centos7内核参数优化配置详解

#关闭ipv6 net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 避免放大攻击 net.ipv4.icmp_echo_ignore_broadcasts = 1 开启恶意icmp错误消息保护 net.ipv4.icmp_ignore_bogus_error_responses = 1 #关闭路由

>>阅读原文<<