# 1. 配置内核参数
# vi /etc/sysctl.conf
fs.file-max = 6815744
kernel.shmmax = 34359738368
kernel.shmall = 8388608
kernel.shmmni = 4096
kernel.sem = 250 32000 100 128
vm.swappiness = 1
vm.dirty_background_ratio = 5
vm.dirty_ratio = 15
vm.max_map_count = 262144
net.ipv4.ip_local_port_range = 9000 65500
net.core.rmem_max = 4194304
net.core.wmem_max = 1048576

# 使配置生效
# sysctl -p

# 2. 配置用户资源限制
# vi /etc/security/limits.conf
mysql soft nproc 65535
mysql hard nproc 65535
mysql soft nofile 65535
mysql hard nofile 65535
mysql soft memlock unlimited
mysql hard memlock unlimited

# 3. 配置大内存页
# echo 16384 > /proc/sys/vm/nr_hugepages

# 4. 创建数据目录
# mkdir -p /data/mysql/{data,logs,tmp}
# chown -R mysql:mysql /data/mysql
# chmod -R 750 /data/mysql

# 5. 配置磁盘调度
# echo none > /sys/block/xvda/queue/scheduler

# 6. 配置防火墙
# firewall-cmd –permanent –add-port=3306/tcp
# firewall-cmd –reload

# 1. 安装Nginx
# amazon-linux-extras install nginx1 -y

# 输出示例：
Installing nginx1…
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Resolving Dependencies
–> Running transaction check
—> Package nginx.x86_64 1:1.20.0-2.amzn2.0.1 will be installed
–> Finished Dependency Resolution

Complete!

# 2. 配置内核参数
# vi /etc/sysctl.conf
net.core.somaxconn = 65535
net.core.netdev_max_backlog = 65535
net.ipv4.tcp_max_syn_backlog = 65535
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_fin_timeout = 30

# 3. 配置用户资源限制
# vi /etc/security/limits.conf
nginx soft nofile 65535
nginx hard nofile 65535

# 4. 启动Nginx服务
# systemctl enable nginx
# systemctl start nginx

# 输出示例：
Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service.

# 5. 配置防火墙
# firewall-cmd –permanent –add-service=http
# firewall-cmd –permanent –add-service=https
# firewall-cmd –reload

# 6. 验证服务状态
# systemctl status nginx

# 输出示例：
● nginx.service – The nginx HTTP and reverse proxy server
Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
Active: active (running) since Fri 2026-04-04 12:00:00 CST; 10s ago
Main PID: 12345 (nginx)
CGroup: /system.slice/nginx.service
├─12345 nginx: master process /usr/sbin/nginx
└─12346 nginx: worker process

# 输出示例：
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Resolving Dependencies
–> Running transaction check
—> Package amazon-cloudwatch-agent.x86_64 0:1.300000.0-1 will be installed
–> Finished Dependency Resolution

Complete!

# 配置CloudWatch代理
# /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-config-wizard

# 输出示例：
=============================================================
Welcome to the Amazon CloudWatch Agent configuration wizard!
=============================================================

On which OS are you planning to use the agent?
1. Linux
2. Windows
default choice: [1]

# 启动CloudWatch代理
# systemctl enable amazon-cloudwatch-agent
# systemctl start amazon-cloudwatch-agent

# 查看系统日志
# journalctl -u amazon-cloudwatch-agent -f

# 输出示例：
— Logs begin at Fri 2026-04-04 10:00:00 CST. —
Apr 04 12:00:00 fgedudb01 systemd[1]: Started Amazon CloudWatch Agent.
Apr 04 12:00:00 fgedudb01 amazon-cloudwatch-agent[12345]: I! Detecting run_as_root…
Apr 04 12:00:00 fgedudb01 amazon-cloudwatch-agent[12345]: I! Detected run_as_root = true