최기훈의 뻘블로그 ::

mysql tweak

분류없음 2012/01/12 13:04

1) mysql에 tcmalloc적용
패키지명은 google-perftools 이다
센토스에선 아직 없다.
mysql 5.1 이하
# nano /usr/bin/mysqld_safe
~

+ export LD_PRELOAD=/usr/lib/libtcmalloc_minimal.so

KILL_MYSQLD=1;
MYSQLD=
niceness=0~

mysql 5.5 이상
#nano /etc/my.cnf

~

[mysqld_safe]
+ malloc-lib=tcmalloc

~

2) 임시저장공간 램디스크으로 바꾸기
[mysqld_safe]
+ tmpdir=/dev/shm

Posted by 최기훈

TAG linux, mysql, mysql tweak, server

No Trackback, No Comment

hotsanic 0.5.0-pre5 diskio patch

분류없음 2012/01/11 21:50

diff -ur hotsanic-2.4/modules/diskio/platform/common.pm hotsanic-2.6/modules/diskio/platform/common.pm
--- hotsanic-2.4/modules/diskio/platform/common.pm    2004-02-27 10:23:49.000000000 +0100
+++ hotsanic-2.6/modules/diskio/platform/common.pm    2007-11-19 04:28:22.000000000 +0100
@@ -16,6 +16,7 @@
   my ($sysname, $nodename, $release, $version, $machine ) = uname;
   $MODARGS{KERNEL}="2.2" if $release =~ /^2\.[12]\./;
   $MODARGS{KERNEL}="2.4" if $release =~ /^2\.[34]\./;
+    $MODARGS{KERNEL}="2.6" if $release =~ /^2\.[56]\./;
   }
   return %MODARGS
   }
diff -ur hotsanic-2.4/modules/diskio/platform/linux.pm hotsanic-2.6/modules/diskio/platform/linux.pm
--- hotsanic-2.4/modules/diskio/platform/linux.pm 2004-02-29 16:29:36.000000000 +0100
+++ hotsanic-2.6/modules/diskio/platform/linux.pm 2007-11-20 03:40:58.000000000 +0100
@@ -23,6 +23,18 @@
   store_values($args{MODNAME},$num,$racc,$wacc,$rblk,$wblk,512);
   }
   }
+elsif ($args{KERNEL} eq "2.6") {
+ open FILE,"/proc/diskstats";
+ while ($entry = <FILE>) {
+ $entry =~ s/^\s*//; # strip leading whitespaces
+ my ($major,$minor,$aaaa,$racc,undef,$rsect,undef,$wacc,undef,$wsect)=split(/\s+/,$entry);
+ $device=$major."_".$minor;
+ my $sectsize=512;
+ store_values($args{MODNAME},$device,$racc,$wacc,$rsect,$wsect,$sectsize);
+ }
+ close FILE;
+ }
   elsif ($args{KERNEL} eq "2.2") {
   # disk 1494755 377215 221577 144318
   # disk_rio 564538 286941 151189 77490

센토스5.7 , 젠투 ( kernel 3.1.x ) 에서 검증되었습니다

Posted by 최기훈

TAG diskio, hotsanic, linux, monitoring

No Trackback, No Comment

vmware workstation 8

분류없음 2012/01/09 22:25

serial

windows
linux i386
linux x86_64

Posted by 최기훈

TAG vmware

No Trackback, No Comment

hashdos php 패치

분류없음 2012/01/05 11:31

#php-src/main/main.c
STD_PHP_INI_ENTRY("max_input_nesting_level", "64", PHP_INI_SYSTEM|PHP_INI_PERDIR, OnUpdateLongGEZero, max_input_nesting_level, php_core_globals, core_globals)
+ STD_PHP_INI_ENTRY("max_input_vars", "1000", PHP_INI_SYSTEM|PHP_INI_PERDIR, OnUpdateLongGEZero, max_input_vars, php_core_globals, core_globals)

STD_PHP_INI_ENTRY("user_dir", NULL, PHP_INI_SYSTEM, OnUpdateString, user_dir, php_core_globals, core_globals)

#php-src/main/php_globals.h
long max_input_nesting_level;

+ long max_input_vars;
zend_bool in_user_include;

#php-src/main/php_variables.c
zend_symtable_exists(symtable1, escaped_index, index_len + 1)) {

zval_ptr_dtor(&gpc_element);

} else {

+ if (zend_hash_num_elements(symtable1) >= PG(max_input_vars)) {
+ php_error_docref(NULL TSRMLS_CC, E_ERROR, "Input variables exceeded %ld. To increase the limit change max_input_vars in php.ini.", PG(max_input_vars));
+ }
zend_symtable_update(symtable1, escaped_index, index_len + 1, &gpc_element, sizeof(zval *), (void **) &gpc_element_p);

}

php 5.2.17 , 5.3.8 테스트됨

Posted by 최기훈

TAG hashdos, linux, php

No Trackback, 댓글 2개가 달렸습니다

kernel 3.0 k10 patch

분류없음 2011/12/30 14:45

k10이라 함은 amd cpu의 k10 코어를 말한다
페넘2 제품을 지칭하는걸로 알고있다.
(데네브 프로푸스등등..)
직접 적용해봤으나 효과가 있는진 잘 모르겠다
(3.1.x kernel 에도 적용가능)

diff -r kernel-3.0/arch/x86/Kconfig.cpu kernel-3.0-k10/arch/x86/Kconfig.cpu
171a172,176
> config MK10
> bool "amd k10 family"
> ---help---
> mol la sibal il dan hae.
>
318c323
< default "6" if MK7 || MK8 || MPENTIUMM || MCORE2 || MATOM || MVIAC7 || X86_GENERIC || GENERIC_CPU
---
> default "6" if MK7 || MK8 || MK10 || MPENTIUMM || MCORE2 || MATOM || MVIAC7 || X86_GENERIC || GENERIC_CPU
369c374
< depends on MPENTIUM4 || MPENTIUMM || MPENTIUMIII || MPENTIUMII || M586MMX || X86_GENERIC || MK8 || MK7 || MEFFICEON || MCORE2
---
> depends on MPENTIUM4 || MPENTIUMM || MPENTIUMIII || MPENTIUMII || M586MMX || X86_GENERIC || MK8 || MK10 || MK7 || MEFFICEON || MCORE2
373c378
< depends on MWINCHIP3D || MWINCHIPC6 || MCYRIXIII || MK7 || MK6 || MPENTIUM4 || MPENTIUMM || MPENTIUMIII || MPENTIUMII || M686 || MK8 || MVIAC3_2 || MVIAC7 || MEFFICEON
|| MGEODE_LX || MCORE2 || MATOM
---
> depends on MWINCHIP3D || MWINCHIPC6 || MCYRIXIII || MK7 || MK6 || MPENTIUM4 || MPENTIUMM || MPENTIUMIII || MPENTIUMII || M686 || MK8 || MK10 || MVIAC3_2 || MVIAC7
|| MEFFICEON || MGEODE_LX || MCORE2 || MATOM
401c406
< depends on ((MWINCHIP3D || MCRUSOE || MEFFICEON || MCYRIXIII || MK7 || MK6 || MPENTIUM4 || MPENTIUMM || MPENTIUMIII || MPENTIUMII || M686 || M586MMX || M586TSC
|| MK8 || MVIAC3_2 || MVIAC7 || MGEODEGX1 || MGEODE_LX || MCORE2 || MATOM) && !X86_NUMAQ) || X86_64
---
> depends on ((MWINCHIP3D || MCRUSOE || MEFFICEON || MCYRIXIII || MK7 || MK6 || MPENTIUM4 || MPENTIUMM || MPENTIUMIII || MPENTIUMII || M686 || M586MMX || M586TSC
|| MK8 || MK10 || MVIAC3_2 || MVIAC7 || MGEODEGX1 || MGEODE_LX || MCORE2 || MATOM) && !X86_NUMAQ) || X86_64
411c416
< depends on (MK8 || MK7 || MCORE2 || MPENTIUM4 || MPENTIUMM || MPENTIUMIII || MPENTIUMII || M686 || MVIAC3_2 || MVIAC7 || MCRUSOE || MEFFICEON || X86_64 ||
MATOM || MGEODE_LX)
---
> depends on (MK8 || MK10 || MK7 || MCORE2 || MPENTIUM4 || MPENTIUMM || MPENTIUMIII || MPENTIUMII || M686 || MVIAC3_2 || MVIAC7 || MCRUSOE || MEFFICEON || X86_64 ||
MATOM || MGEODE_LX)
diff -r kernel-3.0/arch/x86/Makefile_32.cpu kernel-3.0-k10/arch/x86/Makefile_32.cpu
27a28
> cflags-$(CONFIG_MK10) += -march=amdfam10
diff -r kernel-3.0/arch/x86/include/asm/module.h kernel-3.0-k10/arch/x86/include/asm/module.h
37a38,39
> #elif defined CONFIG_MK10
> #define MODULE_PROC_FAMILY "K10 "

Posted by 최기훈

TAG k10, kernel, linux

No Trackback, No Comment

avg 2012 serial

분류없음 2011/12/19 14:54

AVG Anti-Virus 2012

8A-NWLD0-KZU8L-MLMVA-ZDQRS-GDU20-K4CF

AVG Anti-Virus Business Edition 2012, Admin for Windows, Server, Workstation

KAMCG-B37P6-KLKLU-AZ2MM-YOBPN-9DQXP

AVG Email Server Edition 2012, Admin, E-Mail Server

EATVK-I7XRK-JXV7E-A6KR3-HZ99K-PTXWE

AVG Internet Security 2012

8MEH-RQX93-WYZKW-BE2FR-QX8MA-PEMBR-ACED
8MEH-RNZLL-2Y4QX-79PPA-MKJTH-AEMBR-ACED
8MEH-RXYFD-JUV72-8922R-FTDO8-QEMBR-ACED
8MEH-RFR8J-PTS8Q-92ATA-ORC6Q-JEMBR-ACED
8MEH-RS47Y-82HT8-GONVA-BCCCZ-DEMBR-ACED

AVG Internet Security Business Edition 2012, Admin, E-Mail, Server & Workstation
UA7LA-ZXJN9-V2P4E-QR3YI-KHA9U-AJGET
8MEH-RF7RF-MRYJO-EWOVA-U3E9N-FEMBR-ACED
8MEH-RFOD4-SX6R8-JRTQA-J2SAM-WEMBR-ACED
8MEH-R78BH-EYQ8L-MLMVA-ZROPR-GEMBR-ACED
8MEH-RF7RF-MRYJO-EWOVA-UU46K-FEMBR-ACED
8MEH-REDSL-7EAFC-ULA8R-EOE9P-4EMBR-ACED
8MEH-REDSL-7EAFC-ULA8R-EXZ2J-4EMBR-ACED
8MEH-RLKZO-8THHH-HSYKA-KYA7D-SEMBR-ACED
8MEH-RCKOP-B8YKK-YW8EA-6ROTM-SEMBR-ACED
8MEH-RE6B8-SAJ4Z-A489R-9DLDQ-EEMBR-ACED
8MEH-RPTGT-K4FL7-EEEVR-K9BNH-LEMBR-ACED
8MEH-RNXBD-G49HF-BSLSR-Z3VDB-PEMBR-ACED
8MEH-RCKOP-B8YKK-YW8EA-6PCJN-SEMBR-ACED
8MEH-RG9B7-BXWWC-PXRCR-JJACP-HEMBR-ACED
8MEH-RU7JQ-ATMRM-MQEPR-G9RO8-FEMBR-ACED

KeyGen.rar

Posted by 최기훈

TAG antivirus, avg, vaccine

No Trackback, No Comment

iptables anti syn-flooding anti icmp-flooding

분류없음 2011/12/02 16:51

iptables -N syn-flood
iptables -A syn-flood -m recent --name syn_attack --rcheck --seconds 300 -j DROP
iptables -A syn-flood -m limit --limit 50/second --limit-burst 100 -j RETURN
iptables -A syn-flood -j LOG --log-prefix "SYN-Flood attack :"
iptables -A syn-flood -p tcp --syn -m recent --name syn_attack --set -j DROP

//포트지정시 --dport 숫자
iptables -A INPUT -p tcp --syn -j syn-flood

iptables -N icmp-flood
iptables -A icmp-flood -m recent --name icmp_attack --rcheck --seconds 300 -j DROP
iptables -A icmp-flood -p icmp -m limit --limit 1/s --limit-burst 3 -j ACCEPT
iptables -A icmp-flood -j LOG --log-prefix PING-DROP:
iptables -A icmp-flood -p icmp -m recent --name icmp_attack --set -j DROP

iptables -A INPUT -p icmp --icmp-type 8 -j icmp-flood
iptables -A OUTPUT -p icmp --icmp-type 0 -j icmp-flood

iptables -N udp-flood
iptables -A udp-flood -s 168.126.63.0/30 -j ACCEPT
iptables -A udp-flood -m recent --name udp_attack --rcheck --seconds 300 -j DROP
iptables -A udp-flood -p udp -m limit --limit 50/s --limit-burst 100 -j ACCEPT
iptables -A udp-flood -j LOG --log-prefix udpflooding:
iptables -A udp-flood -p udp -m recent --name udp_attack --set -j DROP

iptables -A INPUT -p udp -j udp-flood

Posted by 최기훈

TAG icmpflooding, iptables, linux, synflooding

No Trackback, No Comment