autoDevops,CI,CD
TIME_WAIT 问题及netstat状态描述1,netstat -n | awk '/^tcp/ {++state[$NF]} END {for(key in state) print key,"\t",state[key]}'会得到类似下面的结果，具体数字会有所不同：LAST_ACK 1SYN_RECV 14ESTABLISHED 79FIN_WAIT1 28FIN_WAIT2 3CLOSING 5TIME_WAIT 1669状态：描述CLOSED：无连接是活动的或正在进行LISTEN：服务器在等待进入呼叫SYN_RECV：一个连接请求已经到达，等待确认SYN_SENT：应用已经开始，打开一个连接ESTABLISHED：正常数据传输状态FIN_WAIT1：应用说它已经完成FIN_WAIT2：另一边已同意释放ITMED_WAIT：等待所有分组死掉CLOSING：两边同时尝试关闭TIME_WAIT：另一边已初始化一个释放LAST_ACK：等待所有分组死掉也就是说，这条命令可以把当前系统的网络连接状态分类汇总。inux下高并发的Squid服务器，TCP TIME_WAIT套接字数量经常达到两、三万，
服务器很容易被拖死。通过修改Linux内核参数，可以减少服务器的IME_WAIT套接字数量。
vi /etc/sysctl.conf
增加以下几行：
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.tcp_syncookies =&nb...
Squid动态URL日志不完整的问题 问题：当访问的URL为：http://cdnfox.com/xxx.php?sig=xxxxxxx时：日志为：1376378941 0 10.0.0.10 GET "http://cdnfox.com/xxx.php?"/1.1 - "image/jpeg" "curl/7.27.0" "-" TCP_MEM_HIT:NONE/- 200 21753URL后面的：sig=xxxxxxx 丢失了。解决方法：在squid.conf中添加：strip_query_terms off重新reload squid，日志正常。strip_query_terms默认为开启。是为了保护用户的隐私，而不在日志中记录“？”后面的参数。
Squid 2.7 +bind安装与基本配置 服务器： centos 6.3squid版本 squid-2.7.STABLE9bind版本 bind-9.9.2-P2.tar.gz先安装squid 所需的组件 , 关闭iptables, selinuxyum -y install gcc perl make1. 在根目录创建maichuang目录， 并解压squid包[root@localhost /]# mkdir maichuang[root@localhost /]# cd /data[root@localhost data]# tar xzvf squid-2.7.STABLE9.tar.gz[root@localhost data]# cd squid-2.7.STABLE9 2. 编译安装squid[root@localhost squid-2.7.STABLE9]# ./configure --enable-kill-parent-hack --enable-large-cache-files --with-large-files --with-maxfd=344800 --enable-snmp --disable-ident-lookups --enable-carp --enable-async-io=160 --enable-storeio=ufs,aufs,diskd,null,coss --enable-epoll --enable-linux-netfilter --enable-stacktraces --enable-forward-log --enable-refe...
squid工作原理及3.1.4版本源代码安装配置实例指南 目录： ? 一.测试安装环境 ? 二.编译安装 ? 三.Squid工作模式及原理 n 3.1 SQUID如何工作 u 3.1.1 [传统代理] u 3.1.2[透明代理] u 3.1.3[反向代理] n 3.2 SQUID工作原理 u 3.2.1 SQUID缓存的存放方式： u 3.2.2SQUID的查询方式 u 3.2.3SQUID服务器之间的关系： u 3.2.4SQUID运作模式 ? 四.Squid 配置 n 4.1 主配置文档配置 n 4.2验证squid.conf的语法和配置 n 4.3初始化cache目录 n 4.4前台启动squid，查看是否报错 n 4.5透明代理设置 n 4.6反向代理设置 ? 五.Squid语法 ? 六.Squid优化 n 6.1 日志优化 n 6.2目录优化 n 6.3 Cache优化 n 6.4最大文件描述符数量限制优化 n 6.5 脚本优化优化 u 6.5.1 log脚本： u 6.5.2squid脚本： u 6.5.3Cache 脚本： ? 七.脚本用法 n 7.1 log脚本： n 7.2 squid脚本： n 7.3 Cache 脚本： ? 八.补充 n 8.1 打补丁 n 8.2 重运行configure n 8.3 nginx 与squid ? 九.Cachemgr.cgi监控squid运行状态 n 9.1 Cachemgr.cgi配置过程 n 9.2 生成口令文件 n 9.3 验证 ? 十.错误总结 n 10.1 权限问题 n 10.2 不能识别它自己的完...
下载，编译安装：到官方站站下载squid3.0： http://www.squid-cache.org./configure --prefix=/opt/squid3 --disable-carp --with-aufs-threads=32 --with-pthreads --enable-storeio='ufs,aufs,null' --enable-disk-io='AIO,Blocking' --enable-removal-policies='heap,lru' --disable-wccp --enable-kill-parent-hack --disable-snmp --disable-poll --disable-select --enable-epoll --enable-auth=basic --with-aio --disable-ident-lookup --with-filedescriptors=65536 MakeMake install注意标红部分，使用squid3 最主要的原因，就是应为它开始支持epool了，而且，配置简化了很多。没有2.x 那么繁杂。 2 squid 关键配置说明：#缓存服务器的名字，可以任意 visible_hostname up1 #服务器端口 #设定squid为accel加速模式,vhost必须要加.否则将无法将主机头转发至后端服务器,访问时就会出现无法找到主机头的错误 http_port 80 accel vhost vport #配置需要代理的realserver服务器 #定义不同的父节点,将节点设为no-query以及originserver说明这些节点是实际服务器 cache_peer 127.0.0.1 parent 80 0 no-query originserver...
haproxy + Squid 3.3.3 安装与基本配置 由于做测试开发用，搭建测试环境 haproxy + 2 * squid 3.3.3 方案， squid 2.7 比较稳定，性能高服务器环境是centos 6.3你可以直接使用命令安装haproxy 和squid yum install haproxy yum install squid或者你可以手动编译安装， 由于只有一个haproxy 我就直接yum install haproxy ,squid 是手动编译的1. 先安装haproxy yum install haproxyservice haproxy start [root@dev_node0 etc]# vim /etc/haproxy/haproxy.cfg将默认的配置文件的部分内容，改成一下内容1234567891011121314151617181920#---------------------------------------------------------------------# main frontend which proxys to the backends#---------------------------------------------------------------------frontend main *:80 acl ur...
RedFlag LInux SP3 编译 Squid-3.3.9 报错: /usr/lib/libstdc++.so.6: version `GLIBCXX_3.4.15' not found先下载好Squid源码包，解压。#./configure --prefix=/usr/local/squid#make all 出现以下错误：/usr/lib/libstdc++.so.6: version `GLIBCXX_3.4.15' not found之前我已经编译了最新版Gcc4.8软件包，所以解决此问题就简单多了。出现该错误的原因是当前的GCC版本中，没有GLIBCXX_3.4.15，需要安装更高版本。删除原来的文件# rm /usr/lib/libstdc++.so.6重新建立软连接。ln -s /lus/local/gcc4.8/lib/libstdc++.so /usr/lib/libstdc++.so.6这时，我们再输入：strings /usr/lib/libstdc++.so.6 | grep GLIBCXX，结果为：[root@yupan gcc4.8]# strings /usr/lib/libstdc++.so.6 | grep GLIBCXXGLIBCXX_3.4GLIBCXX_3.4.1GLIBCXX_3.4.2GLIBCXX_3.4.3GLIBCXX_3.4.4GLIBCXX_3.4.5GLIBCXX_3.4.6GLIBCXX_3.4.7GLIBCXX_3.4.8GLIBCXX_3.4.9GLIBCXX_3.4.10GLIBCXX_3.4.11GLIBCXX_3.4.12GLIBCXX_3.4.13GLIBCXX_3.4.14GLIBCXX_3.4.15GLIBCXX_3.4.16GLIBCXX_3.4.17GLIBCXX_3.4.18GLIBCXX_3.4.19GLIBCXX_FORCE_NEWGLIBCXX_DEBUG_MESSAGE_LENGTH再次运行make all安装正常。.# make in...
PCRE-8.33 Introduction to PCRE The PCRE package contains Perl Compatible Regular Expression libraries. These are useful for implementing regular expression pattern matching using the same syntax and semantics as Perl 5. This package is known to build and work properly using an LFS-7.4 platform. Package Information Download (HTTP): http://downloads.sourceforge.net/pcre/pcre-8.33.tar.bz2 Download (FTP): ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.33.tar.bz2 Download MD5 sum: 21514018448ac10062ece7a668fca949 Download size: 1.4 MB Estimated...
How to Setup Linux VPN Server and Client using OpenVPNby Lakshmanan Ganapathy on September 9, 2013 TweetVPN stands for Virtual Private Network.A Virtual Private Network enables a computer to send and receive data from one private network to another private network which are connected via public network (Internet).This is helpful for those who are outside the company’s intranet, and like to connect to office network securely to access the internal servers. VPN is also helpful when you are connecting multiple branch offices together.Even when you are not connecting multiple branch offices together, you can still use VPN setup to allow your employees to connect remotely from their laptop to the datacenter and access the systems.Sometimes company will buy leased lines to form WAN ( Wide Area Network ), and communicates with its branches. Though Leased line is secure and reliable, it is expensive.VPN fills the gap by providing a point-to-point virtual connection via public network. A VPN ...
How To Monitor Remote Linux Host using Nagios 3.0by Ramesh Natarajan on June 1, 2008 TweetIn the previous post Nagios 3.0 Jumpstart guide , I explained the overview, installation and configuration of Nagios 3.0 on Red Hat Server. In the following three chapters, I’ll explain how to monitor a remote Linux host and the various services running on the remote host. Also, please refer to all our Nagios articles. I. OverviewII. 6 steps to install Nagios plugin and NRPE on remote host.Download Nagios Plugins and NRPE Add-onCreate nagios accountInstall Nagios PluginsInstall NRPESetup NRPE to run as daemonModify the /usr/local/nagios/etc/nrpe.cfgIII. 4 Configuration steps on the Nagios monitoring server to monitor remote host:Download NRPE Add-onInstall check_nrpeCreate host and service definition for remote hostRestart the nagios serviceI. Overview:.Following three steps will happen on a very high level when Nagios (installed on the nagios-servers) monitors a service (for e.g. dis...
最新评论