sysctl.d: total 24 drwxr-xr-x. 2 root root 80 Feb 25 02:53 . drwxr-xr-x. 121 root root 12288 Mar 11 18:18 .. -rw-r--r--. 1 root root 21 Feb 25 02:53 99-fix-nr-open.conf -rw-r--r--. 1 root root 1988 Feb 24 14:50 99-optimizer.conf lrwxrwxrwx. 1 root root 14 Jan 26 04:30 99-sysctl.conf -> ../sysctl.conf sysctl.d files: fs.nr_open = 4194304 # === cpanel_optimizer.sh - High Performance Sysctl === # --- FILE SYSTEM --- fs.file-max = 4000000 fs.nr_open = 4000000 fs.inotify.max_user_watches = 1048576 fs.inotify.max_user_instances = 8192 fs.aio-max-nr = 1048576 # --- NETWORK CORE --- net.core.somaxconn = 65535 net.core.netdev_max_backlog = 65535 net.core.rmem_max = 16777216 net.core.wmem_max = 16777216 net.core.rmem_default = 1048576 net.core.wmem_default = 1048576 net.core.optmem_max = 65536 net.core.netdev_budget = 600 net.core.netdev_budget_usecs = 8000 # --- TCP --- net.ipv4.tcp_max_syn_backlog = 65535 net.ipv4.tcp_max_tw_buckets = 2000000 net.ipv4.tcp_tw_reuse = 1 net.ipv4.tcp_fin_timeout = 10 net.ipv4.tcp_slow_start_after_idle = 0 net.ipv4.tcp_keepalive_time = 60 net.ipv4.tcp_keepalive_intvl = 10 net.ipv4.tcp_keepalive_probes = 6 net.ipv4.tcp_rmem = 4096 1048576 16777216 net.ipv4.tcp_wmem = 4096 65536 16777216 net.ipv4.tcp_mtu_probing = 1 net.ipv4.tcp_syncookies = 1 net.ipv4.tcp_rfc1337 = 1 net.ipv4.tcp_sack = 1 net.ipv4.tcp_timestamps = 1 net.ipv4.tcp_window_scaling = 1 net.ipv4.tcp_fastopen = 3 net.ipv4.tcp_max_orphans = 15946 net.ipv4.ip_local_port_range = 1024 65535 # --- TCP Congestion (BBR) --- net.core.default_qdisc = fq net.ipv4.tcp_congestion_control = bbr # --- CONNTRACK --- net.netfilter.nf_conntrack_max = 4194304 net.netfilter.nf_conntrack_tcp_timeout_established = 600 net.netfilter.nf_conntrack_tcp_timeout_time_wait = 30 # --- VIRTUAL MEMORY --- vm.swappiness = 1 vm.dirty_ratio = 15 vm.dirty_background_ratio = 3 vm.dirty_expire_centisecs = 500 vm.dirty_writeback_centisecs = 100 vm.vfs_cache_pressure = 50 vm.min_free_kbytes = 65536 vm.overcommit_memory = 1 vm.max_map_count = 262144 # --- SECURITY --- net.ipv4.conf.all.rp_filter = 1 net.ipv4.conf.default.rp_filter = 1 net.ipv4.conf.all.accept_redirects = 0 net.ipv4.conf.default.accept_redirects = 0 net.ipv4.conf.all.send_redirects = 0 net.ipv4.icmp_echo_ignore_broadcasts = 1 net.ipv4.icmp_ignore_bogus_error_responses = 1 # sysctl settings are defined through files in # /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/. # # Vendors settings live in /usr/lib/sysctl.d/. # To override a whole file, create a new file with the same in # /etc/sysctl.d/ and put new settings there. To override # only specific settings, add a file with a lexically later # name in /etc/sysctl.d/ and put new settings there. # # For more information, see sysctl.conf(5) and sysctl.d(5). sysctl.conf: # sysctl settings are defined through files in # /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/. # # Vendors settings live in /usr/lib/sysctl.d/. # To override a whole file, create a new file with the same in # /etc/sysctl.d/ and put new settings there. To override # only specific settings, add a file with a lexically later # name in /etc/sysctl.d/ and put new settings there. # # For more information, see sysctl.conf(5) and sysctl.d(5). mysql TCP no pass: ERROR 2002 (HY000): Received error packet before completion of TLS handshake. The authenticity of the following error cannot be verified: 1130 - Host '127.0.0.1' is not allowed to connect to this MariaDB server (ret:1) mysql TCP with pass: ERROR 2002 (HY000): Received error packet before completion of TLS handshake. The authenticity of the following error cannot be verified: 1130 - Host '127.0.0.1' is not allowed to connect to this MariaDB server (ret:1) optimizer scripts: -rwxr-xr-x. 1 root root 1524 Feb 9 2022 /usr/local/cpanel/scripts/disable_sqloptimizer -rwxr-xr-x. 1 root root 1609 Feb 9 2022 /usr/local/cpanel/scripts/enable_sqloptimizer -rwxr-xr-x. 1 root root 3975 Feb 9 2022 /usr/local/cpanel/scripts/optimize_eximstats -rwxr-xr-x. 1 root root 8007 Feb 9 2022 /usr/local/cpanel/scripts/vps_optimizer optimizer configs: rc.local: #!/bin/bash # THIS FILE IS ADDED FOR COMPATIBILITY PURPOSES # # It is highly advisable to create own systemd services or udev rules # to run scripts during boot instead of using this file. # # In contrast to previous versions due to parallel execution during boot # this script will NOT be run after all other services. # # Please note that you must run 'chmod +x /etc/rc.d/rc.local' to ensure # that this script will be executed during boot. touch /var/lock/subsys/local rc.local stat: File: /etc/rc.d/rc.local Size: 474 Blocks: 8 IO Block: 4096 regular file Device: fd00h/64768d Inode: 134305714 Links: 1 Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root) Context: system_u:object_r:initrc_exec_t:s0 Access: 2026-03-11 09:10:18.205332059 -0400 Modify: 2026-01-26 04:30:26.000000000 -0500 Change: 2026-02-24 13:59:14.850887391 -0500 Birth: 2026-02-23 17:20:23.877356152 -0500