edit some md

docs/tech/Commands-for-Server-Operation-and-Maintenance.md

@@ -50,6 +50,8 @@ Maria:
 
 ## 安装业务程序 (按需安装)
 
+**首先，通过Maria管理工具安装需要的业务工具: `maria` - ++2++**
+
 ### Traefik
 
 请到 [Releases - traefik/traefik](https://github.com/traefik/traefik/releases/latest) 检查最新版本。
@@ -204,14 +206,43 @@ Maria 非标端口开放表:
 ) | crontab -u $(whoami) -
 ```
 
-## 进入 Docker 容器的终端
+## Linux 内核网络栈调优 (可选)
+
+编辑 `/etc/sysctl.conf`，在末尾添加以下内容：
+
+```
+net.ipv4.tcp_tw_reuse = 1
+net.ipv4.ip_local_port_range = 1024 65535
+net.ipv4.tcp_rmem = 16384 262144 8388608
+net.ipv4.tcp_wmem = 32768 524288 16777216
+net.core.somaxconn = 8192
+net.core.rmem_max = 16777216
+net.core.wmem_max = 16777216
+net.core.wmem_default = 2097152
+net.ipv4.tcp_max_tw_buckets = 5000
+net.ipv4.tcp_max_syn_backlog = 10240
+net.core.netdev_max_backlog = 10240
+net.netfilter.nf_conntrack_max = 1000000
+net.netfilter.nf_conntrack_tcp_timeout_established = 7200
+net.core.default_qdisc = fq_codel
+net.ipv4.tcp_congestion_control = bbr
+net.ipv4.tcp_slow_start_after_idle = 0
+```
+
+刷新配置: 
 
 ``` bash
-  sudo docker exec -it [container_name] /bin/bash
-  # Or
-  sudo docker exec -it [container_name] /bin/sh
+sysctl -p
 ```
 
+验证是否成功启动 BBR：
+
+``` bash
+lsmod | grep bbr
+```
+
+若出现 `tcp_bbr` 的输出，说明开启成功。
+
 ## 配置 SSH Action
 
 ### GitHub Actions
@@ -245,4 +276,12 @@ Maria 非标端口开放表:
   sudo echo "[host_ip]:[/path/on/host] [/path/on/client] nfs auto,nofail,noatime,nolock,intr,tcp,actimeo=1800 0 0" >> /etc/fstab
   #  Unmount NFS
   sudo umount [/path/on/client]
-```
+```
+
+## 进入 Docker 容器的终端
+
+``` bash
+  sudo docker exec -it [container_name] /bin/bash
+  # Or
+  sudo docker exec -it [container_name] /bin/sh
+```