\u7279\u5b9a\u7cfb\u7edf\u5b9e\u65bd\u7a0b\u5e8f<\/strong><\/h2>\n

Linux\u670d\u52a1\u5668\u5b9e\u65bd<\/h3>\n

\u73b0\u4ee3Linux\u53d1\u884c\u7248\u63d0\u4f9b\u591a\u79cdIP\u914d\u7f6e\u65b9\u6cd5\u3002\u6839\u636e\u60a8\u7684\u53d1\u884c\u7248\u548c\u8981\u6c42\u9009\u62e9\u9002\u5f53\u7684\u65b9\u6cd5\uff1a<\/p>\n

\n
1. \u521d\u59cb\u7cfb\u7edf\u9a8c\u8bc1\uff1a\n

   ip addr show\r\nip route show\r\nss -tulpn\r\nnetstat -rn<\/code><\/pre>\n<\/li>\n
   \u5168\u9762\u5907\u4efd\uff1a\n
   cp \/etc\/network\/interfaces \/etc\/network\/interfaces.backup-$(date +%Y%m%d)\r\ncp -r \/etc\/netplan\/ \/etc\/netplan.backup-$(date +%Y%m%d)\/\r\nsystemctl status networking > network-status-$(date +%Y%m%d).log<\/code><\/pre>\n<\/li>\n
   \u53d1\u884c\u7248\u7279\u5b9a\u914d\u7f6e\uff1a
   \n
   Ubuntu\/Debian (netplan)<\/h4>\n
   sudo nano \/etc\/netplan\/01-netcfg.yaml\r\n\r\nnetwork:\r\n  version: 2\r\n  ethernets:\r\n    ens3:\r\n      addresses: [192.168.1.100\/24]\r\n      gateway4: 192.168.1.1\r\n      nameservers:\r\n        addresses: [8.8.8.8, 8.8.4.4]<\/code><\/pre>\n
   RHEL\/CentOS<\/h4>\n
   sudo nano \/etc\/sysconfig\/network-scripts\/ifcfg-eth0\r\n\r\nDEVICE=eth0\r\nBOOTPROTO=none\r\nONBOOT=yes\r\nIPADDR=192.168.1.100\r\nNETMASK=255.255.255.0\r\nGATEWAY=192.168.1.1\r\nDNS1=8.8.8.8\r\nDNS2=8.8.4.4<\/code><\/pre>\n<\/li>\n<\/ol>\n
   Windows\u670d\u52a1\u5668\u5b9e\u65bd<\/h3>\n
   \n
   PowerShell\u5b9e\u65bd\uff1a\n
   # \u67e5\u770b\u5f53\u524d\u914d\u7f6e\r\nGet-NetIPAddress\r\nGet-NetAdapter\r\n\r\n# \u79fb\u9664\u73b0\u6709IP\u914d\u7f6e\r\nRemove-NetIPAddress -InterfaceIndex 12 -Confirm:$false\r\nRemove-NetRoute -InterfaceIndex 12 -Confirm:$false\r\n\r\n# \u914d\u7f6e\u65b0IP\u5730\u5740\r\nNew-NetIPAddress -InterfaceIndex 12 -IPAddress \"192.168.1.100\" `\r\n    -PrefixLength 24 -DefaultGateway \"192.168.1.1\"\r\n\r\n# \u914d\u7f6eDNS\u670d\u52a1\u5668\r\nSet-DnsClientServerAddress -InterfaceIndex 12 `\r\n    -ServerAddresses (\"8.8.8.8\",\"8.8.4.4\")<\/code><\/pre>\n<\/li>\n
   \u591a\u670d\u52a1\u5668\u6279\u91cf\u914d\u7f6e\uff1a\n
   $servers = Get-Content servers.txt\r\nforeach ($server in $servers) {\r\n    Invoke-Command -ComputerName $server -ScriptBlock {\r\n        # IP\u914d\u7f6e\u547d\u4ee4\u5728\u6b64\r\n    }\r\n}<\/code><\/pre>\n<\/li>\n<\/ol>\n
   \u53d8\u66f4\u540e\u9a8c\u8bc1\u534f\u8bae<\/strong><\/h2>\n
   \u5b9e\u65bd\u5168\u9762\u7684\u9a8c\u8bc1\u6d41\u7a0b\u4ee5\u786e\u4fdd\u6240\u6709\u7cfb\u7edf\u548c\u670d\u52a1\u6b63\u5e38\u8fd0\u884c\uff1a<\/p>\n
   \n
   \u7f51\u7edc\u8fde\u63a5\u6d4b\u8bd5\n
   # \u57fa\u672c\u8fde\u63a5\u6027\r\nping -c 4 192.168.1.1\r\nping -c 4 8.8.8.8\r\n\r\n# TCP\u7aef\u53e3\u9a8c\u8bc1\r\nnc -zv server.domain.com 22\r\nnc -zv server.domain.com 80\r\n\r\n# \u8def\u7531\u9a8c\u8bc1\r\ntraceroute google.com\r\nmtr -n 8.8.8.8<\/code><\/pre>\n<\/li>\n
   \u670d\u52a1\u9a8c\u8bc1\n
   # \u68c0\u67e5\u76d1\u542c\u670d\u52a1\r\nnetstat -tulpn\r\nss -tulpn\r\n\r\n# \u9a8c\u8bc1DNS\u89e3\u6790\r\ndig +short google.com\r\nnslookup domain.com\r\n\r\n# \u6d4b\u8bd5SSL\u8bc1\u4e66\r\nopenssl s_client -connect domain.com:443 -servername domain.com<\/code><\/pre>\n<\/li>\n<\/ul>\n
   DNS\u548cSSL\u914d\u7f6e\u66f4\u65b0<\/strong><\/h2>\n
   \u901a\u8fc7\u9002\u5f53\u7684DNS\u548cSSL\u7ba1\u7406\u7ef4\u6301\u670d\u52a1\u8fde\u7eed\u6027\uff1a<\/p>\n
   \n
   DNS\u8bb0\u5f55\u7ba1\u7406\uff1a\n
   # \u66f4\u65b0A\u8bb0\u5f55\r\nnsupdate << EOF\r\nserver ns1.domain.com\r\nzone domain.com\r\nupdate delete old-server.domain.com A\r\nupdate add old-server.domain.com 300 A 192.168.1.100\r\nsend\r\nEOF\r\n\r\n# \u9a8c\u8bc1\u4f20\u64ad\r\ndig +short old-server.domain.com\r\nhost old-server.domain.com<\/code><\/pre>\n<\/li>\n
   SSL\u8bc1\u4e66\u9a8c\u8bc1\uff1a\n
   # \u6d4b\u8bd5\u8bc1\u4e66\u6709\u6548\u6027\r\nopenssl x509 -in certificate.crt -text -noout\r\n\r\n# \u9a8c\u8bc1\u8bc1\u4e66\u94fe\r\nopenssl verify -CAfile chain.pem certificate.crt\r\n\r\n# \u6d4b\u8bd5SSL\u914d\u7f6e\r\ncurl -vI https:\/\/domain.com<\/code><\/pre>\n<\/li>\n<\/ol>\n
   \u5b89\u5168\u6ce8\u610f\u4e8b\u9879\u548c\u6700\u4f73\u5b9e\u8df5<\/strong><\/h2>\n
   \u4e3a\u65b0\u7684IP\u914d\u7f6e\u5b9e\u65bd\u5168\u9762\u7684\u5b89\u5168\u63aa\u65bd\uff1a<\/p>\n
   \n
   \u9632\u706b\u5899\u89c4\u5219\uff1a\n
   # iptables\u914d\u7f6e\r\niptables -A INPUT -p tcp --dport 80 -j ACCEPT\r\niptables -A INPUT -p tcp --dport 443 -j ACCEPT\r\niptables -A INPUT -p tcp --dport 22 -s trusted-ip\/32 -j ACCEPT\r\niptables -P INPUT DROP\r\n\r\n# \u4fdd\u5b58\u89c4\u5219\r\niptables-save > \/etc\/iptables\/rules.v4<\/code><\/pre>\n<\/li>\n
   \u8bbf\u95ee\u63a7\u5236\uff1a\n
   # \u914d\u7f6eSSH\u9650\u5236\r\necho \"AllowUsers admin@trusted-ip\" >> \/etc\/ssh\/sshd_config\r\nsystemctl restart sshd\r\n\r\n# \u8bbe\u7f6efail2ban\r\ncp \/etc\/fail2ban\/jail.conf \/etc\/fail2ban\/jail.local\r\nsystemctl restart fail2ban<\/code><\/pre>\n<\/li>\n<\/ul>\n
   \u5e38\u89c1\u95ee\u9898\u6545\u969c\u6392\u9664<\/strong><\/h2>\n
   \u4f7f\u7528\u4ee5\u4e0b\u8bca\u65ad\u65b9\u6cd5\u89e3\u51b3\u5e38\u89c1\u95ee\u9898\uff1a<\/p>\n
   \n
   \u7f51\u7edc\u95ee\u9898\uff1a\n
   # \u6355\u83b7\u6d41\u91cf\r\ntcpdump -i eth0 -n port 80\r\ntcpdump -i eth0 'tcp[tcpflags] & (tcp-syn) != 0'\r\n\r\n# \u68c0\u67e5\u8def\u7531\r\nip route get 8.8.8.8\r\nnetstat -rn<\/code><\/pre>\n<\/li>\n
   \u670d\u52a1\u95ee\u9898\uff1a\n
   # \u68c0\u67e5\u670d\u52a1\u72b6\u6001\r\nsystemctl status service-name\r\njournalctl -xe\r\n\r\n# \u76d1\u63a7\u8d44\u6e90\u4f7f\u7528\r\nnetstat -anp\r\nlsof -i :80<\/code><\/pre>\n<\/li>\n<\/ul>\n
   \u6062\u590d\u7a0b\u5e8f<\/strong><\/h2>\n
   \u5728\u9700\u8981\u65f6\u5b9e\u65bd\u8fd9\u4e9b\u6062\u590d\u7a0b\u5e8f\uff1a<\/p>\n
   \n
   \u5feb\u901f\u6062\u590d\uff1a\n
   # \u6062\u590d\u7f51\u7edc\u914d\u7f6e\r\ncp \/etc\/network\/interfaces.backup \/etc\/network\/interfaces\r\nsystemctl restart networking\r\n\r\n# \u6062\u590d\u9632\u706b\u5899\u89c4\u5219\r\niptables-restore < \/etc\/iptables\/rules.v4.backup<\/code><\/pre>\n<\/li>\n
   \u670d\u52a1\u6062\u590d\uff1a\n
   # \u91cd\u542f\u5173\u952e\u670d\u52a1\r\nsystemctl restart nginx\r\nsystemctl restart apache2\r\nsystemctl restart mysql<\/code><\/pre>\n<\/li>\n<\/ol>\n
   \u751f\u4ea7\u73af\u5883\u6700\u4f73\u5b9e\u8df5<\/strong><\/h2>\n
   \n
   \u53d8\u66f4\u7ba1\u7406\uff1a\n
   \n
   \u5728\u7248\u672c\u63a7\u5236\u4e2d\u8bb0\u5f55\u6240\u6709\u53d8\u66f4<\/li>\n
   \u5b9e\u65bd\u540c\u884c\u8bc4\u5ba1\u6d41\u7a0b<\/li>\n
   \u5c3d\u53ef\u80fd\u4f7f\u7528\u57fa\u7840\u8bbe\u65bd\u5373\u4ee3\u7801<\/li>\n
   \u7ef4\u62a4\u8be6\u7ec6\u7684\u56de\u6eda\u7a0b\u5e8f<\/li>\n<\/ul>\n<\/li>\n
   \u76d1\u63a7\uff1a\n
   # \u8bbe\u7f6e\u76d1\u63a7\u68c0\u67e5\r\ncurl -s http:\/\/localhost:9100\/metrics | grep node_network\r\ncheck_mk -I localhost<\/code><\/pre>\n<\/li>\n<\/ul>\n
   \u7ed3\u8bba<\/strong><\/h2>\n
   \u5728\u7f8e\u56fd\u670d\u52a1\u5668\u4e0a\u6210\u529f\u7ba1\u7406IP\u5730\u5740\u53d8\u66f4\u4e0d\u4ec5\u9700\u8981\u6280\u672f\u4e13\u957f\uff0c\u8fd8\u9700\u8981\u5bf9\u7f51\u7edc\u67b6\u6784\u3001\u5b89\u5168\u5f71\u54cd\u548c\u4e1a\u52a1\u8fde\u7eed\u6027\u8981\u6c42\u6709\u5168\u9762\u7684\u7406\u89e3\u3002\u672c\u6307\u5357\u4e3a\u5728\u5404\u79cd\u73af\u5883\u4e2d\u5b9e\u65bdIP\u53d8\u66f4\u63d0\u4f9b\u4e86\u6846\u67b6\uff0c\u4ece\u5355\u670d\u52a1\u5668\u8bbe\u7f6e\u5230\u590d\u6742\u7684\u5206\u5e03\u5f0f\u7cfb\u7edf\u90fd\u9002\u7528\u3002\u5b9a\u671f\u7ec3\u4e60\u548c\u66f4\u65b0\u8fd9\u4e9b\u7a0b\u5e8f\u5c06\u786e\u4fdd\u60a8\u7684\u56e2\u961f\u4fdd\u6301\u6210\u529fIP\u7ba1\u7406\u6240\u9700\u7684\u5fc5\u8981\u6280\u80fd\u3002<\/p>\n
   \u8bf7\u8bb0\u4f4f\uff0c\u6bcf\u4e2a\u73af\u5883\u90fd\u662f\u72ec\u7279\u7684\uff0c\u867d\u7136\u8fd9\u4e9b\u6307\u5357\u63d0\u4f9b\u4e86\u575a\u5b9e\u7684\u57fa\u7840\uff0c\u4f46\u59cb\u7ec8\u8981\u6839\u636e\u60a8\u7684\u7279\u5b9a\u57fa\u7840\u8bbe\u65bd\u8981\u6c42\u548c\u7ec4\u7ec7\u653f\u7b56\u8fdb\u884c\u8c03\u6574\u3002\u4fdd\u6301\u8be6\u7ec6\u7684\u6587\u6863\u8bb0\u5f55\uff0c\u5b9e\u65bd\u5f3a\u5927\u7684\u6d4b\u8bd5\u7a0b\u5e8f\uff0c\u5e76\u59cb\u7ec8\u51c6\u5907\u597d\u7ecf\u8fc7\u9a8c\u8bc1\u7684\u56de\u6eda\u8ba1\u5212\u4ee5\u4fbf\u5728\u9700\u8981\u65f6\u7acb\u5373\u6267\u884c\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
   \u638c\u63e1\u7f8e\u56fd\u670d\u52a1\u5668IP\u5730\u5740\u4fee\u6539\u662f\u7cfb\u7edf\u7ba1\u7406\u5458\u6216DevOps\u5de5\u7a0b\u5e08\u7684\u4e00\u9879\u5173\u952e\u6280\u80fd\u3002\u672c\u7efc\u5408\u6307\u5357\u6db5\u76d6\u4e86\u4ece\u57fa\u672c\u914d\u7f6e\u66f4\u6539\u5230\u9ad8\u7ea7\u7f51\u7edc\u6982\u5ff5\u7684\u6240\u6709\u5185\u5bb9\uff0c\u5305\u62ecIPv4\u548cIPv6\u5b9e\u65bd\u3001\u8d1f\u8f7d\u5747\u8861\u5668\u914d\u7f6e\u548c\u9ad8\u53ef\u7528\u6027\u8003\u8651\u56e0\u7d20\u3002\u65e0\u8bba\u60a8\u662f\u7ba1\u7406\u4e91\u57fa\u7840\u8bbe\u65bd\u3001\u672c\u5730\u670d\u52a1\u5668\u8fd8\u662f\u6df7\u5408\u73af\u5883\uff0c\u672c\u6307\u5357\u90fd\u5c06\u5e2e\u52a9\u60a8\u81ea\u4fe1\u5730\u5e94\u5bf9IP\u5730\u5740\u7ba1\u7406\u7684\u590d\u6742\u6027\u3002 \u53d8\u66f4\u524d\u8bc4\u4f30\u548c\u51c6\u5907 \u6210\u529f\u7684IP\u5730\u5740\u53d8\u66f4\u59cb\u4e8e\u5168\u9762\u7684\u51c6\u5907\u3002\u6b64\u9636\u6bb5\u5bf9\u4e8e\u6700\u5c0f\u5316\u505c\u673a\u65f6\u95f4\u548c\u786e\u4fdd\u670d\u52a1\u8fde\u7eed\u6027\u81f3\u5173\u91cd\u8981\u3002\u5c06\u6b64\u89c6\u4e3a\u6574\u4e2a\u8fc7\u7a0b\u7684\u6280\u672f\u57fa\u7840\u3002 \u7cfb\u7edf\u72b6\u6001\u6587\u6863 \u5f53\u524dIP\u914d\u7f6e\u53c2\u6570\uff08IPv4\/IPv6\u5730\u5740\u3001CIDR\u8868\u793a\u6cd5\u3001VLAN\uff09 \u6d3b\u52a8\u7f51\u7edc\u670d\u52a1\u548c\u4f9d\u8d56\u9879\uff08\u8d1f\u8f7d\u5747\u8861\u5668\u3001\u4ee3\u7406\u3001VPN\uff09 \u8fd0\u884c\u4e2d\u7684\u5e94\u7528\u7a0b\u5e8f\u53ca\u5176\u7f51\u7edc\u8981\u6c42\uff08\u6570\u636e\u5e93\u96c6\u7fa4\u3001Web\u670d\u52a1\u3001\u90ae\u4ef6\u670d\u52a1\u5668\uff09 \u7f51\u7edc\u62d3\u6251\u6587\u6863\uff08\u8def\u7531\u8868\u3001\u4ea4\u6362\u673a\u914d\u7f6e\u3001\u9632\u706b\u5899\u89c4\u5219\uff09 \u670d\u52a1\u53d1\u73b0\u673a\u5236\uff08Consul\u3001etcd\u3001ZooKeeper\u914d\u7f6e\uff09 \u9ad8\u53ef\u7528\u6027\u96c6\u7fa4\u914d\u7f6e \u76d1\u63a7\u7cfb\u7edf\u914d\u7f6e\u548c\u9608\u503c \u5907\u4efd\u5b9e\u65bd \u914d\u7f6e\u6587\u4ef6\uff08\/etc\/network\/interfaces\u3001netplan\u914d\u7f6e\u3001system-networkd\uff09 DNS\u8bb0\u5f55\u548c\u533a\u57df\u6587\u4ef6\uff08A\u3001AAAA\u3001PTR\u3001SRV\u8bb0\u5f55\uff09 \u9632\u706b\u5899\u89c4\u5219\u548c\u5b89\u5168\u7b56\u7565\uff08iptables\u3001nftables\u3001Windows\u9632\u706b\u5899\uff09 \u8d1f\u8f7d\u5747\u8861\u5668\u914d\u7f6e\uff08HAProxy\u3001NGINX\u3001F5\uff09 \u8bc1\u4e66\u914d\u7f6e\u548cSSL\u7ec8\u6b62\u70b9 \u5e94\u7528\u7a0b\u5e8f\u7279\u5b9a\u7684\u7f51\u7edc\u914d\u7f6e \u6570\u636e\u5e93\u590d\u5236\u8bbe\u7f6e \u6280\u672f\u5148\u51b3\u6761\u4ef6 \u5728\u542f\u52a8IP\u66f4\u6539\u8fc7\u7a0b\u4e4b\u524d\uff0c\u8bf7\u786e\u4fdd\u60a8\u7684\u73af\u5883\u6ee1\u8db3\u4ee5\u4e0b\u5168\u9762\u7684\u6280\u672f\u8981\u6c42\uff1a \u7ba1\u7406\u8bbf\u95ee\u6743\u9650 Linux\u7cfb\u7edf\u7684Root\/sudo\u6743\u9650 Windows\u670d\u52a1\u5668\u7684\u57df\u7ba1\u7406\u5458\u6743\u9650 \u7f51\u7edc\u7ba1\u7406\u63a7\u5236\u53f0\u8bbf\u95ee\u6743\u9650 \u4e91\u5e73\u53f0\u7ba1\u7406\u5458\u51ed\u636e\uff08\u5982\u9002\u7528\uff09 \u7d27\u6025\u8bbf\u95ee\u51ed\u636e \u5907\u7528\u8fde\u63a5\u65b9\u5f0f \u5df2\u9a8c\u8bc1\u5e76\u6d4b\u8bd5\u7684IPMI\/iLO\/iDRAC\u914d\u7f6e \u5df2\u786e\u8ba4\u7684\u5e26\u5916\u7ba1\u7406\u8bbf\u95ee \u901a\u8fc7\u865a\u62df\u673a\u7ba1\u7406\u7a0b\u5e8f\u7684\u63a7\u5236\u53f0\u8bbf\u95ee\uff08\u9488\u5bf9\u865a\u62df\u673a\uff09 \u901a\u8fc7\u5907\u7528\u7f51\u7edc\u7684\u7d27\u6025SSH\/RDP\u8bbf\u95ee \u5907\u7528VPN\u8bbf\u95ee\u8def\u7531 \u7f51\u7edc\u4fe1\u606f \u65b0IP\u5bfb\u5740\u65b9\u6848\uff08\u4e3b\u8981\u548c\u6b21\u8981\u5730\u5740\uff09 \u5b50\u7f51\u63a9\u7801\u548cCIDR\u8868\u793a\u6cd5 \u9ed8\u8ba4\u7f51\u5173\u5197\u4f59\u914d\u7f6e \u4e3b\u8981\u548c\u6b21\u8981DNS\u670d\u52a1\u5668\u5730\u5740 VLAN\u5206\u914d\u548c\u4e3b\u5e72\u914d\u7f6e BGP ASN\u548c\u5bf9\u7b49\u4fe1\u606f\uff08\u5982\u9002\u7528\uff09 IPv6\u8fc7\u6e21\u673a\u5236\uff08\u5982\u5b9e\u65bd\u53cc\u6808\uff09 \u7279\u5b9a\u7cfb\u7edf\u5b9e\u65bd\u7a0b\u5e8f Linux\u670d\u52a1\u5668\u5b9e\u65bd \u73b0\u4ee3Linux\u53d1\u884c\u7248\u63d0\u4f9b\u591a\u79cdIP\u914d\u7f6e\u65b9\u6cd5\u3002\u6839\u636e\u60a8\u7684\u53d1\u884c\u7248\u548c\u8981\u6c42\u9009\u62e9\u9002\u5f53\u7684\u65b9\u6cd5\uff1a \u521d\u59cb\u7cfb\u7edf\u9a8c\u8bc1\uff1a ip addr show ip route show ss -tulpn netstat […]<\/p>\n
   Read More…<\/a><\/p>\n","protected":false},"author":2,"featured_media":28075,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4816],"tags":[9211,9210,9209,3685,2552],"class_list":["post-28078","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-america-dedicated-server-sc","tag-us-server-ip-change","tag-server-ip-configuration","tag-hosting-ip-management","tag-network-configuration-sc","tag-server-maintenance-sc"],"acf":[],"yoast_head":"\n