Personnal Document

http://yaxin-cn.github.io/Docker/expose-port-of-running-docker-container.html

iptables -A DOCKER ! -i docker0 -o docker0 -p tcp --dport 27017 -d 172.17.0.2 -j ACCEPT
iptables -t nat -A POSTROUTING -p tcp --dport 27017 -s 172.17.0.2 -d 172.17.0.2 -j MASQUERADE
iptables -t nat -A DOCKER ! -i dokcer0 -p tcp --dport 27017 -j DNAT --to-destination 172.17.0.2:27017

docker run –link 说明

https://www.jianshu.com/p/21d66ca6115e

HTTP 服务性能测试工具

cgroup.clone_children
cgroup.event_control
cgroup.procs
cpuacct.stat
cpuacct.usage
cpuacct.usage_percpu
# 时间周期长度
cpu.cfs_period_us
# 在当前 cgroup 在设置的周期长度内所能使用的 cpu 时间数
cpu.cfs_quota_us
cpu.rt_period_us
cpu.rt_runtime_us
# cpu 的相对值
cpu.shares
# cpu 统计值
cpu.stat
notify_on_release
tasks

 cgroup.clone_children 
cgroup.event_control
# 进程 id
cgroup.procs
# 线程 id
tasks
# 内存使用量达到上限值的次数
memory.failcnt 
# 触发系统尽可能回收当前 cgroup 可以回收的内存
memory.force_empty
# 限制内存的大小
memory.limit_in_bytes 
# 历史内存最大使用量
memory.max_usage_in_bytes 
memory.move_charge_at_immigrate
memory.numa_stat
memory.oom_control
memory.pressure_level
# 当前限制的内存软额度,当系统内存吃紧时,会回收超过 soft limit 的内存
memory.soft_limit_in_bytes
# 当前内存使用情况
memory.stat 
memory.swappiness
# 当前已使用内存
memory.usage_in_bytes
# 是否将子 cgroup 的使用情况统计到当前 cgroup 中
memory.use_hierarchy
notify_on_release
# memsw
memory.memsw.failcnt 
memory.memsw.limit_in_bytes
memory.memsw.max_usage_in_bytes
memory.memsw.usage_in_bytes
# kmem
memory.kmem.failcnt
memory.kmem.limit_in_bytes
memory.kmem.max_usage_in_bytes 
memory.kmem.slabinfo
memory.kmem.tcp.failcnt
memory.kmem.tcp.limit_in_bytes
memory.kmem.tcp.max_usage_in_bytes
memory.kmem.tcp.usage_in_bytes
memory.kmem.usage_in_bytes

1. Linux Cgroup 系列（04）：限制 cgroup 的内存使用（subsystem 之 memory）
2. Linux Cgroup 系列（05）：限制 cgroup 的 CPU 使用（subsystem 之 cpu）

主要是 linux 用来做定时任务,可以具体的分钟/小时/天/月/周

Host github.com
HostName github.com
User git
IdentityFile /home/haormj/.ssh/github

文章

直接到 Settings > Devices > KeyBoard 中对占用相关键进行修改

官方文档 直接调整 worker 的连接数即可,这里的连接数是 nginx 的连接总数

events {
    worker_connections  1024;
}

调整为期望大小,不过这个值调整后可能会遇到下面问题

events {
    worker_connections  10000;
}

修改完配置文件后

# 测试配置文件
nginx -t 
# 重载配置
nginx -s reload

官方文档 这个问题主要是因为 nginx 支持的打开文件数量为 1024,但配置的最大连接数为 10000,可以通过在 nginx 中增加以下配置

worker_rlimit_nofile 10000;

修改完配置文件后

# 测试配置文件
nginx -t 
# 重载配置
nginx -s reload

https://redis.io/topics/persistence#redis-persistence

It is possible to combine both AOF and RDB in the same instance. Notice that, in this case, when Redis restarts the AOF file will be used to reconstruct the original dataset since it is guaranteed to be the most complete.

aof 文件

# 生成 RSA 私钥
openssl genrsa -out rsa.key 2048
# 生成 RSA 公钥
openssl rsa -in rsa.key -pubout -out rsa.pub

# 生成 EC 私钥
openssl ecparam -name secp256k1 -genkey -out ec.key
# 生成 EC 公钥
openssl ec -in ec.key -pubout -out ec.pub   

# 签名
openssl dgst -sign private_key -out sign file
# 验签
openssl dgst -verify public_key -signature sign file    

openssl s_client -connect haormj.xyz:443 -servername haormj.xyz -state    

openssl s_client -connect haormj.xyz:443 -servername haormj.xyz -showcerts </dev/null 2>/dev/null | sed -n '/BEGIN CERTIFICATE/,/END CERT/p' | openssl x509 -noout -text

根据Padding描述,PCKS#5 和 PCKS#7 原理相同,只是 PCKS#5 当时定义的块大小为 64 比特

code

docker

code

[Unit]
Description=Kcptun Server Service
After=storage.service
After=network.target

[Service]
LimitNOFILE=65536
LimitNPROC=65536
Type=simple
WorkingDirectory=/opt/kcptun 
ExecStart=/opt/kcptun/server_linux_amd64 \
  -t "127.0.0.1:15789" \
  -l ":28796" \
  --key "it's a secrect" \
  -mode fast3 \
  -nocomp \
  -sockbuf 16777217 \
  -dscp 46 
MemoryLimit=2G

Restart=on-failure
RestartSec=2s

[Install]
WantedBy=multi-user.target 

[Unit]
Description=Kcptun Client Service
After=storage.service
After=network.target

[Service]
LimitNOFILE=65536
LimitNPROC=65536
Type=simple
WorkingDirectory=/opt/kcptun 
ExecStart=/opt/kcptun/client_linux_amd64 \
  -r "x.x.x.x:28796" \
  -l ":15789" \
  --key "it's a secrect" \
  -mode fast3 \
  -nocomp \
  -autoexpire 900 \
  -sockbuf 16777217 \
  -dscp 46

MemoryLimit=2G

Restart=on-failure
RestartSec=2s

[Install]
WantedBy=multi-user.target 

code

[Unit]
Description=Shadowsocks
After=storage.service
After=network.target

[Service]
LimitNOFILE=65536
LimitNPROC=65536
Type=simple
WorkingDirectory=/opt/shadowsocks
ExecStart=/opt/shadowsocks/shadowsocks-server -u

Restart=on-failure
RestartSec=2s

[Install]
WantedBy=multi-user.target    

[Unit]
Description=Shadowsocks
After=storage.service
After=network.target

[Service]
LimitNOFILE=65536
LimitNPROC=65536
Type=simple
WorkingDirectory=/opt/shadowsocks
ExecStart=/opt/shadowsocks/shadowsocks-local

Restart=on-failure
RestartSec=2s

[Install]
WantedBy=multi-user.target    

code

[Unit]
Description=Shadowsocks2
After=storage.service
After=network.target

[Service]
LimitNOFILE=65536
LimitNPROC=65536
Type=simple
WorkingDirectory=/opt/shadowsocks2
ExecStart=/opt/shadowsocks2/shadowsocks2 \
  -s 'ss://AEAD_CHACHA20_POLY1305:your-password@:23586' \
  -verbose

Restart=on-failure
RestartSec=2s

[Install]
WantedBy=multi-user.target      

[Unit]
Description=Shadowsocks2
After=storage.service
After=network.target

[Service]
LimitNOFILE=65536
LimitNPROC=65536
Type=simple
WorkingDirectory=/opt/shadowsocks2
ExecStart=/opt/shadowsocks2/shadowsocks2 \
 -c 'ss://AEAD_CHACHA20_POLY1305:your-password@[server_address]:23586' \
 -verbose \
 -socks :1080 \
 -redir :12345 \
 -u \
 -udptun :8053=8.8.8.8:53,:8054=8.8.4.4:53 \
 -tcptun :8053=8.8.8.8:53,:8054=8.8.4.4:53

Restart=on-failure
RestartSec=2s

[Install]
WantedBy=multi-user.target