MongoDB的登錄測試

mongo 命令

mongodb提供一個客戶端，類似于mysql提供的客戶端命令

#默認連接到127.0.0.1:27017

/usr/local/mongodb/bin/mongo

mongodb啟動優化說明

WARNING: Using the XFS filesystem is strongly recommended with the WiredTiger storage engine

建議使用 xfs 文件系統

WARNING: Access control is not enabled for the database.

Read and write access to data and configuration is unrestricted.

建議開啟權限控制

WARNING: You are running this process as the root user, which is not recommended.

不建議root用戶啟動

WARNING: /sys/kernel/mm/transparent_hugepage/enabled is ‘always’.

We suggest setting it to ‘never’

WARNING: /sys/kernel/mm/transparent_hugepage/defrag is ‘always’.

We suggest setting it to ‘never’

解決：mongodb啟動參數優化1，禁止內存巨大頁

echo ‘never’ >/sys/kernel/mm/transparent_hugepage/enabled

echo ‘never’ >/sys/kernel/mm/transparent_hugepage/defrag

WARNING: soft rlimits too low. rlimits set to 3895 processes, 65535 files. Number of processes should be at least 32767.5 : 0.5 times number of files.

內核進程數限制放開/etc/security/limits.conf，需要重新登錄

* – nproc 65536

使用普通用戶啟動mongodb

useradd mongodb -s /sbin/nologin

chown -R mongodb:mongodb /data/mongodb/ /usr/local/mongodb/

su – mongodb -s /bin/bash

/usr/local/mongodb/bin/mongod -f /data/mongodb/27017/mongodb.conf

設置進程數據限制

centos7默認還有進程數限制/etc/security/limits.d/20-nproc.conf

[root@5e7b4039fa6f ~]# more /etc/security/limits.d/20-nproc.conf

# Default limit for number of user’s processes to prevent

# accidental fork bombs.

# See rhbz #432903 for reasoning.

* soft nproc unlimited

訪問控制建議設置ip白名單訪問