Linux links
Linux
Today
LDP
freshmeat
kernel patches
Networking links
Net World
Fusion
RFCs et al
ntop
ethereal
Freesco
Security links
Linux Security
Security Focus
Nessus
CERT
SecurePoint
BUGTRAQ
Other links
Google
Gildot
Slashdot
Megatokyo
- Do not connect the ATAPI CDROM drives to the same controller where the IDE hard disk is connected -- conversely, choose notebooks with two IDE controllers
- Use IntelExpressPro or 3COM FastEthernet NICs (IMHO Intel is better)
- For proxies or database machines, SCSI disk controllers are a must
- Consider using bi-processor machines for servers
- Select Ext3fs for database partitions
- Select Reiserfs for proxy or www server partitions
- Run the 2.4 kernel
- Install Robert Love´s preemptible kernel patch
- Recompile the kernel to match your hardware
- Disable all the services you don't need -- don't forget to check ntsysv, crontabs, rc.local and xinetd.conf / inetd.conf
- Disable extra console virtual ttys (I normally only need four)
- Disable xfs; edit /etc/X11/XF86Config to fetch the fonts directly from the font directories instead of using xfs´ socket
- Tune kernel parameters with sysctl. Add to /etc/sysctl.conf
# TCP/IP parameters
#net/ipv4/icmp_echo_ignore_broadcasts=1
#net/ipv4/conf/all/log_martians=0
#net/ipv4/conf/all/accept_redirects=0
#net/ipv4/conf/all/accept_source_route=0
#net/ipv4/conf/all/send_redirects=0
#net/ipv4/icmp_echo_ignore_all=1
#net/ipv4/ip_forward=0
#net/ipv4/conf/all/rp_filter=1
net/ipv4/tcp_max_tw_buckets=2000000
net/ipv4/ip_local_port_range=1025 65535
net/ipv4/tcp_fin_timeout=30
net/ipv4/tcp_timestamps=0
net/core/rmem_max=10485760
net/core/wmem_max=10485760
net/core/rmem_default=10485760
net/core/wmem_default=10485760
fs/file-max=40960
vm.bdflush=100 5000 640 2560 150 30000 5000 1884 2
- If deploying squid proxies, recompile squid 2.4
In the squid source dir do:
#./configure --enable-async-io --disable-wccp --disable-snmp --disable-ident-lookups --enable-underscores --sysconfdir=/etc
#make
#make install
- Setup a DNS caching server for proxies, www and e-mail servers
- Append the noatime attribute to your filesystems into /etc/fstab
- If deploying servers, don´t boot with X.
edit /etc/inittab and change the default runlevel to 3
- Setup a tmpfs drive in the /tmp dir for personal development workstations (if you have more than 64Mb of RAM)
Append to /etc/fstab:
tmpfs /tmp tmpfs defaults,rw,nosuid,nodev 0 n
(where n is the last number you can find in that column + 1)
- Get the most from IDE hard drives
Append to your /etc/lilo.conf the line:
append="idebus=speed"
(where speed can be 33 or 66 MHz)
Do not use hdparm. It's unreliable, and it's not necessary with 2.4 kernels.
- Disable multicast support in your interfaces
#ifconfig eth0 -multicast
- If yours machine is low in memory, do not use GNOME or KDE. Blackbox or fluxbox have a lower memory fingerprint.
- Tuning Debian for older hardware is easier than with other distributions.
- Recompile the kernel for Intel compatible machines (K6 or others) or for machines with low memory
- check /etc/modules
Linux tips
Misc Linux tips
Performance tips
Linux performance
tips
Slam Project page
Linux traffic
measurement util w/ JAVA and MRTG plug-in
Windows Spectrum emulator
Documentation,
sources and dissertation
Photos
A few personal
pictures
