{"id":1821,"date":"2021-01-20T11:09:26","date_gmt":"2021-01-20T10:09:26","guid":{"rendered":"https:\/\/blog.mhasin.eu\/?p=1821"},"modified":"2021-03-10T10:47:23","modified_gmt":"2021-03-10T09:47:23","slug":"plesk-debian-10-secure-and-speed","status":"publish","type":"post","link":"https:\/\/blog.mhasin.eu\/?p=1821","title":{"rendered":"PLESK debian 10 secure, and speed"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Debian 10 secure and speed for PLESK controll panel <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nano  \/etc\/security\/limits.conf<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>nginx   soft    nofile  65536\nnginx   hard    nofile  65536\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">sysctl config:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fs.aio-max-nr = 524288\nfs.file-max = 611160\nkernel.msgmax = 131072\nkernel.msgmnb = 131072\nkernel.panic = 15\nkernel.pid_max = 65536\nkernel.printk = 4 4 1 7\nkernel.sysrq = 0\nnet.core.default_qdisc = fq\nnet.core.netdev_max_backlog = 262144\nnet.core.optmem_max = 16777216\nnet.core.rmem_max = 16777216\nnet.core.somaxconn = 65535\nnet.core.wmem_max = 16777216\nnet.ipv4.conf.all.accept_redirects = 0\nnet.ipv4.conf.all.log_martians = 1\nnet.ipv4.conf.all.rp_filter = 1\nnet.ipv4.conf.all.secure_redirects = 0\nnet.ipv4.conf.all.send_redirects = 0\nnet.ipv4.conf.default.accept_redirects = 0\nnet.ipv4.conf.default.accept_source_route = 0\nnet.ipv4.conf.default.rp_filter = 1\nnet.ipv4.conf.default.secure_redirects = 0\nnet.ipv4.conf.default.send_redirects = 0\nnet.ipv4.ip_forward = 0\nnet.ipv4.ip_local_port_range = 1024 65535\nnet.ipv4.tcp_congestion_control = bbr\nnet.ipv4.tcp_fin_timeout = 10\nnet.ipv4.tcp_keepalive_intvl = 10\nnet.ipv4.tcp_keepalive_probes = 5\nnet.ipv4.tcp_keepalive_time = 60\nnet.ipv4.tcp_low_latency = 1\nnet.ipv4.tcp_max_orphans = 10000\nnet.ipv4.tcp_max_syn_backlog = 65000\nnet.ipv4.tcp_max_tw_buckets = 1440000\nnet.ipv4.tcp_moderate_rcvbuf = 1\nnet.ipv4.tcp_no_metrics_save = 1\nnet.ipv4.tcp_notsent_lowat = 16384\nnet.ipv4.tcp_rfc1337 = 1\nnet.ipv4.tcp_rmem = 4096 87380 16777216\nnet.ipv4.tcp_sack = 0\nnet.ipv4.tcp_slow_start_after_idle = 0\nnet.ipv4.tcp_synack_retries = 2\nnet.ipv4.tcp_syncookies = 1\nnet.ipv4.tcp_syn_retries = 2\nnet.ipv4.tcp_timestamps = 0\nnet.ipv4.tcp_tw_reuse = 1\nnet.ipv4.tcp_window_scaling = 0\nnet.ipv4.tcp_wmem = 4096 65536 16777216\nnet.ipv6.conf.all.disable_ipv6 = 1\nnet.ipv6.conf.default.disable_ipv6 = 1\nnet.ipv6.conf.lo.disable_ipv6 = 1\nvm.dirty_background_ratio = 2\nvm.dirty_ratio = 60\nvm.max_map_count = 262144\nvm.overcommit_memory = 1\nvm.swappiness = 1\n# Avoid a smurf attack\nnet.ipv4.icmp_echo_ignore_broadcasts = 1\n# Turn on protection for bad icmp error messages\nnet.ipv4.icmp_ignore_bogus_error_responses = 1\n# Turn on execshild\nkernel.exec-shield = 1\nkernel.randomize_va_space = 1\n \n# Tuen IPv6\nnet.ipv6.conf.default.router_solicitations = 0\nnet.ipv6.conf.default.accept_ra_rtr_pref = 0\nnet.ipv6.conf.default.accept_ra_pinfo = 0\nnet.ipv6.conf.default.accept_ra_defrtr = 0\nnet.ipv6.conf.default.autoconf = 0\nnet.ipv6.conf.default.dad_transmits = 0\nnet.ipv6.conf.default.max_addresses = 1\n \n# Optimization for port usefor LBs\n# Increase system file descriptor limit\nfs.file-max = 65535\n \n# Allow for more PIDs (to reduce rollover problems); may break some programs 32768\nkernel.pid_max = 65536<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Interface settings:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ethtool -G ens192 rx 2048 tx 2048\n\/sbin\/ifconfig ens192 txqueuelen 10000<\/code><\/pre>\n<div class=\"pdf24Plugin-cp\"> \t<form name=\"pdf24Form0\" method=\"post\" action=\"https:\/\/doc2pdf.pdf24.org\/wordpress.php\" target=\"pdf24PopWin\" onsubmit=\"var pdf24Win = window.open('about:blank', 'pdf24PopWin', 'resizable=yes,scrollbars=yes,width=600,height=250,left='+(screen.width\/2-300)+',top='+(screen.height\/3-125)+''); pdf24Win.focus(); if(typeof pdf24OnCreatePDF === 'function'){void(pdf24OnCreatePDF(this,pdf24Win));}\"> \t\t<input type=\"hidden\" name=\"blogCharset\" value=\"Cw1x07UAAA==\" \/><input type=\"hidden\" name=\"blogPosts\" value=\"MwQA\" \/><input type=\"hidden\" name=\"blogUrl\" value=\"yygpKSi20tdPyslP18vNSCzOzNNLLQUA\" \/><input type=\"hidden\" name=\"blogName\" value=\"c\/LxdwcA\" \/><input type=\"hidden\" name=\"blogValueEncoding\" value=\"gzdeflate base64\" \/><input type=\"hidden\" name=\"postId_0\" value=\"M7QwMgQA\" \/><input type=\"hidden\" name=\"postTitle_0\" value=\"C\/BxDfZWSElNykzMUzA0UChOTS4tStVRSMxLUSguSE1NAQA=\" \/><input type=\"hidden\" name=\"postLink_0\" value=\"yygpKSi20tdPyslP18vNSCzOzNNLLdW3L7A1tDAyBAA=\" \/><input type=\"hidden\" name=\"postAuthor_0\" value=\"y00syfcwNAIA\" \/><input type=\"hidden\" name=\"postDateTime_0\" value=\"MzIwMtQ1MNQ1MlAwNLQyMLQyMgMA\" \/><input type=\"hidden\" name=\"postContent_0\" value=\"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\" \/> \t\t<a href=\"https:\/\/www.pdf24.org\" target=\"_blank\" title=\"www.pdf24.org\" rel=\"nofollow\"><img src=\"https:\/\/blog.mhasin.eu\/wp-content\/plugins\/pdf24-post-to-pdf\/img\/pdf_32x32.png\" alt=\"\" border=\"0\" height=\"32\" \/><\/a> \t\t<span class=\"pdf24Plugin-cp-space\">\u00a0\u00a0<\/span> \t\t<span class=\"pdf24Plugin-cp-text\">Send article as PDF<\/span> \t\t<span class=\"pdf24Plugin-cp-space\">\u00a0\u00a0<\/span> \t\t<input class=\"pdf24Plugin-cp-input\" style=\"margin: 0px;\" type=\"text\" name=\"sendEmailTo\" placeholder=\"Enter email address\" \/> \t\t<input class=\"pdf24Plugin-cp-submit\" style=\"margin: 0px;\" type=\"submit\" value=\"Send\" \/> \t<\/form> <\/div>","protected":false},"excerpt":{"rendered":"Debian 10 secure and speed for PLESK controll panel sysctl config: Interface settings: \u00a0\u00a0 Send article as PDF \u00a0\u00a0\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"arc_restricted_post":false,"footnotes":""},"categories":[21],"tags":[],"class_list":["post-1821","post","type-post","status-publish","format-standard","hentry","category-plesk"],"_links":{"self":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1821","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1821"}],"version-history":[{"count":3,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1821\/revisions"}],"predecessor-version":[{"id":1826,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1821\/revisions\/1826"}],"wp:attachment":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1821"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1821"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1821"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}