V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
V2EX  ›  myliyifei  ›  全部回复第 26 页 / 共 42 页
回复总数  826
1 ... 22  23  24  25  26  27  28  29  30  31 ... 42  
烧钱太厉害
2015-02-12 13:04:30 +08:00
回复了 myliyifei 创建的主题 Linux 如何屏蔽 SS 服务器访问大陆的 IP 段?
@ryd994 geoip准确吗? 和ipset的性能比较呢? 下面的文档说ipset用的是Jenkins3,但是搜不到这个



geoip vs ipset
xt_geoip uses the (probably) most efficient format, a (non-compressed) packed blob. Loading one country into the kernel costs as much as the file on disk.

Since ipset does not support arbitrary IPaddr–IPaddr ranges, one would need to approximate that using, for example, multiple Network/Prefixlength entries. Furthermore, if a hash set type is used, you can assume that, by the nature of hashes and/or trees, some buckets remain empty and/or additional metadata is required. The memory footprint with an ipset-based geoip thus is naturally larger. User reports[1] indicate it can become two orders of magnitude higher in certain cases (iptreemap).

xt_geoip's lookup time is O(log2(ranges)), so to lookup an address within 20,000 ranges, at most 15 iterations each with address comparisons (at most 3) are required. ipset uses Jenkins3 for hashing, which has a certain time cost of its own.
2015-02-12 00:20:38 +08:00
回复了 myliyifei 创建的主题 问与答 Iptables 连接状态的理解
来个高手解答下吧
2015-02-11 13:31:47 +08:00
回复了 myliyifei 创建的主题 问与答 Iptables 连接状态的理解
还有个补充
4 像一些构造的异常的TCP数据包,比如XMAS攻击之类的,这些都属于invalid状态吗?没有必要一个个在写了吗

-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,PSH,ACK,URG -j DROP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,ACK,URG -j DROP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -j DROP
-A INPUT -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -j DROP
-A INPUT -p tcp -m tcp --tcp-flags ALL NONE -j DROP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -j DROP
2015-02-11 01:01:36 +08:00
回复了 myliyifei 创建的主题 问与答 求救如何在单网卡的环境下配置 LVS - DR 呢?
哎,没人理我。。。
一般是宽带的问题。。
2015-02-10 23:58:20 +08:00
回复了 abelyao 创建的主题 问与答 深夜求助,网件 4300 到底怎么刷 OpenWrt 啊 T_T
你看一下openwrt 的WIKI,每个机型都有的
@geeklian 我说的是这个 ”朋友是初中教师,“作业题”写成“习题”文章都被撤下了“
2015-02-09 23:56:01 +08:00
回复了 myliyifei 创建的主题 Linode Linode 合租 SS,哪个方案划得来
@dockervps docker如何隔离和分配IO和网络?
@geeklian 真的还是造谣?那不是 “清风不识字,何事乱翻书”
1 ... 22  23  24  25  26  27  28  29  30  31 ... 42  
关于   ·   帮助文档   ·   自助推广系统   ·   博客   ·   API   ·   FAQ   ·   Solana   ·   3137 人在线   最高记录 6679   ·     Select Language
创意工作者们的社区
World is powered by solitude
VERSION: 3.9.8.5 · 28ms · UTC 11:52 · PVG 19:52 · LAX 03:52 · JFK 06:52
♥ Do have faith in what you're doing.