Gano ainihin iyakar bayanin fayil na Squid
Karanta iyakokin tsarin wakilin da ke gudana kafin canza saitunan PAM ko kwafin ƙayyadadden darajar nofile daga girke-girken iya aiki.
Duba daemon ɗin da ke gudana kafin ka amince da ulimit -n na harsashin shiga. Don shigarwa da ke amfani da squid.service, fara da:
systemctl show squid.service -p MainPID -p LimitNOFILE
systemctl cat squid.serviceKaranta /proc/PID/limits da ainihin ID ɗin tsari. A cikin turawar matakai da yawa, duba ma'aikacin da ya dace kuma. Darajar da aka ajiye a cikin saitin ba hujja ba ce cewa wannan tsari ya gaje ta.
| Sarrafawa | Iyaka |
|---|---|
Harsashi ulimit da PAM limits.conf | Zuriyar harsashin ko zamanun da suke amfani da saitin PAM da gaske |
systemd LimitNOFILE= | Matakan da aka fara ƙarƙashin manufar albarkatun wannan sabis ɗin |
Squid max_filedescriptors, inda ake tallafawa | Iyakar manhaja a cikin iyakokin tsarin aiki |
Sabis ɗin tsarin ba ya karɓar gyare-gyaren PAM don kawai mai gudanarwa ya canza fayil ɗin. Yi amfani da drop-in na musamman na sabis ɗin idan canza iyakar systemd ɗinsa ya dace. Squid ya rubuta cewa max_filedescriptors yana buƙatar sake kunnawa don canzawa; idan an bar shi ba a saita ba, yana gado taushin iyakar OS.
Auna iyakar don bayanan fayil, ba don masu amfani ba. Abokan ciniki na iya riƙe soket da yawa, kuma hanyoyin fita, rajistoci da bututun taimako ma suna cinye bayanan fayil. Ɗaga iyakar yana ba da damar ƙarin amfani ba tare da tanadin adadin RAM mai tsayi ga kowane bayanin fayil mai yiwuwa ba. Ko tsohon kiyasin ƙwaƙwalwar ajiya ga kowane soket ko 65,535 ba buƙatun iya aiki na duniya ba ne ko rufin Linux ba.
Bayan canjin sabis ɗin, kwatanta iyakokin sabon tsari da ƙimar da aka yi niyya. Idan gazawa ta faru da ƙasa da su sosai, bincika albarkatun da ake ƙarewa da gaske.