大虾的学习空间 » linux 服务器安装 http://blog.fabrichina.net PHP SEO 电子商务架构 Mon, 16 Jan 2012 09:32:05 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 varnish 3.0安装 http://blog.fabrichina.net/archives/570 http://blog.fabrichina.net/archives/570#comments Tue, 16 Aug 2011 06:22:58 +0000 Albert http://blog.fabrichina.net/?p=570 ./configure –prefix=/usr/local/varnish

总是告诉我libpcre错误，我都安装了还是错误

yum install -y automake autoconf libtool ncurses-devel libxslt groff pcre-devel pkgconfig 

然后再configure就好了。。

用ctrl+f5来清除缓存

sub vcl_hit {
    if ( req.http.Pragma ~ “no-cache” ) {
        set obj.ttl = 0s ;
        return (pass);
    }
    return (deliver);
}

acl   local {
    “192.168.0.25″;
      “1.2.3.4″;
}
  if (client.ip ~ local && req.http.Pragma ~ “no-cache”)   IP限制

 if ( req.http.Cookie ~ “pwd=123456″ && req.http.Pragma ~ “no-cache” )   cookie密码限制

]]> http://blog.fabrichina.net/archives/570/feed 0 服务器load average高cpu低io低，问题解决 http://blog.fabrichina.net/archives/494 http://blog.fabrichina.net/archives/494#comments Sat, 04 Dec 2010 07:13:15 +0000 Albert http://blog.fabrichina.net/?p=494 top – 00:59:35 up 120 days, 18:56,  2 users,  load average: 1.48, 1.44, 1.27
Tasks: 159 total,   1 running, 158 sleeping,   0 stopped,   0 zombie
Cpu(s):  0.0%us,  0.0%sy,  0.0%ni, 99.7%id,  0.0%wa,  0.0%hi,  0.2%si,  0.0%st
Mem:   8164756k total,  8071612k used,    93144k free,   631196k buffers
Swap: 10217332k total,        0k used, 10217332k free,  6238060k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                                                                                                                                                        
 3897 www       15   0  466m  53m  26m S  0.3  0.7   9:17.91 nginx

vmstat
procs ———–memory———- —swap– —–io—- –system– —–cpu——
 r  b   swpd   free   buff  cache   si   so    bi    bo   in   cs us sy id wa st
 0  0      0  95788 631196 6237800    0    0     0     3    0    0  0  0 100  0  0

hdparm -tT /dev/sda1

/dev/sda1:
 Timing cached reads:   15772 MB in  2.00 seconds = 7895.32 MB/sec
 Timing buffered disk reads:  100 MB in  1.37 seconds =  72.96 MB/sec

hdparm -tT /dev/sdb

/dev/sdb:
 Timing cached reads:   15628 MB in  2.00 seconds = 7822.64 MB/sec
 Timing buffered disk reads:  182 MB in  3.07 seconds =  59.29 MB/sec

/etc/rc.d/init.d/nfslock start
Starting NFS statd: [  OK  ]
[root@Cache-Server ~]# /etc/rc.d/init.d/nfslock stop
Stopping NFS statd: [  OK  ]
[root@Cache-Server ~]# top

top – 01:09:50 up 120 days, 19:06,  2 users,  load average: 0.47, 0.97, 1.15

总而言之，从起了nfslock服务，load就下来了

]]> http://blog.fabrichina.net/archives/494/feed 0 pptpd 源代码安装 http://blog.fabrichina.net/archives/440 http://blog.fabrichina.net/archives/440#comments Thu, 26 Aug 2010 08:20:55 +0000 Albert http://blog.fabrichina.net/?p=440 wget http://www.sfr-fresh.com/linux/misc/pptpd-1.3.4.tar.gz
tar ..
./configure && make && make install
cp samples/pptpd.conf /etc/.
cp samples/options.pptpd /etc/ppp/.
cp samples/chap-secrets /etc/ppp/.
cp pptpd.init /etc/rc.d/init.d/pptpd
chmod +x /etc/rc.d/init.d/pptpd
/etc/rc.d/init.d/pptpd start
编辑/etc/sysctl.conf，看一下net.ipv4.ip_forward参数是不是1。
改完一个sysctl -p一下

iptables -A INPUT -p tcp –dport 1723 -j ACCEPT

iptables -A INPUT -p tcp –dport 47 -j ACCEPT

iptables -A INPUT -p gre -j ACCEPT

iptables -t nat -A POSTROUTING -s 192.168.8.0/24 -o eth0 -j MASQUERADE

完成后输入/etc/init.d/iptables save保存，并且输入/etc/init.d/iptables restart重新启动。

我连接的时候出现了vpn 619错误，查了一下是路由器nat -t上pptp nat穿透选项的问题，但是我另外一个vpn是可以用的，所以我还需要研究一下为什么另外一个能用！

可能是服务器的机房路由器没有开启pptp的通过，我已经open ticket让他们开了，看看开了以后会不会就好了！

]]> http://blog.fabrichina.net/archives/440/feed 0 varnish 设置header和forward IP设置问题 http://blog.fabrichina.net/archives/330 http://blog.fabrichina.net/archives/330#comments Mon, 26 Jul 2010 09:10:06 +0000 Albert http://blog.fabrichina.net/?p=330 What is the purpose of the X-Varnish HTTP header?

The X-Varnish HTTP header allows you to find the correct log-entries for the transaction. For a cache hit, X-Varnish will contain both the ID of the current request and the ID of the request that populated the cache. It makes debugging Varnish a lot easier.

Does Varnish support compression?

This is a simple question with a complicated answer; see WIKI.

How do I add a HTTP header?

To add a HTTP header, unless you want to add something about the client/request, it is best done in vcl_fetch as this means it will only be processed every time the object is fetched:

sub vcl_fetch {
  # Add a unique header containing the cache servers IP address:
  remove obj.http.X-Varnish-IP;
  set    obj.http.X-Varnish-IP = server.ip;
  # Another header:
  set    obj.http.Foo = "bar";
}

How can I log the client IP address on the backend?

All I see is the IP address of the varnish server. How can I log the client IP address?

We will need to add the IP address to a header used for the backend request, and configure the backend to log the content of this header instead of the address of the connecting client (which is the varnish server).

Varnish configuration:

sub vcl_recv {
  # Add a unique header containing the client address
  remove req.http.X-Forwarded-For;
  set    req.http.X-Forwarded-For = client.ip;
  # [...]
}

For the apache configuration, we copy the “combined” log format to a new one we call “varnishcombined”, for instance, and change the client IP field to use the content of the variable we set in the varnish configuration:

LogFormat "%{X-Forwarded-For}i %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i"" varnishcombined

And so, in our virtualhost, you need to specify this format instead of “combined” (or “common”, or whatever else you use):

<VirtualHost *:80>
  ServerName www.example.com
  # [...]
  CustomLog /var/log/apache2/www.example.com/access.log varnishcombined
  # [...]
</VirtualHost>
]]> http://blog.fabrichina.net/archives/330/feed 0 /usr/bin/ld: cannot find -lltdl php安装错误，libmcrypt编译问题 http://blog.fabrichina.net/archives/323 http://blog.fabrichina.net/archives/323#comments Sun, 25 Jul 2010 06:47:25 +0000 Albert http://blog.fabrichina.net/?p=323 /usr/bin/ld: cannot find -lltdl

/usr/bin/ld: cannot find -lltdl
安装php make的时候提示如下出错信息：
/usr/bin/ld: cannot find -lltdl
collect2: ld returned 1 exit status
make: *** [libphp5.la] Error 1
解决方法：这是因为找不到：   libltdl库文件

ldconfig -p |grep ltdl
#/software/libmcrypt-2.5.8/libltdl
#./configure  –enable-ltdl-install
#make
#make install
以下是原文：
Then I visited
http://mcrypt.hellug.gr/mcrypt/index.html
an learned that I have to install not only libmcrypt
but also mcrypt and libmhash.
Here is the to do:
libmcrytp:
———–
download libmcrypt-xxx.tar.gz
create the following directory:  / usr / local / libmcrypt
copy the libmcrypt-xxx.tar.gz into that directory and move to it
run the following shell (>) commands:  (‘xxx’ is the version number)
> gunzip -c libmcrypt-xxx.tar.gz | tar xf -
> cd libmcrypt-xxx
> ./configure –disable-posix-threads
> make
> make check  (note:  ‘make check’ is optional)
> make install
then (update your environment) add in / etc / profile the following path:
/usr/local/libmcrypt/libmcrypt-xxxx
(note:  as I run Red Hat 7.3 I  set the line   a f t e r   the if-part
(id -u = 0 …) with: pathmunge /usr/local / libm….)
and add in / etc / ld.so.conf the following path:  /usr/local/lib
then run ldconfig:
> ldconfig
now comes the important part:
> cd /usr/local/libmcrypt/libmcrypt-xxx/libltdl
> ./configure –enable-ltdl-install
> make
> make install
(maybe not needed:  I also added a link in / usr / bin: )
(> cd /usr/bin)
(> ln -s /usr/lib/libltdl.so.3.1.0 ltdl)

]]> http://blog.fabrichina.net/archives/323/feed 0 linux一些常用指令 http://blog.fabrichina.net/archives/319 http://blog.fabrichina.net/archives/319#comments Fri, 23 Jul 2010 09:04:22 +0000 Albert http://blog.fabrichina.net/?p=319 1.按内存从大到小排列进程:
ps -eo “%C : %p : %z : %a”|sort -k5 -nr

2.查看当前有哪些进程；查看进程打开的文件:
ps -A ；lsof -p PID

3.获取当前IP地址（从中学习grep,awk,cut的作用）
ifconfig eth0 |grep “inet addr:” |awk ‘{print $2}’|cut -c 6-

4.统计每个单词出现的频率，并排序
awk ‘{arr[$1]+=1 }END{for(i in arr){print arr”\t”i}}’ 文件名 | sort -rn

5.显示10条最常用的命令
sed -e “s/| /\n/g” ~/.bash_history | cut -d ‘ ‘ -f 1 | sort | uniq -c | sort -nr | head

6.杀死Nginx进程(杀死某一进程)
ps -ef|grep -v grep |grep nginx|awk ‘{print $2}’ 或
for i in `ps aux | grep nginx | grep -v grep | awk {‘print $2′}` ; do kill $i; done

7.列出当前文件夹目录大小，以G，M，K显示。
du -b –max-depth 1 | sort -nr | perl -pe ‘s{([0-9]+)}{sprintf”%.1f%s”, $1>=2**30? ($1/2**30, “G”): $1>=2**20? ($1/2**20, “M”):$1>=2**10? ($1/2**10, “K”): ($1, “”)}e’

shaw答案 ：du -hs $(du -sk ./`ls -F |grep /` |sort -nr |awk ‘{print $NF}’)
也可 以实现，不过不是特别完美。但好记。

8.清空linux buffer cache
sync && echo 3 > /proc/sys/vm/drop_caches

9.将当前目录文件名全部转换成小写
for i in *; do mv “$i” “$(echo $i|tr A-Z a-z)”; done

10.消除vim中的^M的几种方法
1)dos2uninx filename
2)sed -e ‘s/^M//’ filename
3)vim中 :s/^M//gc
4)col -bx < dosfile > newfile
5)tr -s “\r\n” “\n” < file > newfile

11. 清除所有arp缓存
arp -n|awk ‘/^[1-9]/ {print “arp -d “$1}’|sh

12. 绑定已知机器的arp地址
cat /proc/net/arp | awk ‘{print $1 ” ” $4}’ |sort -t. -n +3 -4 > /etc/ethers

补perl的可以不？

13. perl -ne ‘m/^([^#][^\s=]+)\s*(=.*|)/ && printf(“%-35s%s\n”, $1, $2)’ /etc

]]> http://blog.fabrichina.net/archives/319/feed 0 varnish 2.x启动指令和配置 http://blog.fabrichina.net/archives/315 http://blog.fabrichina.net/archives/315#comments Fri, 23 Jul 2010 06:37:23 +0000 Albert http://blog.fabrichina.net/?p=315 Varnish 2.0.3 has just been released. This release contains multiple changes, amongst them:

  • Support for backend timeouts
  • Multiple fixes in how we process ESI
  • restart in vcl_hit is now supported
  • Documentation has been updated
  • Expiry processing is now more scalable
  • The default session workspace is now 16k instead of 8k
  • More graceful handling of too many headers from the client or the server.
  • More expressive purges

之前一直使用的还是2.0的一个trunk的R2860版本，因为只有这个版本我从1.1.2升级上来以后没有慢的问题⊙﹏⊙。但是看着新版却一直不能用，实在是让人心里痒。于是抱着死磕到底的态度，在检查了n+1遍配置文件和修改启动参数重启了n+1遍Varnish以后终于找到了问题的所在，即启动参数的-w这个上面。那么这个参数是干什么用的呢？

    -w int[,int[,int]]           # Number of worker threads
                                 #   -w <fixed_count>
                                 #   -w min,max
                                 #   -w min,max,timeout [default: -w2,500,300]

可以看出这个参数是控制每个进程的线程数的，1.1.2版本的时候这个参数我配置的是-w30000,51200,10，貌似到了2.0版以后这个最小启动的线程数不能设定过大，于是在进行了几次调试以后最终将参数定为了-w5,51200,30

软件列表
pcre-8.02.tar.gz
varnish-2.1.tar.gz

软件存放位置
/data/software

安装过程
# /usr/sbin/groupadd www -g 48
# /usr/sbin/useradd -u 48 -g www www
# mkdir -p /data/vcache
# chmod +w /data/vcache
# chown -R www:www /data/vcache
# mkdir -p /var/log/varnish
# chmod +w /var/log/varnish
# chown -R www:www /var/log/varnish
# cd /data/software/pkg
# tar zxvf ../pcre-8.02.tar.gz
# cd pcre-8.02
# ./configure
# make && make install
# cd ..
# tar zxvf ../varnish-2.1.tar.gz
# cd varnish-2.1
# export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig
# ./configure –prefix=/usr/local/varnish
# make && make install

编辑Varnish配置文件
# vi /usr/local/varnish/vcl.conf

backend webserver {
       set backend.host = “10.10.10.8″;
       set backend.port = “80″;
}

acl purge {
       “localhost”;
       “127.0.0.1″;
       “10.10.10.0″/24;
}

sub vcl_recv {
        remove req.http.X-Forwarded-For;
        set    req.http.X-Forwarded-For = client.ip;
        if (req.request == “PURGE”) {
               if (!client.ip ~ purge) {
                       error 405 “Not allowed.”;
               }
               lookup;
       }

       if (req.http.host ~ “(a|b|c).test.com”) {
               set req.backend = webserver;
              if (req.url ~ “\.(png|gif|jpg|swf|css|js)$”) {
                       lookup;
        }
               else {
                       pass;
               }
       }

       else {
               error 404 “Test Cache Server”;
               pipe;
       }
}

sub vcl_hash {
    set req.hash += req.url;
    if (req.http.host) {
        set req.hash += req.http.host;
    } else {
        set req.hash += server.ip;
    }
    hash;
}

sub vcl_pipe {
        set req.http.connection = “close”;
        #pipe;
}

sub vcl_hit {
        if (!obj.cacheable) {
                pass;
        }
       if (req.request == “PURGE”) {
               set obj.ttl = 0s;
               error 200 “Purged.”;
       }
        deliver;
}

sub vcl_miss {
       if (req.request == “PURGE”) {
               error 404 “Not in cache.”;
       }
}

sub vcl_fetch {
               set obj.ttl = 180s;
               #set    obj.http.X-Varnish-IP = server.ip;
               set    obj.http.Varnish = “Tested by Kevin”;
}

启动Varnish
# /usr/local/varnish/sbin/varnishd -n /data/vcache -f /usr/local/varnish/etc/varnish/default.vcl -a 10.10.10.8:80 -s file,/data/vcache/varnish_cache.data,50G -u www -w2,65536,60 -T 127.0.0.1:3600 -p thread_pool_min=200 -p thread_pool_max=4000 -p thread_pools=4 -p thread_pool_add_delay=2 -p listen_depth=4096 -p lru_interval=20

启动日志记录
#/usr/local/varnish/bin/varnishncsa -n /data/vcache -w /var/log/varnish/varnish.log &

]]> http://blog.fabrichina.net/archives/315/feed 0 php-fpm vs nginx vs unix socket http://blog.fabrichina.net/archives/312 http://blog.fabrichina.net/archives/312#comments Wed, 21 Jul 2010 02:57:58 +0000 Albert http://blog.fabrichina.net/?p=312 nginx修改
fastcgi_pass unix:/tmp/nginx.socket;

php-fpm.conf修改
listen = /tmp/nginx.socket
重启php-fpm 重启nginx 搞定。。不过不知道能有多大改善。。难说。。。。

]]> http://blog.fabrichina.net/archives/312/feed 0 php-fpm vs php 5.3+ 启动指令 http://blog.fabrichina.net/archives/309 http://blog.fabrichina.net/archives/309#comments Wed, 21 Jul 2010 02:38:00 +0000 Albert http://blog.fabrichina.net/?p=309 php-5.3.2/sapi/fpm/init.d.php-fpm

这个东西在源始代码里面，copy出来用就可以了，这个脚本可以start stop reload fpm就和5.2+的那个脚本一样了！

]]> http://blog.fabrichina.net/archives/309/feed 0 编译php-fpm cgi模式 http://blog.fabrichina.net/archives/307 http://blog.fabrichina.net/archives/307#comments Tue, 20 Jul 2010 10:56:26 +0000 Albert http://blog.fabrichina.net/?p=307 ./configure –prefix=/usr/local/php –with-mysqli=/usr/local/mysql/bin/mysql_config –with-mysql=/usr/local/mysql –with-config-file-path=/usr/local/php/etc –with-curl –with-zlib –enable-ftp  –with-mcrypt –enable-inline-optimization –disable-debug –with-gd –enable-gd-native-ttf –enable-gd-jis-conv –with-iconv-dir=/usr/local –with-freetype-dir=/usr/local/lib/freetype –with-jpeg-dir=/usr/local –with-png-dir=/usr/local –with-zlib –with-libxml-dir=/usr/local/lib/libxml –enable-xml –enable-exif –enable-soap –enable-zip –with-openssl –enable-mbstring –with-mhash –with-tidy –enable-fastcgi –enable-fpm –enable-force-cgi-redirect –enable-mbstring

make ZEND_EXTRA_LIBS=’-liconv’

make install

]]> http://blog.fabrichina.net/archives/307/feed 0 libtidy 安装 http://blog.fabrichina.net/archives/304 http://blog.fabrichina.net/archives/304#comments Tue, 20 Jul 2010 09:12:41 +0000 Albert http://blog.fabrichina.net/?p=304 wget http://tidy.sourceforge.net/src/old/tidy_src_051026.tgz
  • gunzip tidy-xxxx.tgz
  • tar -xvf tidy-xxxx.tar
  • cd tidy
  • sh build/gnuauto/setup.sh

    • 按照提示装就行了！

    ]]>     http://blog.fabrichina.net/archives/304/feed 0     Squid3.0与2.7的配置差异 http://blog.fabrichina.net/archives/300 http://blog.fabrichina.net/archives/300#comments Tue, 20 Jul 2010 02:51:20 +0000 Albert http://blog.fabrichina.net/?p=300

    Squid3.0最重要的新特性:

    • Code converted to C++, with significant internal restructuring and rewrites.
    • ICAP implementation (RFC 3507 and www.icap-forum.org)
    • Edge Side Includes (ESI) implementation (www.esi.org)

    更多的请参考官方说明

    来说说配置方法的不同之处（只说我自己实际使用的）

    ./configure的配置项

    ./configure –prefix=/usr/local/squid –with-large-files –enable-useragent-log –enable-referer-log –enable-linux-netfilter –enable-x-accelerator-vary –disable-internal-dns –disable-mempools –with-maxfd=65535

    3.0版本去掉了以下选项:

    –enable-dlmalloc    不再需要

    –enable-epoll    系统会自己选择最优的I/O Loop Method

    –enable-truncate     不再需要

    –enable-follow-x-forwarded-for    没有此项配置了

    增加了以下选项:

    –disable-mempools    相当于2.7配置文件里面的memory_pools off，适合内存使用较大的情况，系统会调用free()来清除没用到的缓存内存

    –with-maxfd=65535    相当于ulimit -n 65535，2.7配置文件里面的max_filedescriptors 65535

    配置文件（squid.conf）差别

    在Squid3.0版本的配置文件中，如下主要tag发生了变化

    acl    去掉了对src为all的定义，已集成；对protocol的定义简写为proto

    http_port     去掉了选项http11和act_as_origin；增加了类型http_status

    cache_peer    去掉了选项http11

    header_access    删除了此tag，以request_header_access和reply_header_access取代

    server_http11    删除了此tag

    incoming_rate    删除了此tag

    memory_pools    删除了此tag，在./configure的时候实现

    max_filedescriptors    删除了此tag，在./configure的时候实现

    上面只列出了我自己实际配置Squid时，3.0版本和2.7版本的不同之处，关于更多的大家可以参考官方文档。

    参考文档

    http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE14-RELEASENOTES.html

    Squid3.0配置参考

    编译参数:
    [url=http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE15.tar.gz]http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE15.tar.gz[/url]

    [color=Blue]./configure –prefix=/usr/local/squid3 \
    –enable-debug-cbdata \
    –enable-async-io=100 \
    –with-pthreads \
    –enable-storeio=”aufs,diskd,ufs” \
    –enable-removal-policies=”heap,lru” \
    –enable-icmp \
    –enable-delay-pools \
    –enable-useragent-log \
    –enable-referer-log \
    –enable-kill-parent-hack \
    –enable-arp-acl \
    –enable-default-err-language=Simplify_Chinese \
    –enable-err-languages=”Simplify_Chinese English” \
    –disable-poll \
    –disable-wccp \
    –disable-wccpv2 \
    –disable-ident-lookups \
    –disable-internal-dns \
    –enable-basic-auth-helpers=”NCSA” \
    –enable-stacktrace \
    –with-large-files \
    –disable-mempools \
    –with-filedescriptors=65535 \
    –enable-ssl \
    –enable-x-accelerator-var
    make
    make install[/color]

    贴一个我在线上运行的配置供大家参考：）有不足之处欢迎指正。
    #accel listen port
    [b]http_port 80 accel vhost vport[/b]
    #accel domain
    [b]cache_peer 211.100.72.109 parent 80 0 no-query originserver no-digest name=www[/b]
    [b]cache_peer_domain www .linuxtone.com .linuxtone.com.cn .linuxtone.net .linuxtone.cn .linuxtone.org[/b]

    #acl
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    acl SSL_ports port 443 563
    acl Safe_ports port 80       # http
    acl Safe_ports port 8080
    acl LanSrc src 211.100.72.0/24
    acl LanDst dst 211.100.72.0/24
    [b]acl LanDstDM dstdomain .linuxtone.com .linuxtone.com.cn .linuxtone.net .linuxtone.cn .linuxtone.org[/b]

    acl CONNECT method CONNECT
    http_access allow manager localhost
    http_access deny manager
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports
    http_access allow LanSrc
    http_access allow LanDst
    http_access allow LanDstDM
    http_access deny   all

    #base
    visible_hostname www-cache2.linuxtone.com
    cache_mgr [email]cache@linuxtone.org[/email]
    cache_effective_user squid
    cache_effective_group squid

    error_directory /usr/local/squid3/share/errors/Simplify_Chinese
    icon_directory /usr/local/squid3/share/icons
    mime_table /usr/local/squid3/etc/mime.conf

    cache_replacement_policy lru
    #cache_dir
    cache_dir aufs /data/cache1 32768 64 64
    cache_dir aufs /data/cache2 32768 64 64
    cache_mem 2048 MB
    max_open_disk_fds 0
    #maximum_object_size 512 KB
    #maximum_object_size_in_memory 256 KB
    maximum_object_size 20 MB
    maximum_object_size_in_memory 8 MB

    #keepalived
    client_persistent_connections off
    server_persistent_connections on
    #persistent_request_timeout 60 seconds

    #memory_pools on
    #memory_pools_limit 64 MB

    forwarded_for on
    log_icp_queries off

    via off
    httpd_suppress_version_string off

    ie_refresh off
    tcp_recv_bufsize 32 KB

    #acl webservices rep_header Server -i ^linuxtoneWS ^Apache ^nginx
    #broken_vary_encoding allow webservices

    #hidden the squid3 header
    #reply_header_access Server deny all
    #reply_header_access X-Cache deny all
    #reply_header_access Warning deny all
    #reply_header_access Expires deny all
    #reply_header_access Cache-Control deny all
    #reply_header_access age deny all
    #reply_header_access All deny all

    ipcache_size 1024
    ipcache_low 90
    ipcache_high 95

    memory_replacement_policy lru

    hosts_file /etc/hosts
    request_header_max_size 128 KB

    #deny cache
    hierarchy_stoplist cgi-bin ? \.php
    acl QUERY urlpath_regex cgi-bin\? \.php
    acl DIRECT url_regex -i ^http:\/\/www\.linuxtone\.com\/$
    acl DIRECT url_regex -i ^http:\/\/photo\.linuxtone\.com\/.*$
    acl DIRECT url_regex -i ^http:\/\/www\.linuxtone\.com\/index\.html$
    cache deny QUERY
    cache deny DIRECT

    #request_body_max_size 0 KB

    refresh_pattern ^ftp:           60      20%     10080
    refresh_pattern ^gopher:        60      0%      1440
    refresh_pattern .               0       20%     1440
    refresh_pattern -i \.css$       360    50%     2880    reload-into-ims
    refresh_pattern -i \.js$        1440    50%     2880    reload-into-ims
    refresh_pattern -i \.html$        720   50%     1440    reload-into-ims
    refresh_pattern -i \.jpg$       1440    90%     2880    ignore-reload
    refresh_pattern -i \.gif$       1440    90%     2880    ignore-reload
    refresh_pattern -i \.swf$       1440    90%     2880    ignore-reload
    refresh_pattern -i \.jpg$       1440      50%     2880    ignore-reload
    refresh_pattern -i \.png$       1440      50%     2880      ignore-reload  
    refresh_pattern -i \.bmp$       1440      50%     2880      ignore-reload

    refresh_pattern -i \.doc$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.ppt$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.xls$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.pdf$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.rar$       1440    50%     2880      ignore-reload
    refresh_pattern -i \.zip$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.txt$ 1440    50%     2880      ignore-reload

    quick_abort_min 20 KB
    quick_abort_max 20 KB
    quick_abort_pct 95

    connect_timeout 1 minute
    negative_ttl 0 minutes
    read_timeout 30 seconds
    pconn_timeout 120 seconds
    shutdown_lifetime 5 seconds
    strip_query_terms off

    #snmp
    #snmp_port 3401
    #acl snmppublic snmp_orgmunity snsimg
    #snmp_access allow snmppublic localhost
    #snmp_access deny all

    icp_port 0

    # logfile
    emulate_httpd_log on
    #logformat combined %{X-Forwarded-For}>h %ui %un [%tl] “%rm %ru HTTP/%rv” %Hs %<st “%{Referer}>h” “%{User-Agent}>h” %Ss:%Sh
    #access_log none
    #access_log /data/logs/access.log combined
    logformat squid  %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
    access_log /data/logs/access.log squid
    #cache_store_log /var/log/squid3/store.log
    cache_store_log /dev/null
    cache_log /data/logs/cache.log
    logfile_rotate 12

    # MISCELLANEOUS
    store_objects_per_bucket 15
    client_db off 

    Squid3.0配置参考

    编译参数:
    [url=http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE15.tar.gz]http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE15.tar.gz[/url]

    [color=Blue]./configure –prefix=/usr/local/squid3 \
    –enable-debug-cbdata \
    –enable-async-io=100 \
    –with-pthreads \
    –enable-storeio=”aufs,diskd,ufs” \
    –enable-removal-policies=”heap,lru” \
    –enable-icmp \
    –enable-delay-pools \
    –enable-useragent-log \
    –enable-referer-log \
    –enable-kill-parent-hack \
    –enable-arp-acl \
    –enable-default-err-language=Simplify_Chinese \
    –enable-err-languages=”Simplify_Chinese English” \
    –disable-poll \
    –disable-wccp \
    –disable-wccpv2 \
    –disable-ident-lookups \
    –disable-internal-dns \
    –enable-basic-auth-helpers=”NCSA” \
    –enable-stacktrace \
    –with-large-files \
    –disable-mempools \
    –with-filedescriptors=65535 \
    –enable-ssl \
    –enable-x-accelerator-var
    make
    make install[/color]

    贴一个我在线上运行的配置供大家参考：）有不足之处欢迎指正。
    #accel listen port
    [b]http_port 80 accel vhost vport[/b]
    #accel domain
    [b]cache_peer 211.100.72.109 parent 80 0 no-query originserver no-digest name=www[/b]
    [b]cache_peer_domain www .linuxtone.com .linuxtone.com.cn .linuxtone.net .linuxtone.cn .linuxtone.org[/b]

    #acl
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    acl SSL_ports port 443 563
    acl Safe_ports port 80       # http
    acl Safe_ports port 8080
    acl LanSrc src 211.100.72.0/24
    acl LanDst dst 211.100.72.0/24
    [b]acl LanDstDM dstdomain .linuxtone.com .linuxtone.com.cn .linuxtone.net .linuxtone.cn .linuxtone.org[/b]

    acl CONNECT method CONNECT
    http_access allow manager localhost
    http_access deny manager
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports
    http_access allow LanSrc
    http_access allow LanDst
    http_access allow LanDstDM
    http_access deny   all

    #base
    visible_hostname www-cache2.linuxtone.com
    cache_mgr [email]cache@linuxtone.org[/email]
    cache_effective_user squid
    cache_effective_group squid

    error_directory /usr/local/squid3/share/errors/Simplify_Chinese
    icon_directory /usr/local/squid3/share/icons
    mime_table /usr/local/squid3/etc/mime.conf

    cache_replacement_policy lru
    #cache_dir
    cache_dir aufs /data/cache1 32768 64 64
    cache_dir aufs /data/cache2 32768 64 64
    cache_mem 2048 MB
    max_open_disk_fds 0
    #maximum_object_size 512 KB
    #maximum_object_size_in_memory 256 KB
    maximum_object_size 20 MB
    maximum_object_size_in_memory 8 MB

    #keepalived
    client_persistent_connections off
    server_persistent_connections on
    #persistent_request_timeout 60 seconds

    #memory_pools on
    #memory_pools_limit 64 MB

    forwarded_for on
    log_icp_queries off

    via off
    httpd_suppress_version_string off

    ie_refresh off
    tcp_recv_bufsize 32 KB

    #acl webservices rep_header Server -i ^linuxtoneWS ^Apache ^nginx
    #broken_vary_encoding allow webservices

    #hidden the squid3 header
    #reply_header_access Server deny all
    #reply_header_access X-Cache deny all
    #reply_header_access Warning deny all
    #reply_header_access Expires deny all
    #reply_header_access Cache-Control deny all
    #reply_header_access age deny all
    #reply_header_access All deny all

    ipcache_size 1024
    ipcache_low 90
    ipcache_high 95

    memory_replacement_policy lru

    hosts_file /etc/hosts
    request_header_max_size 128 KB

    #deny cache
    hierarchy_stoplist cgi-bin ? \.php
    acl QUERY urlpath_regex cgi-bin\? \.php
    acl DIRECT url_regex -i ^http:\/\/www\.linuxtone\.com\/$
    acl DIRECT url_regex -i ^http:\/\/photo\.linuxtone\.com\/.*$
    acl DIRECT url_regex -i ^http:\/\/www\.linuxtone\.com\/index\.html$
    cache deny QUERY
    cache deny DIRECT

    #request_body_max_size 0 KB

    refresh_pattern ^ftp:           60      20%     10080
    refresh_pattern ^gopher:        60      0%      1440
    refresh_pattern .               0       20%     1440
    refresh_pattern -i \.css$       360    50%     2880    reload-into-ims
    refresh_pattern -i \.js$        1440    50%     2880    reload-into-ims
    refresh_pattern -i \.html$        720   50%     1440    reload-into-ims
    refresh_pattern -i \.jpg$       1440    90%     2880    ignore-reload
    refresh_pattern -i \.gif$       1440    90%     2880    ignore-reload
    refresh_pattern -i \.swf$       1440    90%     2880    ignore-reload
    refresh_pattern -i \.jpg$       1440      50%     2880    ignore-reload
    refresh_pattern -i \.png$       1440      50%     2880      ignore-reload  
    refresh_pattern -i \.bmp$       1440      50%     2880      ignore-reload

    refresh_pattern -i \.doc$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.ppt$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.xls$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.pdf$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.rar$       1440    50%     2880      ignore-reload
    refresh_pattern -i \.zip$ 1440    50%     2880      ignore-reload
    refresh_pattern -i \.txt$ 1440    50%     2880      ignore-reload

    quick_abort_min 20 KB
    quick_abort_max 20 KB
    quick_abort_pct 95

    connect_timeout 1 minute
    negative_ttl 0 minutes
    read_timeout 30 seconds
    pconn_timeout 120 seconds
    shutdown_lifetime 5 seconds
    strip_query_terms off

    #snmp
    #snmp_port 3401
    #acl snmppublic snmp_orgmunity snsimg
    #snmp_access allow snmppublic localhost
    #snmp_access deny all

    icp_port 0

    # logfile
    emulate_httpd_log on
    #logformat combined %{X-Forwarded-For}>h %ui %un [%tl] “%rm %ru HTTP/%rv” %Hs %<st “%{Referer}>h” “%{User-Agent}>h” %Ss:%Sh
    #access_log none
    #access_log /data/logs/access.log combined
    logformat squid  %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
    access_log /data/logs/access.log squid
    #cache_store_log /var/log/squid3/store.log
    cache_store_log /dev/null
    cache_log /data/logs/cache.log
    logfile_rotate 12

    # MISCELLANEOUS
    store_objects_per_bucket 15
    client_db off

    ]]>     http://blog.fabrichina.net/archives/300/feed 0     如何关闭Squid的Cache功能！ http://blog.fabrichina.net/archives/298 http://blog.fabrichina.net/archives/298#comments Mon, 19 Jul 2010 14:53:48 +0000 Albert http://blog.fabrichina.net/?p=298
    1、编译的时候添加null的文件系统：
    –enable-storeio=null,(Others)

    2、在squid.conf设置：
    cache_dir null /tmp
    ]]>     http://blog.fabrichina.net/archives/298/feed 0     squid 多ip配置 http://blog.fabrichina.net/archives/295 http://blog.fabrichina.net/archives/295#comments Mon, 19 Jul 2010 14:48:32 +0000 Albert http://blog.fabrichina.net/?p=295 if (! ($tokens[1] =~ "127.0.0.1")) {

    11        push(@acls, "acl ip$count myip $tokens[1]\n");
    12        push(@tcps, "tcp_outgoing_address $tokens[1] ip$count\n");
    13        $count++;
    14     }

    看懂这个，打在squid.conf里面，就搞定了！！很简单

    ]]>     http://blog.fabrichina.net/archives/295/feed 0     关于多ip路由的例子 http://blog.fabrichina.net/archives/293 http://blog.fabrichina.net/archives/293#comments Mon, 19 Jul 2010 14:27:28 +0000 Albert http://blog.fabrichina.net/?p=293 http://uddtm.com/os/linux/duoxianluyoucelue.php

    ]]>     http://blog.fabrichina.net/archives/293/feed 0     libmemcached 安装报错 解决 http://blog.fabrichina.net/archives/285 http://blog.fabrichina.net/archives/285#comments Tue, 13 Jul 2010 09:13:31 +0000 Albert http://blog.fabrichina.net/?p=285 clients/ms_conn.o: In function `ms_get_udp_request_id’:
    /root/soft/phpmodel/libmemcached-0.42/clients/ms_conn.c:194: undefined reference to `__sync_fetch_and_add_4′
    clients/ms_conn.o: In function `ms_reconn_socks’:
    /root/soft/phpmodel/libmemcached-0.42/clients/ms_conn.c:1051: undefined reference to `__sync_fetch_and_add_4′
    clients/ms_conn.o: In function `ms_reconn’:
    /root/soft/phpmodel/libmemcached-0.42/clients/ms_conn.c:919: undefined reference to `__sync_fetch_and_add_4′
    /root/soft/phpmodel/libmemcached-0.42/clients/ms_conn.c:956: undefined reference to `__sync_fetch_and_add_4′
    clients/ms_thread.o: In function `ms_setup_thread’:
    /root/soft/phpmodel/libmemcached-0.42/clients/ms_thread.c:225: undefined reference to `__sync_fetch_and_add_4′
    clients/ms_thread.o:/root/soft/phpmodel/libmemcached-0.42/clients/ms_thread.c:208: more undefined references to `__sync_fetch_and_add_4′ follow
    collect2: ld returned 1 exit status
    make[2]: *** [clients/memslap] Error 1
    make[2]: Leaving directory `/root/soft/phpmodel/libmemcached-0.42′
    make[1]: *** [all-recursive] Error 1
    make[1]: Leaving directory `/root/soft/phpmodel/libmemcached-0.42′
    make: *** [all] Error 2

    用这个语句

    ./configure -disable-64bit CFLAGS=”-O3 -march=i686″

    就可以了

    ]]>     http://blog.fabrichina.net/archives/285/feed 0     ss5架设 http://blog.fabrichina.net/archives/281 http://blog.fabrichina.net/archives/281#comments Fri, 09 Jul 2010 07:56:09 +0000 Albert http://blog.fabrichina.net/?p=281 yum -y install pam-devel openldap-devel cyrus-sasl-devel

    需要BerkeleyDb
    openladap
    ss5.tar.gz..

    一个一个编译完毕以后，修改/etc/opt/ss5.conf
    auth    0.0.0.0/0               -              u
    permit u 0.0.0.0/0 – 0.0.0.0/0 – - ulimit – -
    修改ss5.passwd文件加入
    username password
    添加ulimit 文件
    ulimit里面写上username

    mv /usr/lib/ss5/mod_socks4.so /usr/lib/ss5/mod_socks4.so.bk

    启动/etc/rc.d/init.d/ss5 restart

    ]]>     http://blog.fabrichina.net/archives/281/feed 0     多IP应用 http://blog.fabrichina.net/archives/277 http://blog.fabrichina.net/archives/277#comments Fri, 09 Jul 2010 03:49:33 +0000 Albert http://blog.fabrichina.net/?p=277 可以加一条指定源地址的路由来试试:
    假定 指定使用1.1.1.2地址, 其所在的子接口为eth1:0 则
    route add <目标网段/主机> gw <网关> dev eth1:0

    如果是多网卡绑同网段ip也一样, 将dev后面的eth1:0换成 eth1 (假定1.1.1.2绑在eth1网卡上). ]]> http://blog.fabrichina.net/archives/277/feed 0 linux服务器查看cpu 内存相关信息 http://blog.fabrichina.net/archives/255 http://blog.fabrichina.net/archives/255#comments Tue, 01 Jun 2010 01:34:02 +0000 Albert http://blog.fabrichina.net/?p=255 转帖：

    测试机器的硬件信息：

    查看CPU信息（型号）
    # cat /proc/cpuinfo | grep name | cut -f2 -d: | uniq -c
          8  Intel(R) Xeon(R) CPU            E5410   @ 2.33GHz
    (看到有8个逻辑CPU, 也知道了CPU型号)

    # cat /proc/cpuinfo | grep physical | uniq -c
          4 physical id      : 0
          4 physical id      : 1
    (说明实际上是两颗4核的CPU)

    # getconf LONG_BIT
       32
    (说明当前CPU运行在32bit模式下, 但不代表CPU不支持64bit)

    # cat /proc/cpuinfo | grep flags | grep ‘ lm ‘ | wc -l
       8
    (结果大于0, 说明支持64bit计算. lm指long mode, 支持lm则是64bit)

    再完整看cpu详细信息, 不过大部分我们都不关心而已.
    # dmidecode | grep ‘Processor Information’

    查看内 存信息
    # cat /proc/meminfo

    # uname -a
    Linux euis1 2.6.9-55.ELsmp #1 SMP Fri Apr 20 17:03:35 EDT 2007 i686 i686 i386 GNU/Linux
    (查看当前操作系统内核信息)

    # cat /etc/issue | grep Linux
    Red Hat Enterprise Linux AS release 4 (Nahant Update 5)
    (查看当前操作系统发行版信息)

    查看机器型号
    # dmidecode | grep “Product Name” 

    查看网卡信息
    # dmesg | grep -i eth

    ]]>     http://blog.fabrichina.net/archives/255/feed 0     nginx ip 传递给apache remote_add.. http://blog.fabrichina.net/archives/229 http://blog.fabrichina.net/archives/229#comments Wed, 12 May 2010 05:34:04 +0000 Albert http://blog.fabrichina.net/?p=229 http://stderr.net/apache/rpaf/download/

    编译吗。。用这个

    /usr/local/httpd/bin/apxs -i -a -c mod_rpaf-2.0.c

    注意他有2个.c的2.0这个是for apache2.0的（文档太烂，我自己猜的，反正没2.0的编译不过去~~）

    chmod 755 /usr/local/httpd/modules/mod_rpaf-2.0.so
    [activating module `rpaf' in /usr/local/httpd/conf/httpd.conf]

    貌似直接就搞上去了。。

    RPAFenable On
    # Enable reverse proxy add forward
    RPAFproxy_ips 127.0.0.1 10.10.70.*

    #实际测试中ip他不支持*这种通配符..所以还是写清楚你nginx的原始IP吧！
    # which ips are forwarding requests to us
    RPAFsethostname On
    # let rpaf update vhost settings
    # allows to have the same hostnames as in the “real”
    # configuration for the forwarding Apache
    RPAFheader X-REAL-IP
    # Allows you to change which header mod_rpaf looks
    # for when trying to find the ip the that is forwarding
    # our requests

    X-REAL-IP哪里来的呢？当然是nginx里面配置的~~

           set  $my_x_real_ip “”;
            if ($my_x_real_ip ~ “^$”) {
                    set $my_x_real_ip $http_x_real_ip;
            }
            if ($http_x_real_ip ~ “^$”)  {
                    set $my_x_real_ip $remote_addr;
            }        
            proxy_set_header    X-Real-IP $my_x_real_ip;

    吧这个存成realIP.conf然后再nginx的conf里面每个server段include一下，就会多一个x-real-ip的header了

    print_r($_SERVER);

    [REMOTE_ADDR] => 192.168.105.47

    你看，php已经能正常获取IP了！

    ]]>     http://blog.fabrichina.net/archives/229/feed 0