Результат выполнения команды iptables-save
luna279:~/era/game# iptables-save
# Generated by iptables-save v1.4.12.1 on Thu Nov 17 22:42:57 2011
*mangle
:PREROUTING ACCEPT [2542646:159966090]
:INPUT ACCEPT [2542605:159958109]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2873852:1635920342]
:POSTROUTING ACCEPT [2873851:1635920302]
COMMIT
# Completed on Thu Nov 17 22:42:57 2011
# Generated by iptables-save v1.4.12.1 on Thu Nov 17 22:42:57 2011
*nat
:PREROUTING ACCEPT [6827:647132]
:INPUT ACCEPT [1211:60960]
:OUTPUT ACCEPT [306:13579]
:POSTROUTING ACCEPT [306:13579]
COMMIT
# Completed on Thu Nov 17 22:42:57 2011
# Generated by iptables-save v1.4.12.1 on Thu Nov 17 22:42:57 2011
*filter
:INPUT DROP [2822:441641]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
:lim1 - [0:0]
-A INPUT -p tcp -m tcp --dport 10382 --tcp-flags FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above 20 --connlimit-mask 32 -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 2106 --tcp-flags FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above 10 --connlimit-mask 32 -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above 2 --connlimit-mask 32 -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j DROP
-A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j REJECT --reject-with icmp-port-unreachable
-A INPUT -m state --state INVALID -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2106 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2106 -m recent --update --seconds 2 --name DEFAULT --rsource -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2106 -m recent --set --name DEFAULT --rsource -j ACCEPT
-A INPUT -p tcp -m tcp --dport 10382 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10382 -m recent --update --seconds 2 --name DEFAULT --rsource -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10382 -m recent --set --name DEFAULT --rsource -j ACCEPT
-A FORWARD -m state --state INVALID -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
-A OUTPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j REJECT --reject-with icmp-port-unreachable
COMMIT
# Completed on Thu Nov 17 22:42:57 2011
Так же описание железа
lspci
luna279:~/era/game# lspci
00:00.0 Host bridge: Advanced Micro Devices [AMD] RS880 Host Bridge
00:01.0 PCI bridge: Fujitsu Technology Solutions Device 9602
00:0a.0 PCI bridge: Advanced Micro Devices [AMD] RS780/RS880 PCI to PCI bridge (PCIE port 5)
00:11.0 SATA controller: ATI Technologies Inc SB7x0/SB8x0/SB9x0 SATA Controller [AHCI mode]
00:12.0 USB Controller: ATI Technologies Inc SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:12.1 USB Controller: ATI Technologies Inc SB7x0 USB OHCI1 Controller
00:12.2 USB Controller: ATI Technologies Inc SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:13.0 USB Controller: ATI Technologies Inc SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:13.1 USB Controller: ATI Technologies Inc SB7x0 USB OHCI1 Controller
00:13.2 USB Controller: ATI Technologies Inc SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:14.0 SMBus: ATI Technologies Inc SBx00 SMBus Controller (rev 3c)
00:14.1 IDE interface: ATI Technologies Inc SB7x0/SB8x0/SB9x0 IDE Controller
00:14.3 ISA bridge: ATI Technologies Inc SB7x0/SB8x0/SB9x0 LPC host controller
00:14.4 PCI bridge: ATI Technologies Inc SBx00 PCI to PCI Bridge
00:18.0 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor HyperTransport Configuration
00:18.1 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor Address Map
00:18.2 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor DRAM Controller
00:18.3 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor Miscellaneous Control
00:18.4 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor Link Control
01:05.0 VGA compatible controller: ATI Technologies Inc RS880 [Radeon HD 4200]
01:05.1 Audio device: ATI Technologies Inc RS880 Audio Device [Radeon HD 4200]
02:00.0 Ethernet controller: Broadcom Corporation NetLink BCM57780 Gigabit Ethernet PCIe (rev 01)
Процессор
luna279:~/era/game# lscpu
Architecture: x86_64
CPU op-mode(s): 64-bit
CPU(s): 4
Thread(s) per core: 1
Core(s) per socket: 4
CPU socket(s): 1
NUMA node(s): 1
Vendor ID: AuthenticAMD
CPU family: 16
Model: 5
Stepping: 3
CPU MHz: 2295.059
Virtualization: AMD-V
L1d cache: 64K
L1i cache: 64K
L2 cache: 512K
Повторюсь, оперативной памяти 12Gb.
Канал 100bm.
На порту 80 стоит вебсервер, посещаемость - 3к хостов в 24 часа. (где то 100 юзеров одновременно, иногда и 300, но в основном меньше 100).
На порту 2106 стоит сервер авториации. Его задача - проверить логин и пароль клиента. (думаю больше 5 одновременных конектов к нему не надо).
На порту 10382 стоит основной сервер. К нему может быть и до 1000 одновременных подключений.
Все пакеты на порте 2106 идут в BlowFish шифровании + еще кое что
На 10382 все пакеты защифрованы кое каким ключем, xor
Вроде всё что мог сказать - сказал ))))