Malik Al malikshi

Installing Packages

sudo apt-get update && sudo apt-get upgrade -y && sudo apt-get dist-upgrade -y && sudo apt-get autoremove -y && sudo apt-get clean && sudo apt-get install build-essential haveged -y
sudo apt-get install linux-headers-$(uname -r)
sudo apt-get install curl -y
sudo apt-get install shadowsocks-libev -y
sudo apt-get install cron -y
sudo apt-get install screen -y

Install V2Ray

HOWTO use a Huawei E3372 on OpenWRT

This modem is also sold as a MegaFon M150-2 USB dongle

Needed Software

Install the needed packages via opkg tool

opkg update

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

Some examples of SNAT, DNAT with iptables with comments

mainly used in start-up script

masquarade all outgoing packets to be WLAN0 IP

iptables -t nat -A PREROUTING -s 192.168.1.2 -i eth0 -j MASQUERADE

	#!/usr/bin/env bash

	# Forked and modified by cbeuw from https://github.com/teddysun/shadowsocks_install/blob/master/shadowsocks-all.sh

	PATH=$PATH:/usr/local/bin
	export PATH

	red='\033[0;31m'
	green='\033[0;32m'
	yellow='\033[0;33m'

	#! /bin/sh

	for x
	do
	echo "Converting $x"
	tr -d '\015' < "$x" > "tmp.$x"
	mv "tmp.$x" "$x"
	done


	stream {
	log_format basic '$remote_addr [$time_local] '
	'$protocol $status $bytes_sent $bytes_received '
	'$session_time';

	access_log /var/log/nginx/access.log basic;
	error_log /var/log/nginx/error.log debug;

	include /etc/nginx/stream.conf.d/*.conf;

	#!/bin/bash

	aptitude -y install expect

	// Not required in actual script
	MYSQL_ROOT_PASSWORD=abcd1234

	SECURE_MYSQL=$(expect -c "

	set timeout 10

	#!/bin/bash

	# Cache sudo password
	sudo -v

	# Get latest OpenSSL 1.0.2 version from https://openssl.org/source/
	# v1.1.0 seems to have removed SSLv2/3 support
	openssl_version=1.0.2k

	# Install build dependencies

	//maps.googleapis.com
	//maps.gstatic.com
	//fonts.googleapis.com
	//fonts.gstatic.com
	//ajax.googleapis.com
	//apis.google.com
	//google-analytics.com
	//www.google-analytics.com
	//ssl.google-analytics.com
	//youtube.com