20180704_jeffrey - silenceuncrio/diary GitHub Wiki
0900
review
1000
測一下 M360 上 BGP 學習的 routes 數量與 memory 的消耗量之間的關係來估算最大的學習 routes 數量
1115
以 10K routes 為間距來觀察 M360 消耗掉的 memory
進行完 110K test 後 memory 觀察為
root@M360-P:~# ip route list | grep zebra | wc -l
110000
root@M360-P:~# free -m
total used free shared buffers cached
Mem: 121 113 8 0 1 6
-/+ buffers/cache: 105 16
Swap: 0 0 0
然後進行 120K routes test 到一半時 M360 就自動重開機了
重開機之後 BGP 會重新 learning
root@M360-P:/home/log# ip route list | grep zebra | wc -l
104884
root@M360-P:/home/log# free -m
total used free shared buffers cached
Mem: 121 98 23 0 3 13
-/+ buffers/cache: 81 40
Swap: 0 0 0
1300
sync 一下 code 從 M300 到 M360
先做 apply the iptable mark to DMZ
1325
M360
commit 80ddfed107cf8102fa380ba9913a8e8056129cd1
Refs: [develop], {origin/develop}
Author: jeffrey <[email protected]>
Date: Wed Jul 4 13:22:26 2018 +0800
apply the iptable mark to 'DMZ'
proscend/prosrc/icos/icoslib/dmz/dmzcfg.c | 83 +++++++------------------------
1 file changed, 18 insertions(+), 65 deletions(-)
1335
M360
commit 84bdb953c21fcf1829d50575d60e3d5d200360db
Refs: [develop], {origin/develop}
Author: jeffrey <[email protected]>
Date: Wed Jul 4 13:35:42 2018 +0800
flush credentials first then append the entries we needed
proscend/prosrc/icos/icoslib/pptpd/pptpd.c | 16 +++++++++++++++-
1 file changed, 15 insertions(+), 1 deletion(-)
commit 80ddfed107cf8102fa380ba9913a8e8056129cd1
1340
M360
commit 486fe663612365c1b3510679c7f989981c7b30db
Refs: [develop], {origin/develop}
Author: jeffrey <[email protected]>
Date: Wed Jul 4 13:39:35 2018 +0800
add 'PPTPD_PREROUTING' before 'DmzPreRouting' to let PPTP Server working with 'DMZ'
proscend/prosrc/icos/icoslib/pptpd/pptpd.c | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
1355
M360
commit 42f99e2b95ff3e9c1fd0702151e6804199a3d6f0
Refs: [develop], {origin/develop}
Author: jeffrey <[email protected]>
Date: Wed Jul 4 13:52:12 2018 +0800
all wan ports must be stealth for any port scan
proscend/prosrc/icos/icoslib/bgp/bgp.c | 5 ++++-
proscend/prosrc/icos/icoslib/gre/gre.c | 5 ++++-
proscend/prosrc/icos/icoslib/pptpd/pptpd.c | 9 ++++++---
3 files changed, 14 insertions(+), 5 deletions(-)
1400
M360
commit 4798a097383693382c877e1c45776ab677d5cea2
Refs: [develop], {origin/develop}
Author: jeffrey <[email protected]>
Date: Wed Jul 4 13:56:03 2018 +0800
fine tune 'IP Filter' web page
- remove '<br>' to prevent the page be too high
proscend/prosrc/www/app/feature/ipfilter_summary.html | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
1405
M360
commit 92fb97397f95be106c75156d92a26afd29a56a22
Refs: [develop], {origin/develop}
Author: jeffrey <[email protected]>
Date: Wed Jul 4 14:02:51 2018 +0800
use the '/etc/mcsv' as the default 'hw_mcsv'
proscend/base_fs/default/rootfs/etc/rc.local | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
1620
M360
commit 3a2d8ec3ee819238b0207add4d8e9932be6d7b26
Refs: [develop], {origin/develop}
Author: jeffrey <[email protected]>
Date: Wed Jul 4 16:17:46 2018 +0800
remove the following fields at 'BGP' web page:
- Redistribute RIP routes
- Redistribute OSPF routes
proscend/prosrc/www/app/feature/bgp.html | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
雖然 pptpd 支援多組連線
第一組為 ppp101
但第二組卻是 ppp0
ppp0 Link encap:Point-to-Point Protocol
inet addr:192.168.10.1 P-t-P:192.168.10.3 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1396 Metric:1
RX packets:789 errors:0 dropped:0 overruns:0 frame:0
TX packets:347 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:112448 (109.8 KiB) TX bytes:170525 (166.5 KiB)
ppp101 Link encap:Point-to-Point Protocol
inet addr:192.168.10.1 P-t-P:192.168.10.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1396 Metric:1
RX packets:284 errors:0 dropped:0 overruns:0 frame:0
TX packets:138 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:34098 (33.2 KiB) TX bytes:47043 (45.9 KiB)