一个全栈攻城狮的纯技术干货分享 ~
搜索到
7
篇与
的结果
-
NodeJS 通过魔术封包唤醒局域网计算机 国庆假期就这么过去了，今天分享下NodeJS如何通过魔术封包唤醒局域网计算机的代码吧。/** * 通过魔术封包唤醒局域网计算机 * @author 若海 <[email protected]> * @website http://www.rehiy.com * @wiki https://en.wikipedia.org/wiki/Wake-on-LAN * @docs http://support.amd.com/TechDocs/20213.pdf */ const net = require('net'); const udp = require('dgram'); /** * 创建魔术封包 * @param {string} mac 网卡MAC地址 * @returns {Buffer} */ function createMagicPacket(mac) { mac = mac.replace(/[^0-9a-fA-F]/g, ''); if (mac.length != 12) { throw new Error(`Bad MAC address "${mac}"`); } const bufMac = Buffer.from(mac, 'hex'); let bufRes = Buffer.alloc(6, 0xff); for (let i = 0; i < 16; i++) { bufRes = Buffer.concat([bufRes, bufMac]); } return bufRes; } /** * 通过网络唤醒 * @param {string} mac 网卡MAC地址 * @param {object} options 可选项 * @returns {Promise<boolean>} */ function wakeOnLAN(mac, options) { options = Object.assign({ address: '255.255.255.255', port: 7 }, options); return new Promise((resolve, reject) => { const packet = createMagicPacket(mac); const socket = udp.createSocket( net.isIPv6(options.address) ? 'udp6' : 'udp4' ); socket.on('error', function (err) { socket.close(); reject(err); }); socket.once('listening', function () { socket.setBroadcast(true); }); socket.send( packet, 0, packet.length, options.port, options.address, function (err, res) { socket.close(); if (err) { return reject(err); } resolve(res == packet.length); } ); }); }来个例子~wakeOnLAN('30:9C:FF:FF:FF:FF').then( res => { console.log(res); }, err => { console.log(err.message); } ); -
快速创建 TLS 证书并部署到 Docker 服务 将下方代码保存为certbot.sh，修改头部变量后，上传到装有openssl组件的linux服务器上运行即可。#!/bin/sh # export PASSWORD="密码" export COUNTRY="CN" export STATE="省" export CITY="市" export ORGANIZATION="公司名称" export ORGANIZATIONAL_UNIT="Dev" export COMMON_NAME="域名" export EMAIL="电子邮件地址" export HOST_NAME="$COMMON_NAME" export IP=`ping $HOST_NAME -c 1 | sed '1{s/[^(]*(//;s/).*//;q}'` export DIR="cert-$HOST_NAME" # Workspace [ -d $DIR ] || mkdir -p $DIR echo "PASSWORD: $PASSWORD" > $DIR/!nfo.txt echo "HOST_NAME: $HOST_NAME" >> $DIR/!nfo.txt echo "HOST_IP: $IP" >> $DIR/!nfo.txt # Generate CA openssl genrsa -aes256 -passout "pass:$PASSWORD" -out "$DIR/ca-key.pem" 4096 openssl req -new -x509 -days 3650 -key "$DIR/ca-key.pem" -sha256 -out "$DIR/ca.pem" -passin "pass:$PASSWORD" -subj "/C=$COUNTRY/ST=$STATE/L=$CITY/O=$ORGANIZATION/OU=$ORGANIZATIONAL_UNIT/CN=$COMMON_NAME/emailAddress=$EMAIL" # Generate Server Certs openssl genrsa -out "$DIR/server-key.pem" 4096 openssl req -subj "/CN=$HOST_NAME" -sha256 -new -key "$DIR/server-key.pem" -out $DIR/server.csr echo "subjectAltName = DNS:$HOST_NAME,IP:$IP,IP:127.0.0.1" > $DIR/server.cnf echo "extendedKeyUsage = serverAuth" >> $DIR/server.cnf openssl x509 -req -days 3650 -sha256 -in $DIR/server.csr -passin "pass:$PASSWORD" -CA "$DIR/ca.pem" -CAkey "$DIR/ca-key.pem" -CAcreateserial -out "$DIR/server-cert.pem" -extfile $DIR/server.cnf # Generate Client Certs openssl genrsa -out "$DIR/client-key.pem" 4096 openssl req -subj '/CN=client' -new -key "$DIR/client-key.pem" -out $DIR/client.csr echo "extendedKeyUsage = clientAuth" > $DIR/client.cnf openssl x509 -req -days 3650 -sha256 -in $DIR/client.csr -passin "pass:$PASSWORD" -CA "$DIR/ca.pem" -CAkey "$DIR/ca-key.pem" -CAcreateserial -out "$DIR/client-cert.pem" -extfile $DIR/client.cnf # Modify Certs Permission chmod 0400 $DIR/*-key.pem chmod 0444 $DIR/ca.pem $DIR/*-cert.pem # Remove Temporary Files rm -f $DIR/*.csr $DIR/*.cnf如果需要部署到Docker服务，请继续# Install To Docker Daemon mkdir -p /etc/docker/certs.d cp $DIR/ca.pem /etc/docker/certs.d/ cp $DIR/server-*.pem /etc/docker/certs.d/ cat <<EOF >/etc/docker/daemon.json { "tlsverify": true, "tlscacert": "/etc/docker/certs.d/ca.pem", "tlscert": "/etc/docker/certs.d/server-cert.pem", "tlskey": "/etc/docker/certs.d/server-key.pem", "hosts": ["tcp://0.0.0.0:2376", "unix:///var/run/docker.sock"] } EOF # Modify Systemd Service if [ -f /lib/systemd/system/docker.service ]; then sed -i 's#\["tcp:#\["fd://", "tcp:#' /etc/docker/daemon.json sed -i 's# -H fd://##' /lib/systemd/system/docker.service systemctl daemon-reload && systemctl restart docker fi特别注意在systemd系统上-H已设置，因此无法使用hosts键来添加侦听地址，请参阅 https://docs.docker.com/install/linux/linux-postinstall/#configuring-remote-access-with-systemd-unit-file
-
-
自动生成百度云加速 IP 白名单 百度云加速的ip段非常之多，官方给了一个帖子来列出这些ip，获取起来十分不便。倍感痛苦的我，最终还是决定写个PHP脚本自动更新Nginx的real_ip规则。其他规则也可以参考修改。最新源码参看：https://github.com/rehiy/baidu-yunjiasu-ipbaidu.txt 复制自百度云加速官方文档<?php $bdip4 = read_ipv4_list('baidu.txt'); $cfip4 = read_ipv4_list('https://www.cloudflare.com/ips-v4'); $cfip6 = read_ipv6_list('https://www.cloudflare.com/ips-v6'); $list = array_merge( ['# su-ipv4'], $bdip4, ['# cf-ipv4'], $cfip4, ['# cf-ipv6'], $cfip6 ); echo '写入配置文件: '; make_nginx_waf_ip($list); echo '...1'; make_nginx_real_ip_conf($list); echo '...2'; make_nginx_geoip_proxy($list); echo "...3..."; /////////////////////////////////////////////////////////// function make_nginx_waf_ip($list) { $rets = []; foreach ($list as $ip) { if (preg_match('/^#/', $ip)) { $rets[] = $ip; } else { $rets[] = "allow {$ip};"; } } $rets[] = '# default'; $rets[] = 'deny all;'; $text = implode("\n", $rets); file_put_contents('./dist/nginx_waf_ip.conf', $text); } function make_nginx_real_ip_conf($list) { $rets = []; foreach ($list as $ip) { if (preg_match('/^#/', $ip)) { $rets[] = $ip; } else { $rets[] = "set_real_ip_from {$ip};"; } } $text = implode("\n", $rets); file_put_contents('./dist/nginx_real_ip.conf', $text); } function make_nginx_geoip_proxy($list) { $rets = []; foreach ($list as $ip) { if (preg_match('/^#/', $ip)) { $rets[] = $ip; } else { $rets[] = "geoip_proxy {$ip};"; } } $rets[] = '# recursive'; $rets[] = 'geoip_proxy_recursive on;'; $text = implode("\n", $rets); file_put_contents('./dist/nginx_geoip_proxy.conf', $text); } /////////////////////////////////////////////////////////// function read_ipv4_list($site) { echo "读取远程数据: {$site}\n"; $html = file_get_contents($site); if (!preg_match_all('/\d+\.\d+\.\d+\.\d+\/\d+/', $html, $list)) { exit("读取数据失败: {$site}\n"); } return sort_ipv4_list($list[0]); } function read_ipv6_list($site) { echo "读取远程数据: {$site}\n"; $html = file_get_contents($site); if (!preg_match_all('/[0-9:a-f]+\/\d+/', $html, $list)) { exit("读取数据失败: {$site}\n"); } return $list[0]; } function sort_ipv4_list($list) { $rets = []; foreach (array_unique($list) as $val) { $ip = ip2long(explode('/', $val)[0]); $ip = sprintf('%u', floatval($ip)); $rets[$ip] = $val; } ksort($rets); return array_values($rets); }
-
Ubuntu/Linux 配置 Vlan 很久以前配置过，后来都是基于管理交换机配置；今天被逼无奈，又一次必须使用，怎么也弄不好，原来配置方式变了，郁闷！！#开启内核支持 modprobe 8021q echo "8021q" >>/etc/modules #安装配置工具 aptitude install vlan #增加虚拟接口 vconfig add eth1 30以下内容添加到 /etc/network/interfacesauto eth1 auto eth1.30 iface eth1.30 inet static address 10.20.30.19 netmask 255.255.255.0 network 10.20.30.0 broadcast 10.20.30.255
-
-
查看 Web 服务器并发请求连接数（netstat 详解） 查看服务器TCP连接状态netstat -n | awk '/^tcp/ {++S[$NF]} END {for(k in S) print k,S[k]}'得到的结果一般如下：ESTABLISHED 1597 正常数据传输状态TIME_WAIT 1057 等待超时结束的请求数附一、netstat常见参数-a (all)显示所有选项，默认不显示LISTEN相关-t (tcp)仅显示tcp相关选项-u (udp)仅显示udp相关选项-n 拒绝显示别名，能显示数字的全部转化成数字。-l 仅列出有在 Listen (监听) 的服務状态-p 显示建立相关链接的程序名-r 显示路由信息，路由表-e 显示扩展信息，例如uid等-s 按各个协议进行统计-c 每隔一个固定时间，执行该netstat命令。附二、awk常用内置变量ARGC 命令行参数个数ARGV 命令行参数排列ENVIRON 支持队列中系统环境变量的使用FILENAME 浏览的文件名FNR 浏览文件的记录数FS 设置输入域分隔符，等价于命令行 -F选项NF 浏览记录的域的个数NR 已读的记录数OFS 输出域分隔符ORS 输出记录分隔符RS 控制记录分隔符附三、TCP状态转换图CLOSED 无连接是活动的或正在进行LISTEN 服务器在等待进入呼叫SYN_RECV 一个连接请求已经到达，等待确认SYN_SENT 应用已经开始，打开一个连接ESTABLISHED 正常数据传输状态FIN_WAIT1 应用说它已经完成FIN_WAIT2 另一边已同意释放ITMED_WAIT 等待所有分组死掉CLOSING 两边同时尝试关闭TIME_WAIT 另一边已初始化一个释放LAST_ACK 等待所有分组死掉
