see http://sueboy.blogspot.tw/2017/11/nginx-proxy-pass-best-practices.html http://sueboy.blogspot.tw/2017/11/nginx-proxy-pass-best-practices-2-for.html server { listen 80; server_name aaaa.bbbbb.com; location / { proxy_http_version 1.1; #proxy_set_header Upgrade $http_upgrade; #proxy_set_header Connection “upgrade”; proxy_pass http://xxx.xxx.xxx.xxx:80; } } proxy_redirect off; proxy_buffering off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Original-Host $http_host; proxy_set_header X-Original-Scheme $scheme; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Port $server_port; client_max_body_size 10m; client_body_buffer_size 128k; # client_body_temp_path /var/nginx/client_body_temp; proxy_connect_timeout 90; proxy_send_timeout 90; proxy_read_timeout 90; #proxy_send_lowat 12000; proxy_buffer_size 32k; proxy_buffers 4 32k; proxy_busy_buffers_size 64k; proxy_temp_file_write_size 64k; ...

https://raw.githubusercontent.com/oooldking/script/master/superspeed.sh #!/usr/bin/env bash # Description: Test your server’s network with Speedtest to China # Copyright (C) 2017 - 2017 Oldking # URL: https://www.oldking.net/305.html # Colors RED=’\033[0;31m’ GREEN=’\033[0;32m’ YELLOW=’\033[0;33m’ SKYBLUE=’\033[0;36m’ PLAIN=’\033[0m' # check root [[ $EUID -ne 0 ]] && echo -e “${RED}Error:${PLAIN} This script must be run as root!” && exit 1 # check python if [ ! -e ‘/usr/bin/python’ ]; then echo -e read -p “${RED}Error:${PLAIN} python is not install. You must be install python command at first.\nDo you want to install? [y/n]” is_install if [[ ${is_install} == “y” || ${is_install} == “Y” ]]; then if [ “${release}” == “centos” ]; then yum -y install python else apt-get -y install python fi else exit fi ...

http://www.yunweipai.com/archives/22780.html #查看是否为管理员增加或者修改 find / -type f -perm 4000 #显示文件中查看是否存在系统以外的文件 rpm -Vf /bin/ls rpm -Vf /usr/sbin/sshd rpm -Vf /sbin/ifconfig rpm -Vf /usr/sbin/lsof #检查系统是否有elf文件被替换 #在web目录下运行 grep -r “getRuntime” ./ #查看是否有木马 find . -type f -name “*.jsp” | xargs grep -i “getRuntime” #运行的时候被连接或者被任何程序调用 find . -type f -name “*.jsp” | xargs grep -i “getHostAddress” #返回ip地址字符串 find . -type f -name “*.jsp” | xargs grep -i “wscript.shell” #创建WshShell对象可以运行程序、操作注册表、创建快捷方式、访问系统文件夹、管理环境变量 find . -type f -name “*.jsp” | xargs grep -i “gethostbyname” ...

https://www.facebook.com/dominic16y/posts/1378435818935569 今天跑去台中聽了OVS (Open vSwitch)講座，收獲頗豐(真的值回車票價了!)，這個東西我自己的研究可能要花好幾個月的時間，還不一定能抓對方向或抓到重點，講師今天一個下午就把所有關鍵的問題都提到了，比如說你linux bridge 用的好好的幹嘛要轉到ovs來，這是大家都會關心的問題。 底下一些重點整理: 1.linux bridge效能很好，沒有什麼特殊的需求的話，不用轉到OVS去。 2.linux bridge效能的極限，kernel 跑不滿10G的頻寬(大約7G/s左右)，若你不用10G的網路的話，linux bridge很好用。 3.OVS原生的效能比linux bridge效能差 4.OVS必須要另外加DPDK才能夠跑滿10G頻寬。(大約可跑到15~20G/s) 5.OVS單台機器沒有什麼用，它的功能跟linux bridge一樣 6.OVS必須要多台，並加上controller才能發揮它真正的功能 7.controller 推薦ONOS、OVN 8.OVS支援所有L2的功能(和靜態路由L3功能)，它要使用controller之後，就可以不用STP，可充份利用所有頻寬，也不怕looping所造成的廣播風暴。

master 192.168.105.20 srs.conf isten 1935; max_connections 1000; srs_log_tank console; #file; #console; srs_log_file ./objs/srs.log; daemon off; #on or delete this line http_api { enabled on; listen 1985; } http_server { enabled on; listen 8080; dir ./objs/nginx/html; } stats { network 0; disk sda sdb xvda xvdb; } vhost __defaultVhost__ { ingest livestream { enabled on; input { type stream; url rtmp://xxx.ooo.xxx.ooo/live/nna1 } ffmpeg ./objs/ffmpeg; #if no build, just install then link -s engine { enabled off; output rtmp://127.0.0.1:[port]/live?vhost=[vhost]/nna2 #this push back this server ...