一键脚本【单线电信｜三网兼容优化】

一键脚本【单线电信｜三网兼容优化】

# 备份原配置
cp /etc/sysctl.conf /etc/sysctl.conf.bak

# 写入三网跨网优化参数
cat >> /etc/sysctl.conf <<EOF

# ===== 单线电信 移动联通跨网访问优化（纯原生无加速）=====
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_keepalive_probes = 3

net.core.somaxconn = 4096
net.ipv4.tcp_max_syn_backlog = 4096
net.ipv4.tcp_max_tw_buckets = 5000

net.ipv4.ip_local_port_range = 1024 65535
net.core.rmem_default = 262144
net.core.wmem_default = 262144
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216

# 解决跨网丢包、握手慢
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_retries2 = 8
EOF

# 生效
sysctl -p

防火墙优化

# 优化防火墙连接追踪，降低跨网延迟
echo "net.nf_conntrack_max = 65535" >> /etc/sysctl.conf
sysctl -p

如果不想用，恢复默认

cp /etc/sysctl.conf.bak /etc/sysctl.conf
sysctl -p

执行这个看一下加载参数

sysctl net.ipv4.tcp_fin_timeout net.core.somaxconn

一次性成功命令

# 先临时解锁文件
chattr -i /etc/sysctl.conf

# 清空旧配置，写入完整优化参数
cat > /etc/sysctl.conf <<EOF
# ===== 单线电信 移动联通跨网访问优化（纯原生无加速）=====
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_keepalive_probes = 3

net.core.somaxconn = 4096
net.ipv4.tcp_max_syn_backlog = 4096
net.ipv4.tcp_max_tw_buckets = 5000

net.ipv4.ip_local_port_range = 1024 65535
net.core.rmem_default = 262144
net.core.wmem_default = 262144
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216

# 解决跨网丢包、握手慢
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_retries2 = 8

net.nf_conntrack_max = 65535
EOF

# 生效配置
sysctl -p

# 重新上锁
chattr +i /etc/sysctl.conf

验证成功标识

sysctl net.ipv4.tcp_fin_timeout net.core.somaxconn net.ipv4.tcp_syn_retries

只要是这个正确的方案.说明就成功了

net.ipv4.tcp_fin_timeout = 15
net.core.somaxconn = 4096
net.ipv4.tcp_syn_retries = 2