Functions: Security management / performance optimization / monitoring / CICD


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
Zhang He, years of work experience in the Internet industry , worked as a network engineer, system integration engineer, LINUX system operation and maintenance engineers
website: www.zhanghehe.cn
author micro letter: zhanghe15069028807, now living under the District of Jinan Li
+ - + - + - + - + - + - + - + - +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- +-+-+-+-+-+-+-+-+-+-+-+-+-


Safety management

Link layer security:

  • Link layer switch port security: Ports and mac are bound in batches to prevent arp spoofing

Application layer security:

  • Prevention of DDOS attacks (buying services, hardware, script monitoring log linkage firewall, ssh, iptables malformed message prevention, network related parameter kernel parameter optimization, application after attack)

  • Application layer security: https, nginx configuration optimization

system security

  • iptables rule optimization

  • Permission management: sudo settings

Safety optimization

  • ssh
  • selinux
  • time
  • Streamline boot service
  • Delete unnecessary users and groups
  • Clean up garbage regularly
  • Lock important configuration files
  • Hash important files and commands regularly

Performance optimization

  • tomcat performance tuning
  • CPU performance optimization
  • System resource parameter optimization

CI / CD related

Talk about your understanding of continuous integration (what is continuous integration)

Why use continuous integration?

Continuous integration implementation process?

What is a version control system?

Introduce jenkens? What is it? what's the effect?

Commonly used version control system? Is git better than svn?

Basic use of git?

git add

git commit

git status

git config

git branch

git can be rolled back by snapshot

Make a backup of gitlib through gitlib-rake gitlab: backup: create.

Monitoring related

zaabix related

Port of zabbix-server? (10051) Port of zabbix-agnet (10050)

zabbix-server、zabbix-server-mysql、zabbix-web-mysql、zabbix-agent之间关系

How to customize a monitoring item?

By default, the Zabbix-agent side works in passive mode. The so-called passive mode is to wait for the server side to pull data, rather than the agent side actively pushing data to the srever side.

nginx monitoring

How to monitor nginx

What can be judged by the sex monitored by nginx

redis monitoring

  1. Hit rate
  2. Connected customers
  3. Number of blocked connections
  4. Occupied memory
  5. Peak memory
  6. Master-slave state
  7. IO status

mysql monitoring

About msql

The following parameters are counted for the Innodb storage engine:

  1. The number of rows returned by the Innodb_rows_read select query;

  2. Innodb_rows_inserted The number of rows inserted by the Insert operation;

  3. Innodb_rows_updated The number of rows updated by the update operation;

  4. Innodb_rows_deleted The number of rows deleted by the delete operation;

    5. Monitor the status of the master and slave

  5. Slow_queries The number of slow queries

tomcat monitoring

tomcat can also have a status page, the status page is divided into three parts: jvm, http, jk

jvm: Free memory: free memory size Total memory: total memory size Max memory: maximum memory size

http **** protocol : The monitoring items here are similar to nginx

Guess you like

Origin www.cnblogs.com/yizhangheka/p/12699058.html