cuiwm cuiwm

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

	#
	# /etc/sysctl.conf - Configuration file for setting system variables
	# See /etc/sysctl.d/ for additonal system variables
	# See sysctl.conf (5) for information.
	#

	#kernel.domainname = example.com

	# Uncomment the following to stop low-level messages on console
	#kernel.printk = 3 4 1 3

	/etc/sysctl.conf
	kernel.ctrl-alt-del=1
	kernel.sysrq=0
	kernel.panic=10
	kernel.core_pattern=/dev/null
	kernel.shmmax=262324224
	fs.file-max=128000
	net.core.wmem_default=200100
	net.core.rmem_default=200100
	net.core.wmem_max=3202200

	#!/bin/sh
	#
	# chkconfig: 2345 55 25
	# Description: Nginx init.d script, put in /etc/init.d, chmod +x /etc/init.d/nginx
	# For Debian, run: update-rc.d -f nginx defaults
	# For CentOS, run: chkconfig --add nginx
	#
	### BEGIN INIT INFO
	# Provides: nginx
	# Required-Start: $all

	{url:'stun:stun01.sipphone.com'},
	{url:'stun:stun.ekiga.net'},
	{url:'stun:stun.fwdnet.net'},
	{url:'stun:stun.ideasip.com'},
	{url:'stun:stun.iptel.org'},
	{url:'stun:stun.rixtelecom.se'},
	{url:'stun:stun.schlund.de'},
	{url:'stun:stun.l.google.com:19302'},
	{url:'stun:stun1.l.google.com:19302'},
	{url:'stun:stun2.l.google.com:19302'},

	#import <Foundation/Foundation.h>
	#import <objc/runtime.h>

	#import "typestring.h"

	// clang -g -fobjc-arc -Wall -framework Foundation -o runtime typestring.m runtime.m

	// Runtime reference, at least until Apple breaks the link
	// http://developer.apple.com/library/ios/#documentation/Cocoa/Reference/ObjCRuntimeRef/Reference/reference.html

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

	# changes from http://www.cyberciti.biz/faq/linux-kernel-etcsysctl-conf-security-hardening/

	# Protect ICMP attacks
	net.ipv4.icmp_echo_ignore_broadcasts = 1

	# Turn on protection for bad icmp error messages
	net.ipv4.icmp_ignore_bogus_error_responses = 1

	# Turn on syncookies for SYN flood attack protection
	net.ipv4.tcp_syncookies = 1

	<!DOCTYPE html>
	<html>
	<head>
	<title>Save Generated Data</title>
	<meta http-equiv="Content-Type" content="text/html;charset=UTF-8"/>
	<meta http-equiv="X-UA-Compatible" content="IE=edge;chrome=1"/>
	<script type="text/javascript">
	// <![CDATA[

	# source : http://code.google.com/p/natvpn/source/browse/trunk/stun_server_list
	# A list of available STUN server.

	stun.l.google.com:19302
	stun1.l.google.com:19302
	stun2.l.google.com:19302
	stun3.l.google.com:19302
	stun4.l.google.com:19302
	stun01.sipphone.com
	stun.ekiga.net