Author Archives: zhuoye

Centos7部署Zabbix

浏览zabbix官网，发现centos7只能部署zabbix5.0版本 https://www.zabbix.com/cn/download?zabbix=5.0&os_distribution=centos&os_version=7&components=server_frontend_agent&db=mysql&ws=apache rpm -Uvh https://repo.zabbix.com/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm #首先更改rpm源 yum -y install zabbix-server-mysql zabbix-agent zabbix-get mariadb mariadb-server centos-release-scl #安装zabbix vi /etc/yum.repos.d/zabbix.repo #编辑[ zabbix-frontend ]下修改enabled=1 systemctl start mariadb #启动数据库 mysql_secure_installation #初始化数据库 mysql -uroot -p #登录数据库并如下配置 create database zabbix character set utf8 collate utf8_bin; create user zabbix@localhost identified by ‘password’; grant all privileges on zabbix.* to zabbix@localhost; quit； yum -y […]

bind遇到递归查询的最大数量问题处理

logging { channel default_debug { file “data/named.run”; severity dynamic; }; channel warning { file “data/named.log” versions 3 size 2048k; severity warning; print-category yes; print-severity yes; print-time yes; }; channel query { file “data/query.log” versions 3 size 2048k; severity info; print-category yes; print-severity yes; print-time yes; }; category default {warning;}; category queries {query;}; }; 上述配置抓日志，配置在/etc/named.conf下，发现named.log下报错 network: […]

Centos7下nginx加载ssl模块

原始安装配置https后无法正常加载配置，需要增加SSL支持 在源码安装包路径下 ./configure –prefix=/usr/local/nginx –with-http_stub_status_module –with-http_ssl_module增加https模块支持，然后make一下，把nginx进程kill掉，将objs/nginx复制到sbin/下替换原有nginx文件，再./nginx启动，查看netstat，443端口起来了

Centos7增加BBR

uname -r #查看当前版本 3.10.0-862.el7.x86_64 #当前版本 rpm –import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org yum install https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm -y #安装elrepo yum –disablerepo=”*” –enablerepo=”elrepo-kernel” list available yum –enablerepo=elrepo-kernel install kernel-ml -y #安装内核，这个过程很久，不是卡住了 egrep ^menuentry /etc/grub2.cfg | cut -f 2 -d \’ #查看当前全版本 grub2-set-default 0 #生效新版本 reboot #重启 uname -r #查看当前版本是否生效 vi /etc/sysctl.conf #修改配置增加下面两句 net.core.default_qdisc = fq net.ipv4.tcp_congestion_control = bbr sysctl -p #加载系统设置 lsmod […]

bind禁用ipv6

国内的教程都是你抄我，我抄你，完全没有自己试过的，大批量教程里让你改/etc/named文件，这特么哪有这个文件，实际修改方式如下： 修改/etc/sysconfig/named文件，修改为如下 #BIND named process options# ~~~~~~ OPTIONS=”-4″# — These additional options will be passed to named# at startup. Don’t add -t here, enable proper# -chroot.service unit file.# Use of parameter -c is not supported here. Extend# systemd named*.service instead. For more# information please read the following KB article:# https://access.redhat.com/articles/2986001 #DISABLE_ZONE_CHECKING — By default, service […]