From: David Lowenstein (dlowenst@mail.sdsu.edu)
Date: Tue Aug 06 2002 - 11:42:04 EDT
I'm about to launch what will be a rather busy E420 webserver running ssl,
mod_perl, and bea weblogic. I was wondering what if any are the "must
have" kernel settings for this type of server. I have the following,
basically culled from this server's predecessor which is an ultra 80 with
1/2 as much ram (2gb as opposed to 4gb) that isn't running weblogic or
ssl.
Can you let me know if I should modify or add anything? This is an e420, 4
450 mhz processors, 4 gb ram
* foil certain classes of bug exploits
set noexec_user_stack = 1
set noexec_user_stack_log = 1
* Increase DNLC to improve cache hit rate
set ncsize = 40000
set ufs_ninode = 40000
set bufhwm = 10000
*increase slowscan to improve kvm alloc errors
set slowscan = 500
* lotsfree (8MB) > free memory > lotsfree (8MB)
set lotsfree = 0x800
set desfree = 0x200
set minfree = 0x100
* Increase the number of file descriptors
set rlim_fd_max=0x1000
set rlim_fd_cur=0x1000
* increase TCP listen hash for busy servers
set tcp:tcp_conn_hash_size=1024
set ip:ipc_tcp_conn_hash_size=1024
Dave Lowenstein
Programmer/Analyst
Instructional Technology Services
San Diego State University
(619)594-0270
http://www-rohan.sdsu.edu/dept/its
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:24:43 EDT