Home | 简体中文 | 繁体中文 | 杂文 | Github | 知乎专栏 | Facebook | Linkedin | Youtube | 打赏(Donations) | About
知乎专栏

部分 III. Network Application

目录

35. network tools
35.1. curl / w3m / lynx
35.2. DHCP
35.2.1. DHCP Server
35.2.2. dhclient
35.2.3. release matching connections
35.3. DNS/Bind
35.3.1. 安装 bind9
35.3.2. forwarders
35.3.3. Load Balancing
35.3.4. view
35.3.5. Master / Slave
35.3.6. DNS tools
35.3.7. DNS
35.3.8. NamedManager
35.4. dnsmasq
35.4.1. Install
35.4.2. /etc/dnsmasq.conf
35.4.3. dnsmasq.resolv.conf
35.4.4. dnsmasq.hosts
35.4.5. /etc/dnsmasq.d/dnsmasq.server.conf
35.4.6. /etc/dnsmasq.d/dnsmasq.address.conf
35.4.7. FAQ
35.5. ngrok - tunnel local ports to public URLs and inspect traffic
37. Proxy Server
37.1. Socks/Socks5
37.1.1. Shadowsocks - A secure socks5 proxy, designed to protect your Internet traffic.
37.1.2. Socks5
37.1.3. dante-server - SOCKS (v4 and v5) proxy daemon(danted)
37.1.4. SSH Socks5 Tunnel
37.1.5. hpsockd - HP SOCKS server
37.2. frp 反向代理
37.2.1. 安装
37.2.2. 配置 systemd
37.3. Apache Proxy
37.4. Squid - Internet Object Cache (WWW proxy cache)
37.4.1. 源码安装
37.4.2. debian/ubuntu 安装
37.4.3. 配置
37.4.4. Squid 管理
37.4.5. 禁止页面被Cache
37.4.6. Squid 实用案例
37.4.7. squid+icap+clamav
37.5. Web page proxy
37.5.1. Surrogafier
37.5.2. CGIproxy
37.5.3. PHPProxy
37.5.4. BBlocked
37.5.5. Glype
37.5.6. Zelune
37.6. rinetd — internet “redirection server”
37.6.1. rinetd install
37.6.2. rinetd.conf
37.6.3. 防御脚本
37.6.4. rinetd.log
38. Firewall
38.1. TCP/IP 相关内核配置项
38.1.1. net.ipv4.ip_forward
38.1.2. net.ipv4.icmp_echo_ignore_all
38.2. iptables - administration tools for packet filtering and NAT
38.2.1. Getting Started
38.2.2. 用户自定义规则连
38.2.3. Protocols 协议
38.2.4. Interfaces 网络适配器接口
38.2.5. 源IP地址
38.2.6. Ports 端口
38.2.7. NAT
38.2.8. Module(模块)
38.2.9. IPV6
38.2.10. iptables-xml - Convert iptables-save format to XML
38.2.11. access.log IP封锁脚本
38.2.12. Example
38.3. ulogd - The Netfilter Userspace Logging Daemon
38.4. ufw - program for managing a netfilter firewall
38.4.1. /etc/default/ufw
38.4.2. ip_forward
38.4.3. DHCP
38.4.4. Samba
38.5. CentOS 7/8 Firewalld
38.5.1. 如果你不习惯使用firewalld想用回Iptables
38.5.2. 安装 firewalld
38.5.3. firewalld 配置文件
38.5.4. firewall-cmd
38.5.5. 区域
38.5.6. 端口操作
38.5.7. 服务
38.5.8. IP 伪装
38.5.9. 端口转发
38.5.10. 富规则
38.6. Shorewall
38.6.1. Installation Instructions
38.6.2. Configuring Shorewall
38.7. Firewall GUI Tools
38.8. Endian Firewall
38.9. Smooth Firewall
38.10. Sphirewall
39. Stunnel - universal SSL tunnel
40. OpenSSH
40.1. 安装 OpenSSH
40.2. /etc/ssh/
40.2.1. IP地址限制
40.2.2. sshd_config
40.2.3. ssh_config
40.2.4. ~/.ssh/config
40.3. ssh client
40.3.1. -o option 参数详解
40.3.2. 调试模式,显示连接过程
40.3.3. 远程执行 Shell 支持彩色终端输出
40.4. OpenSSH Tunnel
40.4.1. SOCKS v5 Tunnel
40.4.2. 从公网穿透局域网
40.5. ssh-keygen — authentication key generation, management and conversion
40.5.1. .ssh/known_hosts
40.6. ssh-keyscan
40.7. ssh-copy-id - install your public key in a remote machine's authorized_keys
40.8. ssh-agent
40.8.1. ssh-add
40.8.2. Lock / Unlock agent
40.8.3. Set lifetime (in seconds) when adding identities.
40.9. OpenSSH for Windows
40.9.1. Putty Client
40.10. Google Authenticator - Android Apps on Google Play
40.11. 禁止SSH密码穷举
40.12. FAQ
40.12.1. Pseudo-terminal will not be allocated because stdin is not a terminal.
40.12.2. 去掉 passphrase
40.12.3. 打印调试信息
40.12.4. 远程执行 sudo 提示密码
40.12.5. Unable to negotiate with 47.97.19.5 port 60022: no matching host key type found. Their offer: ssh-dss,ssh-rsa
41. VPN (Virtual Private Network)
41.1. WireGuard
41.1.1. 安装 WireGuard
41.1.2. 创建证书
41.1.3. 服务端
41.1.4. 客户端
41.1.5. 路由配置
41.1.6. wireguard-tools 命令
41.1.7. 案例:Server - Peer 互通,同时 Peer - Peer 也互通
41.1.8. MacOS wireguard
41.1.9. Ubuntu
41.2. OpenVPN (openvpn - Virtual Private Network daemon)
41.2.1. 安装 OpenVPN Server
41.2.2. Easy-RSA 3
41.2.3. Openvpn Client
41.2.4. OpenVPN GUI for Windows
41.2.5. point-to-point VPNs
41.2.6. VPN 案例
41.2.7. OpenVPN安全
41.3. pptpd
41.3.1. Server 服务端
41.3.2. Client 客户端
41.3.3. FAQ
41.4. l2tpd - dummy package for l2tpd to xl2tpd transition
41.4.1. Docker 安装 L2TP
41.4.2. Ubuntu
41.4.3. CentOS 8 Stream
41.4.4. Ipsec VPN
41.4.5. FAQ
41.5. IKEv2 VPN Server
41.5.1. OpenVPN Ikev2
41.5.2. IKEv2 VPN Server on Docker
41.5.3. strongswan - IPSec utilities for strongSwan
41.6. openswan - IPSEC utilities for Openswan
41.7. N2N VPN
41.8. Hypersocket VPN
41.9. Tailscale
42. Point to Point
42.1. download
42.1.1. rtorrent - ncurses BitTorrent client based on LibTorrent
42.1.2. mldonkey-server - Door to the 'donkey' network
42.1.3. amule - client for the eD2k and Kad networks, like eMule

1. tc - show / manipulate traffic control settings

1.1. 模拟网络丢包

		
tc qdisc add dev eth0 root netem corrupt 0.2% loss 10%