# 添加以下参数
net.core.somaxconn = 65535
net.ipv4.tcp_max_syn_backlog = 65535
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_keepalive_probes = 5
net.ipv4.tcp_keepalive_intvl = 15
vm.swappiness = 10
vm.overcommit_memory = 1

# 应用内核参数
sysctl -p

# 2. 定期备份计划
# 创建备份脚本
cat > /root/backup_mysql.sh << EOF #!/bin/bash DATE=$(date +%Y%m%d) BACKUP_DIR="/backup/mysql" mkdir -p $BACKUP_DIR mysqldump -u root -p"fgedudb123" --all-databases --single-transaction > $BACKUP_DIR/backup_$DATE.sql

gzip $BACKUP_DIR/backup_$DATE.sql

# 删除7天前的备份
find $BACKUP_DIR -name “backup_*.sql.gz” -mtime +7 -delete
EOF

# 赋予执行权限
chmod +x /root/backup_mysql.sh

# 添加到crontab，每天凌晨2点执行
crontab -e
0 2 * * * /root/backup_mysql.sh

# 3. 考虑使用MySQL Enterprise Backup进行物理备份（商业版）
# 4. 启用增量备份以减少备份时间和空间占用

# 2. 创建专用用户并授权
mysql -u root -p
CREATE USER ‘fgedu’@’localhost’ IDENTIFIED BY ‘fgedudb123’;
GRANT ALL PRIVILEGES ON *.* TO ‘fgedu’@’localhost’ WITH GRANT OPTION;
FLUSH PRIVILEGES;

# 3. 限制远程访问
# 在my.cnf中添加
bind-address=127.0.0.1

# 4. 定期更新密码
# 每90天更新一次root密码
ALTER USER ‘root’@’localhost’ IDENTIFIED BY ‘new_password’;

# 5. 启用密码策略
# 在my.cnf中添加
validate_password.policy=STRONG
validate_password.length=12

# 6. 启用审计日志
# 在my.cnf中添加
audit_log=ON
audit_log_format=JSON
audit_log_file=/var/lib/mysql/audit.log

# 7. 启用透明数据加密（TDE）
# 在my.cnf中添加
innodb_encrypt_tables=ON
innodb_encrypt_log=ON
innodb_encryption_threads=4

# 2. 查看版本
mysql> SELECT VERSION();
+———–+
| VERSION() |
+———–+
| 9.7.0 |
+———–+
1 row in set (0.00 sec)

# 3. 创建测试数据库
mysql> CREATE DATABASE fgedudb;
Query OK, 1 row affected (0.00 sec)

# 4. 创建测试表
mysql> USE fgedudb;
Database changed
mysql> CREATE TABLE fgedu_users (
-> id INT PRIMARY KEY AUTO_INCREMENT,
-> name VARCHAR(50) NOT NULL,
-> age INT,
-> email VARCHAR(100),
-> created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-> ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
Query OK, 0 rows affected (0.01 sec)

# 5. 插入测试数据
mysql> INSERT INTO fgedu_users (name, age, email) VALUES (‘测试用户’, 25, ‘test@fgedu.net.cn’);
Query OK, 1 row affected (0.00 sec)

# 6. 查询测试数据
mysql> SELECT * FROM fgedu_users;
+—-+———–+—–+———————+———————+
| id | name | age | email | created_at |
+—-+———–+—–+———————+———————+
| 1 | 测试用户 | 25 | test@fgedu.net.cn | 2026-03-31 10:00:00 |
+—-+———–+—–+———————+———————+
1 row in set (0.00 sec)

# 7. 查看9.7新特性
mysql> SHOW VARIABLES LIKE ‘innodb_encrypt_tables’;
+———————-+——-+
| Variable_name | Value |
+———————-+——-+
| innodb_encrypt_tables | ON |
+———————-+——-+
1 row in set (0.00 sec)

# 8. 退出MySQL
mysql> EXIT