ss-panel-v3-mod_Uim后端部署配置文件详解
此文章为后端配置文件userapiconfig.py的详细介绍，如果想知道如何部署后端，可以参考此文：基于sspanelv3魔改后端部署教程
vi userapiconfig.py
配置文件说明如下：
# Config
#节点ID
NODE_ID = 1
#自动化测速，为0不测试，此处以小时为单位，要和 ss-panel 设置的小时数一致
SPEEDTEST = 6
#云安全，自动上报与下载封禁IP，1为开启，0为关闭
CLOUDSAFE = 1
#自动封禁SS密码和加密方式错误的 IP，1为开启，0为关闭
ANTISSATTACK = 0
#是否接受上级下发的命令，如果你要用这个命令，请参考我(此处指 glzjin )之前写的东西，公钥放在目录下的 ssshell.asc
AUTOEXEC = 1
#单端口多用户设置，看重大更新说明
MU_SUFFIX = 'zhaoj.in'
MU_REGEX = '%5m%id.%suffix'
#不明觉厉
SERVER_PUB_ADDR = '127.0.0.1' # mujson_mgr need this to generate ssr link
#访问面板方式
API_INTERFACE = 'modwebapi' #glzjinmod (数据库方式连接)，modwebapi (http api)
#mudb，不要管
MUDB_FILE = 'mudb.json'
# HTTP API 的相关信息，看重大更新说明。
# 面板地址，区分https和http
WEBAPI_URL = 'https://zhaoj.in'
# 此处为.config.php中的muKey
WEBAPI_TOKEN = 'glzjin'
# Mysql 数据库连接信息
MYSQL_HOST = '127.0.0.1'
MYSQL_PORT = 3306
MYSQL_USER = 'ss'
MYSQL_PASS = 'ss'
MYSQL_DB = 'shadowsocks'
# 是否启用SSL连接，0为关，1为开
MYSQL_SSL_ENABLE = 0
# 客户端证书目录
MYSQL_SSL_CERT = '/root/shadowsocks/client-cert.pem'
MYSQL_SSL_KEY = '/root/shadowsocks/client-key.pem'
MYSQL_SSL_CA = '/root/shadowsocks/ca.pem'
# API，不用管
API_HOST = '127.0.0.1'
API_PORT = 80
API_PATH = '/mu/v2/'
API_TOKEN = 'abcdef'
API_UPDATE_TIME = 60
# Manager 不用管
MANAGE_PASS = 'ss233333333'
#if you want manage in other server you should set this value to global ip
MANAGE_BIND_IP = '127.0.0.1'
#make sure this port is idle
MANAGE_PORT = 23333
#节点ID
NODE_ID = 1
#自动化测速，为0不测试，此处以小时为单位，要和 ss-panel 设置的小时数一致
SPEEDTEST = 6
#云安全，自动上报与下载封禁IP，1为开启，0为关闭
CLOUDSAFE = 1
#自动封禁SS密码和加密方式错误的 IP，1为开启，0为关闭
ANTISSATTACK = 0
#是否接受上级下发的命令，如果你要用这个命令，请参考我(此处指 glzjin )之前写的东西，公钥放在目录下的 ssshell.asc
AUTOEXEC = 1
#单端口多用户设置，看重大更新说明
MU_SUFFIX = 'zhaoj.in'
MU_REGEX = '%5m%id.%suffix'
#不明觉厉
SERVER_PUB_ADDR = '127.0.0.1' # mujson_mgr need this to generate ssr link
#访问面板方式
API_INTERFACE = 'modwebapi' #glzjinmod (数据库方式连接)，modwebapi (http api)
#mudb，不要管
MUDB_FILE = 'mudb.json'
# HTTP API 的相关信息，看重大更新说明。
# 面板地址，区分https和http
WEBAPI_URL = 'https://zhaoj.in'
# 此处为.config.php中的muKey
WEBAPI_TOKEN = 'glzjin'
# Mysql 数据库连接信息
MYSQL_HOST = '127.0.0.1'
MYSQL_PORT = 3306
MYSQL_USER = 'ss'
MYSQL_PASS = 'ss'
MYSQL_DB = 'shadowsocks'
# 是否启用SSL连接，0为关，1为开
MYSQL_SSL_ENABLE = 0
# 客户端证书目录
MYSQL_SSL_CERT = '/root/shadowsocks/client-cert.pem'
MYSQL_SSL_KEY = '/root/shadowsocks/client-key.pem'
MYSQL_SSL_CA = '/root/shadowsocks/ca.pem'
# API，不用管
API_HOST = '127.0.0.1'
API_PORT = 80
API_PATH = '/mu/v2/'
API_TOKEN = 'abcdef'
API_UPDATE_TIME = 60
# Manager 不用管
MANAGE_PASS = 'ss233333333'
#if you want manage in other server you should set this value to global ip
MANAGE_BIND_IP = '127.0.0.1'
#make sure this port is idle
MANAGE_PORT = 23333
修改文件句柄限制
cat >> /etc/security/limits.conf << EOF
* soft nofile 51200
* hard nofile 51200
EOF
* soft nofile 51200
* hard nofile 51200
EOF
然后执行
ulimit -n 51200
优化内核参数
cat >> /etc/sysctl.conf << EOF
fs.file-max = 51200
net.core.rmem_max = 67108864
net.core.wmem_max = 67108864
net.core.netdev_max_backlog = 250000
net.core.somaxconn = 4096
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.ip_local_port_range = 10000 65000
net.ipv4.tcp_max_syn_backlog = 8192
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.tcp_fastopen = 3
net.ipv4.tcp_rmem = 4096 87380 67108864
net.ipv4.tcp_wmem = 4096 65536 67108864
net.ipv4.tcp_mtu_probing = 1
EOF
fs.file-max = 51200
net.core.rmem_max = 67108864
net.core.wmem_max = 67108864
net.core.netdev_max_backlog = 250000
net.core.somaxconn = 4096
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.ip_local_port_range = 10000 65000
net.ipv4.tcp_max_syn_backlog = 8192
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.tcp_fastopen = 3
net.ipv4.tcp_rmem = 4096 87380 67108864
net.ipv4.tcp_wmem = 4096 65536 67108864
net.ipv4.tcp_mtu_probing = 1
EOF
然后 执行
sysctl -p
开启 TCP Fast Open
确认服务器内核 > 3.7
确认内核选项 net.ipv4.tcp_fastopen 为 3.
user-config.json 里 fast_open 需要为 true.
确认内核选项 net.ipv4.tcp_fastopen 为 3.
user-config.json 里 fast_open 需要为 true.
继续阅读