| # https://www.qcloud.com/doc/product/215/2238 | |
| 3. 配置优化 | |
| 公网网关主机会默认配置iptables的nat规则，以及打开kernel的ip_forward，基本的公网网关功能已经完全具备。建议经过下述配置，以达到更好的性能。 | |
| 1) 通过以下命令将net.ipv4.ip_forward配置写到/etc/sysctl.conf文件中 | |
| echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf | |
| 2) 通过以下命令将nf_conntrack配置参数调大 |
| # Before you can use the tool, | |
| # you need to install following software. | |
| # curl openssl gawk | |
| if [ "$mode_qcloud_api" ];then | |
| return | |
| fi | |
| export mode_qcloud_api=1 | |
| function urlencode(){ |
| #!/bin/bash | |
| # A simple script to protect system from DOS attack | |
| # create a crontab conf file /etc/cron.d/autoban like this: | |
| # * * * * * root /sbin/autoban.sh ban >/dev/null 2>&1 & | |
| # */10 * * * * root /sbin/autoban.sh unban - 5 >/dev/null 2>&1 & | |
| # 01 * * * * root /sbin/autoban.sh unban 6 20 >/dev/null 2>&1 & | |
| # 01 09 * * * root /sbin/autoban.sh unban 21 - >/dev/null 2>&1 & | |
| # | |
| PATH=/bin:/usr/bin:/usr/sbin:/sbin | |
| export PATH |
| #!/usr/bin/perl | |
| # Copyright 2012 - Jean-Sebastien Morisset - http://surniaulula.com/ | |
| # | |
| # This script is free software; you can redistribute it and/or modify it under | |
| # the terms of the GNU General Public License as published by the Free Software | |
| # Foundation; either version 3 of the License, or (at your option) any later | |
| # version. | |
| # | |
| # This script is distributed in the hope that it will be useful, but WITHOUT |
| function show_bar() { | |
| local i=0;local p=1;local c=">" | |
| echo;echo | |
| while true;do | |
| local x=$(($(tput cols)-3));local y=$(($(tput lines)-2));i=$((i+1)) | |
| [ $(($i%$x)) -eq 0 ] && { | |
| [ "$c" = ">" ] && c="<" || c=">" | |
| } | |
| [ "$c" = ">" ] && { | |
| p=$((p+1));[ "$p" -ge $x ] && p=$x |
| #!/usr/bin/env python | |
| # Flash access policy server based on gevent | |
| # Jan-Philip Gehrcke, June 2011 | |
| # Listen on port 843; send acess policy to client; disconnect. | |
| from gevent.server import StreamServer | |
| import datetime |
Unionize lets you connect together docker containers in arbitrarily complex scenarios.
Note: I recommend to use https://github.com/jpetazzo/pipework instead.
Now if you want Unionize, it's still here. Just check those examples.
| http://stackoverflow.com/questions/12671587/isolated-test-network-on-a-linux-server-running-a-web-server-lightttpd-and-cu | |
| https://code.google.com/p/coreemu/ | |
| http://stuff.onse.fi/man?program=ip-netns§ion=8 | |
| http://blog.kghost.info/2013/03/01/linux-network-emulator/ | |
| http://blog.kghost.info/2013/03/27/linux-network-tun/ | |
| http://seravo.fi/2012/virtualized-bridged-networking-with-macvtap | |
| http://blog.csdn.net/kl222/article/details/8513593 |
| set nocompatible "关闭vi兼容 | |
| set enc=utf-8 | |
| "set number "显示行号 | |
| filetype plugin on "文件类型 | |
| set history=500 "历史命令 | |
| syntax on "语法高亮 | |
| "set autoindent "ai 自动缩进 | |
| "set smartindent "智能缩进 | |
| set showmatch "括号匹配 | |
| set ruler "右下角显示光标状态行 |
| #!/bin/bash | |
| # send named metrics to falcon-agent | |
| RNDC_BIN=/usr/sbin/rndc | |
| STATS='/var/named/data/named_stats.txt' | |
| rm -f $STATS | |
| if ! $RNDC_BIN stats; then | |
| exit 1 |
