1314 lines
49 KiB
Plaintext
1314 lines
49 KiB
Plaintext
|
||
|
||
|
||
|
||
## 开通
|
||
|
||
### 1.操作以及配置参数优化服务器性能提访问速度
|
||
|
||
```shell
|
||
API接口的目录： /root/com-kuajingvs-clear-api/server.py
|
||
```
|
||
|
||
```shell
|
||
➜ ~ systemctl status tool
|
||
● tool.service - Test Service
|
||
Loaded: loaded (/etc/systemd/system/tool.service; disabled; vendor preset: disabled)
|
||
Active: active (running) since Thu 2024-05-16 04:04:08 CST; 4 days ago
|
||
Main PID: 6841 (python3)
|
||
CGroup: /system.slice/tool.service
|
||
├─6841 /root/com-kuajingvs-clear-api/venv/bin/python3 /root/com-kuajingvs-clear-api/server.py > /var/log/tool/autorun.log 2>&1
|
||
└─6999 /root/com-kuajingvs-clear-api/venv/bin/python3 /root/com-kuajingvs-clear-api/server.py > /var/log/tool/autorun.log 2>&1
|
||
|
||
May 20 09:48:19 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: }
|
||
May 20 09:48:19 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: ]
|
||
May 20 09:48:19 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: },
|
||
May 20 09:48:19 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: "log": {
|
||
May 20 09:48:19 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: "access": "/var/log/v2ray/access.log",
|
||
May 20 09:48:19 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: "loglevel": "debug"
|
||
May 20 09:48:19 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: }
|
||
May 20 09:48:23 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: }123.151.147.14 - - [20/May/2024 09:48:23] "GET /v2/instances/ipr?app_key=kuajingvs&app_secret=kv5225....1" 200 -
|
||
May 20 09:51:54 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: 123.151.147.14 - - [20/May/2024 09:51:54] "GET /v2/instances/ipr?app_key=kuajingvs&app_secret=kv5225e....1" 200 -
|
||
May 20 10:31:10 iZj6c7kq73ri0gpfrnj0kbZ python3[6841]: 123.151.147.14 - - [20/May/2024 10:31:10] "GET /v2/instances/virtual_memory?app_key=kuajingvs&app_sec....1" 200 -
|
||
Hint: Some lines were ellipsized, use -l to show in full.
|
||
|
||
启动工具服务：systemctl status tool
|
||
```
|
||
|
||
------
|
||
|
||
#### 国内虚拟缓冲内存
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances/virtual_memory?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=xx.xx.xx.xx
|
||
```
|
||
|
||
#### 国外虚拟缓冲内存
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances/virtual_memory?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=xx.xx.xx.xx
|
||
```
|
||
|
||
**public_ip指定IP的参数**
|
||
|
||
**返回输出加虚拟成功:**
|
||
|
||
```shell
|
||
{
|
||
"code": "10000",
|
||
"model": "virtual.memory",
|
||
"public_ip": "xx.xx.xx.xx",
|
||
"running": {
|
||
"commands": {
|
||
"command": " total used free shared buff/cache available\nMem: 845M 78M 631M 48M 135M 601M\nSwap: 1.0G 0B 1.0G\n"
|
||
},
|
||
"status": [
|
||
" active (running) "
|
||
],
|
||
"true": true
|
||
}
|
||
}
|
||
```
|
||
|
||
------
|
||
|
||
------
|
||
|
||
#### 国内清理日志与网络配置优化、清理以及优化内存冲性能
|
||
|
||
```shell
|
||
http://47.95.201.173:8084/v2/instances_buffer?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=xx.xx.xx.xx
|
||
```
|
||
|
||
|
||
|
||
#### 国外清理日志与网络配置优化、清理以及优化内存冲性能
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances_buffer?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=xx.xx.xx.xx
|
||
```
|
||
|
||
**public_ip指定IP的参数**
|
||
|
||
**返回输出值清理日志与网络配置优化、清理以及优化内存冲性能成功:**
|
||
|
||
```shell
|
||
{
|
||
"code": "10000",
|
||
"model": "instance.buffer",
|
||
"public_ip": "xx.xx.xx.xx",
|
||
"running": {
|
||
"commands": {
|
||
"command": "vm.swappiness = 0\nnet.ipv4.neigh.default.gc_stale_time = 120\nnet.ipv4.conf.all.rp_filter = 0\nnet.ipv4.conf.default.rp_filter = 0\nnet.ipv4.conf.default.arp_announce = 2\nnet.ipv4.conf.lo.arp_announce = 2\nnet.ipv4.conf.all.arp_announce = 2\nnet.ipv4.tcp_max_tw_buckets = 5000\nnet.ipv4.tcp_syncookies = 1\nnet.ipv4.tcp_max_syn_backlog = 65535\nnet.ipv4.tcp_synack_retries = 2\nkernel.sched_latency_ns = 3000000\nkernel.sysrq = 1\nnet.ipv4.tcp_window_scaling = 1\nnet.ipv4.tcp_fin_timeout = 30\nnet.ipv4.tcp_keepalive_time = 300\nnet.ipv4.tcp_window_scaling = 0\nnet.ipv4.ip_default_ttl = 128\nnet.ipv4.tcp_timestamps = 0\nnet.core.rmem_default = 31457280\nnet.core.wmem_default = 31457280\nnet.core.rmem_max = 16777216\nnet.core.wmem_max = 16777216\nnet.ipv4.tcp_rmem = 4096 87380 16777216\nnet.ipv4.tcp_wmem = 4096 65536 16777216\nnet.core.default_qdisc = fq\nnet.ipv4.tcp_timestamps = 0\nnet.ipv4.tcp_congestion_control = reno\nnet.ipv4.tcp_congestion_control = cubic\nnet.core.somaxconn = 65535\nnet.ipv4.tcp_max_syn_backlog = 65535\n total used free shared buff/cache available\nMem: 445644 237512 8640 2024 199492 194196\nLow: 445644 437004 8640\nHigh: 0 0 0\nSwap: 0 0 0\n total used free shared buff/cache available\nMem: 445644 235652 103756 2052 106236 196108\nLow: 445644 341888 103756\nHigh: 0 0 0\nSwap: 0 0 0\nActive Internet connections (servers and established)\nProto Recv-Q Send-Q Local Address Foreign Address State PID/Program name \ntcp 0 0 0.0.0.0:5355 0.0.0.0:* LISTEN 1009/systemd-resolv \ntcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1093/sshd \ntcp 0 0 172.16.161.228:22 47.95.201.173:42150 ESTABLISHED 1022779/sshd: root \ntcp 0 0 172.16.161.228:60288 3.214.96.11:443 ESTABLISHED 1022115/v2ray \ntcp 0 0 172.16.161.228:36272 108.138.245.138:443 TIME_WAIT - \ntcp 0 0 172.16.161.228:54298 143.204.130.181:443 ESTABLISHED 1022115/v2ray \ntcp 0 0 172.16.161.228:52626 54.161.91.146:443 ESTABLISHED 1022115/v2ray \ntcp 0 1 172.16.161.228:57228 172.217.160.106:443 SYN_SENT 1022115/v2ray \ntcp 0 0 172.16.161.228:49178 67.220.247.73:443 ESTABLISHED 1022115/v2ray \ntcp 0 0 172.16.161.228:36668 100.100.45.106:443 TIME_WAIT - \ntcp 0 0 172.16.161.228:41662 100.100.30.27:80 ESTABLISHED 730968/AliYunDun \ntcp 0 1 172.16.161.228:57238 172.217.160.106:443 SYN_SENT 1022115/v2ray \ntcp 0 1 172.16.161.228:48272 142.251.43.10:443 SYN_SENT 1022115/v2ray \ntcp 0 0 172.16.161.228:49174 67.220.247.73:443 ESTABLISHED 1022115/v2ray \ntcp 0 1 172.16.161.228:57102 142.251.42.234:443 SYN_SENT 1022115/v2ray \ntcp 0 0 172.16.161.228:45618 18.155.202.41:443 ESTABLISHED 1022115/v2ray \ntcp 0 0 172.16.161.228:34894 18.238.189.178:443 ESTABLISHED 1022115/v2ray \ntcp 0 0 172.16.161.228:52914 67.220.240.31:443 ESTABLISHED 1022115/v2ray \ntcp 0 352 172.16.161.228:22 47.95.201.173:42154 ESTABLISHED 1022806/sshd: root \ntcp 0 0 172.16.161.228:54204 100.100.45.106:80 TIME_WAIT - \ntcp 0 0 172.16.161.228:33700 52.84.229.37:443 ESTABLISHED 1022115/v2ray \ntcp 0 0 172.16.161.228:42034 143.204.130.212:443 TIME_WAIT - \ntcp 0 1 172.16.161.228:57104 142.251.42.234:443 SYN_SENT 1022115/v2ray \ntcp 0 0 172.16.161.228:44250 67.220.247.72:443 ESTABLISHED 1022115/v2ray \ntcp 0 0 172.16.161.228:42532 108.138.246.59:443 ESTABLISHED 1022115/v2ray \ntcp6 0 0 :::3359 :::* LISTEN 1022115/v2ray \ntcp6 0 0 :::10085 :::* LISTEN 1022115/v2ray \ntcp6 0 0 :::3399 :::* LISTEN 1022115/v2ray \ntcp6 0 0 :::3369 :::* LISTEN 1022115/v2ray \ntcp6 0 0 :::5355 :::* LISTEN 1009/systemd-resolv \ntcp6 0 0 :::3379 :::* LISTEN 1022115/v2ray \ntcp6 0 0 :::3349 :::* LISTEN 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64780 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64634 TIME_WAIT - \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64733 TIME_WAIT - \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64630 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64628 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64647 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64566 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64752 TIME_WAIT - \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64570 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64775 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64633 TIME_WAIT - \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64530 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64616 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64614 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64794 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64636 TIME_WAIT - \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64624 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64584 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64783 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64608 ESTABLISHED 1022115/v2ray \ntcp6 0 0 172.16.161.228:3369 114.220.189.124:64792 ESTABLISHED 1022115/v2ray \nudp 0 0 0.0.0.0:5355 0.0.0.0:* 1009/systemd-resolv \nudp 0 0 127.0.0.53:53 0.0.0.0:* 1009/systemd-resolv \nudp 0 0 127.0.0.1:323 0.0.0.0:* 712/chronyd \nudp 0 0 172.16.161.228:68 172.16.255.253:67 ESTABLISHED 835/NetworkManager \nudp6 0 0 :::5355 :::* 1009/systemd-resolv \nudp6 0 0 ::1:323 :::* 712/chronyd \n"
|
||
},
|
||
"status": [
|
||
" active (running) "
|
||
],
|
||
"true": true
|
||
}
|
||
}
|
||
```
|
||
|
||
### 2.接口操作部署和重启服务器
|
||
|
||
#### kjvs开通部署
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances/kv?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=xx.xx.xx.xx
|
||
```
|
||
|
||
public_ip参数xx.xx.xx.xx的IP字段、如直接可以登录服务器或在服务商在开通添加密码、不选password参数， 默认为：mima##YMYM366
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances/kv?app_key=kuajingvs&app_secret=kv5225e83745163f&password=s7t4X2xdl0lee5o8e6od&public_ip=xx.xx.xx.xx
|
||
```
|
||
|
||
password参数默认为mima##YMYM366 是主机连接密码，如和默认密码不一致则password不能为空必须添加password参数、
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances/kv?app_key=kuajingvs&app_secret=kv5225e83745163f&port=20022&public_ip=xx.xx.xx.xx
|
||
```
|
||
|
||
如port端口参数 默认22端口 连接登录端口则不为22端口、必传的port端口参数，返回部署成功值：
|
||
|
||
```shell
|
||
{
|
||
"code": "10000",
|
||
"model": "kv.deployment",
|
||
"public_ip": "45.38.248.61",
|
||
"running": {
|
||
"kv_deploy": [
|
||
true,
|
||
[
|
||
" active (running) "
|
||
]
|
||
]
|
||
}
|
||
}
|
||
```
|
||
|
||
#### IPRockeks部署
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances/ipr？app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=148.253.42.43&user=ubI7JKPhMH&pass_password=a3hd2pU6Qtq~
|
||
```
|
||
|
||
public_ip参数xx.xx.xx.xx的IP字段 user的用户参数为http或socks5 的代理用户名 、pass_password参数为http或socks5 代理密码
|
||
|
||
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances/ipr?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=xx.xx.xx.xx&user=ubI7JKPhMH&pass_password=a3hd2pU6Qtq~&password=2lOzGOEffQsKTioSDBvq
|
||
```
|
||
|
||
password参数默认为mima##YMYM366 是主机连接密码，如和默认密码不一致则password不能为空必须添加password参数
|
||
|
||
```shell
|
||
http://47.242.162.44:8084/v2/instances/ipr?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=xx.xx.xx.xx&user=ubI7JKPhMH&pass_password=a3hd2pU6Qtq~&port=20022
|
||
```
|
||
|
||
如port端口参数 默认22端口 连接登录端口则不为22端口、必传的port端口参数
|
||
|
||
返回部署成功值：
|
||
|
||
```shell
|
||
{
|
||
"code": "10000",
|
||
"model": "ipr.deployment",
|
||
"pass_password": "kBieqv1LS33#",
|
||
"public_ip": "xx.xx.xx.xx",
|
||
"running": {
|
||
"ipr_deploy": [
|
||
true,
|
||
[
|
||
" active (running) "
|
||
]
|
||
]
|
||
},
|
||
"user": "CXnC5Eqxmd"
|
||
}
|
||
```
|
||
|
||
### 3.自动手动清理日志脚本优化网络配置， 脚本可以替换执行
|
||
|
||
```shell
|
||
定时执行脚本的/root/com-kuajingvs-clean-buffer-scripts/automatic_clearing.sh
|
||
```
|
||
|
||
##### 添加一个IP执行脚本清理日志清理缓冲操作
|
||
|
||
```shell
|
||
cd com-kuajingvs-clean-buffer-scripts/ #进入目录
|
||
com-kuajingvs-clean-buffer-scripts git:(master) ✗ vim public_ip.csv #打开文件替换IP
|
||
47.74.22.136 #按退出键返回进入模式 Shift+: wq保存退出
|
||
/root/com-kuajingvs-clean-buffer-scripts/venv/bin/python3 /root/com-kuajingvs-clean-buffer-scripts/manual_addition_public_ip.py 执行进行清理日志缓冲
|
||
```
|
||
|
||
##### 阿里云重启服务器
|
||
|
||
```shell
|
||
cd com-kuajingvs-clean-buffer-scripts/ #进入目录
|
||
com-kuajingvs-clean-buffer-scripts git:(master) ✗ vim public_ip.csv #打开文件替换IP
|
||
47.74.22.136 #按退出键返回进入模式 Shift+: wq保存退出
|
||
vim ip_addresse.csv 执行进行清理日志缓冲
|
||
./aliyun_restart.sh 执行重启
|
||
```
|
||
|
||
### 4. 手动操作异常和访问慢调整测试连通性
|
||
|
||
##### 1.代理检测异常处理
|
||
|
||
测试服务器端口和加速端口连通
|
||
|
||
```shell
|
||
➜ ~ telnet 47.242.162.44 3369
|
||
Trying 47.242.162.44...
|
||
Connected to 47.242.162.44.
|
||
Escape character is '^]'.
|
||
```
|
||
|
||
查看查看状态是否正常和重启
|
||
|
||
```shell
|
||
systemctl status v2ray #查看状态
|
||
systemctl restart v2ray #重启服务
|
||
date #查看服务器时间
|
||
df -h #查看磁盘是否不足
|
||
top #查看进程启动文件是否占的过大
|
||
rboot #服务器重启
|
||
yum install -y ntpdate
|
||
ntpdate ntp.aliyun.com 更新时间
|
||
ssh ec2-user@ #aws连接的方式
|
||
ssh root@xx.xx.xx.xx -p 20022 #网宿云连接方式
|
||
```
|
||
|
||
|
||
|
||
##### 2.代理客户端测试连通性
|
||
|
||
调整网址访问的方法
|
||
|
||
调整替换dns的IP
|
||
|
||
```shell
|
||
vim /etc/resolv.conf 打开文件
|
||
nameserver 100.100.2.136
|
||
nameserver 100.100.2.138
|
||
nameserver 1.0.0.1
|
||
nameserver 9.9.9.9
|
||
systemctl restart v2ray
|
||
```
|
||
|
||
在原有的dns下方添加新找的dns 保存 重启v2ray
|
||
|
||
调整mtu峰值
|
||
|
||
```shell
|
||
yum -y install net-tools #ifconfig
|
||
echo "1460" > /sys/class/net/eth0/mtu
|
||
ifconfig eth0 mtu 1484 up 国外
|
||
ifconfig eth0 mtu 1488
|
||
```
|
||
|
||
重启域名解析服务
|
||
|
||
```shell
|
||
vim /etc/systemd/resolved.conf
|
||
sudo gedit /etc/systemd/resolved.conf #将dns 改为DNS =114.114.114.114 8.8.8.8
|
||
sudo systemctl restart systemd-resolved
|
||
sudo systemctl enable systemd-resolved
|
||
mv /etc/resolv.conf /etc/resolv.conf.bak
|
||
ln -s /run/systemd/resolve/resolv.conf /etc/
|
||
备份当前的/etc/resolve.conf，并重新设置/run/systemd/resolve/resolv.conf 到/etc/resolve.conf的软链接
|
||
|
||
free -h #查看系统内存使用情况，包括可用内存、已用内存、缓存等。
|
||
iostat #监控系统的磁盘 I/O 情况，包括磁盘读写速度、I/O 请求等待时间等。
|
||
ps aux #查看系统所有进程及其资源占用情况
|
||
du -sh * #查看当前目录下各个文件夹的大小。
|
||
sudo pkill sendmail #终止进程
|
||
```
|
||
|
||
加虚拟手动执行命令调节访问网址
|
||
|
||
```shell
|
||
sudo fallocate -l 1G /swapfile 加内存1G
|
||
sudo chmod 600 /swapfile #修改交换文件的权限
|
||
sudo mkswap /swapfile #设置为交换空间
|
||
sudo swapon /swapfile 启用交换空间
|
||
free -h
|
||
swapon --show 验证交换空间是否已经启用
|
||
/swapfile none swap sw 0 0 #
|
||
|
||
sudo dd if=/dev/zero of=/swapfile bs=1M count=1024
|
||
sudo dd if=/dev/zero of=/swapfile bs=1M count=512
|
||
sudo swapoff /swapfile #关闭交换空间
|
||
```
|
||
|
||
清理缓冲和网络优化配置
|
||
|
||
```shell
|
||
net.ipv4.tcp_timestamps=0
|
||
net.ipv4.tcp_window_scaling=0
|
||
net.ipv4.ip_default_ttl=128
|
||
net.ipv4.tcp_timestamps=0
|
||
net.core.rmem_default = 31457280
|
||
net.core.wmem_default = 31457280
|
||
net.core.rmem_max = 67108864
|
||
net.core.wmem_max = 67108864
|
||
net.ipv4.tcp_rmem = 4096 87380 67108864
|
||
net.ipv4.tcp_wmem = 4096 87380 67108864
|
||
net.core.default_qdisc = fq
|
||
net.ipv4.tcp_congestion_control = bbr
|
||
net.core.somaxconn=65535
|
||
net.ipv4.tcp_max_syn_backlog=65535
|
||
EOF
|
||
sudo sysctl -p
|
||
rm -rf /var/log/boot.log-*
|
||
rm -rf /var/log/btmp-*
|
||
rm -rf /var/log/cron-*
|
||
rm -rf /var/log/dnf.librepo.log-*
|
||
rm -rf /var/log/hawkey.log-*
|
||
rm -rf /var/log/dnf.log.*
|
||
rm -rf /var/log/maillog-*
|
||
rm -rf /var/log/secure-*
|
||
rm -rf /var/log/spooler-*
|
||
rm -rf /var/log/wtmp-*
|
||
rm -rf /var/log/messages-*
|
||
sudo truncate -s 0 /var/log/syslog
|
||
sudo truncate -s 0 /var/log/auth.log
|
||
sudo truncate -s 0 /var/log/kern.log
|
||
sudo truncate -s 0 /var/log/boot.log
|
||
sudo truncate -s 0 /var/log/messages
|
||
sudo truncate -s 0 /var/log/v2ray/access.log
|
||
sudo journalctl --vacuum-size=50M
|
||
free -l
|
||
sudo sync; echo 3 > /proc/sys/vm/drop_caches
|
||
free -l
|
||
netstat -tunap
|
||
```
|
||
|
||
```shell
|
||
ONE_USERNAME=username
|
||
ONE_PASSWORD=password
|
||
TWO_USERNAME=username
|
||
TWO_PASSWORD=password
|
||
yum install -y ntpdate
|
||
yum install -y vim
|
||
yum install -y wget
|
||
ntpdate time.nist.gov
|
||
ntpdate time.nuri.net
|
||
rm -rf /etc/gost
|
||
mkdir /etc/gost
|
||
openssl genpkey -algorithm RSA -out /etc/gost/private.key
|
||
openssl req -new -key /etc/gost/private.key -out /etc/gost/certificate.csr <<EOF
|
||
“”
|
||
“”
|
||
“”
|
||
“”
|
||
“”
|
||
EO
|
||
openssl x509 -req -days 365 -in /etc/gost/certificate.csr -signkey /etc/gost/private.key -out /etc/gost/certificate.crt
|
||
a=`uname -a`
|
||
b='aarch64'
|
||
if [[ $a =~ $b ]];then
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/2.11.5/gost-arm" -O /etc/gost/gost
|
||
else
|
||
wget "https://downloadbj.kuajingvs.com/iprocket-ypc/gost/gost" -O /etc/gost/gost
|
||
fi
|
||
chmod +x /etc/gost/gost
|
||
cat > /usr/lib/systemd/system/gost.service <<EOF
|
||
[Unit]
|
||
Description=Gost Proxy
|
||
After=network.target
|
||
Wants=network.target
|
||
[Service]
|
||
Type=simple
|
||
ExecStart=/etc/gost/gost -C /etc/gost/gost-config.json
|
||
Restart=always
|
||
RestartSec=10
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
cat > /etc/gost/gost-config.json <<EOF
|
||
{
|
||
"services": [
|
||
{
|
||
"addr": ":4379",
|
||
"handler": {
|
||
"type": "http",
|
||
"username": "${ONE_USERNAME}",
|
||
"password": "${ONE_PASSWORD}"
|
||
},
|
||
"interface": "eth1"
|
||
},
|
||
{
|
||
"addr": ":3379",
|
||
"handler": {
|
||
"type": "http",
|
||
"username": "${TWO_USERNAME}",
|
||
"password": "${TWO_PASSWORD}"
|
||
},
|
||
"interface": "eth0"
|
||
}
|
||
],
|
||
"listener": {
|
||
"type": "tcp",
|
||
"certFile": "/etc/gost/certificate.csr",
|
||
"keyFile": "/etc/gost/private.key"
|
||
}
|
||
}
|
||
EOF
|
||
sudo systemctl daemon-reload
|
||
sudo systemctl enable gost.service
|
||
sudo systemctl start gost.service
|
||
|
||
|
||
sysctl -w net.ipv4.tcp_window_scaling=0
|
||
sysctl -w net.ipv4.ip_default_ttl=128
|
||
sysctl -w net.ipv4.tcp_timestamps=0
|
||
echo "1484" > /sys/class/net/eth0/mtu
|
||
# 永久更改
|
||
cat >> /etc/sysctl.conf <<EOF
|
||
net.ipv4.tcp_window_scaling=0
|
||
net.ipv4.ip_default_ttl=128
|
||
net.ipv4.tcp_timestamps=0
|
||
EOF
|
||
|
||
cat >> /etc/sysconfig/network-scripts/ifcfg-eth0 <<EOF
|
||
MTU=1484
|
||
EOF
|
||
|
||
if [ ! -d ~/.ssh ]; then
|
||
mkdir ~/.ssh
|
||
fi
|
||
|
||
cat > ~/.ssh/authorized_keys <<EOF
|
||
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDee1pS2exRGzMNa+WGqZXoaOkUmOrvlatIu3C0jNVbfiqZpGRAJlvazpQJZcWw9hWy5uYkHsXbfKUIk8jpiaRdRoXS1odlyE1pdtCn1SFmfe0ZZmRE2oQoy7ALkW3OPmOAMcuUqC018Q7FOYl/MW+I8ypee0mT0C8ZS6eQsttlQLCVcrt3un0H8M2VDnzq8stSA0qV/qHYTGAY/ACYEI+j8QInmU2g9podef9NB93pM0AJadkiMLih0fmSUedE4ilLERNyBPWWeossW2h+oW7LO9UpxMrQ4DRpLvtBnwAUSNbx7z4+x8WfZjljwP5XLmdc4Oqr9L3HTiNZp0CO4w0b root@jenkins.kuajingvs.com
|
||
EOF
|
||
|
||
chmod 600 ~/.ssh/authorized_keys
|
||
sudo systemctl status gost.service
|
||
sudo systemctl stop firewalld
|
||
sudo systemctl disable firewalld
|
||
```
|
||
|
||
```shell
|
||
vm.swappiness=10
|
||
net.ipv4.neigh.default.gc_stale_time = 120
|
||
net.ipv4.conf.all.rp_filter = 0
|
||
net.ipv4.conf.default.rp_filter = 0
|
||
net.ipv4.conf.default.arp_announce = 2
|
||
net.ipv4.conf.lo.arp_announce = 2
|
||
net.ipv4.conf.all.arp_announce = 2
|
||
net.ipv4.tcp_max_tw_buckets = 5000
|
||
net.ipv4.tcp_syncookies = 1
|
||
net.ipv4.tcp_max_syn_backlog = 1024
|
||
net.ipv4.tcp_synack_retries = 2
|
||
kernel.sched_latency_ns=3000000
|
||
kernel.sysrq = 1
|
||
net.ipv4.tcp_window_scaling = 0
|
||
net.ipv4.tcp_fin_timeout = 30
|
||
net.ipv4.tcp_keepalive_time = 300
|
||
net.ipv4.tcp_window_scaling=0
|
||
net.ipv4.ip_default_ttl=128
|
||
net.ipv4.tcp_timestamps=0
|
||
net.core.rmem_default = 31457280
|
||
net.core.wmem_default = 31457280
|
||
net.core.rmem_max = 67108864
|
||
net.core.wmem_max = 67108864
|
||
net.ipv4.tcp_rmem = 4096 87380 67108864
|
||
net.ipv4.tcp_wmem = 4096 87380 67108864
|
||
net.core.default_qdisc = fq
|
||
net.ipv4.tcp_congestion_control = bbr
|
||
net.core.somaxconn=65535
|
||
net.ipv4.tcp_max_syn_backlog=65535
|
||
```
|
||
|
||
##### 3.代理检测异常处理
|
||
|
||
测试服务器端口和加速端口连通
|
||
|
||
```shell
|
||
➜ ~ telnet 47.242.162.44 3369
|
||
Trying 47.242.162.44...
|
||
Connected to 47.242.162.44.
|
||
Escape character is '^]'.
|
||
```
|
||
|
||
查看查看状态是否正常和重启
|
||
|
||
```shell
|
||
systemctl status v2ray #查看状态
|
||
systemctl restart v2ray #重启服务
|
||
date #查看服务器时间
|
||
df -h #查看磁盘是否不足
|
||
top #查看进程启动文件是否占的过大
|
||
rboot #服务器重启
|
||
yum install -y ntpdate
|
||
ntpdate ntp.aliyun.com 更新时间
|
||
ssh ec2-user@ #aws连接的方式
|
||
ssh root@xx.xx.xx.xx -p 20022 #网宿云连接方式
|
||
```
|
||
|
||
|
||
|
||
------
|
||
|
||
## 部署
|
||
|
||
### 1.部署脚本
|
||
|
||
#### 国内部署脚本:
|
||
|
||
```shell
|
||
国内部署脚本：
|
||
USERID=a4100ea3-d5bc-4dd6-b02a-a55321fb0bcc
|
||
yum install -y ntpdate
|
||
yum install -y vim
|
||
yum install -y wget
|
||
ntpdate time.nist.gov
|
||
ntpdate time.nuri.net
|
||
mkdir /var/log/v2ray
|
||
sudo systemctl stop v2ray
|
||
mkdir /usr/bin/v2ray
|
||
a=`uname -a`
|
||
b='aarch64'
|
||
if [[ $a =~ $b ]];then
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/arm/v2ray" wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/arm/v2ray" -O /usr/bin/v2ray/v2ray
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/arm/v2ctl" wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/arm/v2ctl" -O /usr/bin/v2ray/v2ctl
|
||
else
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/x86/v2ray" wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/x86/v2ray" -O /usr/bin/v2ray/v2ray
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/x86/v2ctl" wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/x86/v2ctl" -O /usr/bin/v2ray/v2ctl
|
||
fi
|
||
chmod +x /usr/bin/v2ray/v2ray
|
||
chmod +x /usr/bin/v2ray/v2ctl
|
||
|
||
cat > /etc/systemd/system/v2ray.service <<EOF
|
||
[Unit]
|
||
Description=YPC Service
|
||
After=network.target
|
||
Wants=network.target
|
||
|
||
[Service]
|
||
Type=simple
|
||
PIDFile=/run/v2ray.pid
|
||
#ExecStart=/usr/bin/v2ray/v2ray -config /etc/v2ray/config.json
|
||
ExecStart=/usr/bin/env v2ray.vmess.aead.forced=false /usr/bin/v2ray/v2ray -config /etc/v2ray/config.json
|
||
Restart=on-failure
|
||
RestartPreventExitStatus=23
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
|
||
mkdir /etc/v2ray
|
||
cat > /etc/v2ray/config.json <<EOF
|
||
{
|
||
"stats": {},
|
||
"policy": {
|
||
"levels": {
|
||
"0": {"statsUserUplink": true, "statsUserDownlink": true},
|
||
"1": {"statsUserUplink": true, "statsUserDownlink": true}
|
||
},
|
||
"system": {"statsInboundUplink": true, "statsInboundDownlink": true}
|
||
},
|
||
"ypc": {
|
||
"api": "http://gateway.kuajingvs.com/cloud",
|
||
"websocket": "ws://127.0.0.1:3000/ws/ypc",
|
||
"domainStats": {"cycle": 3600}
|
||
},
|
||
"dns": {
|
||
"hosts": {"translate.googleapis.com": "translate.streampumps.co.uk","translate.google.com "hosts": {"translate.googleapis.com": "translate.streampumps.co.uk","translate.google.com": "translate.streampumps.co.uk"},
|
||
"domainStrategy": "UseIP",
|
||
"servers": []
|
||
},
|
||
"api": {
|
||
"services": ["HandlerService", "RemoteAuthService", "DnsService"],
|
||
"tag": "api"
|
||
},
|
||
"inboundDetour": [{
|
||
"listen": "0.0.0.0",
|
||
"port": 10085,
|
||
"protocol": "dokodemo-door",
|
||
"settings": {
|
||
"address": "0.0.0.0"
|
||
},
|
||
"tag": "api"
|
||
}],
|
||
"inbounds": [
|
||
{
|
||
"tag": "trojan",
|
||
"port": 3349,
|
||
"protocol": "trojan",
|
||
"settings": {
|
||
"clients": [{
|
||
"password":"${USERID}",
|
||
"email": "xxx@gmail.com "email": "xxx@gmail.com"
|
||
}]
|
||
},
|
||
"streamSettings": {
|
||
"network": "tcp",
|
||
"tcpSettings": {
|
||
"autoTls": true
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"tag": "socks",
|
||
"port": 3359,
|
||
"protocol": "socks",
|
||
"settings": {
|
||
"auth": "password",
|
||
"accounts": [{
|
||
"user": "username#",
|
||
"pass": "password#"
|
||
}],
|
||
"udp": false
|
||
},
|
||
"streamSettings": {
|
||
"network": "tcp",
|
||
"tcpSettings": {
|
||
"autoTls": true
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"tag": "vless",
|
||
"port": 3369,
|
||
"protocol": "vless",
|
||
"settings": {
|
||
"clients": [{
|
||
"id":"${USERID}",
|
||
"level": 0,
|
||
"email": "xxxx@example.com "email": "xxxx@example.com"
|
||
}],
|
||
"decryption": "none"
|
||
},
|
||
"streamSettings": {
|
||
"network": "tcp"
|
||
}
|
||
},
|
||
{
|
||
"tag": "http",
|
||
"port": 3379,
|
||
"protocol": "http",
|
||
"settings": {
|
||
"timeout": 0,
|
||
"accounts": [{
|
||
"user": "username#",
|
||
"pass": "password#"
|
||
}],
|
||
"allowTransparent": false,
|
||
"userLevel": 0
|
||
}
|
||
},
|
||
{
|
||
"tag": "vmess",
|
||
"port": 3399,
|
||
"protocol": "vmess",
|
||
"settings": {
|
||
"clients": [{
|
||
"alterId": 64,
|
||
"id":"${USERID}",
|
||
"level": 1
|
||
}]
|
||
}
|
||
}
|
||
],
|
||
"outbounds": [{
|
||
"protocol": "freedom",
|
||
"settings": {
|
||
"domainStrategy": "UseIP"
|
||
}
|
||
},
|
||
{
|
||
"protocol": "blackhole",
|
||
"settings": {},
|
||
"tag": "blocked"
|
||
}
|
||
],
|
||
"routing": {
|
||
"settings": {
|
||
"domainStrategy": "UseIP",
|
||
"strategy": "rules",
|
||
"rules": [{
|
||
"type": "field",
|
||
"inboundTag": [
|
||
"api"
|
||
],
|
||
"outboundTag": "api"
|
||
}]
|
||
},
|
||
"rules": [{
|
||
"domain": [
|
||
"xxx"
|
||
],
|
||
"outboundTag": "blocked",
|
||
"type": "field"
|
||
}]
|
||
},
|
||
"log": {
|
||
"access": "/var/log/v2ray/access.log",
|
||
"loglevel": "debug"
|
||
}
|
||
}
|
||
EOF
|
||
systemctl daemon-reload
|
||
systemctl start v2ray
|
||
systemctl restart v2ray
|
||
systemctl status v2ray
|
||
|
||
sysctl -w net.ipv4.tcp_window_scaling=0
|
||
sysctl -w net.ipv4.ip_default_ttl=128
|
||
sysctl -w net.ipv4.tcp_timestamps=0
|
||
echo "1484" > /sys/class/net/eth0/mtu
|
||
# 永久更改
|
||
cat >> /etc/sysctl.conf <<EOF
|
||
net.ipv4.tcp_window_scaling=0
|
||
net.ipv4.ip_default_ttl=128
|
||
net.ipv4.tcp_timestamps=0
|
||
EOF
|
||
|
||
cat >> /etc/sysconfig/network-scripts/ifcfg-eth0 <<EOF
|
||
MTU=1484
|
||
EOF
|
||
|
||
if [ ! -d ~/.ssh ]; then
|
||
mkdir ~/.ssh
|
||
fi
|
||
|
||
cat > ~/.ssh/authorized_keys <<EOF
|
||
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDee1pS2exRGzMNa+WGqZXoaOkUmOrvlatIu3C0jNVbfiqZpGRAJlvazpQJZcWw9hWy5uYkHsXbfKUIk8jpiaRdRoXS1odlyE1pdtCn1SFmfe0ZZmRE2oQoy7ALkW3OPmOAMcuUqC018Q7FOYl/MW+I8ypee0mT0C8ZS6eQsttlQLCVcrt3un0H8M2VDnzq8stSA0qV/qHYTGAY/ACYEI+j8QInmU2g9podef9NB93pM0AJadkiMLih0fmSUedE4ilLERNyBPWWeossW2h+oW7LO9UpxMrQ4DRpLvtBnwAUSNbx7z4+x8WfZjljwP5XLmdc4Oqr9L3HTiNZp0CO4w0b root@jenkins.kuajingvs.com
|
||
EOF
|
||
|
||
chmod 600 ~/.ssh/authorized_keys
|
||
|
||
rm -rf /usr/bin/mqtt-kjvs
|
||
rm -f /etc/systemd/system/kvmqtt.service
|
||
rm -rf /usr/bin/ymqc
|
||
mkdir /usr/bin/ymqc
|
||
lddversion=`ldd --version`
|
||
lddver='2.17'
|
||
a=`uname -a`
|
||
b='aarch64'
|
||
if [[ $lddversion =~ $lddver ]]; then
|
||
if [[ $a =~ $b ]];then
|
||
wget "https://downloadbj.kuajingvs.com/arm/ymqclient_arm_20230329" wget "https://downloadbj.kuajingvs.com/arm/ymqclient_arm_20230329" -O /usr/bin/ymqc/ymqc
|
||
else
|
||
wget "https://downloadbj.kuajingvs.com/x86/ymqclient_x86_low_20230329" wget "https://downloadbj.kuajingvs.com/x86/ymqclient_x86_low_20230329" -O /usr/bin/ymqc/ymqc
|
||
fi
|
||
else
|
||
if [[ $a =~ $b ]];then
|
||
wget "https://downloadbj.kuajingvs.com/arm/ymqclient_arm_20230329" wget "https://downloadbj.kuajingvs.com/arm/ymqclient_arm_20230329" -O /usr/bin/ymqc/ymqc
|
||
else
|
||
wget "https://downloadbj.kuajingvs.com/x86/ymqclient_x86_20230329" wget "https://downloadbj.kuajingvs.com/x86/ymqclient_x86_20230329" -O /usr/bin/ymqc/ymqc
|
||
fi
|
||
fi
|
||
chmod +x /usr/bin/ymqc/ymqc
|
||
cat > /usr/bin/ymqc/config.json <<EOF
|
||
{
|
||
"brand": {
|
||
"name": "server",
|
||
"version": "1.0.0",
|
||
"port": 3000
|
||
},
|
||
"push_server": {
|
||
"url": "http://gateway.kuajingvs.com/paas-push-core",
|
||
"app_key": "kuajingvs",
|
||
"app_secret": "048fa409",
|
||
"group": "cn_proxy"
|
||
}
|
||
}
|
||
EOF
|
||
|
||
cat > /etc/systemd/system/ymqclient.service <<EOF
|
||
[Unit]
|
||
Description=YMQ Client Service
|
||
After=network.target
|
||
Wants=network.target
|
||
|
||
[Service]
|
||
Type=simple
|
||
User=root
|
||
Group=root
|
||
PIDFile=/run/ymqclient.pid
|
||
ExecStart=/usr/bin/ymqc/ymqc -c /usr/bin/ymqc/config.json
|
||
WorkingDirectory=/usr/bin/ymqc
|
||
Restart=always
|
||
RestartPreventExitStatus=23
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
|
||
systemctl daemon-reload
|
||
systemctl start ymqclient.service
|
||
systemctl enable ymqclient.service
|
||
systemctl status ymqclient.service
|
||
systemctl restart ymqclient.service
|
||
systemctl status ymqclient.service
|
||
systemctl restart v2ray
|
||
systemctl status v2ray
|
||
systemctl stop firewalld
|
||
systemctl disable firewalld
|
||
```
|
||
|
||
#### 海外部署脚本:
|
||
|
||
```shell
|
||
海外部署脚本：
|
||
USERID=a4100ea3-d5bc-4dd6-b02a-a55321fb0bcc
|
||
yum install -y ntpdate
|
||
yum install -y vim
|
||
yum install -y wget
|
||
ntpdate time.nist.gov
|
||
ntpdate time.nuri.netntpdate time.nuri.net
|
||
mkdir /var/log/v2ray
|
||
sudo systemctl stop v2ray
|
||
mkdir /usr/bin/v2ray
|
||
a=`uname -a`
|
||
b='aarch64'
|
||
if [[ $a =~ $b ]];then
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/arm/v2ray" wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/arm/v2ray" -O /usr/bin/v2ray/v2ray
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/arm/v2ctl" wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/arm/v2ctl" -O /usr/bin/v2ray/v2ctl
|
||
else
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/x86/v2ray" wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/x86/v2ray" -O /usr/bin/v2ray/v2ray
|
||
wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/x86/v2ctl" wget "https://downloadbj.kuajingvs.com/kuajingvs-ypc/1.0.6/x86/v2ctl" -O /usr/bin/v2ray/v2ctl
|
||
fi
|
||
chmod +x /usr/bin/v2ray/v2ray
|
||
chmod +x /usr/bin/v2ray/v2ctl
|
||
|
||
cat > /etc/systemd/system/v2ray.service <<EOF
|
||
[Unit]
|
||
Description=YPC Service
|
||
After=network.target
|
||
Wants=network.target
|
||
|
||
[Service]
|
||
Type=simple
|
||
PIDFile=/run/v2ray.pid
|
||
#ExecStart=/usr/bin/v2ray/v2ray -config /etc/v2ray/config.json
|
||
ExecStart=/usr/bin/env v2ray.vmess.aead.forced=false /usr/bin/v2ray/v2ray -config /etc/v2ray/config.json
|
||
Restart=on-failure
|
||
RestartPreventExitStatus=23
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
|
||
mkdir /etc/v2ray
|
||
cat > /etc/v2ray/config.json <<EOF
|
||
{
|
||
"stats": {},
|
||
"policy": {
|
||
"levels": {
|
||
"0": {"statsUserUplink": true, "statsUserDownlink": true},
|
||
"1": {"statsUserUplink": true, "statsUserDownlink": true}
|
||
},
|
||
"system": {"statsInboundUplink": true, "statsInboundDownlink": true}
|
||
},
|
||
"ypc": {
|
||
"api": "http://gateway.kuajingvs.com/cloud",
|
||
"websocket": "ws://127.0.0.1:3000/ws/ypc",
|
||
"domainStats": {"cycle": 3600}
|
||
},
|
||
"dns": {
|
||
"hosts": {},
|
||
"domainStrategy": "UseIP",
|
||
"servers": []
|
||
},
|
||
"api": {
|
||
"services": ["HandlerService", "RemoteAuthService", "DnsService"],
|
||
"tag": "api"
|
||
},
|
||
"inboundDetour": [{
|
||
"listen": "0.0.0.0",
|
||
"port": 10085,
|
||
"protocol": "dokodemo-door",
|
||
"settings": {
|
||
"address": "0.0.0.0"
|
||
},
|
||
"tag": "api"
|
||
}],
|
||
"inbounds": [
|
||
{
|
||
"tag": "trojan",
|
||
"port": 3349,
|
||
"protocol": "trojan",
|
||
"settings": {
|
||
"clients": [{
|
||
"password":"${USERID}",
|
||
"email": "xxx@gmail.com "email": "xxx@gmail.com"
|
||
}]
|
||
},
|
||
"streamSettings": {
|
||
"network": "tcp",
|
||
"tcpSettings": {
|
||
"autoTls": true
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"tag": "socks",
|
||
"port": 3359,
|
||
"protocol": "socks",
|
||
"settings": {
|
||
"auth": "password",
|
||
"accounts": [{
|
||
"user": "username#",
|
||
"pass": "password#"
|
||
}],
|
||
"udp": false
|
||
},
|
||
"streamSettings": {
|
||
"network": "tcp",
|
||
"tcpSettings": {
|
||
"autoTls": true
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"tag": "vless",
|
||
"port": 3369,
|
||
"protocol": "vless",
|
||
"settings": {
|
||
"clients": [{
|
||
"id":"${USERID}",
|
||
"level": 0,
|
||
"email": "xxxx@example.com "email": "xxxx@example.com"
|
||
}],
|
||
"decryption": "none"
|
||
},
|
||
"streamSettings": {
|
||
"network": "tcp",
|
||
"tcpSettings": {
|
||
"autoTls": true
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"tag": "http",
|
||
"port": 3379,
|
||
"protocol": "http",
|
||
"settings": {
|
||
"timeout": 0,
|
||
"accounts": [{
|
||
"user": "username#",
|
||
"pass": "password#"
|
||
}],
|
||
"allowTransparent": false,
|
||
"userLevel": 0
|
||
}
|
||
},
|
||
{
|
||
"tag": "vmess",
|
||
"port": 3399,
|
||
"protocol": "vmess",
|
||
"settings": {
|
||
"clients": [{
|
||
"alterId": 64,
|
||
"id":"${USERID}",
|
||
"level": 1
|
||
}]
|
||
},
|
||
"streamSettings": {
|
||
"network": "tcp",
|
||
"tcpSettings": {
|
||
"autoTls": true
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"outbounds": [{
|
||
"protocol": "freedom",
|
||
"settings": {
|
||
"domainStrategy": "UseIP"
|
||
}
|
||
},
|
||
{
|
||
"protocol": "blackhole",
|
||
"settings": {},
|
||
"tag": "blocked"
|
||
}
|
||
],
|
||
"routing": {
|
||
"settings": {
|
||
"domainStrategy": "UseIP",
|
||
"strategy": "rules",
|
||
"rules": [{
|
||
"type": "field",
|
||
"inboundTag": [
|
||
"api"
|
||
],
|
||
"outboundTag": "api"
|
||
}]
|
||
},
|
||
"rules": [{
|
||
"domain": [
|
||
"xxx"
|
||
],
|
||
"outboundTag": "blocked",
|
||
"type": "field"
|
||
}]
|
||
},
|
||
"log": {
|
||
"access": "/var/log/v2ray/access.log",
|
||
"loglevel": "debug"
|
||
}
|
||
}
|
||
EOF
|
||
systemctl daemon-reload
|
||
systemctl start v2ray
|
||
systemctl restart v2ray
|
||
systemctl status v2ray
|
||
|
||
sysctl -w net.ipv4.tcp_window_scaling=0
|
||
sysctl -w net.ipv4.ip_default_ttl=128
|
||
sysctl -w net.ipv4.tcp_timestamps=0
|
||
echo "1484" > /sys/class/net/eth0/mtu
|
||
# 永久更改
|
||
cat >> /etc/sysctl.conf <<EOF
|
||
net.ipv4.tcp_window_scaling=0
|
||
net.ipv4.ip_default_ttl=128
|
||
net.ipv4.tcp_timestamps=0
|
||
EOF
|
||
|
||
cat >> /etc/sysconfig/network-scripts/ifcfg-eth0 <<EOF
|
||
MTU=1484
|
||
EOF
|
||
|
||
if [ ! -d ~/.ssh ]; then
|
||
mkdir ~/.ssh
|
||
fi
|
||
|
||
cat > ~/.ssh/authorized_keys <<EOF
|
||
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDee1pS2exRGzMNa+WGqZXoaOkUmOrvlatIu3C0jNVbfiqZpGRAJlvazpQJZcWw9hWy5uYkHsXbfKUIk8jpiaRdRoXS1odlyE1pdtCn1SFmfe0ZZmRE2oQoy7ALkW3OPmOAMcuUqC018Q7FOYl/MW+I8ypee0mT0C8ZS6eQsttlQLCVcrt3un0H8M2VDnzq8stSA0qV/qHYTGAY/ACYEI+j8QInmU2g9podef9NB93pM0AJadkiMLih0fmSUedE4ilLERNyBPWWeossW2h+oW7LO9UpxMrQ4DRpLvtBnwAUSNbx7z4+x8WfZjljwP5XLmdc4Oqr9L3HTiNZp0CO4w0b root@jenkins.kuajingvs.com
|
||
EOF
|
||
|
||
chmod 600 ~/.ssh/authorized_keys
|
||
|
||
rm -rf /usr/bin/mqtt-kjvs
|
||
rm -f /etc/systemd/system/kvmqtt.service
|
||
rm -rf /usr/bin/ymqc
|
||
mkdir /usr/bin/ymqc
|
||
lddversion=`ldd --version`
|
||
lddver='2.17'
|
||
a=`uname -a`
|
||
b='aarch64'
|
||
if [[ $lddversion =~ $lddver ]]; then
|
||
if [[ $a =~ $b ]];then
|
||
wget "https://downloadbj.kuajingvs.com/arm/ymqclient_arm_20230329" wget "https://downloadbj.kuajingvs.com/arm/ymqclient_arm_20230329" -O /usr/bin/ymqc/ymqc
|
||
else
|
||
wget "https://downloadbj.kuajingvs.com/x86/ymqclient_x86_low_20230329" wget "https://downloadbj.kuajingvs.com/x86/ymqclient_x86_low_20230329" -O /usr/bin/ymqc/ymqc
|
||
fi
|
||
else
|
||
if [[ $a =~ $b ]];then
|
||
wget "https://downloadbj.kuajingvs.com/arm/ymqclient_arm_20230329" wget "https://downloadbj.kuajingvs.com/arm/ymqclient_arm_20230329" -O /usr/bin/ymqc/ymqc
|
||
else
|
||
wget "https://downloadbj.kuajingvs.com/x86/ymqclient_x86_20230329" wget "https://downloadbj.kuajingvs.com/x86/ymqclient_x86_20230329" -O /usr/bin/ymqc/ymqc
|
||
fi
|
||
fi
|
||
chmod +x /usr/bin/ymqc/ymqc
|
||
cat > /usr/bin/ymqc/config.json <<EOF
|
||
{
|
||
"brand": {
|
||
"name": "server",
|
||
"version": "1.0.0",
|
||
"port": 3000
|
||
},
|
||
"push_server": {
|
||
"url": "http://gateway.kuajingvs.com/paas-push-core",
|
||
"app_key": "kuajingvs",
|
||
"app_secret": "048fa409",
|
||
"group": "global_proxy"
|
||
}
|
||
}
|
||
EOF
|
||
|
||
cat > /etc/systemd/system/ymqclient.service <<EOF
|
||
[Unit]
|
||
Description=YMQ Client Service
|
||
After=network.target
|
||
Wants=network.target
|
||
|
||
[Service]
|
||
Type=simple
|
||
User=root
|
||
Group=root
|
||
PIDFile=/run/ymqclient.pid
|
||
ExecStart=/usr/bin/ymqc/ymqc -c /usr/bin/ymqc/config.json
|
||
WorkingDirectory=/usr/bin/ymqc
|
||
Restart=always
|
||
RestartPreventExitStatus=23
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
|
||
systemctl daemon-reload
|
||
systemctl start ymqclient.service
|
||
systemctl enable ymqclient.service
|
||
systemctl status ymqclient.service
|
||
systemctl restart ymqclient.service
|
||
systemctl status ymqclient.service
|
||
systemctl restart v2ray
|
||
systemctl enable v2ray
|
||
systemctl status v2ray
|
||
systemctl stop firewalld
|
||
systemctl disable firewalld
|
||
```
|
||
|
||
### 2.网址访问慢
|
||
|
||
```shell
|
||
systemctl restart network 重启网络
|
||
systemctl status network 查看网络
|
||
systemctl restart NetworkManager 重启网络管理
|
||
systemctl status NetworkManager 查看网络管理
|
||
|
||
加发包值：
|
||
vim /etc/sysconfig/network-scripts/ifcfg-eth0
|
||
MTU= 1460
|
||
9000
|
||
1484图片上传
|
||
ifconfig eth0 mtu 9000 up
|
||
|
||
指host工具：
|
||
https://myssl.com/dns_check.html#dns_check
|
||
https://ip.tool.chinaz.com/
|
||
|
||
删除/更换host命令：
|
||
vim /etc/hosts
|
||
systemctl restart v2ray
|
||
|
||
指host：
|
||
ping www.ebay.co.uk（慢的网址）
|
||
64 bytes from www.ebay.co.uk (104.96.173.116): icmp_seq=13 ttl=55 time=2.30 ms（拿104.96.173.116放倒host里）
|
||
：wq保存命令
|
||
重启命令：systemctl restart v2ray
|
||
|
||
加dns：
|
||
nameserver 202.80.16.20 广告加载慢
|
||
|
||
其他网址慢加dns
|
||
nameserver 172.233.128.38
|
||
nameserver 39.106.73.195
|
||
|
||
删多余/修改dns：
|
||
chattr -i /etc/resolv.conf
|
||
vim /etc/resolv.conf
|
||
:wq
|
||
systemctl restart v2ray
|
||
|
||
优化网络：
|
||
systemctl stop ilogtaild.service
|
||
systemctl disable ilogtaild.service
|
||
killall sendmail
|
||
systemctl stop ymqclient
|
||
systemctl disable ymqclient
|
||
sed -i '/websocket/d' /etc/v2ray/config.json
|
||
```
|
||
|
||
## 工单日常处理操作
|
||
|
||
```shell
|
||
rm -rf /var/log/... 清理日志
|
||
sudo/sync echo 3 > /proc/sys/vm/drop_caches 清理缓存
|
||
free -m 查看内存使用情况
|
||
systemctl status v2ray 查看V2ray状态
|
||
systemctl status gost 查看gost状态
|
||
cat /etc/hosts
|
||
cat /etc/resolv.conf
|
||
top htop 查看进程
|
||
kill pkill 杀死进程
|
||
查看dns并合理的修改（授权格式 chattr -i /etc/resolv.conf）
|
||
必要情况谨慎使用:
|
||
双工模式关闭 sudo ethtool -s eth0 speed 1000 duplex half
|
||
双工模式设置为全双工 sudo ethtool -s eth0 speed 1000 duplex full
|
||
加阿里云虚拟内存：
|
||
sudo fallocate -l 1G /swapfile
|
||
sudo chmod 600 /swapfile
|
||
sudo mkswap /swapfile
|
||
sudo swapon /swapfile
|
||
通用虚拟内存：
|
||
sudo swapoff /swapfile
|
||
sudo rm /swapfile
|
||
sudo dd if=/dev/zero of=/swapfile bs=1M count=2048
|
||
sudo chmod 600 /swapfile
|
||
sudo mkswap /swapfile
|
||
sudo swapon /swapfile
|
||
AWS虚拟内存
|
||
sudo dd if=/dev/zero of=/swapfile bs=1M count=512
|
||
sudo chmod 600 /swapfile
|
||
sudo mkswap /swapfile
|
||
sudo swapon /swapfile
|
||
```
|
||
|
||
## 接口网址
|
||
|
||
清理日志清理缓冲网络优化
|
||
|
||
> 国内执行的接口：
|
||
> http://47.95.201.173:8084/v2/instances_buffer?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=
|
||
> 海外执行接口：
|
||
> http://47.242.162.44:8084/v2/instances_buffer?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=
|
||
|
||
加虚拟内存增加服务器性能提高
|
||
|
||
国内执行接口：
|
||
|
||
http://47.95.201.173:8084/v2/instances/virtual_memory?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=
|
||
|
||
|
||
|
||
国外执行接口：
|
||
|
||
http://47.242.162.44:8084/v2/instances/virtual_memory?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=
|
||
|
||
|
||
|
||
设置服务器的默认配置提高性能
|
||
|
||
国内执行接口：
|
||
|
||
http://47.95.201.173:8084/v2/instances/set_configuration?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=
|
||
|
||
|
||
|
||
海外执行接口：
|
||
|
||
http://47.242.162.44:8084/v2/instances/set_configuration?app_key=kuajingvs&app_secret=kv5225e83745163f&public_ip=
|
||
|
||
## kv续费
|
||
|
||
1. dig、gc、云平台-美国-colud、网宿云、cyree不需要进入服务商可在后台直接续费
|
||
2. 荧光云、靠谱云、华为云、evo等则需要进入服务商续费完成后再进入后台进行续费
|
||
3. 华为云分新老平台
|
||
4. 需不定期查看天翼云的超时ip是否进行续费、以及evo的gpt主机还有靠谱云荧光云的新加坡地区主机是否过期需要及时续费
|
||
5. 每周需要查看gc的所有ip是否还存在，若不存在需要清理
|
||
6. 旗舰云、kookeey等服务商则需要进入服务商找到地区域名进行查看ip
|
||
|
||
旗舰云需要用户的用户名以及地区域名在电商工具中续费
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
kookeey需要在·服务商搜索ip在去后台进行续费
|
||
|
||
------
|
||
|
||
## DNS
|
||
|
||
nameserver 100.100.2.136
|
||
|
||
nameserver 100.100.2.138
|
||
|
||
DNS 派 电信/移动/铁通：（快 \ 亲测）
|
||
首选DNS地址：101.226.4.6
|
||
|
||
备选DNS地址：218.30.118.6
|
||
|
||
OpenDNS：
|
||
首选DNS地址：208.67.222.222
|
||
备选DNS地址：208.67.220.220
|
||
|
||
中国互联网络中心（推荐，安全又快速）：1.2.4.8、210.2.4.8、101.226.4.6（电信及移动）、123.125.81.6（联通）
|
||
|
||
阿里DNS：223.5.5.5、223.6.6.6
|
||
|
||
googleDNS（不推荐，容易掉包，还很慢）：8.8.8.8、8.8.4.4
|
||
|
||
openDNS：
|
||
|
||
208.67.222.222
|
||
|
||
208.67.220.220
|
||
|
||
208.67.222.220
|
||
|
||
208.67.220.222
|
||
|
||
另有两个为Family Shield Servers， 可以阻挡含有恶意网站
|
||
|
||
208.67.222.123
|
||
|
||
208.67.220.123IPv6地址
|
||
|
||
2620:0:ccc::2
|
||
|
||
2620:0:ccd::2
|
||
|
||
纯净 无劫持 无需再忍受被强扭去看广告或粗俗网站之痛苦服务地址为：114.114.114.114 和 114.114.115.115
|
||
|
||
拦截 钓鱼病毒木马网站 增强网银、证券、购物、游戏、隐私信息安全服务地址为：114.114.114.119 和 114.114.115.119
|
||
|
||
opener（不稳定）：42.120.21.30
|
||
|
||
<img src="C:\Users\andin\AppData\Roaming\Typora\typora-user-images\image-20240909161356541.png" alt="image-20240909161356541" style="zoom:200%;" />
|
||
|
||
<img src="C:\Users\andin\AppData\Roaming\Typora\typora-user-images\image-20240909161622715.png" alt="image-20240909161622715" style="zoom:200%;" />
|