[root@localhost ~]# docker run -d -p 80:80 --name webserver_nginx nginx

[root@localhost nginx]# docker run --name webserver_nginx_tz -p 80:80 -v /root/nginx:/usr/share/nginx/html:ro -d nginx

net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter =1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296

net.ipv4.tcp_max_tw_buckets = 6000   #timewait的数量
net.ipv4.tcp_sack = 1 #有选择的应答
net.ipv4.tcp_window_scaling = 1 #设置tcp/ip会话滑动窗口是否可变，1可变，0不可变。开启使滑动窗口大小增加数个数量级，提高数据传输能力
net.ipv4.tcp_rmem = 4096873804194304  #tcp接收缓冲区
net.ipv4.tcp_wmem = 4096163844194304  #tcp发送缓冲区
net.core.wmem_default = 8388608#发送套接字缓冲区大小的缺省值（字节单位）
net.core.rmem_default = 8388608 #接收套接字缓冲区大小的缺省值
net.core.rmem_max = 16777216   #接收套接字缓冲区大小的最大值
net.core.wmem_max = 16777216  #发送套接字缓冲区大小的最大值
net.core.netdev_max_backlog = 262144   #允许送到队列的数据包最大数目
net.core.somaxconn = 262144#web应用中listen函数的backlog（积压）
net.ipv4.tcp_max_orphans = 3276800  #最多有多少个TCP套接字不被关联到任何一个用户的句柄上
net.ipv4.tcp_max_syn_backlog = 262144  #记录那些尚未收到客户端确认信息的连接请求最大值，表示SYN队列的长度，可以容纳更多等待连接的网络连接数
net.ipv4.tcp_timestamps = 0  #时间戳关闭
net.ipv4.tcp_synack_retries = 1   #这个设置决定了内核放弃连接之前发送SYN+ACK包的数量
net.ipv4.tcp_syn_retries = 1#内核放弃连接之前发送SYN包的数量
net.ipv4.tcp_tw_recycle = 1 #timewait快速回收
net.ipv4.tcp_tw_reuse = 1   #timewait 用于新的连接
net.ipv4.tcp_mem =1835008 2752512 3670016 #out of socket memory
net.ipv4.tcp_fin_timeout = 15 #保持在FIN-WAIT-2状态的时间，对端出错永不关闭甚至当机缺省值是60s
net.ipv4.tcp_keepalive_time = 30#keepalived 发送消息的频度
net.ipv4.ip_local_port_range = 102465000  #端口范围