From ed2be93b5f2ecaee63e49b9f2c3290cef52f8e5e Mon Sep 17 00:00:00 2001
From: kappa <kappa@inouter.com>
Date: Mon, 6 Apr 2026 09:13:39 +0900
Subject: [PATCH] =?UTF-8?q?netbis:=20NPM-4=20=ED=8A=9C=EB=8B=9D,=20DDoS=20?=
 =?UTF-8?q?=EB=8C=80=EC=9D=91=20=EC=9D=B4=EB=A0=A5=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 services/netbis.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/services/netbis.md b/services/netbis.md
index 60e340e..660db80 100644
--- a/services/netbis.md
+++ b/services/netbis.md
@@ -216,6 +216,11 @@ Workers Paid에 포함. CrowdSec Worker Bouncer 요청 로그를 R2에 저장 
 - TCP BBR, conntrack 262144, fin_timeout 10s, keepalive 300s, port range 1024-65535
 - limits.conf nofile 655360 (Docker 컨테이너 반영은 compose ulimits 추가 필요, 서비스 중이라 미적용)
 
+### NPM-4 추가 튜닝 (2026-04-05)
+- 커널: tcp_tw_reuse=1, rmem_max/wmem_max 16MB, tcp_max_tw_buckets 131072, tcp_max_orphans 32768
+- Nginx: worker_connections 10240, proxy_buffers 16 32k, keepalive_requests 1000, open_file_cache
+- real_ip_header: X-Real-IP → CF-Connecting-IP (컨테이너 내 sed, 재시작 시 초기화 주의)
+
 ## 유사시 전환 절차
 
 1. Cloudflare DNS에서 각 도메인 A 레코드를 `139.162.71.52`로 변경 (수동)