Evgeny Rush tvbird

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

Про токены, JSON Web Tokens (JWT), аутентификацию и авторизацию. Token-Based Authentication

Last major update: 25.08.2020

Что такое авторизация/аутентификация
Где хранить токены
Как ставить куки ?
Процесс логина
Процесс рефреш токенов
Кража токенов/Механизм контроля токенов

Сервер в связке Nginx + NodeJs

Данная пошаговая инструкция поможет освоить основы на простом примере

Для справки

Сервер поднимался на Debian 8 c характеристиками:

CPU - 1 ядро x 500 МГц

	var AUTOPLAY = false;
	var mp3 = 'data:audio/mpeg;base64,/+MYxAAAAANIAUAAAASEEB/jwOFM/0MM/90b/+RhST//w4NFwOjf///PZu////9lns5GFDv//l9GlUIEEIAAAgIg8Ir/JGq3/+MYxDsLIj5QMYcoAP0dv9HIjUcH//yYSg+CIbkGP//8w0bLVjUP///3Z0x5QCAv/yLjwtGKTEFNRTMuOTeqqqqqqqqqqqqq/+MYxEkNmdJkUYc4AKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq';
	var wav = 'data:audio/wav;base64,UklGRsYAAABXQVZFZm10IBAAAAABAAEAQB8AAIA+AAACABAAZGF0YaIAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAA=';

	try {
	var audio = new Audio();
	var src = audio.canPlayType('audio/wav') ? wav : mp3;
	audio.autoplay = true;
	audio.volume = 0;
	audio.onplay = function() {

	#!/bin/sh

	# Empty all rules
	sudo iptables -t filter -F
	sudo iptables -t filter -X

	# Bloc everything by default
	sudo iptables -t filter -P INPUT DROP
	sudo iptables -t filter -P FORWARD DROP
	sudo iptables -t filter -P OUTPUT DROP

	/*
	*
	* SoundManager 2 doesn't have a fadeTo method... say wha??
	* So, this little snippet creates one.
	* requires SoundManager2 http://www.schillmania.com/projects/soundmanager2/
	* After creating your sound using createSound and giving it an id...
	*
	* Usage: soundManager.fadeTo('myid', 1000, 0, function(){ console.log('done') });
	*
	* @param {string} id is the sound id

	" Make IE Better Compatible "

	<!--[if IE]>
	<script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script>
	<![endif]-->

	======================================================
	IE6 Only
	==================
	_selector {...}

	check host redis.host with address 127.0.0.1
	if failed port 6379 protocol redis then alert

	check process redis-server with pidfile "/var/run/redis/redis-server.pid"
	start program = "/etc/init.d/redis-server start"
	stop program = "/etc/init.d/redis-server stop"
	if failed host 127.0.0.1 port 6379 then restart
	if 5 restarts within 5 cycles then timeout

	Detecting and Mitigating DDOS Attacks

	#List all Finish (FIN) packets
	machine1 : sudo /usr/sbin/tcpdump -Nnn -i any -s0 'tcp[13] & 1 != 0'


	#List all SYN and SYN-ACK packets
	machine1 : sudo /usr/sbin/tcpdump -Nnn -i any -s0 'tcp[13] & 2 != 0'

	[opcache]
	; Determines if Zend OPCache is enabled
	opcache.enable=1

	; Determines if Zend OPCache is enabled for the CLI version of PHP
	;opcache.enable_cli=1

	; The OPcache shared memory storage size.
	opcache.memory_consumption=512