\u5b9e\u65bd\u4e13\u7ebfIP\u89e3\u51b3\u65b9\u6848\u9700\u8981\u8c28\u614e\u914d\u7f6e\u7f51\u7edc\u53c2\u6570\u3002\u4ee5\u4e0b\u662f\u8be6\u7ec6\u7684\u914d\u7f6e\u6307\u5357:<\/p>\n

\r\n# \u7f51\u7edc\u4f18\u5316\u914d\u7f6e\u793a\u4f8b\r\n# \/etc\/sysctl.conf \u4f18\u5316\r\n\r\n# \u589e\u52a0TCP\u7a97\u53e3\u5927\u5c0f\r\nnet.core.wmem_max = 12582912\r\nnet.core.rmem_max = 12582912\r\nnet.ipv4.tcp_rmem = 10240 87380 12582912\r\nnet.ipv4.tcp_wmem = 10240 87380 12582912\r\n\r\n# \u542f\u7528TCP BBR\u4ee5\u63d0\u9ad8\u541e\u5410\u91cf\r\nnet.core.default_qdisc = fq\r\nnet.ipv4.tcp_congestion_control = bbr\r\n\r\n# \u4f18\u5316\u7f51\u7edc\u7f13\u51b2\u533a\u8bbe\u7f6e\r\nnet.core.netdev_max_backlog = 5000\r\nnet.ipv4.tcp_max_syn_backlog = 8096\r\nnet.ipv4.tcp_max_tw_buckets = 2000000\r\n<\/code><\/pre>\n
\u8de8\u5883\u5b9e\u65bd\u7b56\u7565<\/strong><\/h2>\n
\u5bf9\u4e8e\u56fd\u9645\u6258\u7ba1\u90e8\u7f72,\u8bf7\u8003\u8651\u4ee5\u4e0b\u6280\u672f\u67b6\u6784:<\/p>\n
\r\n\u5168\u7403\u90e8\u7f72\u67b6\u6784:\r\n\u2514\u2500\u2500 \u7f8e\u56fd\u4e3b\u6570\u636e\u4e2d\u5fc3\r\n    \u251c\u2500\u2500 \u8fb9\u7f18\u8282\u70b9\r\n    \u2502   \u251c\u2500\u2500 \u4e9a\u592a\u5730\u533a\r\n    \u2502   \u2502   \u2514\u2500\u2500 Anycast\u914d\u7f6e\r\n    \u2502   \u2514\u2500\u2500 \u6b27\u975e\u4e2d\u4e1c\u5730\u533a\r\n    \u2502       \u2514\u2500\u2500 GeoDNS\u8def\u7531\r\n    \u251c\u2500\u2500 \u8d1f\u8f7d\u5206\u914d\r\n    \u2502   \u251c\u2500\u2500 GSLB\u5b9e\u65bd\r\n    \u2502   \u2514\u2500\u2500 \u6d41\u91cf\u5de5\u7a0b\r\n    \u2514\u2500\u2500 \u6545\u969c\u8f6c\u79fb\u914d\u7f6e\r\n        \u251c\u2500\u2500 \u81ea\u52a8\u6545\u969c\u6062\u590d\r\n        \u2514\u2500\u2500 \u5065\u5eb7\u76d1\u63a7\r\n<\/code><\/pre>\n
\u8de8\u5883\u6258\u7ba1\u7684\u5b9e\u65bd\u9700\u8981\u4ed4\u7ec6\u8003\u8651\u76d1\u7ba1\u5408\u89c4\u6027\u548c\u6570\u636e\u4e3b\u6743\u8981\u6c42\u3002<\/p>\n
\u6027\u80fd\u76d1\u63a7\u548c\u6545\u969c\u6392\u9664<\/strong><\/h2>\n
\u5efa\u7acb\u5065\u5168\u7684\u76d1\u63a7\u7cfb\u7edf\u5bf9\u4e8e\u7ef4\u6301\u6700\u4f73\u6027\u80fd\u81f3\u5173\u91cd\u8981:<\/p>\n
\r\n#!\/bin\/bash\r\n# \u7efc\u5408\u76d1\u63a7\u811a\u672c\r\n\r\n# \u5b9a\u4e49\u76d1\u63a7\u53c2\u6570\r\nLATENCY_THRESHOLD=50\r\nPACKET_LOSS_THRESHOLD=0.5\r\nBANDWIDTH_THRESHOLD=90\r\n\r\n# \u76d1\u63a7\u7f51\u7edc\u6307\u6807\r\nmonitor_network() {\r\n    # \u68c0\u67e5\u5ef6\u8fdf\r\n    current_latency=$(ping -c 5 target-server.com | tail -1 | awk '{print $4}' | cut -d '\/' -f 2)\r\n    \r\n    # \u68c0\u67e5\u4e22\u5305\u7387\r\n    packet_loss=$(ping -c 100 target-server.com | tail -1 | awk '{print $6}' | cut -d '%' -f 1)\r\n    \r\n    # \u68c0\u67e5\u5e26\u5bbd\u4f7f\u7528\u7387\r\n    bandwidth_usage=$(iftop -t -s 5 -L 5 -P)\r\n    \r\n    # \u8d85\u8fc7\u9608\u503c\u65f6\u53d1\u51fa\u8b66\u62a5\r\n    [ $current_latency -gt $LATENCY_THRESHOLD ] && send_alert \"\u9ad8\u5ef6\u8fdf\"\r\n    [ $packet_loss -gt $PACKET_LOSS_THRESHOLD ] && send_alert \"\u4e22\u5305\"\r\n}\r\n\r\n# \u6bcf5\u5206\u949f\u8fd0\u884c\u4e00\u6b21\u76d1\u63a7\r\nwhile true; do\r\n    monitor_network\r\n    sleep 300\r\ndone\r\n<\/code><\/pre>\n
\u5b89\u5168\u5b9e\u65bd\u548c\u6700\u4f73\u5b9e\u8df5<\/strong><\/h2>\n
\u4e13\u7ebfIP\u7684\u5b89\u5168\u914d\u7f6e\u9700\u8981\u591a\u5c42\u6b21\u7684\u65b9\u6cd5:<\/p>\n
\r\n# \u5b89\u5168\u914d\u7f6e\u6a21\u677f\r\n# \/etc\/iptables\/rules.v4\r\n\r\n*filter\r\n:INPUT DROP [0:0]\r\n:FORWARD DROP [0:0]\r\n:OUTPUT ACCEPT [0:0]\r\n\r\n# \u5141\u8bb8\u5df2\u5efa\u7acb\u7684\u8fde\u63a5\r\n-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT\r\n\r\n# DDoS\u9632\u62a4\u7684\u81ea\u5b9a\u4e49\u901f\u7387\u9650\u5236\r\n-A INPUT -p tcp --dport 80 -m limit --limit 25\/minute --limit-burst 100 -j ACCEPT\r\n\r\n# \u5730\u7406IP\u8fc7\u6ee4\u793a\u4f8b\r\n-A INPUT -m geoip --src-cc CN,RU -j DROP\r\n\r\n# \u5e94\u7528\u7a0b\u5e8f\u7279\u5b9a\u89c4\u5219\r\n-A INPUT -p tcp --dport 443 -j ACCEPT\r\n-A INPUT -p tcp --dport 22 -m state --state NEW -m recent --set\r\nCOMMIT\r\n<\/code><\/pre>\n
\u6210\u672c\u6548\u76ca\u5206\u6790\u548c\u6295\u8d44\u56de\u62a5\u8ba1\u7b97<\/strong><\/h2>\n
\u7406\u89e3\u4e13\u7ebfIP\u7684\u6280\u672f\u6295\u8d44\u56de\u62a5\u6d89\u53ca\u5206\u6790\u591a\u4e2a\u6307\u6807:<\/p>\n
\u6295\u8d44\u56de\u62a5\u8ba1\u7b97\u56e0\u7d20:<\/strong><\/p>\n
1. \u6027\u80fd\u63d0\u5347<\/strong><\/p>\n
– \u5ef6\u8fdf\u964d\u4f4e: ~40-60%<\/p>\n
– \u541e\u5410\u91cf\u63d0\u5347: 2-3\u500d<\/p>\n
– \u8fde\u63a5\u7a33\u5b9a\u6027: 99.99%<\/p>\n
2. \u8d44\u6e90\u5229\u7528<\/strong><\/p>\n
– \u5e26\u5bbd\u6548\u7387: +35%<\/p>\n
– \u670d\u52a1\u5668\u8d1f\u8f7d\u51cf\u5c11: ~25%<\/p>\n
– \u7f13\u5b58\u547d\u4e2d\u7387: +45%<\/p>\n
3. \u8fd0\u8425\u6548\u76ca<\/strong><\/p>\n
– \u652f\u6301\u5de5\u5355\u51cf\u5c11: -40%<\/p>\n
– \u95ee\u9898\u89e3\u51b3\u901f\u5ea6\u63d0\u5347: -60%<\/p>\n
– \u76d1\u63a7\u80fd\u529b\u63d0\u5347: +80%<\/p>\n
\u9762\u5411\u672a\u6765\u7684\u6269\u5c55\u6027\u8003\u8651<\/strong><\/h2>\n
\u5b9e\u65bd\u4e13\u7ebfIP\u89e3\u51b3\u65b9\u6848\u5e94\u8003\u8651\u672a\u6765\u6269\u5c55\u9700\u6c42:<\/p>\n
\r\n\u53ef\u6269\u5c55\u6027\u6846\u67b6:\r\n\u251c\u2500\u2500 \u7f51\u7edc\u6269\u5c55\r\n\u2502   \u251c\u2500\u2500 IPv6\u5c31\u7eea\r\n\u2502   \u2514\u2500\u2500 BGP\u5730\u5740\u7a7a\u95f4\r\n\u251c\u2500\u2500 \u6027\u80fd\u6269\u5c55\r\n\u2502   \u251c\u2500\u2500 \u591a\u6570\u636e\u4e2d\u5fc3\u96c6\u6210\r\n\u2502   \u2514\u2500\u2500 CDN\u5b9e\u65bd\r\n\u2514\u2500\u2500 \u76d1\u63a7\u6269\u5c55\r\n    \u251c\u2500\u2500 \u5206\u5e03\u5f0f\u8ffd\u8e2a\r\n    \u2514\u2500\u2500 \u6307\u6807\u805a\u5408\r\n<\/code><\/pre>\n
\u603b\u4e4b,\u7f8e\u56fd\u670d\u52a1\u5668\u4e13\u7ebfIP\u5bf9\u4e8e\u9700\u8981\u53ef\u9760\u3001\u9ad8\u6027\u80fd\u670d\u52a1\u5668\u79df\u7528\u89e3\u51b3\u65b9\u6848\u7684\u7ec4\u7ec7\u6765\u8bf4\u662f\u4e00\u4e2a\u5173\u952e\u7684\u57fa\u7840\u8bbe\u65bd\u9009\u62e9\u3002\u901a\u8fc7\u6b63\u786e\u5b9e\u65bd\u7f51\u7edc\u4f18\u5316\u3001\u5b89\u5168\u63aa\u65bd\u548c\u76d1\u63a7\u7cfb\u7edf,\u4f01\u4e1a\u53ef\u4ee5\u5b9e\u73b0\u663e\u8457\u7684\u6027\u80fd\u6539\u8fdb\u5e76\u7ef4\u6301\u7a33\u5065\u7684\u8de8\u5883\u8fd0\u8425\u3002\u4e13\u7ebfIP\u914d\u7f6e\u7684\u6280\u672f\u4f18\u52bf,\u7ed3\u5408\u7f8e\u56fd\u6258\u7ba1\u8bbe\u65bd\u7684\u6218\u7565\u4f4d\u7f6e,\u4e3a\u9700\u8981\u4f18\u8d28\u7f51\u7edc\u8fde\u63a5\u548c\u8d44\u6e90\u9694\u79bb\u7684\u670d\u52a1\u5668\u79df\u7528\u548c\u670d\u52a1\u5668\u6258\u7ba1\u670d\u52a1\u521b\u9020\u4e86\u6700\u4f73\u73af\u5883\u3002<\/p>\n
[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"
[vc_row][vc_column][vc_column_text css=””] \u5728\u5168\u7403\u7f51\u7edc\u57fa\u7840\u8bbe\u65bd\u9886\u57df,\u7f8e\u56fd\u670d\u52a1\u5668\u4e13\u7ebfIP\u662f\u4f01\u4e1a\u5b9e\u73b0\u53ef\u9760\u3001\u9ad8\u6027\u80fd\u670d\u52a1\u5668\u79df\u7528\u89e3\u51b3\u65b9\u6848\u7684\u5173\u952e\u7ec4\u6210\u90e8\u5206\u3002\u672c\u6280\u672f\u5206\u6790\u63a2\u8ba8\u4e86\u7f8e\u56fd\u670d\u52a1\u5668\u4e2d\u4e13\u7ebfIP\u914d\u7f6e\u7684\u67b6\u6784\u3001\u5b9e\u65bd\u548c\u4f18\u5316,\u91cd\u70b9\u5173\u6ce8\u7f51\u7edc\u5ef6\u8fdf\u3001\u8de8\u5883\u6258\u7ba1\u548c\u670d\u52a1\u5668\u4f18\u5316\u65b9\u6cd5\u3002 \u7406\u89e3\u4e13\u7ebfIP\u67b6\u6784 \u4e13\u7ebfIP\u5efa\u7acb\u4e86\u57fa\u7840\u8bbe\u65bd\u4e0e\u7f8e\u56fd\u670d\u52a1\u5668\u4f4d\u7f6e\u4e4b\u95f4\u72ec\u7279\u7684\u3001\u4e13\u7528\u7684\u7f51\u7edc\u901a\u9053\u3002\u4e0e\u5171\u4eabIP\u914d\u7f6e\u76f8\u6bd4,\u8fd9\u79cd\u914d\u7f6e\u91c7\u7528\u4e86\u5b8c\u5168\u4e0d\u540c\u7684\u539f\u7406,\u4f7f\u7528\u4e13\u7528\u786c\u4ef6\u8d44\u6e90\u548c\u7f51\u7edc\u8def\u7531\u3002 \u6280\u672f\u7ec4\u4ef6\u548c\u7f51\u7edc\u7ed3\u6784 \u4e13\u7ebfIP\u67b6\u6784\u5305\u542b\u591a\u4e2a\u534f\u540c\u5de5\u4f5c\u7684\u5173\u952e\u7ec4\u4ef6: \u7f51\u7edc\u67b6\u6784\u6982\u8ff0: \u251c\u2500\u2500 \u4e3b\u8981\u7ec4\u4ef6 \u2502 \u251c\u2500\u2500 \u4e13\u7528\u8def\u7531\u5668(1:1\u5206\u914d) \u2502 \u251c\u2500\u2500 \u7269\u7406\u5e26\u5bbd\u901a\u9053 \u2502 \u2514\u2500\u2500 \u4e13\u7528IP\u5730\u5740\u5757(\/29\u6216\u66f4\u5927) \u251c\u2500\u2500 \u5b89\u5168\u5c42 \u2502 \u251c\u2500\u2500 \u4e13\u7528\u9632\u706b\u5899 \u2502 \u2514\u2500\u2500 DDoS\u9632\u62a4 \u2514\u2500\u2500 \u76d1\u63a7\u7cfb\u7edf \u251c\u2500\u2500 \u5b9e\u65f6\u5ef6\u8fdf\u8ffd\u8e2a \u2514\u2500\u2500 \u5e26\u5bbd\u4f7f\u7528\u5206\u6790 \u6bcf\u4e2a\u4e13\u7ebfIP\u914d\u7f6e\u7ef4\u62a4\u81ea\u5df1\u7684\u8def\u7531\u8868\u548cBGP\u5173\u7cfb,\u786e\u4fdd\u5230\u4e3b\u8981\u4e92\u8054\u7f51\u4ea4\u6362\u4e2d\u5fc3\u7684\u6700\u4f73\u8def\u5f84\u9009\u62e9\u548c\u8f83\u5c11\u7684\u8df3\u6570\u3002 \u6027\u80fd\u6307\u6807\u548c\u57fa\u51c6\u6d4b\u8bd5 \u5728\u8bc4\u4f30\u4e13\u7ebfIP\u6027\u80fd\u65f6,\u9700\u8981\u5173\u6ce8\u4ee5\u4e0b\u51e0\u4e2a\u5173\u952e\u6307\u6807: # \u7f51\u7edc\u6027\u80fd\u6d4b\u8bd5\u811a\u672c\u793a\u4f8b #!\/bin\/bash # \u6d4b\u8bd5\u5230\u4e3b\u8981\u7f8e\u56fd\u4ea4\u6362\u4e2d\u5fc3\u7684\u5ef6\u8fdf for endpoint in ny-ix.net lax-ix.net chi-ix.net; do echo “\u6d4b\u8bd5\u5230 $endpoint \u7684\u5ef6\u8fdf” ping -c 10 […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":2,"featured_media":21498,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4816],"tags":[5903,2520,2285,1888,516,353],"class_list":["post-21528","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-america-dedicated-server-sc","tag-us-server-dedicated-ip-sc","tag-ip-configuration-sc","tag-server-optimization-sc","tag-server-hosting","tag-network-latency-sc","tag-server-rental-sc"],"acf":[],"yoast_head":"\n