Yeti-Switch 配置
├── SEMS + yeti module（/etc/sems/sems.conf）—— 流量平面
│   ├── general {} —— 进程级参数
│   ├── signaling-interfaces {} —— SIP 信令监听
│   ├── media-interfaces {} —— RTP 媒体监听
│   └── modules {} —— 各功能模块（yeti/jsonrpc/redis/postgresql/...）
├── yeti-web（/opt/yeti-web/config/*.yml）—— 管理平面
│   ├── database.yml —— PostgreSQL 双库连接
│   ├── secrets.yml —— Rails secret_key_base
│   ├── yeti_web.yml —— 业务参数（OAuth、CDR、PDF、S3 等）
│   └── nginx.conf —— Nginx 反代 yeti-web.dist.nginx
├── Redis（/etc/redis/redis.conf）
├── PostgreSQL 18（routing + cdr 双库独立配置）
└── pgqd（CDR ticker）

general {
  stderr = no
  syslog_loglevel = 2
  syslog_facility = LOCAL0
  node_id = 1
  media_processor_threads = 8
  rtp_receiver_threads = 8
  session_processor_threads = 40
  sip_udp_server_threads = 2
  sip_tcp_server_threads = 2
  dead_rtp_time = 30
  symmetric_rtp_mode = packets
  symmetric_rtp_packets = 20
}

signaling-interfaces {
  interface <NAME> {
    default-media-interface = <MEDIA_IFACE_NAME>
    ip4 {
      sip-udp {
        address = <0.0.0.0 或 具体 IP>
        port = 5060
        use-raw-sockets = off   # on = 高性能原始套接字（可能需 CAP_NET_RAW）
      }
      sip-tcp {
        address = <IP> port = 5060
        connect-timeout = 2000
        static-client-port = on   # 固定 TCP 源端口
        idle-timeout = 900000     # 15 分钟
      }
    }
    # IPv6 类似：ip6 { sip-udp {...} sip-tcp {...} }
  }
}

media-interfaces {
  interface <NAME> {
    ip4 {
      rtp {
        address = <MEDIA_IP>
        low-port = 16384
        high-port = 32769
        dscp = 46                  # EF Expedited Forwarding
        use-raw-sockets = off
      }
    }
  }
}

routing {
  schema = switch22                 # PostgreSQL schema
  function = route_release          # 存储过程名
  init = init                       # 初始化存储过程
  pass_input_interface_name = true  # 把输入接口名传给路由脚本
  new_codec_groups = true           # 新版 codec group 逻辑

  headers {
    header(x-yeti-auth)
    header(diversion, json, uri_json_array)
    header(x-orig-ip, inet)
    header(x-orig-port, integer)
    header(x-orig-proto, smallint)
    # ... 其他透传 header
  }

  master_pool { host = ... port = 5432 name = yeti user = ... pass = ... size = 4 }
  failover_to_slave = false
  slave_pool  { host = ... port = 5432 name = yeti user = ... pass = ... size = 4 }
}

cdr {
  pool_size = 2
  auth_pool_size = 2
  schema = switch
  function = writecdr
  master { host = ... port = 5432 name = cdr user = ... pass = ... }
  failover_to_slave = false
  slave  { host = ... port = 5432 name = cdr user = ... pass = ... }
  batch_size = 1            # 实时计费通常 1（每次通话立即写）
  batch_timeout = 5000      # ms，batch_size 未到上限时的等待上限
  auth_batch_size = 1       # 鉴权查询 batch
  auth_batch_timeout = 20000
}

resources {
  reject_on_error = false
  write { hosts = { 127.0.0.1:6379 } timeout = 500 }
  read  { hosts = { 127.0.0.1:6379 } timeout = 1000 }
}

module "jsonrpc" {
  listen { address = 127.0.0.1 port = 7080 }
  server_threads = 1
  map(yeti.request.registrations.reload, yeti.request.db_states.reload)
  # ... 约 10 条 reload 映射
}

module "redis" {
  max_batch_size = 10
  batch_timeout = 100
  max_queue_size = 1000
}

module "registrar" {
  redis {
    write { hosts = { 127.0.0.1:6379 } }
    read  { hosts = { 127.0.0.1:6379 } }
  }
  headers = { x-orig-ip, x-orig-port, x-orig-proto }
}

production:
  primary:
    adapter: postgresql
    encoding: unicode
    database: yeti
    username: yeti
    password: ${DB_PRIMARY_PASS}
    host: 127.0.0.1
    port: 5432
    schema_search_path: 'gui, public, switch, billing, class4, runtime_stats, sys, logs, data_import'
    min_messages: notice
    pool: 10                  # Rails 连接池，SEMS pool_size 另算
    # prepared_statements: false   # 高并发下可关
  cdr:
    adapter: postgresql
    encoding: unicode
    database: cdr
    username: cdr
    password: ${DB_CDR_PASS}
    host: 127.0.0.1
    port: 5432
    schema_search_path: 'cdr, reports, billing'
    min_messages: notice
    pool: 10
    migrations_paths: db/cdr_migrate

production:
  secret_key_base: <128 位随机字符串>   # pwgen -s 128 1 生成

# 数据库自动维护
maintenance:
  auto_vacuum: true
  autovacuum_max_workers: 3
  autovacuum_naptime: 1min

# CDR 分区
cdr:
  retention_days: 90          # CDR 自动保留天数
  partition_interval: 1month  # CDR 按月分区

# 邮件（Invoice / Email Log）
smtp_connection:
  host: smtp.example.com
  port: 587
  username: invoice@example.com
  password: ${SMTP_PASS}
  enable_starttls_auto: true

# OAuth/OIDC（1.15 新增）
oauth:
  oidc:
    enabled: false

# PDF 生成（1.15 新增 yeti-pdf 外部服务）
pdf:
  service_url: http://yeti-pdf.local:5000

# S3 存储（1.15 新增：CDR / Invoice 归档）
storage:
  s3:
    enabled: false
    endpoint: s3.example.com
    bucket: yeti-archive
    access_key_id: ${S3_KEY}
    secret_access_key: ${S3_SECRET}

# API 日志
api_log:
  enabled: true
  retention_days: 30

# 来自 /opt/yeti-web/config/yeti-web.dist.nginx，需根据生产调整
server {
  listen 80 default_server;
  # Admin API 默认屏蔽，生产改 allow
  location /api/rest/admin/ {
    allow <管理网段>;
    deny all;
    proxy_pass http://unix:/run/yeti/yeti-unicorn.sock;
  }
  location /api/rest/customer/ {
    proxy_pass http://unix:/run/yeti/yeti-unicorn.sock;
  }
  location / {
    proxy_pass http://unix:/run/yeti/yeti-unicorn.sock;
  }
}

sed -i 's/^notify-keyspace-events.*/notify-keyspace-events "Egx"/' /etc/redis/redis.conf
systemctl restart redis-server

# 验证
redis-cli CONFIG GET notify-keyspace-events
# "notify-keyspace-events" "Egx"

# postgresql.conf 生产关键项
max_connections = 500                 # 足够 yeti-web(10) + SEMS(8) + pgqd(2) + 运维
shared_buffers = 4GB                  # 25% 物理内存（PostgreSQL 经典建议）
effective_cache_size = 12GB           # 剩余内存估计
work_mem = 32MB                       # 排序/哈希中间态
maintenance_work_mem = 2GB            # VACUUM / CREATE INDEX
synchronous_commit = on               # 电信级计费不建议 off
wal_level = replica
max_wal_senders = 10
wal_buffers = 64MB                    # 高写入 cdr 库建议加大
checkpoint_completion_target = 0.9
max_wal_size = 8GB
min_wal_size = 2GB

# cdr 库额外：高写入优化
wal_buffers = 256MB
synchronous_commit = on               # 计费不建议关
# 路由库可改为 off 降低小事务延迟（有丢失风险）

# routing 库（SEMS + yeti-web 本机访问）
host    yeti      yeti-web      127.0.0.1/32    scram-sha-256
host    yeti      yeti          127.0.0.1/32    scram-sha-256
# cdr 库（SEMS + yeti-web 本机访问）
host    cdr       cdr           127.0.0.1/32    scram-sha-256
# 跨机部署时加对应网段

# /etc/pgqd.ini
[pgqd]
base_connstr = host=127.0.0.1 port=5432 dbname=cdr user=cdr password=q1w2e3r4
initial_database = cdr
database_list = cdr
pidfile = /var/run/postgresql/pgqd.pid

# sems.conf 关键段
general { session_processor_threads = 20 media_processor_threads = 4 rtp_receiver_threads = 4 }
media-interfaces { rtp low-port = 16384 high-port = 24576 }   # ≈4000 并发
modules.module "yeti" {
  master_pool { size = 4 } cdr { batch_size = 1 } resources { write.timeout = 500 }
}
# database.yml pool = 5 / Redis 4GB / shared_buffers = 1GB

# sems.conf
general { session_processor_threads = 60 media_processor_threads = 16 rtp_receiver_threads = 16 }
media-interfaces { rtp low-port = 16384 high-port = 32768 }   # ≈8000 并发
modules.module "yeti" {
  master_pool { size = 16 } cdr { pool_size = 4 batch_size = 1 batch_timeout = 3000 }
  resources { reject_on_error = true }
}
# yeti-web database.yml pool = 10
# Redis maxmemory = 8GB
# PostgreSQL routing: shared_buffers = 8GB / cdr: shared_buffers = 4GB + wal_buffers = 256MB
# pgqd 与 cdr 同机

# 每个 SEMS 节点相同，node_id / pop_id 不同
# SEMS 节点 media_interfaces.address = 节点具体 IP（非 0.0.0.0）
# routing 库 PostgreSQL streaming replication + failovermanager
# cdr 库独立机，pgqd 常驻
# Redis 哨兵 3 节点，SEMS modules.module "redis" hosts 写 3 个地址
# yeti-web 双机 active-passive（keepalived）