as updating the ulimit value.
This article explains how to conduct performance testing for long‑connection services such as MQTT using JMeter, highlights common factors that restrict connection counts like system port limits and file descriptor caps, and provides step‑by‑step instructions to adjust sysctl and ulimit settings to obtain accurate results.
Learn step-by-step how to verify UDP packet loss on Linux, interpret driver and kernel statistics, adjust ring buffers and socket buffers, and use tools like ethtool, netstat, dropwatch, and perf to pinpoint and resolve network drops caused by hardware, configuration, or system load.
This article walks through a real‑world incident where an e‑commerce site suffered intermittent outages due to TCP SYN and accept queue overflows, explains the underlying handshake mechanics, shows how kernel and Nginx parameters can be tuned, and provides Python scripts for testing and SYN‑flood simulation.
This article explains the TCP TIME_WAIT state, its role in connection termination, the performance impact of large numbers of TIME_WAIT sockets, and practical optimization methods such as using keep‑alive and tuning Linux kernel parameters to mitigate the issue.
This guide explains how to maximize system performance by debugging and adjusting kernel parameters using sysctl, detailing command options, key network and security settings, recommended values, and related /proc/sys entries for tuning TCP, UDP, socket buffers, and other kernel behaviors.