Last active
August 25, 2017 09:49
-
-
Save bydmm/d0de161e36a0afb6d1977a8cda76fc19 to your computer and use it in GitHub Desktop.
quick ss
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
sudo cat <<EOT >> /etc/sysctl.conf | |
# max open files | |
fs.file-max = 1024000 | |
# max read buffer | |
net.core.rmem_max = 67108864 | |
# max write buffer | |
net.core.wmem_max = 67108864 | |
# default read buffer | |
net.core.rmem_default = 65536 | |
# default write buffer | |
net.core.wmem_default = 65536 | |
# max processor input queue | |
net.core.netdev_max_backlog = 4096 | |
# max backlog | |
net.core.somaxconn = 4096 | |
# resist SYN flood attacks | |
net.ipv4.tcp_syncookies = 1 | |
# reuse timewait sockets when safe | |
net.ipv4.tcp_tw_reuse = 1 | |
# turn off fast timewait sockets recycling | |
net.ipv4.tcp_tw_recycle = 0 | |
# short FIN timeout | |
net.ipv4.tcp_fin_timeout = 30 | |
# short keepalive time | |
net.ipv4.tcp_keepalive_time = 1200 | |
# outbound port range | |
net.ipv4.ip_local_port_range = 10000 65000 | |
# max SYN backlog | |
net.ipv4.tcp_max_syn_backlog = 4096 | |
# max timewait sockets held by system simultaneously | |
net.ipv4.tcp_max_tw_buckets = 5000 | |
# TCP receive buffer | |
net.ipv4.tcp_rmem = 4096 87380 67108864 | |
# TCP write buffer | |
net.ipv4.tcp_wmem = 4096 65536 67108864 | |
# turn on path MTU discovery | |
net.ipv4.tcp_mtu_probing = 1 | |
# for high-latency network | |
net.ipv4.tcp_congestion_control = hybla | |
# forward ipv4 | |
net.ipv4.ip_forward = 1 | |
net.ipv6.conf.all.disable_ipv6 = 1 | |
net.ipv6.conf.default.disable_ipv6 = 1 | |
net.ipv6.conf.lo.disable_ipv6 = 1 | |
net.ipv4.tcp_fastopen = 3 | |
EOT | |
sudo sysctl -p | |
sudo apt-get update | |
sudo apt install -y shadowsocks-libev | |
rm -rf /etc/shadowsocks-libev/config.json | |
sudo cat <<EOT>> /etc/shadowsocks-libev/config.json | |
{ | |
"server":"0.0.0.0", | |
"server_port":*****, | |
"local_address": "127.0.0.1", | |
"local_port":1080, | |
"password":"******", | |
"timeout":300, | |
"method":"aes-256-cfb", | |
"fast_open": true | |
} | |
EOT | |
sudo service shadowsocks-libev restart |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
curl -o- https://gist.githubusercontent.com/bydmm/d0de161e36a0afb6d1977a8cda76fc19/raw/242b2b118d80cd9e710530c71ae69934b5443a70/ss.sh | bash