Home | 簡體中文 | 繁體中文 | 雜文 | 打賞(Donations) | ITEYE 博客 | OSChina 博客 | Facebook | Linkedin | 知乎專欄 | Search | Email

Netkiller Linux 手札

Netkiller Linux Cookbook

Mr. Neo Chan, 陳景峰 (BG7NYT)

 


中國廣東省深圳市寶安區龍華鎮
518109
+86 755 29812080
+86 755 29812080

版權聲明

轉載請與作者聯繫,轉載時請務必標明文章原始出處和作者信息及本聲明。

文檔出處:
http://netkiller.github.io
http://netkiller.sourceforge.net

微信掃瞄二維碼進入 Netkiller 微信訂閲號

QQ群:128659835 請註明“讀者”

2017-02-13

內容摘要

本文檔講述Linux系統涵蓋了系統管理與配置包括:

[注意]對初學Linux的愛好者忠告

玩Linux最忌reboot(重新啟動)這是windows玩家壞習慣

Linux只要接上電源你就不要再想用reboot,shutdown,halt,poweroff命令,Linux系統和應用軟件一般備有reload,reconfigure,restart/start/stop...不需要安裝軟件或配置伺服器後使用reboot重新引導計算機

在Linux系統裡SIGHUP信號被定義為刷新配置檔案,有些程序沒有提供reload參數,你可以給進程發送HUP信號,讓它刷新配置檔案,而不用restart.通過pkill,killall,kill 都可以發送HUP信號例如: pkill -HUP httpd

我的系列文檔:

操作系統

Netkiller Linux 手札 Netkiller FreeBSD 手札 Netkiller Shell 手札 Netkiller Security 手札 Netkiller Web 手札 Netkiller Monitoring 手札 Netkiller Storage 手札 Netkiller Mail 手札

以下文檔停止更新合併到 《Netkiller Linux 手札》

Netkiller Debian 手札 Netkiller CentOS 手札 Netkiller Multimedia 手札    

目錄

1. 自述
1.1. 本文目的
1.2. 內容簡介
1.3. 讀者對象
1.4. 作者簡介
1.5. 打賞(Donations)
1.5.1. 微信(Wechat)
1.5.2. 支付寶(Alipay)
1.5.3. PayPal Donations
1.5.4. 銀行(Bank)
1. Introduction
1.1. Linux 發行版本
1.1.1. Linux 下載排名
1.1.2. Debian 衍生版本
1.1.3. Redhat 衍生版本
1.1.4. FreeBSD 包風格的Linux 發行版
1.2. HDD Partition
1.3. Getting Started Guides
1.3.1. Scientific Linux
1.3.2. Redhat Linux
1.3.3. CentOS 6
1.3.4. 5.x 減肥
1.3.5. 6.x Mini 安裝後需要做的一些事
I. System Administrator
3. 獲取系統信息
3.1. Distribution information
3.2. System Infomation
3.2.1. Cpu Bit
3.3. shutdown
3.4. Profile
3.4.1. shell
4. Kernel
4.1. 編譯安裝內核
4.2. sysctl - configure kernel parameters at runtime
4.2.1. sysctl.d
4.2.2. vm.overcommit_memory
4.3. /sys
4.3.1. /sys/class/net/
4.4. /proc
4.4.1. 進程內存監控
4.4.2. ulimit 狀態
5. Kernel modules
5.1. modprobe - program to add and remove modules from the Linux Kernel
6. Package Management
6.1. apt-cache
6.1.1. search
6.1.2. depends
6.1.3. policy
6.2. Apt-Get
6.2.1. Search
6.2.2. Installation
6.2.3. Update
6.2.4. Remove
6.3. aptitude
6.4. Automatic Updates
6.4.1. 升級過程中連結中斷怎麼辦?
6.5. dpkg
6.5.1. -i|--install 安裝.deb包
6.5.2. -r|--remove 卸載.deb包
6.5.3. -L|--listfiles <package> ... List files `owned' by package(s). 列出包中的檔案
6.5.4. -l|--list [<pattern> ...] List packages concisely. 列出.deb包
6.5.5. Status
6.5.6. dpkg-deb - Debian package archive (.deb) manipulation tool
6.5.7. dpkg-reconfigure
6.6. Upgrading
6.6.1. GUI
6.6.2. CLI
6.6.3. CDROM
6.7. 製作.deb安裝包
6.7.1. checkinstall — Track installation of local software, and produce a binary manageable with your package management software.
6.7.2. dh_make - prepare Debian packaging for an original source archive
6.7.3. control
7. Package Manager
7.1. Yum Resource & Yum Mirror
7.1.1. Fedora resource
7.1.2. rpmforge-release
7.1.3. atomic
7.1.4. famillecollet
7.1.5. rpmfind.net
7.1.6. pkgs.org
7.1.7. China Resource
7.1.8. 製作本地共享源
7.2. yum - Yellowdog Updater Modified
7.2.1. install
7.2.2. localinstall
7.2.3. list
7.2.4. search
7.2.5. update / upgrade
7.2.6. remove
7.2.7. installed
7.2.8. group
7.2.9. 查看包的依賴關係
7.2.10. provides / whatprovides
7.2.11. YUM 源管理
7.3. rpm - RPM Package Manager
7.3.1. install/upgrade/remove
7.3.2. query
7.4. rpmbuild - Build RPM Package(s)
7.4.1. RPM_directory_macros
7.4.2. --define 專遞模板變數
7.4.3.
7.4.4. FAQ
8. Device information
8.1. dmesg - print or control the kernel ring buffer
8.2. smartctl - Control and Monitor Utility for SMART Disks
8.3. CPU 資源管理
8.3.1. lscpu - display information about the CPU architecture
8.3.2. chcpu - configure CPUs
8.4. lspci - list all PCI devices
8.5. lshw - list hardware
8.5.1. only show a certain class of hardware
8.6. hwinfo - Hardware Information
8.7. dmidecode - DMI table decoder
8.8. ethtool - Display or change ethernet card settings
8.9. usb device
8.10. lsscsi - list SCSI devices (or hosts) and their attributes
8.11. HBA
8.12. lsblk - list block devices
8.13. kudzu - detects and configures new and/or changed hardware on a system
8.14. udev - Linux dynamic device management
9. 區域/語言/時間
9.1. Ubuntu
9.1.1. time zone
9.1.2. to change system date/time
9.1.3. Language
9.2. CentOS 區域設置
9.2.1. 時區設置 CentOS 6
9.2.2. 日期、時間
9.2.3. 語言
10. console / terminal
10.1. serial console
10.2. console timeout
10.3. TUI (Text User Interface)
10.4. framebuffer
11. Harddisk
11.1. 查看分區分區 UUID
11.2. Label
11.2.1. Ext2
11.3. swap 交換分區
11.3.1. swapon failed: Invalid argument
11.4. Show partition
11.5. Create partition
11.6. Clone partition
11.7. estimate disk / directory / file space usage
11.8. Convert from ext3 to ext4 File system
11.9. GPT
11.9.1. 設置GTP磁碟
11.9.2. 查看分區
11.9.3. 創建分區
11.9.4. 刪除分區
11.9.5. 退出
11.9.6. mount
11.10. loop devices
11.10.1. losetup - set up and control loop devices
12. Removable Storage
12.1. usb flash
12.2. CD / DVD
12.2.1. Mount an ISO file
12.2.2. create iso file from CD
12.2.3. burner
12.2.4. ISO Mirror
13. File System
13.1. /etc/fstab
13.1.1. /etc/fstab 例子
13.2. Mount partition
13.2.1. Mount
13.2.2. Umount
13.2.3. bind directory
13.3. ext2
13.4. ext3
13.5. ReiserFS
13.6. EXT4
13.6.1. install
13.6.2. format
13.6.3. label
13.6.4. mount/umount
13.6.5. LVM 卷
13.7. LVM
13.8. Btrfs
13.8.1. /etc/fstab
13.8.2. btrfs
13.8.3. Mount Btrfs
13.8.4. subvolumes
13.8.5. snapshot
13.8.6. btrfsctl
13.8.7. btrfs-vol
13.8.8. btrfs-convert
13.8.9. btrfsck
13.8.10. btrfs-debug-tree
13.9. zfs
13.10. iSCSI
13.10.1. GFS
13.11. GFS - Cluster Storage
13.12. glusterfs
13.13. RAM FS
13.14. tmpfs
13.15. ftp fs
13.16. SSHFS (sshfs - filesystem client based on SSH File Transfer Protocol)
13.17. davfs2 - mount a WebDAV resource as a regular file system
13.18. redisfs
13.19. File system test
13.19.1. ext4 vs btrfs
13.19.2. xfs vs jfs vs reiserfs
13.19.3. RAID10 (146G*8) vs EMC VNX 5300 (8G Fibre Channel)
13.19.4. Dell 2950(RAID5 500G SATA * 6) vs MD1200
13.20. 磁碟占用100%刪除檔案後不是放的解決方法
14. Networking
14.1. hosts
14.1.1. hostnamectl - Control the system hostname
14.1.2. /etc/hostname
14.1.3. /etc/host.conf
14.1.4. /etc/hosts
14.1.5. hosts.allow / hosts.deny
14.1.6. /etc/resolv.conf
14.2. Hostname
14.3. Network adapter
14.3.1. 介面名稱
14.4. Ethernet Interfaces
14.4.1. ifquery
14.4.2. DHCP
14.4.3. Static IP
14.5. Mask
14.6. Gateway
14.7. Configuring Name Server Lookups
14.8. IP forwarding(IP轉發)
14.9. bonding
14.9.1. Ubuntu
14.10. Finding optimal MTU
14.11. wireless
14.11.1. rfkill - tool for enabling and disabling wireless devices
14.11.2. iwlist - Get more detailed wireless information from a wireless interface
14.11.3. iwconfig - configure a wireless network interface
14.11.4. /proc/net/wireless
14.12. Linux IP And Router
14.12.1. netmask
14.12.2. arp - manipulate the system ARP cache
14.12.3. iproute2
14.12.4. 策略路由
14.12.5. 負載均衡
14.12.6. MASQUERADE
14.12.7. ip tunnel
14.12.8. VLAN
14.12.9. Zebra
14.13. CentOS 網絡配置
14.13.1. Gateway
14.13.2. bonding
14.13.3. brctl
14.13.4. nmtui
15. Logging
15.1. rsyslog
15.1.1. rsyslog.conf
15.2. logrotate - rotates, compresses, and mails system logs
15.2.1. /etc/logrotate.conf
15.2.2. /etc/logrotate.d/
15.3. syslog-ng
15.4. syslog, klogctl - read and/or clear kernel message ring buffer; set console_loglevel
15.4.1. /etc/sysconfig/syslog
15.4.2. /etc/syslog.conf
15.4.3. logger
15.4.4. To Log Messages Over UDP Network
16. 設備管理
16.1. Debian/Ubuntu
16.1.1. update-rc.d - install and remove System-V style init script links
16.1.2. invoke-rc.d - executes System-V style init script actions
16.1.3. runlevel
16.1.4. sysv-rc-conf
16.1.5. xinetd - replacement for inetd with many enhancements
16.1.6. Scheduled Tasks
16.1.7. sv - control and manage services monitored by runsv
16.2. Services
16.2.1. systemctl
16.2.2. service
16.2.3. xinetd.d
16.2.4. rpcinfo
16.2.5. SELINUX
17. Process
17.1. top - display Linux tasks
17.2. ps - report a snapshot of the current processes
17.2.1. ps axef
17.2.2. ps -eo pid,cmd
17.2.3. ps jax
17.2.4. zombie process
17.3. mpstat
17.4. pstree - display a tree of processes
17.5. pid
17.5.1. pgrep, pkill - look up or signal processes based on name and other attributes
17.5.2. pidof -- find the process ID of a running program.
17.6. jobs
17.6.1. &
17.6.2. Ctrl + Z
17.6.3. jobs
17.6.4. fg / bg
17.6.5. nohup - run a command immune to hangups, with output to a non-tty
17.7. ionice - get/set program io scheduling class and priority
17.8. /proc 目錄與進程的關係
17.8.1. /proc/*/fd/ 進程所打開的檔案
18. Permission
18.1. User
18.1.1. Add a new user
18.1.2. remove an existed user
18.1.3. usermod - modify a user account
18.1.4. lock / unlock
18.2. Group
18.2.1. Add a new group
18.2.2. Add a user to the group
18.2.3. /etc/group
18.3. umask
18.4. Access Permissions
18.4.1. chown - change file owner and group
18.4.2. chgrp - change group ownership
18.4.3. chmod - change file access permissions
18.5. chattr - change file attributes on a Linux second extended file system
18.6. su - run a shell with substitute user and group IDs
18.7. runuser - run a command with substitute user and group ID
18.8. sudo, sudoedit - execute a command as another user
18.8.1. NOPASSWD
18.8.2. 允許或禁止命令
18.8.3. Cmnd_Alias 用法
18.8.4. wheel 組
18.9. ACL - Access Control List
18.9.1. getfacl - get file access control lists
18.9.2. setfacl - set file access control lists
19. /etc
19.1. /etc/inputrc
19.2. /etc/shells
20. kickstart
20.1. install kickstart
20.2. ks.cfg
20.3. boot 參數
21. System Utilities 配置工具
21.1. CentOS 6
21.1.1. system-config-date
21.1.2. system-config-firewall
21.1.3. system-config-securitylevel
21.1.4. system-config-language
21.1.5. system-config-keyboard
21.1.6. system-config-network
21.1.7. ntsysv
21.1.8. lokkit
21.1.9. system-config-kdump
21.1.10. system-config-services
21.1.11. authconfig-tui
II. Shell
22. Bash Shell
22.1. bash - GNU Bourne-Again SHell
22.1.1. -n 檢查腳本是否有語法錯誤
22.1.2. -x 顯示詳細運行過程
22.2. Introduction
22.2.1. chsh - change login shell
22.2.2. 切換身份
22.2.3. test 命令
22.2.4. I/O 重定向
22.2.5. pipes (FIFOs)
22.2.6. mktemp - create a temporary file or directory 臨時目錄與檔案
22.2.7. History 命令歷史記錄
22.2.8. hash - hash database access method
22.2.9. prompt
22.3. variable
22.3.1. 系統變數
22.3.2. 表達式
22.3.3. Internal Environment Variables
22.3.4. set 設置變數
22.3.5. unset 變數銷毀
22.3.6. 設置變數預設值
22.3.7. export 設置全局變數
22.3.8. declare
22.3.9. Numerical 數值運算
22.3.10. Strings 字元串操作
22.3.11. Array 數組
22.3.12. read 賦值多個變數
22.3.13. eval
22.4. conditions if and case
22.4.1. if
22.4.2. case
22.5. Loops for, while and until
22.5.1. for
22.5.2. while
22.5.3. until
22.6. Functions
22.6.1. Local variables
22.7. User interfaces
22.7.1. input
22.8. subshell
22.9. Example
22.9.1. 有趣的Shell
22.9.2. backup
22.9.3. CPU 核心數
22.9.4. Password
22.9.5. processes
22.9.6. Shell 技巧
22.9.7. to convert utf-8 from gb2312 code
22.9.8. 使用內存的百分比
22.9.9. 合併apache被cronlog分割的log檔案
23. Z Shell
23.1. installing Z shell
23.2. Starting file
23.2.1. ~/.zshrc
23.3. Prompting
23.4. Aliases
23.5. History
23.6. FAQ
23.6.1. Home/End key
24. Shell command
24.1. Help Commands
24.1.1. man - an interface to the on-line reference manuals
24.2. getconf - Query system configuration variables
24.3. Directory and File System Related
24.3.1. dirname
24.3.2. filename
24.3.3. test - check file types and compare values
24.3.4. stat
24.3.5. mkdir - make directories
24.3.6. rename
24.3.7. touch
24.3.8. ls - list directory contents
24.3.9. cp - copy files and directories
24.3.10. rm - remove files or directories
24.3.11. df - report file system disk space usage
24.3.12. du - estimate file space usage
24.3.13. tac - concatenate and print files in reverse
24.3.14. split - split a file into pieces
24.3.15. find - search for files in a directory hierarchy
24.4. package / compress and decompress
24.4.1. tar — The GNU version of the tar archiving utility
24.4.2. cpio - copy files to and from archives
24.4.3. gzip
24.4.4. zip, zipcloak, zipnote, zipsplit - package and compress (archive) files
24.4.5. RAR
24.4.6. 7-Zip
24.5. date and time
24.5.1. 日期格式
24.5.2. -d --date=
24.5.3. weekday name
24.5.4. UTC
24.6. Numeric
24.6.1. 數值運算
24.6.2. seq - print a sequence of numbers
24.6.3. bc - An arbitrary precision calculator language
24.7. Text Processing
24.7.1. iconv - Convert encoding of given files from one encoding to another
24.7.2. 字元串處理命令expr
24.7.3. cat - concatenate files and print on the standard output
24.7.4. nl - number lines of files
24.7.5. od - dump files in octal and other formats
24.7.6. tr - translate or delete characters
24.7.7. cut - remove sections from each line of files
24.7.8. printf - format and print data
24.7.9. Free `recode' converts files between various character sets and surfaces.
24.7.10. /dev/urandom 隨機字元串
24.7.11. col - filter reverse line feeds from input
24.7.12. apg - generates several random passwords
24.7.13. head/tail
24.7.14. 反轉字元串或檔案內容
24.8. grep, egrep, fgrep, rgrep - print lines matching a pattern
24.8.1. 刪除空行
24.8.2. -v, --invert-match
24.8.3. Output control
24.8.4. Context control
24.8.5. Regexp selection and interpretation
24.8.6. fgrep
24.8.7. egrep
24.9. sort - sort lines of text files
24.9.1. 對列排序
24.10. uniq
24.11. 表格操作/行列轉換
24.11.1. column - columnate lists
24.11.2. paste - merge lines of files
24.12. standard input/output
24.12.1. xargs - build and execute command lines from standard input
24.13. Logging
24.13.1. logger - a shell command interface to the syslog(3) system log module
24.14. Password
24.14.1. Shadow password suite configuration.
24.14.2. newusers - update and create new users in batch
24.14.3. chpasswd - update passwords in batch mode
24.15. binutils
24.15.1. strings - print the strings of printable characters in files.
26. Utility Programs
26.1. ed, red - text editor
26.2. vim
26.2.1. 查找與替換
26.2.2. 插入檔案
26.2.3. 批處理
26.2.4. line()
26.3. awk
26.3.1. 處理列
26.3.2. printf
26.3.3. Pattern(字元匹配)
26.3.4. Built-in Variables (NR/NF)
26.3.5. Built-in Functions
26.3.6. 過濾相同的行
26.4. sed
26.4.1. 查找與替換
26.4.2. 編輯檔案
26.4.3. 內容打印
26.4.4. 編輯操作
26.4.5. 管道操作
26.5. CURL - transfer a URL
26.5.1. 基本用法
26.5.2. data
26.5.3. connect-timeout
26.5.4. max-time
26.5.5. compressed
26.5.6. vhosts
26.5.7. 輸出格式定義
26.5.8. -A/--user-agent <agent string>
26.5.9. referer
26.5.10. -v
26.5.11. -o, --output FILE Write output to <file> instead of stdout
26.5.12. -H/--header <line> Custom header to pass to server (H)
26.5.13. curl-config
26.5.14. FAQ
26.6. expect
26.6.1. 模擬登錄 telnet 獲取Cisco配置
26.6.2. 模擬登錄 ssh
26.6.3. SCP
26.7. expect-lite - quick and easy command line automation tool
26.8. sshpass - noninteractive ssh password provider
26.9. Klish - Kommand Line Interface Shell (the fork of clish project)
26.9.1. 安裝Klish
26.9.2. 為用戶指定clish作為預設Shell
26.9.3. FAQ
26.10. Limited command Shell (lshell)
26.11. wget - retrieves files from the web
26.11.1. Logging and input file
26.11.2. HTTP options
26.11.3. Recursive download
26.11.4. --no-passive-ftp disable the "passive" transfer mode.
26.12. TUI
26.12.1. screen - screen manager with VT100/ANSI terminal emulation
26.12.2. tmux — terminal multiplexer
26.12.3. byobu - wrapper script for seeding a user's byobu configuration and launching a text based window manager (either screen or tmux)
26.12.4. htop - interactive process viewer
26.12.5. elinks
26.12.6. chat
26.13. parallel - build and execute shell command lines from standard input in parallel
27. Shell Terminal
27.1. terminal
27.1.1. resize - set TERMCAP and terminal settings to current xterm window size
27.1.2. tset, reset - terminal initialization
27.1.3. stty - change and print terminal line settings
27.2. tput
27.2.1. Change the prompt color using tput
27.3. dialog
27.3.1. --inputbox
27.4. whiptail - display dialog boxes from shell scripts
27.4.1. --msgbox
27.4.2. --infobox
27.4.3. --yesno
27.4.4. --inputbox
27.4.5. --passwordbox
27.4.6. --textbox
27.4.7. --checklist
27.4.8. --radiolist
27.4.9. --menu
27.4.10. --gauge
III. Network Application
28. network tools
28.1. curl / w3m / lynx
29. OpenNTPD
29.1. install
29.1.1. ntpd - Network Time Protocol (NTP) daemon
29.1.2. Ubuntu
29.1.3. ntpdate
29.2. ntpdate
29.2.1. CentOS 7
29.2.2. CentOS 6
29.3. ntpd.conf / ntp.conf
29.3.1. server 配置
29.3.2. ntp 安全設置
29.4. ntpstat - show network time synchronisation status
29.5. ntpq - standard NTP query program
30. DHCP
30.1. DHCP Server
30.2. dhclient
30.3. release matching connections
31. DNS/Bind
31.1. 安裝 bind9
31.2. forwarders
31.3. Load Balancing
31.4. view
31.5. Master / Slave
31.5.1. master /etc/named.conf
31.5.2. slave /etc/named.conf
31.5.3. FAQ
31.6. DNS tools
31.6.1. dig - DNS lookup utility
31.6.2. nslookup - query Internet name servers interactively
31.7. DNS
31.7.1. OpenDNS
31.7.2. Google DNS
31.8. NamedManager
32. dnsmasq
32.1. Install
32.1.1. CentOS / Redhat
32.1.2. Debian / Ubuntu
32.1.3. Firewall 設置
32.2. /etc/dnsmasq.conf
32.3. dnsmasq.resolv.conf
32.4. dnsmasq.hosts
32.5. /etc/dnsmasq.d/dnsmasq.server.conf
32.6. /etc/dnsmasq.d/dnsmasq.address.conf
32.6.1. 域名劫持
32.7. FAQ
33. rinetd — internet “redirection server”
33.1. rinetd install
33.1.1. ubuntu
33.1.2. centos
33.2. rinetd.conf
33.3. 防禦腳本
33.4. rinetd.log
34. News Group (innd)
34.1. Ubuntu
34.2. CentOS
34.3. User Authentication
34.4. usenet 管理
34.5. 通過SSL連接
34.6. src.rpm 安裝
34.7. 常用新聞組
35. IRC - Internet Relay Chat
35.1. IRC Protcol
35.2. IRC Commands
35.3. ircd-irc2 - The original IRCNet IRC server daemon
35.4. ircd-hybrid
35.5. IRC Client
35.5.1. ircII - interface to the Internet Relay Chat system
35.5.2. HydraIRC
35.5.3. XChat
35.5.4. Web IRC
35.5.5. Irssi - a modular IRC client for UNIX
35.5.6. F-IRC
36. jabber XMPP
36.1. ejabberd - Distributed, fault-tolerant Jabber/XMPP server written in Erlang
36.1.1. ejabberdctl
36.2. tigase
36.3. Openfire
36.4. DJabberd
36.5. freetalk - A console based Jabber client
36.6. library
36.6.1. python-xmpp
37. Proxy Server
37.1. Apache Proxy
37.2. Squid - Internet Object Cache (WWW proxy cache)
37.2.1. 源碼安裝
37.2.2. debian/ubuntu 安裝
37.2.3. 配置
37.2.4. Squid 管理
37.2.5. 禁止頁面被Cache
37.2.6. Squid 實用案例
37.2.7. squid+icap+clamav
37.3. Web page proxy
37.3.1. Surrogafier
37.3.2. CGIproxy
37.3.3. PHPProxy
37.3.4. BBlocked
37.3.5. Glype
37.3.6. Zelune
37.4. SOCKS
37.4.1. Socks5
37.4.2. dante-server - SOCKS (v4 and v5) proxy daemon(danted)
37.4.3. SSH Socks5 Tunnel
37.4.4. hpsockd - HP SOCKS server
38. Firewall
38.1. TCP/IP 相關內核配置項
38.1.1. net.ipv4.ip_forward
38.1.2. net.ipv4.icmp_echo_ignore_all
38.2. iptables - administration tools for packet filtering and NAT
38.2.1. Getting Started
38.2.2. 用戶自定義規則連
38.2.3. Protocols 協議
38.2.4. Interfaces 網絡適配器介面
38.2.5. 源IP地址
38.2.6. Ports 連接埠
38.2.7. NAT
38.2.8. Module(模組)
38.2.9. IPV6
38.2.10. iptables-xml - Convert iptables-save format to XML
38.2.11. access.log IP封鎖腳本
38.2.12. Example
38.3. ulogd - The Netfilter Userspace Logging Daemon
38.4. ufw - program for managing a netfilter firewall
38.4.1. /etc/default/ufw
38.4.2. ip_forward
38.4.3. DHCP
38.4.4. Samba
38.5. Shorewall
38.5.1. Installation Instructions
38.5.2. Configuring Shorewall
38.6. Firewall GUI Tools
38.7. Endian Firewall
38.8. Smooth Firewall
38.9. Sphirewall
39. Stunnel - universal SSL tunnel
40. OpenSSH
40.1. 安裝 OpenSSH
40.2. /etc/ssh/
40.2.1. sshd_config
40.2.2. ssh_config
40.2.3. ~/.ssh/config
40.3. OpenSSH Tunnel
40.3.1. SOCKS v5 Tunnel
40.4. ssh-keygen — authentication key generation, management and conversion
40.4.1. .ssh/known_hosts
40.5. ssh-keyscan
40.6. ssh-copy-id - install your public key in a remote machine's authorized_keys
40.7. ssh-agent
40.7.1. ssh-add
40.7.2. Lock / Unlock agent
40.7.3. Set lifetime (in seconds) when adding identities.
40.8. OpenSSH for Windows
40.8.1. Putty Client
40.9. FAQ
40.9.1. Pseudo-terminal will not be allocated because stdin is not a terminal.
40.9.2. 去掉 passphrase
40.9.3. 打印調試信息
41. Firewalld
41.1. firewalld
41.1.1. firewall-cmd
41.2. 如果你不習慣使用firewalld想用回Iptables
42. VPN (Virtual Private Network)
42.1. OpenVPN (openvpn - Virtual Private Network daemon)
42.1.1. 源碼安裝
42.1.2. Openvpn Server
42.1.3. openvpn - secure IP tunnel daemon.
42.1.4. 吊銷(revoke)用戶證書
42.1.5. Openvpn Client
42.1.6. OpenVPN GUI for Windows
42.1.7. point-to-point VPNs
42.1.8. VPN 案例
42.1.9. OpenVPN安全
42.2. pptpd
42.2.1. Server 服務端
42.2.2. Client 客戶端
42.2.3. FAQ
42.3. l2tpd - dummy package for l2tpd to xl2tpd transition
42.4. strongswan - IPSec utilities for strongSwan
42.4.1. 安裝 strongswan VPN 伺服器
42.4.2. 防火牆配置
42.4.3. 配置 IPSEC
42.4.4. Windows 10 VPN 客戶端配置
42.4.5. FAQ
42.5. openswan - IPSEC utilities for Openswan
42.6. Ipsec VPN
42.6.1. ipsec-tools - IPsec tools for Linux
42.7. N2N VPN
42.8. Hypersocket VPN
43. Point to Point
43.1. download
43.1.1. rtorrent - ncurses BitTorrent client based on LibTorrent
43.1.2. mldonkey-server - Door to the 'donkey' network
43.1.3. amule - client for the eD2k and Kad networks, like eMule
IV. Web Application
44. Apache httpd
44.1. Install
44.1.1. Quick install apache with aptitude
44.1.2. CentOS 6
44.1.3. Compile and then install Apache
44.1.4. XAMPP
44.2. Module
44.2.1. Output a list of modules compiled into the server.
44.2.2. Core
44.2.3. mpm
44.2.4. Apache Log
44.2.5. mod_access
44.2.6. VirtualHost
44.2.7. Alias / AliasMatch
44.2.8. Redirect / RedirectMatch
44.2.9. Rewrite
44.2.10. Proxy
44.2.11. Deflate
44.2.12. Expires
44.2.13. Cache
44.2.14. usertrack
44.2.15. Charset
44.2.16. Dir
44.2.17. Includes
44.2.18. Apache Status
44.2.19. Mod Perl
44.2.20. mod_pagespeed -
44.2.21. Module FAQ
44.2.22. mod_setenvif
44.2.23. PHP 程序安全問題 php_admin_value
44.2.24. mod_spdy
44.3. 設置Apache實現防盜連
44.4. .htaccess
44.5. Error Prompt
44.5.1. Invalid command 'Order', perhaps misspelled or defined by a module not included in the server configuration
44.5.2. Invalid command 'AuthUserFile', perhaps misspelled or defined by a module not included in the server configuration
45. Nginx
45.1. Installing
45.1.1. Installing by apt-get under the debain/ubuntu
45.1.2. CentOS
45.1.3. installing by source
45.1.4. -V show version and configure options then exit
45.1.5. config test
45.1.6. rotate log
45.1.7. CentOS 7
45.2. nginx 配置檔案
45.2.1. http 配置
45.2.2. events
45.2.3. gzip
45.2.4. server_tokens
45.2.5. ssi
45.2.6. server
45.2.7. HTTP2 配置 SSL證書
45.2.8. rewrite
45.2.9. upstream 負載均衡
45.2.10. fastcgi
45.2.11. return
45.2.12. Nginx 變數
45.3. Proxy
45.3.1. proxy_cache
45.3.2. rewrite + proxy_pass
45.3.3. request_filename + proxy_pass
45.3.4. $request_uri 與 proxy_pass 聯合使用
45.3.5. try_files 與 proxy_pass 共用
45.3.6. Proxy 與 SSI
45.3.7. Host
45.3.8. expires
45.3.9. X-Forwarded-For
45.3.10. X-Sendfile
45.3.11. proxy_http_version
45.3.12. proxy_set_header
45.3.13. timeout 超時時間
45.3.14. example
45.4. ngx_http_flv_module
45.5. ngx_http_mp4_module
45.6. limit_zone
45.7. image_filter
45.8. Example
45.8.1. Nginx + Tomcat
45.8.2. 攔截index.html
45.8.3. Nginx -> Nginx -> Tomcat
45.9. FAQ
45.9.1. 405 Not Allowed?
45.9.2. 502 Bad Gateway?
45.9.3. 413 Request Entity Too Large
45.9.4. 502 Bad Gateway?
45.9.5. 499 Client Closed Request
45.9.6. proxy_pass
45.9.7. proxy_pass SESSION 丟失問題
45.9.8. [alert] 55785#0: *11449 socket() failed (24: Too many open files) while connecting to upstream
45.9.9. server_name 與 SSI 注意事項
45.9.10. location 跨 document_root 引用,引用 document_root 之外的資源
45.9.11. nginx: [warn] duplicate MIME type "text/html" in /etc/nginx/nginx.conf
46. Apache Tomcat
46.1. Tomcat 安裝與配置
46.1.1. Tomcat 6
46.1.2. Tomcat 7
46.1.3. Java 8 + Tomcat 8
46.1.4. 防火牆配置
46.1.5. 同時運行多實例
46.1.6. Testing file
46.1.7. mod_jk
46.1.8. mod_proxy_ajp
46.1.9. RewriteEngine 連接 Tomcat
46.2. 配置 Tomcat 伺服器
46.2.1. server.xml
46.2.2. tomcat-users.xml
46.2.3. context.xml
46.2.4. logging.properties
46.3. 虛擬主機配置
46.3.1. 方案一
46.3.2. 方案二
46.3.3. Alias 別名
46.3.4. access_log
46.3.5. Context 配置
46.3.6. 主機綁定IP地址
46.4. SSI
46.5. Logging 日誌
46.5.1. 開啟 debug 模式
46.5.2. 切割 catalina.out 日誌
46.6. Init.d Script
46.6.1. Script 1
46.6.2. Shell Script 2
47. Lighttpd
47.1. 安裝Lighttpd
47.1.1. quick install with aptitude
47.1.2. yum install
47.1.3. to compile and then install lighttpd
47.2. /etc/lighttpd/lighttpd.conf
47.2.1. max-worker / max-fds
47.2.2. accesslog.filename
47.2.3. ETags
47.2.4. server.tag
47.3. Module
47.3.1. simple_vhost
47.3.2. ssl
47.3.3. redirect
47.3.4. rewrite
47.3.5. alias
47.3.6. auth
47.3.7. compress
47.3.8. expire
47.3.9. status
47.3.10. setenv
47.3.11. fastcgi
47.3.12. user-agent
47.3.13. spdy
47.4. 其他模組
47.4.1. mod_secdownload 防盜鏈
47.5. Example
47.5.1. s-maxage
48. Resin
48.1. 安裝Resin
48.1.1. 直接使用
48.1.2. Debian/Ubuntu
48.1.3. 源碼安裝Resin
48.2. Compiling mod_caucho.so
48.3. resin.conf
48.3.1. Maximum number of threads
48.3.2. Configures the keepalive
48.3.3. ssl
48.4. virtual hosts
48.4.1. explicit host
48.4.2. regexp host
48.4.3. host-alias
48.4.4. configures a deployment directory for virtual hosts
48.4.5. Resources
48.5. FAQ
48.5.1. java.lang.OutOfMemoryError: PermGen space
49. Application Server
49.1. Zope
49.2. JBoss - JBoss Enterprise Middleware
50. Web Server Optimization
50.1. ulimit
50.1.1. open files
50.2. khttpd
50.3. php.ini
50.3.1. Resource Limits
50.3.2. File Uploads
50.3.3. Session Shared
50.3.4. PATHINFO
50.4. APC Cache (php-apc - APC (Alternative PHP Cache) module for PHP 5)
50.5. Zend Optimizer
50.6. eaccelerator
51. varnish - a state-of-the-art, high-performance HTTP accelerator
51.1. Varnish Install
51.2. varnish utility
51.2.1. status
51.2.2. varnishadm
51.2.3. varnishtop
51.2.4. varnishhist
51.2.5. varnishsizes
51.3. log file
51.4. Varnish Configuration Language - VCL
51.4.1. unset / set
51.5. example
52. Apache Traffic Server
52.1. Install
52.2. Configure
53. Cherokee
53.1. Installing Cherokee
54. Jetty
55. Other Web Server
55.1. Python SimpleHTTPServer
56. web 伺服器排名
56.1. HTTP狀態碼
57. HTTP2
57.1. Chrome
V. Mail Server
58. Mail server constituent
59. mail user agent (MUA)
59.1. mail
59.2. mutt - text-based mailreader supporting MIME, GPG, PGP and threading
59.2.1. 發送郵件
59.3. alpine - Text-based email client, friendly for novices but powerful
59.4. fetchmail - SSL enabled POP3, APOP, IMAP mail gatherer/forwarder
59.5. GPG4WIN
59.6. Evolution
60. exim - meta-package to ease Exim MTA (v4) installation
60.1. install
60.1.1. ubuntu/debian
60.1.2. CentOS/Redhat
60.2. exim 命令
60.2.1. 刷新郵件隊列
60.3. 配置exim
60.3.1. /etc/aliases 別名配置
60.4. FAQ
60.4.1. Mailing to remote domains not supported
61. postfix - High-performance mail transport agent
61.1. install
61.1.1. Ubuntu
61.1.2. CentOS
61.1.3. OSCM 通過配置管理腳本安裝
61.2. 配置 Postfix
61.2.1. 轉發配置
61.2.2. 拒收垃圾郵件
61.2.3. 收件箱配置
61.2.4. 郵件投遞
61.2.5. 隊列配置
61.2.6. 客戶端
61.3. dkim
61.3.1. 增加域名
61.3.2. 測試
61.4. Rspamd
61.5. /var/log/maillog
61.5.1. 計算每分鐘發送數量日誌統計
61.5.2. 虛假地址統計
61.6. Post 命令
61.6.1. postconf - Postfix configuration utility
61.6.2. postsuper
61.6.3. postqueue - Postfix queue control
61.6.4. postmulti - Postfix multi-instance manager
61.7. Example
61.7.1. 站內電郵發送
61.7.2. EDM 伺服器
61.8. FAQ
61.8.1. SMTP ERROR: RCPT TO command failed: 501 5.1.3 Bad recipient address syntax
61.8.2. connect to gmail-smtp-in.l.google.com[2607:f8b0:400e:c00::1a]:25: Network is unreachable
61.8.3. opendkim[5762]: 3012A802C1DD: [49.213.11.18] [49.213.11.18] not internal
61.8.4. opendkim[12578]: 4CC5C802C382: no signature data
61.8.5. /etc/opendkim/keys/default.private: open(): No such file or directory
62. 郵件原文
62.1. Subject Unicode
62.2. TO/CC/BCC
62.3. 正文
62.4. POP Sniffer
62.5. PHP mail()
63. 反垃圾郵件相關
63.1. Sender Policy Framework
63.1.1. 分析 SPF 記錄
63.2. DKIM
63.3. 郵件被拒收處理方法
63.3.1. NetEase
63.3.2. Sohu
63.3.3. Tom
63.3.4. QQ
63.3.5. 21CN
64. Fax
64.1. HylaFAX
65. FAQ
65.1. 通過SSH與控制台不能登錄
VI. Backup, Recovery, and Archiving Solutions
66. Logical Volume Manager (LVM)
66.1. 物理卷管理(physical volume)
66.1.1. pvcreate
66.1.2. pvdisplay
66.1.3. pvs
66.2. 卷組管理(Volume Group)
66.2.1. vgcreate
66.2.2. vgdisplay
66.2.3. vgs
66.2.4. vgchange
66.2.5. vgextend
66.2.6. vgreduce
66.3. 邏輯卷管理(logical volume)
66.3.1. lvcreate
66.3.2. lvdisplay
66.3.3. lvremove
66.4. Format
66.5. mount
66.5.1. lv
66.5.2. snapshot
66.6. snapshot backup
67. 檔案傳輸
67.1. 跨伺服器檔案傳輸
67.1.1. scp - secure copy (remote file copy program)
67.1.2. nc - TCP/IP swiss army knife
67.2. wget - retrieves files from the web
67.2.1. 下載所有圖片
67.2.2. mirror
67.2.3. reject
67.2.4. ftp 下載
67.3. axel - A light download accelerator - Console version
68. FTP (File Transfer Protocol)
68.1. lftp
68.1.1. pget
68.1.2. lftp 批處理
68.2. ncftp
68.2.1. batch command
68.2.2. ncftpget
68.2.3. ncftpput
68.3. FileZilla
68.4. vsftpd - The Very Secure FTP Daemon
68.4.1. 安裝 vsftpd
68.4.2. ftp 帳號的shell權限
68.4.3. vsftpd 認證模組
68.4.4. chroot
68.4.5. FAT
68.5. ProFTPD + MySQL / OpenLDAP 用戶認證
68.5.1. Proftpd + MySQL
68.5.2. Proftpd + OpenLDAP
68.6. Pure-FTPd + LDAP + MySQL + PGSQL + Virtual-Users + Quota
69. File Synchronize
69.1. rsync - fast remote file copy program (like rcp)
69.1.1. 安裝Rsync與配置守護進程
69.1.2. rsyncd.conf
69.1.3. rsync 參數說明
69.1.4. step by step to learn rsync
69.1.5. rsync examples
69.1.6. rsync for windows
69.1.7. 多進程 rsync 腳本
69.2. tsync
69.3. Unison File Synchronizer
69.3.1. local
69.3.2. remote
69.3.3. config
69.4. csync2 - cluster synchronization tool
69.4.1. server
69.4.2. node
69.4.3. test
69.4.4. Advanced Configuration
69.4.5. 編譯安裝
69.5. synctool
70. File Share
70.1. NFSv4
70.1.1. Ubuntu
70.1.2. CentOS
70.1.3. exports
70.1.4. NFS For Windows
70.1.5. exportfs - maintain table of exported NFS file systems
70.2. Parallel NFS(pNFS)
70.3. Samba
70.3.1. install
70.3.2. smb.conf
70.3.3. testparm - check an smb.conf configuration file for internal correctness
70.3.4. smbstatus - report on current Samba connections
70.3.5. smbpasswd - change a user's SMB password
70.3.6. nmblookup - NetBIOS over TCP/IP client used to lookup NetBIOS names
70.3.7. smbfs/smbmount/smbumount
70.3.8. smbclient - ftp-like client to access SMB/CIFS resources on servers
70.3.9. smbtar - shell script for backing up SMB/CIFS shares directly to UNIX tape drives
70.3.10. by Example
70.3.11. FAQ
71. Distributed File Systems
71.1. DRBD (Distributed Replicated Block Device)
71.1.1. disk and partition
71.1.2. Installation
71.1.3. configure
71.1.4. Starting
71.1.5. Using
71.2. Network Block Device protocol
71.2.1. nbd-server - Network Block Device protocol - server
71.2.2. nbd-client - Network Block Device protocol - client
71.3. GridFS
71.3.1. nginx-gridfs
71.3.2. lighttpd-gridfs
71.4. Moose File System
71.4.1. Master server installation
71.4.2. Backup server (metalogger) installation
71.4.3. Chunk servers installation
71.4.4. Users’ computers installation
71.4.5. Testing MFS
71.5. LizardFS
71.6. Hadoop - HDFS
71.6.1. 單機安裝
71.6.2. 分散式安裝
71.6.3. 二進制包安裝
71.6.4. FAQ
71.7. Ceph
71.7.1. Installation on Ubuntu
71.7.2. Installation on CentOS
71.7.3. Block Devices
71.8. GlusterFS
71.8.1. glusterfs-server
71.8.2. glusterfs-client
71.8.3. Testing
71.8.4. RAID
71.8.5. Filesystem Administration
71.8.6. CentOS 6.3
71.9. Lustre
71.10. MogileFS
71.11. Kosmos distributed file system (KFS)
71.12. BeeGFS - The Parallel Cluster File System
71.13. Coda
71.14. OpenAFS
72. Shared Storage
72.1. Oracle OCFS2
72.1.1. 安裝
72.2. GFS2
72.3. fam & imon
73. Network Attached Storage(NAS 網絡附加存儲)
73.1. Network Storage - Openfiler
73.1.1. Accounts
73.1.2. Volumes
73.1.3. Quota
73.1.4. Shares
73.2. OpenMediaVault
73.3. FreeNAS
74. Backup / Restore
74.1. 備份策略
74.1.1. Incremental backup
74.1.2. Differential backup
74.2. dump / restore
74.3. Bacula, the Open Source, Enterprise ready, Network Backup Tool for Linux, Unix, Mac and Windows.
74.3.1. Install Backup Server
74.3.2. Install Backup Client
74.4. Amanda: Open Source Backup
74.5. Attic - 擁有重複數據刪除技術的備份軟件
74.5.1. 安裝 Attic
74.5.2. 快速開始
74.6. SafeKeep
74.7. Opendedup
75. inotify
75.1. inotify-tools
75.2. Incron - cron-like daemon which handles filesystem events
75.2.1. incrontab - inotify cron table manipulator
75.2.2. 使用說明
75.3. inotify-tools + rsync
75.4. pyinotify
VII. Monitoring
90. NET SNMP (Simple Network Management Protocol)
90.1. 安裝SNMP
90.1.1. Ubuntu
90.1.2. CentOS
90.2. 配置SNMP
90.2.1. community 配置
90.2.2. 定義可操作的範圍
90.3. SNMP 命令
90.3.1. snmpwalk
90.3.2. snmpget
90.3.3. snmptest
90.4. Cisco MBI
90.4.1. Cisco 3750
90.4.2. Cisco ASA 5550
91. Zabbix
91.1. Installing and Configuring Zabbix
91.1.1. Ubuntu
91.1.2. CentOS Zabbix 2.4
91.1.3. Zabbix 3.x CentOS 7
91.2. web ui
91.2.1. 警告腳本
91.3. zabbix-java-gateway - Zabbix java gateway
91.4. zabbix-agent
91.4.1. Ubuntu
91.4.2. CentOS 7
91.4.3. zabbix_agentd 命令
91.4.4. Nginx status 監控
91.4.5. redis
91.4.6. MongoDB
91.4.7. PHP-FPM
91.4.8. Elasticsearch
91.4.9. Postfix
91.4.10. TCP stats
91.4.11. 應用依賴檢查
91.4.12. Oracle
92. Cacti
92.1. Install Cacti for Ubuntu
92.2. Yum 安裝
92.3. Source Install
92.4. Web 安裝
92.5. Cacti plugins
92.5.1. Percona monitoring plugins
92.6. Template
92.6.1. Nginx
92.6.2. php-fpm
92.6.3. MySQL
92.6.4. Redis
92.6.5. Percona JMX Monitoring Template for Cacti
93. Nagios
93.1. Install
93.1.1. Nagios core
93.1.2. Monitor Client nrpe
93.1.3. Monitoring Windows Machines
93.1.4. PNP4Nagios 圖表插件
93.2. nagios
93.3. nrpe node
93.4. 配置 Nagios
93.4.1. authorized
93.4.2. contacts
93.4.3. hostgroups
93.4.4. generic-service
93.4.5. SOUND OPTIONS
93.4.6. SMS 短信
93.4.7. nrpe plugins
93.5. 配置監控設備
93.5.1. routers
93.5.2. host
93.5.3. service
93.6. Nagios Plugins
93.6.1. check_ping
93.6.2. check_procs
93.6.3. check_users
93.6.4. check_http
93.6.5. check_mysql
93.6.6. Disk
93.6.7. check_tcp
93.6.8. check_log
93.6.9. check_traffic
93.6.10. Nagios nrpe plugins
93.6.11. check_nt
93.6.12. nsca - Nagios Service Check Acceptor
93.6.13. jmx
93.7. FAQ
93.7.1. Macro Name
93.7.2. 插件開發手冊
94. ElasticSearch + Logstash + Kibana
94.1. ElasticSearch + Logstash + Kibana 安裝
94.1.1. ElasticSearch 安裝
94.1.2. Kibana 安裝
94.1.3. Logstash 安裝
94.2. 本地檔案
94.3. TCP/UDP
94.4. 配置 Broker(Redis)
94.4.1. indexer
94.4.2. shipper
94.5. Kafka
94.6. logstash 配置項
94.6.1. input
94.6.2. filter
94.6.3. output
94.7. Beats
94.8. FAQ
94.8.1. 查看 Kibana 資料庫
94.8.2. logstash 無法寫入 elasticsearch
94.8.3. 標準輸出
95. Logs 分析
95.1. log
95.1.1. logwatch
95.1.2. logcheck : Analyzes log files and sends noticeable events as email
95.1.3. nulog
95.2. Web
95.2.1. Apache Log
95.2.2. awstats
95.2.3. webalizer
95.2.4. Sarg - Squid Analysis Report Generator
95.2.5. goaccess - Fast web log analyzer and interactive viewer.
95.3. Tomcat
95.3.1. 截取 0-3 點區間的日誌
95.3.2. 監控Redis
95.4. Mail
95.4.1. pflogsumm.pl - Produce Postfix MTA logfile summary
95.5. OpenSSH 日誌 /var/log/secure
95.5.1. 查看登陸用戶
95.6. rinetd.log
95.7. php-syslog-ng
95.8. Log Analyzer
95.9. Splunk
95.10. Octopussy
95.11. eventlog-to-syslog
95.12. Apache Flume
96. MRTG
96.1. Ubuntu 安裝
96.2. CentOS 安裝
96.3. 監控多個設備
96.4. 批量生成監控配置檔案
96.5. 圖片尺寸
97. Munin
97.1. Ubuntu
97.1.1. Installation Monitor Server
97.1.2. Installation Node
97.1.3. Additional Plugins
97.1.4. plugins
97.2. CentOS
97.3. 用戶認證
97.4. munin-node and plugins
97.4.1. munin-node.conf
97.4.2. mysql plugin
97.4.3. apache plugin
97.4.4. memcached plugin
97.5. munin.conf
97.6. munin-node
97.6.1. munin-node.conf
98. Ntop
98.1. Installation
98.1.1. Ubuntu
98.1.2. CentOS
98.2. Web UI
98.3. Plugins
98.3.1. NetFlow
99. Bandwidth
99.1. apt-get install
99.2. CentOS rpm/yum
99.3. source code
99.4. /etc/bandwidthd.conf
100. NetFlow
100.1. flow-tools - collects and processes NetFlow data
100.1.1. flow-capture
100.1.2. NetFlow into MySQL with flow-tools
100.2. netams - Network Traffic Accounting and Monitoring Software
100.2.1. netams-web
101. Ganglia
101.1. Server
101.2. Client
101.3. Plugin
101.4. Installing Ganglia on Centos
102. lvs-rrd
103. Observium
103.1. Installation
104. OpenTSDB
105. Graphite
106. Graphite - Scalable Realtime Graphing
107. BIG BROTHER
108. Big Sister
109. OpenNMS
110. Performance Co-Pilot
111. Clumon Performance Monitor
112. Zenoss
113. 商業軟件
114. Hyperic HQ
115. OSSIM,Spiceworks,FireGen,LANSweeper,OSSEC,HIDS
116. HawtIO
117. moloch
118. varnish - a state-of-the-art, high-performance HTTP accelerator
118.1. Varnish Install
118.2. varnish utility
118.2.1. status
118.2.2. varnishadm
118.2.3. varnishtop
118.2.4. varnishhist
118.2.5. varnishsizes
118.3. log file
118.4. Varnish Configuration Language - VCL
118.4.1. unset / set
118.5. example
119. Apache Traffic Server
119.1. Install
119.2. Configure
VIII. Server Load Balancing
120. heartbeat
120.1. heartbeat+ldirectord
120.1.1. heartbeat
120.1.2. ldirectord
120.1.3. test
120.2. Pacemaker
121. Linux Virtual Server
121.1. 環境配置
121.2. VS/NAT
121.3. VS/TUN
121.4. VS/DR
121.4.1. 配置檔案
121.5. ipvsadm script
121.6. Timeout
121.7. debug
121.8. ipvsadm monitor
122. keepalived
122.1. 安裝
122.2. test
122.3. HAProxy and Keepalived (Virtual IP)
123. Piranha - Cluster administation tools
123.1. install
123.2. configure
123.3. real server
123.4. Example
123.4.1. Master
123.4.2. Slave
123.4.3. MySQL
124. HAProxy - fast and reliable load balancing reverse proxy
124.1. Installing
124.1.1. Ubuntu
124.1.2. CentOS
124.2. haproxy.cfg
124.2.1. stats
124.2.2. listen 方式
124.2.3. frontend/backend 方式
124.2.4. option
124.2.5. balance
124.2.6. server
124.3. Example 配置實例
124.3.1. HTTP 配置實例
124.3.2. Squid
124.3.3. haproxy + mysql 配置實例
124.3.4. HTTPS SSL證書卸載配置實例
124.3.5. 使用TCP模式實現SSL穿透
124.3.6. SMTP
125. balance - Load balancing solution and generic tcp proxy
125.1. balance
125.1.1. 編譯安裝
125.1.2. Ubuntu 安裝
125.1.3. 測試安裝是否正確
125.1.4. 用法
125.2. BalanceNG
125.3. RBridge
126. Perlbal
126.1. install
127. Pacemaker
128. Example
128.1. 雙負載均衡的用法
128.2. 單台負載均衡的用法
128.3. 廣域網負載均衡的用法
129. FAQ
129.1. Haproxy 與 Nginx
IX. Distributed Computing
130. Open Source Distributed Computing
130.1. Boinc (berkeley 分散式計算平台)
130.1.1. rc.local
130.2. ubuntu apt-get 安裝
130.3. CentOS 安裝
130.4. boinccmd
130.4.1. attach_project
130.4.2. nomorework | allowmorework 禁止下載任務 / 允許下載任務
131. Twitter Storm
131.1. 單機版
131.2. lein 安裝
132. High performance Computing
132.1. Distributed Computing
132.1.1. OpenMosix
132.1.2. OpenSSI
132.2. Parallel Computing
132.2.1. EnFusion
132.2.2. SCore
132.2.3. Beowulf
133. Spark
134. Tachyon
135. Apache ZooKeeper
135.1. 安裝配置
135.1.1. 單節點安裝
135.1.2. 多節點安裝
135.2. 管理 ZooKeeper
135.2.1. help
135.2.2. ls
135.2.3. create
135.2.4. get
135.2.5. set
135.2.6. delete
X. Security
136. Authentication
136.1. /etc/login.defs
136.2. PAM 插件認證
136.2.1. pam_tally2.so
136.2.2. pam_listfile.so
136.2.3. pam_access.so
136.2.4. pam_wheel.so
136.3. Network Authentication
136.3.1. Network Information Service (NIS)
136.3.2. OpenLDAP
136.3.3. Kerberos
136.3.4. FreeRADIUS (Remote Authentication Dial In User Service)
136.3.5. SASL (Simple Authentication and Security Layer)
136.3.6. GSSAPI (Generic Security Services Application Program Interface)
137. Sniffer
137.1. nmap - Network exploration tool and security / port scanner
137.1.1. 連接埠掃瞄
137.1.2. HOST DISCOVERY
137.1.3. SCAN TECHNIQUES
137.1.4. PORT SPECIFICATION AND SCAN ORDER
137.1.5. SCRIPT SCAN
137.1.6. OS DETECTION
137.1.7. OUTPUT
137.1.8. MISC
137.1.9. Nmap Scripting Engine (NSE)
137.2. tcpdump - A powerful tool for network monitoring and data acquisition
137.2.1. 監控網絡適配器介面
137.2.2. 監控主機
137.2.3. 監控TCP連接埠
137.2.4. 監控協議
137.2.5. 輸出到檔案
137.2.6. src / dst
137.2.7. 保存結果
137.2.8. Cisco Discovery Protocol (CDP)
137.2.9. Flags
137.2.10. 案例
137.3. cdpr - Cisco Discovery Protocol Reporter
137.4. ncat - Concatenate and redirect sockets
137.4.1. TCP 數據傳輸
137.4.2. UDP 數據傳輸
137.4.3. 始終保持伺服器開啟
137.4.4. 傳輸視頻流
137.5. ngrep - Network layer grep tool
137.5.1. 匹配關鍵字
137.5.2. 指定網絡介面
137.6. Unicornscan,Zenmap,nast
137.7. netstat-nat - Show the natted connections on a linux iptable firewall
137.8. Tcpreplay
137.9. Wireshark
138. sqlmap - automatic SQL injection and database takeover tool
138.1. Installation
138.2. 開始入住實驗
138.2.1. 測試腳本
138.2.2. sqlmap.ini
138.3. Request參數
138.3.1. --method, --data
138.3.2. --cookie
138.3.3. --referer
138.3.4. --user-agent
138.3.5. --headers
138.3.6. --referer
138.3.7. auth
138.3.8. --proxy
138.3.9. --threads
138.3.10. --delay
138.3.11. --timeout
138.4. Injection
138.4.1. --dbms
138.4.2. --prefix
138.4.3. --postfix
138.4.4. --string
138.4.5. --regexp
138.4.6. --excl-str
138.4.7. --excl-reg
138.5. Techniques
138.5.1. --stacked-test
138.5.2. --time-test
138.5.3. --union-test
138.5.4. --union-tech
138.5.5. --union-use
138.6. Enumeration
138.6.1. dbs
138.6.2. --count
138.6.3. --dump/--dump-all
138.6.4. --sql-query
138.6.5. --sql-shell
138.7. Miscellaneous
138.7.1. --update
138.7.2. --save
139. Vulnerability Scanner
139.1. Nessus
139.2. OpenVAS
140. Injection & Penetration
140.1. Backtrack Linux
141. SELinux
141.1. getsebool - get SELinux boolean value
141.2. sestatus - SELinux status tool
141.3. setsebool - set SELinux boolean value
141.4. chcon - change file SELinux security context
141.5. rsync
142. Suricata Engine
143. psad
144. fwknop
145. fwsnort
146. nftables
147. Haka
XI. Configuration Management(配置管理)
148. Ansible - SSH-based configuration management, deployment, and task execution system
148.1. install
148.2. Getting Started
148.3. ansible - run a command somewhere else
148.3.1. host-pattern
148.3.2. -a MODULE_ARGS, --args=MODULE_ARGS module arguments
148.3.3. -i INVENTORY, --inventory-file=INVENTORY specify inventory host file (default=/etc/ansible/hosts)
148.3.4. -m MODULE_NAME, --module-name=MODULE_NAME module name to execute (default=command)
148.3.5. -s, --sudo run operations with sudo (nopasswd)
148.3.6. -u REMOTE_USER, --user=REMOTE_USER connect as this user (default=root)
148.3.7. 使用實例
148.4. ansible-doc - Show Ansible module documentation
148.5. ansible-playbook - run an ansible playbook
148.5.1. 包含檔案用法
149. Capistrano
150. Puppet
150.1. Installing Puppet CentOS 6.3
150.2. Puppet 簽名
150.2.1. Agent 節點
150.2.2. Master 伺服器
150.3. test
150.3.1. Master
150.3.2. Agent
150.4. 配置檔案
150.4.1. /etc/sysconfig/puppet
150.4.2. /etc/puppet/fileserver.conf
150.5. manifests
150.5.1. node
150.5.2. group, user 用戶組管理
150.5.3. file
150.5.4. package
150.5.5. service
150.5.6. exec
150.5.7. cron
150.6. modules
150.7. firewall 配置
150.8. debug
150.8.1. master
150.8.2. node
150.9. FAQ
150.9.1. err: Could not request certificate: No route to host - connect(2)
150.9.2. No help available unless you have RDoc::usage installed
151. SaltStack
151.1. 安裝 Salt Stack
151.1.1. 服務端安裝
151.1.2. 客戶端安裝
151.1.3. 防火牆配置
151.1.4. key 管理
151.1.5. 測試
151.1.6. Demo
151.2. salt-key - Salt key is used to manage Salt authentication keys
151.3. salt 命令
151.3.1. cmd
151.3.2. pkg.install
151.3.3. network.interfaces
151.3.4. salt example
151.4. /etc/salt/master
151.4.1. File Server settings
151.4.2. Pillar settings
151.4.3. Node Groups
151.4.4. File Server Backend
151.5. sls 腳本
151.5.1. pkg
151.5.2. service
151.6. FAQ
151.6.1. Git fileserver backend is enabled in configuration but could not be loaded, is git-python installed
152. Chef
152.1. 安裝 Chef
152.1.1. CentOS
153. Cobbler
154. Cfengine
155. func
156. (R)?ex Deployment & Configuration Management
157. 基于Web的系統管理軟件
157.1. Webmin
157.1.1. webalizer
157.2. ajenti
XII. Virtualization
158. KVM
158.1. kvm install usage yum
158.1.1. brctl / tunctl
158.1.2. virt-install
158.2. Ubuntu
158.3. CentOS 6.2
158.4. Scientific Linux Virtualization
158.5. libvirt
158.5.1. virsh
158.5.2. Virtual Machine Manager
158.6. FAQ
158.6.1. No hypervisor options were found for this connection
158.6.2. 如何判斷當前伺服器是實體機還是虛擬機
159. Xen
159.1. install
159.2. Manager
160. OpenVZ
160.1. 安裝OpenVZ
160.2. 使用OpenVZ & 建立VPS
160.2.1. 安裝操作系統模板
160.2.2. 創建OpenVZ操作系統節點(VPS)
160.3. 設置VPS參數
161. 虛擬機界面
161.1. OpenStack
161.2. CloudStack
161.3. OpenNode
161.4. OpenNEbula
162. Docker
162.1. Installation
162.1.1. CentOS
162.1.2. Ubuntu
162.2. 鏡像
162.2.1.
162.2.2. 獲取鏡像
162.2.3. 列出本地鏡像
162.2.4. 創建鏡像
162.2.5. 保存和載入鏡像
162.2.6. 刪除本地鏡像
162.3. 容器
162.3.1. 啟動與終止容器
162.3.2. 進入容器
162.3.3. 導出和導入容器
162.3.4. 刪除容器
162.4. 倉庫
162.5. docker 命令
162.5.1. run
162.5.2. start / stop / restart
162.5.3. ps
162.5.4. top
162.5.5. inspect
162.5.6. images
163. vagrant - Tool for building and distributing virtualized development environments
XIII. Multimedia
164. Audio
164.1. ardour
164.2. LMMS
164.3. Qsynth
164.4. Rosegarden
164.5. TerminatorX
164.6. Pulseaudio
164.7. Synthesizer
164.7.1. ZynAddSubFX
164.8. Drums
164.8.1. Hydrogen
165. Video
165.1. OpenShot
165.2. cinelerra-cv
165.3. FFmpeg
166. Graphics
166.1. ImageMagick
166.1.1. install
166.1.2. convert
166.2. GraphicsMagick
166.2.1. 安裝
166.2.2. mogrify
166.3. Photivo
166.4. How to add metadata to digital pictures from the command line
167. Music score
167.1. LilyPond
167.1.1. Example
167.2. MuseScore
168. Stream
168.1. broadcast streaming
168.1.1. gnump3d - A streaming server for MP3 and OGG files
168.1.2. icecast2 - Ogg Vorbis and MP3 streaming media server
168.1.3. shoutcast
168.1.4. PeerCast
168.2. WebRTC
169. 其他命令
XIV. Voice over IP
170. Gnu Gatekeeper
170.1. Gnu Gatekeeper Install
170.2. Gnu Gatekeeper Configure
170.3. Gnu Gatekeeper Test
170.3.1. Part I - Microsoft Windows NetMeeting
170.3.2. Part II - ohphone
171. OpenSIPS
171.1. 安裝 OpenSIPS
171.1.1. centos 6.5 預設安裝
171.1.2. 使用 yum.opensips.org 源安裝
171.1.3. 編譯安裝
171.2. 資料庫部署
171.2.1. DBTEXT
171.2.2. MySQL
171.2.3. PGSQL
171.2.4. Berkeley DB
171.3. 測試 opensips
172. PBX
172.1. Asterisk (OpenSource Linux PBX that supports both SIP and H.323)
172.2. FreeSWITCH
172.3. Yate - Yet Another Telephony Engine (includes SIP to H.323 translation)
173. VOCAL (includes a SIP to H.323 translator)
174. SIP/H.323 客戶端
174.1. linphone
174.2. Yate Client
XV. 項目管理工具
175. TRAC
175.1. Ubuntu 安裝
175.1.1. source code
175.1.2. easy_install
175.1.3. Apache httpd
175.2. CentOS 安裝
175.2.1. trac.ini
175.2.2. standalone
175.2.3. Using Authentication
175.2.4. trac-admin
175.3. Project Environment
175.3.1. Sqlite
175.3.2. MySQL
175.3.3. Plugin
175.4. trac.ini
175.4.1. repository
175.4.2. attachment 附件配置
175.5. trac-admin
175.5.1. adduser script
175.6. FAQ
175.6.1. TracError: Cannot load Python bindings for MySQL
175.7. Apache Bloodhound
176. GitLab
176.1. 安裝 GitLab
176.2. GitLab Runner
176.3. 用戶管理
176.4. 組管理
176.5. 項目管理
176.6. FAQ
176.6.1. gitolite 向 gitlab 遷移
176.6.2. 修改主機名
177. Redmine
177.1. CentOS 安裝
177.2. Redmine 運行
177.3. 插件
177.3.1. workflow
178. TUTOS
179. Open Source Requirements Management Tool
180. Git - Fast Version Control System
180.1. Repositories 倉庫管理
180.1.1. initial setup
180.1.2. checkout
180.1.3. Creating and Commiting
180.1.4. Manager remote
180.1.5. Status
180.1.6. Diff
180.1.7. Cloning
180.1.8. Push
180.1.9. Pull
180.1.10. fetch
180.1.11. Creating a Patch
180.1.12. reset
180.2. Manipulating branches
180.2.1. list branches
180.2.2. create branches
180.2.3. delete branches
180.2.4. switch branch
180.2.5. git-show-branch - Show branches and their commits
180.3. Sharing Repositories with others
180.3.1. Setting up a git server
180.4. command
180.4.1. git-add - Add file contents to the index
180.4.2. git-status - Show the working tree status
180.4.3. git-commit - Record changes to the repository
180.4.4. git-show - Show various types of objects
180.4.5. git-checkout - Checkout and switch to a branch
180.4.5.1. checkout master
180.4.5.2. checkout branch
180.4.6. git config
180.5. git-daemon 伺服器
180.5.1. git-daemon - A really simple server for git repositories
180.5.2. git-daemon-sysvinit
180.5.3. inet.conf / xinetd 方式啟動
180.5.4. git-daemon-run
180.5.5. Testing
180.6. git-svn - Bidirectional operation between a single Subversion branch and git
180.7. .gitignore
180.8. gitolite - SSH-based gatekeeper for git repositories
180.8.1. gitolite-admin
180.8.1.1. gitolite.conf
180.9. Web Tools
180.9.1. viewgit
180.10. FAQ
180.10.1. 導出最後一次修改過的檔案
180.10.2. 導出指定版本區間修改過的檔案
180.10.3. fatal: The remote end hung up unexpectedly
181. Subversion
181.1. Invoking the Server
181.1.1. Installing
181.1.1.1. Ubuntu
181.1.1.2. CentOS 5
181.1.1.3. CentOS 6
181.1.2. standalone “daemon” process
181.1.2.1. starting subversion for debian/ubuntu
181.1.2.2. starting subversion daemon script for CentOS/Radhat
181.1.3. classic Unix-like inetd daemon
181.1.4. hooks
181.1.4.1. post-commit
181.1.5. WebDav
181.1.5.1. davfs2 - mount a WebDAV resource as a regular file system
181.2. repository 管理
181.2.1. create repository
181.2.2. user admin
181.2.3. authz
181.2.4. dump
181.3. 使用Subversion
181.3.1. Initialized empty subversion repository for project
181.3.2. ignore
181.3.3. 關鍵字替換
181.3.4. lock 加鎖/ unlock 解鎖
181.3.5. import
181.3.6. export 指定版本
181.3.7. 修訂版本關鍵字
181.3.8. 恢復舊版本
181.4. branch
181.4.1. create
181.4.2. remove
181.4.3. switch
181.4.4. merge
181.4.5. relocate
181.5. FAQ
181.5.1. 遞歸添加檔案
181.5.2. 清除項目裡的所有.svn目錄
181.5.3. color diff
181.5.4. cvs2svn
181.5.5. Macromedia Dreamweaver MX 2004 + WebDAV +Subversion
181.5.6. 指定用戶名與密碼
182. cvs - Concurrent Versions System
182.1. installation
182.1.1. chroot
182.2. cvs login | logout
182.3. cvs import
182.4. cvs checkout
182.5. cvs update
182.6. cvs add
182.7. cvs status
182.8. cvs commit
182.9. cvs remove
182.10. cvs log
182.11. cvs annotate
182.12. cvs diff
182.13. rename file
182.14. revision
182.15. cvs export
182.16. cvs release
182.17. branch
182.17.1. milestone
182.17.2. patch branch
182.18. keywords
183. 其他命令
184. IBM WebSphere
184.1. WebSphere Commerce Engerprise 7.0
184.2. UpdateInstaller (AppServer, Plugins, IBMIHS)
184.2.1. WAS
184.2.2. Plugins
184.2.3. IHS
184.2.4. backup
184.3. UpdateInstaller (CommerceServer70)
184.4. WebSphere Commerce Engerprise 7.0 Feature Pack 2.iso
184.5. creating a WebSphere Commerce instance
184.6. enableFeature
184.6.1. foundation
184.6.2. management-center
184.6.3. store-enhancements
184.6.4. checkEnablementStatus
184.6.5. check version
184.7. Start IBMIHS and AppServer
184.7.1. IBMIHS
184.7.2. AppServer
184.7.3. Starting and stopping the WebSphere Commerce Information Center
184.7.4. 管理入口
184.8. Initialization store
XVI. X Window
185. install x window
185.1. xinput - utility to configure and test X input devices
186. X Setup
186.1. 取消開機啟動畫面
186.2. Automatic login
186.3. fonts 字型
186.4. disable x window
187. X Terminal
187.1. tsclient - Terminal Server Client supporting XDMCP, VNC and RDP
187.1.1. VNC
187.1.2. xdmcp
187.2. vinagre - a remote desktop viewer for the GNOME Desktop
187.3. rdesktop - A Remote Desktop Protocol client
187.3.1. -g: desktop geometry (WxH)
187.3.2. -f: full-screen mode
187.3.3. -A: enable SeamlessRDP mode
187.3.4. -z: enable rdp compression
187.3.5. -r: enable specified device redirection (this flag can be repeated)
187.4. tigervnc
187.5. TightVNC
188. Unity
188.1. Enable/Disable Auto Hide For Unity 2-D Launcher In Ubuntu 11.10
189. X Window System
189.1. Fluxbox
189.2. LXDE
189.3. Xfce
189.4. Xming X Server for Windows
190. X Application Software
190.1. ubuntu-restricted-extras
190.2. Keyboard Input Methods(輸入法)
190.3. 瀏覽器
190.3.1. Firefox
190.3.2. Chromium Web Browser
190.4. Download Software
190.5. PAC Manager
190.6. LibreOffice
190.7. VYM (View Your Mind)
190.8. greenshot
190.9. Window Switch
190.10. gparted
191. Office
191.1. Calc
191.1.1. 函數
192. FAQ
192.1. 通過SSH與控制台不能登錄
1. 附錄
1.1. 參考文檔
1.2. Red Hat 漏洞
1.3. National Vulnerability Database (NVD)
1.4. Red Hat Bug平台
1.5. Redhat Doc
1.6. System reduce
2. 歷史記錄

表格清單

1.1. Linux server partition
1.2. Linux desktop partition
22.1. 檔案目錄表達式
22.2. 字元串表達式
22.3. 組合表達式
38.1. net.ipv4.ip_forward
73.1. Volume Group Management
8. 表格標題

範例清單

11.1. 增加交換分區
11.2. GPT Example
11.3. 創建擴展分區
14.1. bonding example
14.2. 命令行建立WiFi連結步驟
22.1. A "Power User" Prompt
22.2. A Prompt the Width of Your Term
22.3. The Elegant Useless Clock Prompt
22.4. Basic conditional example if .. then
22.5. Conditionals with variables
22.6. case
22.7. Functions with parameters sample
22.8. Using select to make simple menus
22.9. Using the command line
22.10. Reading user input with read
22.11. read
22.12. random password
24.1. backup(find + tar)
26.1. example for expect
26.2. example for expect
26.3. example 1
26.4. *.exp
26.5. parallel - build and execute shell command lines from standard input in parallel
27.1. whiptail - yesno
27.2. whiptail - inputbox
27.3. whiptail - passwordbox
27.4. whiptail - passwordbox
27.5. whiptail - example 1
27.6. whiptail - radiolist
38.1. /etc/sysconfig/iptables
38.2. connlimit 實例
38.3. CentOS 5.6
42.1. openvpn.conf
42.2. server.conf
42.3. Openvpn 橋接模式伺服器配置實例
42.4. 雙網卡配置實例
42.5. client.conf
42.6. server.ovpn
42.7. client.ovpn
42.8. office.conf
42.9. home.ovpn
44.1. index.php
44.2. autolamp.sh
44.3. R=301
44.4. mod_perl.conf
45.1. Expires Examples
45.2. nginx expires
45.3. Example: valid_referers
45.4. Nginx + Tomcat
46.1. /etc/profile.d/java.sh
46.2. /etc/init.d/tomcat
46.3. tomcat firewall
46.4. /etc/rc.d/init.d/www
47.1. /etc/init.d/lighttpd
47.2. lighttpd compress
47.3. lighttpd expire
47.4. fastcgi.conf
47.5. Cache
48.1. explicit host in resin.conf
48.2. regexp host in resin.conf
48.3. host-alias in the resin.conf
48.4. host-alias in a /var/www/hosts/foo/host.xml
48.5. host-alias-regexp in the resin.conf
48.6. shared database in host
48.7. rewrite-dispatch
51.1. default.vcl
62.1. Subject Unicode
69.1. examples
69.2. backup to a central backup server with 7 day incremental
69.3. backup to a spare disk
69.4. mirroring vger CVS tree
69.5. automated backup at home
69.6. Fancy footwork with remote file lists
69.7. /etc/csync2.cfg
71.1. nginx-gridfs
71.2. Mirror
71.3. Strip
85.1. nmon
91.1. zabbix-agent 配置實例
92.1. cacti config.php
93.1.
95.1. config.php
96.1. mrtg
118.1. default.vcl
122.1. keepalived.conf
122.2. /etc/keepalived/keepalived.conf
123.1. piranha master
123.2. piranha slave
124.1. haproxy + mysql 配置實例
124.2. Haproxy MySQL (Master + Master)
136.1. /etc/pam.d/sshd - pam_tally2.so
136.2. /etc/pam.d/sshd - pam_listfile.so
150.1. puppetd
150.2. puppetca
151.1. salt command
158.1. virsh
181.1. authz