鍏ㄩ潰瑙ｆ瀽鏈嶅姟鍣ㄥ仠姝㈠搷搴旂殑15绫昏鍥犲強绯荤粺鎬цВ鍐虫柟妗?/p>

涓€銆佺‖浠舵晠闅滐細鐗╃悊灞傞潰鐨勮嚧鍛芥墦鍑?/p>

鏈嶅姟鍣ㄧ獊鐒?缃㈠伐"锛熺‖浠堕棶棰橀褰撳叾鍐诧紒鐢垫簮寮傚父銆佺‖鐩樻崯鍧忔垨鍐呭瓨鏁呴殰鍧囧彲鐩存帴瀵艰嚧鏈嶅姟涓柇銆傜粺璁℃樉绀猴紝绾?5%鐨勫畷鏈轰簨浠舵簮浜庣‖鐩樻晠闅滐紝灏ゅ叾鏄秴杩?骞存湇褰规湡鐨勬満姊扮‖鐩樸€傚簲瀵圭瓥鐣ワ細

瀹炴椂鐩戞帶锛氶儴缃睮PMI鎴朣MART宸ュ叿鐩戞祴纭欢鍋ュ悍鐘舵€侊紝纭洏娓╁害瓒呰繃60鈩冩垨鍧忛亾鏁版縺澧炴椂绔嬪嵆鍛婅

鍐椾綑璁捐锛氶噰鐢ㄥ弻鐢垫簮銆丷AID10纾佺洏闃靛垪銆丒CC鍐呭瓨绛夊啑浣欐柟妗堬紝鍗曠偣鏁呴殰鏃惰嚜鍔ㄥ垏鎹㈠鐢ㄧ粍浠?/p>

鍘嬪姏娴嬭瘯锛氬搴︽€ц繍琛孧emtest86+鍐呭瓨妫€娴嬪伐鍏峰強纭洏鍧忛亾鎵弿锛屾彁鍓嶆毚闇叉綔鍦ㄧ己闄?/p>

浜屻€佺綉缁滈棶棰橈細鐪嬩笉瑙佺殑杩炴帴榛戞礊

褰撴湇鍔″櫒"澶辫仈"锛岀綉缁滃眰寰€寰€鏄姜榄佺ジ棣栥€傝矾鐢卞櫒鐦棯銆侀槻鐏璇嫤鎴垨甯﹀鑰楀敖锛屽潎浼氬垏鏂敤鎴疯闂矾寰勩€傛煇浜戞湇鍔″晢缁熻琛ㄦ槑锛?3%鐨勮繛鎺ヨ秴鏃剁敱瀹夊叏缁勯厤缃敊璇紩鍙戙€傛帓鏌ユ妧宸э細

閾捐矾璇婃柇锛?/p>

traceroute 鐩爣IP # 杩借釜璺敱鑺傜偣

mtr --report 鐩爣IP # 瀹炴椂鍒嗘瀽缃戠粶鎶栧姩

闃茬伀澧欓獙璇侊細妫€鏌ptables/firewalld瑙勫垯锛岀‘淇濇湭灞忚斀鏈嶅姟绔彛锛堝HTTP 80/443锛孧ySQL 3306锛?/p>

甯﹀鎵╁锛氱獊鍙戞祦閲忓満鏅笅锛屽惎鐢≦oS娴侀噺鏁村舰鎴栧崌绾ц嚦BGP澶氱嚎甯﹀

涓夈€佽蒋浠堕敊璇細浠ｇ爜涓庨厤缃殑闅愬舰鐐稿脊

鎿嶄綔绯荤粺鍐呮牳宕╂簝銆佸唴瀛樻硠婕忔垨閰嶇疆鏂囦欢閿欒锛屽彲鐬棿鍐荤粨鏈嶅姟銆侺inux绯荤粺涓紝OOM Killer锛堝唴瀛樻孩鍑烘潃鎵嬶級璇潃鍏抽敭杩涚▼鍗犳瘮杈?8%鐨勫紓甯稿仠鏈轰簨浠躲€傛牴娌绘柟妗堬細

鏃ュ織婧簮锛氶€氳繃journalctl -xe鎴?var/log/syslog瀹氫綅SEGFAULT娈甸敊璇瓑宕╂簝鏃ュ織

閰嶇疆瀹¤锛氫娇鐢ˋnsible鎴朠uppet鑷姩鍖栨牎楠岄厤缃竴鑷存€э紝閬垮厤浜哄伐淇敼寮曞彂鐨勫弬鏁板啿绐?/p>

瀹瑰櫒闅旂锛欴ocker閮ㄧ讲鍏抽敭搴旂敤锛岄檺鍒跺崟瀹瑰櫒璧勬簮閰嶉锛圕PU 2鏍?鍐呭瓨4GB锛夛紝闃叉鐩镐簰鎸ゅ崰

鍥涖€佽繃杞斤細娴侀噺娲嘲涓嬬殑绯荤粺宕╁

褰撳苟鍙戣姹傝秴杩囨湇鍔″櫒鎵胯浇鏋侀檺锛孋PU婊¤浇銆佺嚎绋嬮樆濉炲皢鐩存帴鎷栧灝鏈嶅姟銆傚疄楠屾暟鎹樉绀猴紝4鏍告湇鍔″櫒鍦ㄦ瘡绉?000璇锋眰涓嬶紝鍝嶅簲寤惰繜浠?0ms椋欏崌鑷?5绉掞紝鏈€缁堝交搴曠槴鐥€傝繃杞戒繚鎶ゅ洓鏉挎枾锛?/p>

娴侀噺鍓婂嘲锛氭帴鍏ginx闄愭祦妯″潡锛岃缃甽imit_req_zone闄愬埗鍗旾P姣忕璇锋眰鏁?/p>

鏈嶅姟闄嶇骇锛氳繑鍥炵簿绠€鏁版嵁锛堝JSON鍩虹瀛楁锛夛紝鏇夸唬澶嶆潅璁＄畻

鑷姩鎵╁锛欿ubernetes闆嗙兢閰嶇疆HPA锛孋PU瓒?0%鏃惰嚜鍔ㄦ墿瀹筆od瀹炰緥

闃熷垪缂撳啿锛歊abbitMQ鍫嗙Н寮傛浠诲姟锛岄伩鍏嶇洿鎺ュ啿鍑绘暟鎹簱

馃搶 妗堜緥锛氭煇鐢靛晢澶т績鏈熼棿閫氳繃鍔ㄦ€佹墿瀹?娴侀噺鏌撹壊锛圱raffic Shading锛夛紝鎴愬姛鎵胯浇宄板€糛PS 12涓囷紝鏁呴殰鐜囦笅闄?0%

浜斻€佸畨鍏ㄩ棶棰橈細鎭舵剰鏀诲嚮鐨勭槴鐥鏆?/p>

DDoS鏀诲嚮銆丼QL娉ㄥ叆鎴栨湭鎺堟潈璁块棶锛屼笉浠呯獌鍙栨暟鎹洿鍙槴鐥湇鍔°€?024骞村叏鐞冩姤鍛婃樉绀猴紝鍗曟DDoS鏀诲嚮宄板€艰揪3.5Tbps锛岃秴60%鐩爣鏈嶅姟鍣ㄥ洜璧勬簮鑰楀敖瀹曟満銆傞槻寰＄煩闃碉細

娴侀噺娓呮礂锛氶儴缃睠loudflare鎴栭樋閲屼簯DDoS楂橀槻鏈嶅姟锛岃繃婊ゆ伓鎰忔祦閲?/p>

婕忔礊鎵弿锛氭瘡鍛ㄦ墽琛孫penVAS鎵弿锛屼慨澶岰VSS璇勫垎>7.0鐨勯珮鍗辨紡娲烇紙濡侰VE-2025-1234锛?/p>

鏉冮檺鏈€灏忓寲锛氶伒寰猂BAC妯″瀷锛屾暟鎹簱璐︽埛绂佹GRANT ALL鏉冮檺

鍏€佹暟鎹簱闂锛氬悗绔瓨鍌ㄧ殑杩為攣宕╂簝

"Error establishing database connection"鈥斺€旀暟鎹簱杩炴帴澶辫触鏄渶甯歌鐨勬湇鍔′腑鏂彁绀恒€備富浠庡鍒跺欢杩熴€佹參鏌ヨ鍫嗙Н鎴栬繛鎺ユ睜鑰楀敖锛屽彲寮曞彂鍏ㄧ珯涓嶅彲鐢ㄣ€傚叧閿搷浣滐細

杩炴帴姹犱紭鍖栵細璋冩暣MySQL max_connections鑷?00+锛孞DBC閰嶇疆testOnBorrow楠岃瘉杩炴帴鏈夋晥鎬?/p>

绱㈠紩鎬ユ晳锛氬鎵ц瓒呰繃1绉掔殑SQL杩涜EXPLAIN鍒嗘瀽锛屾坊鍔犲鍚堢储寮?/p>

涓讳粠鍒囨崲锛欿eepalived+MySQL MHA瀹炵幇涓诲簱鏁呴殰30绉掕嚜鍔ㄥ垏鎹?/p>

涓冦€佹棩蹇楄褰曪細榛戝專瀛愰噷鐨勬晠闅滃瘑鐮?/p>

鏈嶅姟鍣ㄦ棩蹇楀鍚岄鏈洪粦鍖ｅ瓙锛岃褰曚簡宕╂簝鍓嶇殑鍏抽敭绾跨储銆傜粺璁¤〃鏄庯紝鑳界啛缁冨垎鏋怤ginx access.log涓嶭inux dmesg鏃ュ織鐨勮繍缁达紝鏁呴殰瀹氫綅閫熷害蹇?.3鍊嶃€傞珮鏁堝垎鏋愭硶锛?/p>

# 鎼滅储5xx閿欒骞剁粺璁OP10 URL

awk '$9>=500{print $7}' /var/log/nginx/access.log | sort | uniq -c | sort -nr | head -n10

# 杩借釜OOM鍐呭瓨婧㈠嚭璁板綍

dmesg -T | grep -i "killed process"

鍏€佺郴缁熺洃鎺э細瀹炴椂棰勮鐨勫摠鍏电郴缁?/p>

Zabbix鎴朠rometheus绛夌洃鎺у伐鍏凤紝鏄闃插仠鏈虹殑"绗竴閬撻槻绾?銆傚綋CPU鎸佺画>95%銆佸唴瀛樹娇鐢ㄨ秴90%鎴栫鐩業O寤惰繜>20ms鏃讹紝瑙﹀彂浼佷笟寰俊/鐭俊鍛婅銆傞粍閲戞寚鏍囩粍鍚堬細

娴侀噺鎸囨爣锛氭瘡绉掕姹傛暟锛圧PS锛夈€佺綉缁滃甫瀹?/p>

璧勬簮鎸囨爣锛欳PU璐熻浇锛圠oad5锛夈€佸唴瀛楽wap浣跨敤鐜?/p>

瀛樺偍鎸囨爣锛氱鐩業OPS銆両node浣跨敤鐜?/p>

涔濄€佸浠戒笌鎭㈠锛氱伨闅炬渶鍚庣殑鏁戠敓鑸?/p>

鏁版嵁澶囦唤鏄湇鍔′腑鏂椂鐨?鍚庢倲鑽?銆傞噾铻嶈涓氳姹傛墽琛?-2-1鍘熷垯锛?浠藉壇鏈€?绉嶄粙璐ㄣ€?浠藉紓鍦板浠姐€傛搷浣滄竻鍗曪細

鍏ㄩ噺澶囦唤锛氭瘡鍛ㄦ棩鍑屾櫒mysqldump --single-transaction瀵煎嚭鏁版嵁搴?/p>

澧為噺澶囦唤锛歳sync + inotify瀹炴椂鍚屾搴旂敤浠ｇ爜

鐏惧婕旂粌锛氬搴︽€ф仮澶嶆紨缁冿紝楠岃瘉RTO锛堟仮澶嶆椂闂寸洰鏍囷級<15鍒嗛挓

鍗併€佹洿鏂板拰淇锛氭紡娲為槻寰＄殑缁堟瀬姝﹀櫒

鏈慨澶嶆紡娲炴槸鏈嶅姟鍣ㄥ畨鍏ㄧ殑"瀹氭椂鐐稿脊"銆侰VE缁熻琛ㄦ槑锛?0%鐨凩inux婕忔礊鍙€氳繃鏇存柊鍐呮牳/杞欢鍖呬慨澶嶃€傛洿鏂扮瓥鐣ワ細

# Ubuntu瀹夊叏鏇存柊

sudo unattended-upgrade --dry-run # 娴嬭瘯琛ヤ竵

sudo apt install --only-upgrade openssl # 绱ф€ユ洿鏂板崟涓€缁勪欢

# RHEL鍐呮牳鐑ˉ涓?

yum install kpatch

kpatch patch kernel-CVE-2025-1234

鍗佷竴銆佷紭鍖栭厤缃細鎬ц兘璋冩牎鐨勭簿缁嗘墜鏈?/p>

涓嶅綋閰嶇疆鍙鑷磋祫婧愭氮璐归珮杈?0%銆傞€氳繃璋冩暣鍐呮牳鍙傛暟涓庝腑闂翠欢閰嶇疆锛屽悶鍚愰噺鍙彁鍗?鍊嶃€傝皟浼橀噸鐐癸細

鍐呮牳鍙傛暟锛歯et.core.somaxconn=1024锛圱CP杩炴帴闃熷垪锛夈€乿m.swappiness=10锛堝噺灏慡wap锛?/p>

Web鏈嶅姟鍣細Nginx worker_connections璋冭嚦worker_rlimit_nofile鐨?0%

JVM浼樺寲锛欸1鍨冨溇鍥炴敹鍣ㄦ浛浠MS锛岄伩鍏岶ull GC鍗￠】

鍗佷簩銆佹晠闅滄帓闄わ細姝ユ涓鸿惀鐨勭牬妗堥€昏緫

鏈嶅姟鍣ㄥ畷鏈哄悗锛岀郴缁熷寲鎺掓煡鏄仮澶嶇殑鍏抽敭銆傛帹鑽愭祦绋嬶細缃戠粶杩為€氭€э紙ping锛夆啋 鏈嶅姟鐘舵€侊紙systemctl锛夆啋 璧勬簮鐡堕锛坱op锛夆啋 鏃ュ織鍒嗘瀽銆傚伐鍏峰寘锛?/p>

缃戠粶灞傦細telnet娴嬭瘯绔彛銆乼cpdump鎶撳寘鍒嗘瀽

搴旂敤灞傦細strace -p PID杩借釜杩涚▼绯荤粺璋冪敤

璧勬簮灞傦細iostat -dx 2鐩戞帶纾佺洏IO

鍗佷笁銆佺揣鎬ュ搷搴旇鍒掞細鍒嗛挓绾ф仮澶嶇殑浣滄垬鎵嬪唽

棰勫厛鍒跺畾鐨勫簲鎬ラ妗堝彲缂╃煭60%鏁呴殰鎭㈠鏃堕棿銆傛牳蹇冭绱犲寘鎷細

璐ｄ换鐭╅樀锛氱涓€鑱旂郴浜猴紙杩愮淮锛夈€佺浜岃仈绯讳汉锛堝紑鍙戯級銆佸嵄鏈哄崗璋冧汉锛堜骇鍝侊級

鍐崇瓥鏍戯細5鍒嗛挓鏈仮澶嶁啋鍚敤澶囩敤闆嗙兢锛?5鍒嗛挓鏈仮澶嶁啋鍥炴粴鑷充笂涓€鐗堟湰

娌熼€氭ā鏉匡細棰勭疆鐢ㄦ埛鍏憡妯℃澘锛岄伩鍏嶄复鏃舵帾杈炲紩鍙戣垎鎯?/p>

鍗佸洓銆侀闃叉帾鏂斤細闃叉偅鏈劧鐨勮繍缁村摬瀛?/p>

棰勯槻鎬х淮鎶ゅ噺灏?0%璁″垝澶栧仠鏈恒€傚繀椤昏惤瀹烇細

娣锋矊宸ョ▼锛氭瘡鏈堟敞鍏ユ晠闅滐紙濡俴ill -9杩涚▼銆佹嫈缃戠嚎锛夛紝楠岃瘉绯荤粺闊ф€?/p>

瀹归噺瑙勫垝锛氱洃鎺ф祦閲忔湀澧為€燂紝鎻愬墠鎵╁鏈嶅姟鍣ㄩ泦缇?/p>

瀹夊叏鍔犲浐锛歋SH绂佺敤瀵嗙爜鐧诲綍銆佹暟鎹簱绂佹鍏綉璁块棶

缁撹锛氱ǔ瀹氭湇鍔＄殑澶氱淮闃插尽浣撶郴

鏈嶅姟鍣ㄥ畷鏈洪潪鍗曚竴鍥犵礌鎵€鑷达紝鑰屾槸纭欢銆佺綉缁溿€佽蒋浠躲€佸畨鍏ㄧ瓑澶氱淮搴﹀け鏁堢殑缁撴灉銆傞€氳繃"鐩戞帶棰勮+閰嶇疆浼樺寲+杩囪浇淇濇姢+婕忔礊淇"鐨勫洓缁撮槻寰￠摼锛屽彲灏嗗仠鏈烘鐜囬檷浣?0%銆傝浣忥細姣忎竴娆℃晠闅滈兘鏄紭鍖栫郴缁熺殑濂戞満锛屾寔缁敼杩涙柟鑳芥瀯寤哄潥涓嶅彲鎽х殑鏈嶅姟搴曞骇銆?/p>