{"id":1821,"date":"2021-01-20T11:09:26","date_gmt":"2021-01-20T10:09:26","guid":{"rendered":"https:\/\/blog.mhasin.eu\/?p=1821"},"modified":"2021-03-10T10:47:23","modified_gmt":"2021-03-10T09:47:23","slug":"plesk-debian-10-secure-and-speed","status":"publish","type":"post","link":"https:\/\/blog.mhasin.eu\/?p=1821","title":{"rendered":"PLESK debian 10 secure, and speed"},"content":{"rendered":"\n<p>Debian 10 secure and speed for PLESK controll panel <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nano  \/etc\/security\/limits.conf<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>nginx   soft    nofile  65536\nnginx   hard    nofile  65536\n<\/code><\/pre>\n\n\n\n<p>sysctl config:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fs.aio-max-nr = 524288\nfs.file-max = 611160\nkernel.msgmax = 131072\nkernel.msgmnb = 131072\nkernel.panic = 15\nkernel.pid_max = 65536\nkernel.printk = 4 4 1 7\nkernel.sysrq = 0\nnet.core.default_qdisc = fq\nnet.core.netdev_max_backlog = 262144\nnet.core.optmem_max = 16777216\nnet.core.rmem_max = 16777216\nnet.core.somaxconn = 65535\nnet.core.wmem_max = 16777216\nnet.ipv4.conf.all.accept_redirects = 0\nnet.ipv4.conf.all.log_martians = 1\nnet.ipv4.conf.all.rp_filter = 1\nnet.ipv4.conf.all.secure_redirects = 0\nnet.ipv4.conf.all.send_redirects = 0\nnet.ipv4.conf.default.accept_redirects = 0\nnet.ipv4.conf.default.accept_source_route = 0\nnet.ipv4.conf.default.rp_filter = 1\nnet.ipv4.conf.default.secure_redirects = 0\nnet.ipv4.conf.default.send_redirects = 0\nnet.ipv4.ip_forward = 0\nnet.ipv4.ip_local_port_range = 1024 65535\nnet.ipv4.tcp_congestion_control = bbr\nnet.ipv4.tcp_fin_timeout = 10\nnet.ipv4.tcp_keepalive_intvl = 10\nnet.ipv4.tcp_keepalive_probes = 5\nnet.ipv4.tcp_keepalive_time = 60\nnet.ipv4.tcp_low_latency = 1\nnet.ipv4.tcp_max_orphans = 10000\nnet.ipv4.tcp_max_syn_backlog = 65000\nnet.ipv4.tcp_max_tw_buckets = 1440000\nnet.ipv4.tcp_moderate_rcvbuf = 1\nnet.ipv4.tcp_no_metrics_save = 1\nnet.ipv4.tcp_notsent_lowat = 16384\nnet.ipv4.tcp_rfc1337 = 1\nnet.ipv4.tcp_rmem = 4096 87380 16777216\nnet.ipv4.tcp_sack = 0\nnet.ipv4.tcp_slow_start_after_idle = 0\nnet.ipv4.tcp_synack_retries = 2\nnet.ipv4.tcp_syncookies = 1\nnet.ipv4.tcp_syn_retries = 2\nnet.ipv4.tcp_timestamps = 0\nnet.ipv4.tcp_tw_reuse = 1\nnet.ipv4.tcp_window_scaling = 0\nnet.ipv4.tcp_wmem = 4096 65536 16777216\nnet.ipv6.conf.all.disable_ipv6 = 1\nnet.ipv6.conf.default.disable_ipv6 = 1\nnet.ipv6.conf.lo.disable_ipv6 = 1\nvm.dirty_background_ratio = 2\nvm.dirty_ratio = 60\nvm.max_map_count = 262144\nvm.overcommit_memory = 1\nvm.swappiness = 1\n# Avoid a smurf attack\nnet.ipv4.icmp_echo_ignore_broadcasts = 1\n# Turn on protection for bad icmp error messages\nnet.ipv4.icmp_ignore_bogus_error_responses = 1\n# Turn on execshild\nkernel.exec-shield = 1\nkernel.randomize_va_space = 1\n \n# Tuen IPv6\nnet.ipv6.conf.default.router_solicitations = 0\nnet.ipv6.conf.default.accept_ra_rtr_pref = 0\nnet.ipv6.conf.default.accept_ra_pinfo = 0\nnet.ipv6.conf.default.accept_ra_defrtr = 0\nnet.ipv6.conf.default.autoconf = 0\nnet.ipv6.conf.default.dad_transmits = 0\nnet.ipv6.conf.default.max_addresses = 1\n \n# Optimization for port usefor LBs\n# Increase system file descriptor limit\nfs.file-max = 65535\n \n# Allow for more PIDs (to reduce rollover problems); may break some programs 32768\nkernel.pid_max = 65536<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<p>Interface settings:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ethtool -G ens192 rx 2048 tx 2048\n\/sbin\/ifconfig ens192 txqueuelen 10000<\/code><\/pre>\n<div class=\"pdf24Plugin-cp\"> \t<form name=\"pdf24Form0\" method=\"post\" action=\"https:\/\/doc2pdf.pdf24.org\/wordpress.php\" target=\"pdf24PopWin\" onsubmit=\"var pdf24Win = window.open('about:blank', 'pdf24PopWin', 'resizable=yes,scrollbars=yes,width=600,height=250,left='+(screen.width\/2-300)+',top='+(screen.height\/3-125)+''); pdf24Win.focus(); if(typeof pdf24OnCreatePDF === 'function'){void(pdf24OnCreatePDF(this,pdf24Win));}\"> \t\t<input type=\"hidden\" name=\"blogCharset\" value=\"Cw1x07UAAA==\" \/><input type=\"hidden\" name=\"blogPosts\" value=\"MwQA\" \/><input type=\"hidden\" name=\"blogUrl\" value=\"yygpKSi20tdPyslP18vNSCzOzNNLLQUA\" \/><input type=\"hidden\" name=\"blogName\" value=\"c\/LxdwcA\" \/><input type=\"hidden\" name=\"blogValueEncoding\" value=\"gzdeflate base64\" \/><input type=\"hidden\" name=\"postId_0\" value=\"M7QwMgQA\" \/><input type=\"hidden\" name=\"postTitle_0\" value=\"C\/BxDfZWSElNykzMUzA0UChOTS4tStVRSMxLUSguSE1NAQA=\" \/><input type=\"hidden\" name=\"postLink_0\" value=\"yygpKSi20tdPyslP18vNSCzOzNNLLdW3L7A1tDAyBAA=\" \/><input type=\"hidden\" name=\"postAuthor_0\" value=\"y00syfcwNAIA\" \/><input type=\"hidden\" name=\"postDateTime_0\" value=\"MzIwMtQ1MNQ1MlAwNLQyMLQyMgMA\" \/><input type=\"hidden\" name=\"postContent_0\" value=\"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\" \/> \t\t<a href=\"https:\/\/www.pdf24.org\" target=\"_blank\" title=\"www.pdf24.org\" rel=\"nofollow\"><img src=\"https:\/\/blog.mhasin.eu\/wp-content\/plugins\/pdf24-post-to-pdf\/img\/pdf_32x32.png\" alt=\"\" border=\"0\" height=\"32\" \/><\/a> \t\t<span class=\"pdf24Plugin-cp-space\">&nbsp;&nbsp;<\/span> \t\t<span class=\"pdf24Plugin-cp-text\">Send article as PDF<\/span> \t\t<span class=\"pdf24Plugin-cp-space\">&nbsp;&nbsp;<\/span> \t\t<input class=\"pdf24Plugin-cp-input\" style=\"margin: 0px;\" type=\"text\" name=\"sendEmailTo\" placeholder=\"Enter email address\" \/> \t\t<input class=\"pdf24Plugin-cp-submit\" style=\"margin: 0px;\" type=\"submit\" value=\"Send\" \/> \t<\/form> <\/div>","protected":false},"excerpt":{"rendered":"Debian 10 secure and speed for PLESK controll panel sysctl config: Interface settings: &nbsp;&nbsp; Send article as PDF &nbsp;&nbsp;\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"arc_restricted_post":false,"footnotes":""},"categories":[21],"tags":[],"class_list":["post-1821","post","type-post","status-publish","format-standard","hentry","category-plesk"],"_links":{"self":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1821","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1821"}],"version-history":[{"count":3,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1821\/revisions"}],"predecessor-version":[{"id":1826,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1821\/revisions\/1826"}],"wp:attachment":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1821"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1821"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1821"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}