vm.swappiness=10

vm.dirty_background_ratio = 5
vm.dirty_ratio = 20

fs.file-max = 2000000

net.core.somaxconn = 1024

net.ipv4.tcp_fin_timeout = 30

net.ipv4.tcp_tw_reuse = 1

net.core.rmem_default = 262144
net.core.wmem_default = 262144
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216

# 安裝 cpupower（如果還沒裝）
dnf install kernel-tools
# 設(shè)置 governor
cpupower frequency-set --governor performance

echo none > /sys/block/nvme0n1/queue/scheduler

# /etc/sysctl.d/99-performance.conf
# === 內(nèi)存管理 ===
vm.swappiness = 10
vm.dirty_ratio = 20
vm.dirty_background_ratio = 5
# 可能還加 dirty_expire / writeback，根據(jù)具體測試調(diào)優(yōu)
# vm.dirty_expire_centisecs = 500
# vm.dirty_writeback_centisecs = 100
# 可選：如果你知道內(nèi)存不是特別緊張，可設(shè)置 overcommit
# vm.overcommit_memory = 1
# === 文件句柄限制 ===
fs.file-max = 2000000
# === 網(wǎng)絡(luò) / TCP 參數(shù) ===
net.core.somaxconn = 8192  # 監(jiān)聽 backlog
net.core.netdev_max_backlog = 50000
# 接收 / 發(fā)送緩沖
net.core.rmem_default = 262144
net.core.wmem_default = 262144
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096   87380   16777216
net.ipv4.tcp_wmem = 4096   65536   16777216
# TIME_WAIT 和連接重用
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_tw_reuse = 1
# Keepalive
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_keepalive_intvl = 30
net.ipv4.tcp_keepalive_probes = 3
# 網(wǎng)絡(luò)安全相關(guān)
kernel.sysrq = 0
net.ipv4.ip_forward = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.all.accept_source_route  =0
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.all.secure_redirects = 0
net.ipv4.conf.default.secure_redirects = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.tcp_syncookies = 1
kernel.dmesg_restrict = 1
net.ipv6.conf.all.accept_redirects = 0
net.ipv6.conf.default.accept_redirects = 0
kernel.threads-max = 655350
# === 其他網(wǎng)絡(luò) /系統(tǒng)選項 ===
# 可以根據(jù)需要打開更多，但這里是基礎(chǔ)

sysctl --system

########################################
# Redis 性能 +集群 配置示例
# 這個配置文件只做參考 不能直接拿來用 Redis 是不允許再參數(shù)后買你添加注釋的直接使用會報錯
########################################
# 內(nèi)存管理
maxmemory 12gb           # 假設(shè)節(jié)點(diǎn)內(nèi)存 16G，為 Redis 留約 12G
maxmemory-policy allkeys-lru   # 使用 LRU 淘汰所有鍵（適合緩存 + 數(shù)據(jù)混合場景）
maxmemory-samples 5
# 延遲釋放
lazyfree-lazy-eviction yes
lazyfree-lazy-expire yes
lazyfree-lazy-server-del yes
# 持久化 (RDB + AOF)
appendonly yes
appendfilename "appendonly.aof"
appendfsync everysec
no-appendfsync-on-rewrite no
auto-aof-rewrite-percentage 100
auto-aof-rewrite-min-size 64mb
aof-load-truncated yes
# RDB 快照 (可根據(jù)需要)
save 900 1
save 300 10
save 60 10000
# 集群配置 (如果是 Redis Cluster)
cluster-enabled yes
cluster-config-file nodes.conf
cluster-node-timeout 15000
cluster-replica-validity-factor 10
cluster-migration-barrier 1
cluster-require-full-coverage no
# 性能 /調(diào)度相關(guān)
hz 10
dynamic-hz yes
# Lua 腳本執(zhí)行限制
lua-time-limit 5000  # 毫秒
# 慢日志 (監(jiān)控慢命令)
slowlog-log-slower-than 10000   # 微秒 (10 ms) — 根據(jù)業(yè)務(wù)調(diào)整
slowlog-max-len 128
# 內(nèi)存碎片 / 編碼優(yōu)化
hash-max-ziplist-entries 512
hash-max-ziplist-value 64
list-max-ziplist-entries 512
list-max-ziplist-value 64
zset-max-ziplist-entries 128
zset-max-ziplist-value 64
# 安全性 (可選，根據(jù)場景啟用)
# requirepass yourpassword
# rename-command FLUSHALL ""
# 其他 (可選，根據(jù)需求)
notify-keyspace-events ""

/usr/local/redis/bin/redis-cli -h 192.168.1.11 -p 6379 -a ugwFsSNuzgS4e62e CLUSTER NODES|grep master | grep -v "fail" | awk '{print $2}' | cut -d@ -f1

#!/bin/bash
REDIS_IP="192.168.1.11"         # 任意一個集群節(jié)點(diǎn)（用于獲取節(jié)點(diǎn)列表）
REDIS_PORT="6379"
REDIS_PWD="ugwFsSNuzgS4e62e"
BACKUP_DIR="/root/backup/"
TIMEOUT=300  
mkdir -p "$BACKUP_DIR" || { echo "ERROR: 無法創(chuàng)建備份目錄 $BACKUP_DIR"; exit 1; }
# 獲取所有 master 節(jié)點(diǎn)
nodes=$(redis-cli -c -h "$REDIS_IP" -p "$REDIS_PORT" -a "$REDIS_PWD" CLUSTER NODES | \
  grep master | grep -v fail | awk '{print $2}' | cut -d@ -f1)
for node in $nodes; do
  ip=$(echo "$node" | cut -d: -f1)
  port=$(echo "$node" | cut -d: -f2)
  echo "=== 開始備份：Redis 節(jié)點(diǎn) $ip:$port ==="
  # 觸發(fā) BGSAVE (RDB)
  redis-cli -h "$ip" -p "$port" -a "$REDIS_PWD" BGSAVE
  if [ $? -ne 0 ]; then
    echo "WARNING: BGSAVE 在 $ip:$port 執(zhí)行失敗"
  fi
  # 等待 BGSAVE 完成
  start_time=$(date +%s)
  while true; do
    inprog=$(redis-cli -h "$ip" -p "$port" -a "$REDIS_PWD" INFO persistence | \
      grep rdb_bgsave_in_progress | cut -d: -f2 | tr -d '\r')
    if [ "$inprog" = "0" ]; then
      echo "BGSAVE 完成：$ip:$port"
      break
    fi
    now=$(date +%s)
    elapsed=$(( now - start_time ))
    if [ $elapsed -gt $TIMEOUT ]; then
      echo "ERROR: BGSAVE 超時 ($elapsed 秒) 在 $ip:$port" >&2
      break
    fi
    echo "等待 BGSAVE 完成 ($elapsed 秒) ..."
    sleep 5
  done
  # 獲取 RDB 文件路徑
  DIR=$(redis-cli -h "$ip" -p "$port" -a "$REDIS_PWD" CONFIG GET dir | awk 'NR==2')
  DBFILE=$(redis-cli -h "$ip" -p "$port" -a "$REDIS_PWD" CONFIG GET dbfilename | awk 'NR==2')
  src_rdb="${DIR}/${DBFILE}"
  if [ ! -f "$src_rdb" ]; then
    echo "ERROR: 未找到 RDB 文件: $src_rdb" >&2
  else
    dst_rdb="${BACKUP_DIR}/${ip}_${port}_$(date +%Y%m%d_%H%M%S).rdb"
    cp "$src_rdb" "$dst_rdb" && echo "RDB 備份保存到 $dst_rdb"
  fi
  aof_enabled=$(redis-cli -h "$ip" -p "$port" -a "$REDIS_PWD" CONFIG GET appendonly | awk 'NR==2')
  if [ "$aof_enabled" = "yes" ]; then
    AOFDIR=$(redis-cli -h "$ip" -p "$port" -a "$REDIS_PWD" CONFIG GET appenddirname | awk 'NR==2')
    AOFNAME=$(redis-cli -h "$ip" -p "$port" -a "$REDIS_PWD" CONFIG GET appendfilename | awk 'NR==2')
    if [ -z "$AOFDIR" ]; then
      src_aof="${DIR}/${AOFNAME}"
      if [ -f "$src_aof" ]; then
        dst_aof="${BACKUP_DIR}/${ip}_${port}_$(date +%Y%m%d_%H%M%S).aof"
        cp "$src_aof" "$dst_aof" && echo "AOF 備份保存到 $dst_aof"
      else
        echo "ERROR: AOF 文件未找到: $src_aof" >&2
      fi
    else
      # Multi-Part AOF 模式 (Redis 7+)
      aof_dir_full="${DIR}/${AOFDIR}"
      if [ -d "$aof_dir_full" ]; then
        dst_mp_dir="${BACKUP_DIR}/${ip}_${port}_AOF_$(date +%Y%m%d_%H%M%S)"
        mkdir -p "$dst_mp_dir"
        cp "${aof_dir_full}"/* "$dst_mp_dir"/ && echo "MP-AOF 備份到 $dst_mp_dir"
      else
        echo "ERROR: AOF 目錄不存在: $aof_dir_full" >&2
      fi
    fi
  else
    echo "AOF 未啟用在 $ip:$port，跳過 AOF 備份"
  fi
done
echo "=== 所有節(jié)點(diǎn)備份完成 ==="

# 或者停止對應(yīng)的 Redis 服務(wù) / systemd 單元
redis-cli -h <ip> -p <port> SHUTDOWN

cp /backup/redis/cluster/<ip>_<port>_YYYYMMDD_HHMMSS.rdb /var/lib/redis/$port/dump.rdb
# 如果是 aof
cp /backup/redis/cluster/<ip>_<port>_YYYYMMDD_HHMMSS.aof /var/lib/redis/$port/appendonly.aof

chown redis:redis /var/lib/redis/$port/dump.rdb
chown redis:redis /var/lib/redis/$port/appendonly.aof

systemctl start redis

redis-cli -h <ip> -p <port> BGREWRITEAOF

redis-cli -h <恢復(fù)節(jié)點(diǎn) IP> -p <恢復(fù)節(jié)點(diǎn) 端口> CLUSTER MEET <任意健康節(jié)點(diǎn) IP> <端口>

redis-cli -h <恢復(fù)節(jié)點(diǎn) IP> -p <恢復(fù)端口> CLUSTER NODES

redis-cli --cluster reshard <一個集群節(jié)點(diǎn) IP:端口> --from <其他節(jié)點(diǎn)列表，用逗號分隔> --to <恢復(fù)節(jié)點(diǎn) id> --slots <slot 數(shù)量> --yes