[B! Linux] utsuidaiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

utsuidai id:utsuidai

Linuxã«é–¢ã™ã‚‹utsuidaiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

sshã®ãƒãƒ¼ãƒˆã‚’ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®22/tcpã‹ã‚‰å¤‰ãˆã‚‹ã¹ãã‹è«–äº‰ã«ã€çµ‚æ¢ç¬¦ã‚’æ‰“ã¡ã¾ã—ãŸ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
ã¾ãŸé–“ãŒé–‹ãã¾ã—ãŸãŒã€ã™ã¿ã ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š2015#2ã‚’é–‹å‚¬ã—ã¾ã—ãŸã€‚ç™ºè¡¨ã—ã¦ã„ãŸã ã„ãŸ@inaz2ã•ã‚“ã€@yasulibã•ã‚“ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚å½“æ—¥ã®ç™ºè¡¨è³‡æ–™ã¯ä¸Šè¨˜ã®å‹‰å¼·ä¼šãƒ–ãƒã‚°ã‹ã‚‰ãƒªãƒ³ã‚¯ã—ã¦ã„ã¾ã™ã€‚ ä»Šå›žã®ç§ã®ç™ºè¡¨ã¯ã€ã€Œæ”»æ’ƒã‚’ã€Žéš ã™ã€ãƒ»æ”»æ’ƒã‹ã‚‰ã€Žéš ã‚Œã‚‹ã€ã€ã€‚ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã‚’ã™ã‚‹ã¨sshãŒ100å€‹ç¾ã‚Œã‚‹ã€Œsshåˆ†èº«ã®è¡“ã€ãŒãƒ¡ã‚¤ãƒ³(?)ã§ã™ã€‚ å½“åˆã¯ã€ãƒ‘ã‚±ãƒƒãƒˆãƒ˜ãƒƒãƒ€ã‚„ãƒ—ãƒãƒˆã‚³ãƒ«ã®ã™ãé–“ã«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’éš ã—ãŸã‚Šã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚’éš ã™ãªã©ã‚‚è€ƒãˆã¦ã„ãŸã®ã§ã™ãŒâ€¦â€¦ã€‚ã‚ã¾ã‚Šã«ç››ã‚Šã ãã•ã‚“ã«ãªã‚Šãã†ã ã£ãŸã®ã§ã€ã€Œãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã‚’ã„ã‹ã«éš ã‚Œã¦å®Ÿè¡Œã™ã‚‹ã‹ãƒ»ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã‹ã‚‰ã©ã†ã‚„ã£ã¦éš ã‚Œã‚‹ã‹ã€ã¨ã€ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã¨nmapã«çµžã£ã¦ç™ºè¡¨ã—ã¾ã—ãŸã€‚ ç™ºè¡¨è³‡æ–™ ç§ã®ç™ºè¡¨è³‡æ–™ã¯ä»¥ä¸‹ã§ã™ã€‚ (PDF)æ”»æ’ƒã‚’ã€Œéš ã™ã€ã€æ”»æ’ƒã‹ã‚‰ã€Œéš ã‚Œã‚‹ã€ ç™ºè¡¨ãƒŽãƒ¼ãƒˆä»˜ããªã®ã§PDFã§ã™ã€‚ä»¥ä¸‹ã€è½ç©‚ã²ã‚ã„ãªã©ã€‚ ã‚¹ã‚ãƒ£ãƒ³ã™ã‚‹ãƒãƒ¼ãƒˆæ•°ã¨
utsuidai 2015/08/31
security

Linux
ãƒªãƒ³ã‚¯
curlã§ãƒœãƒˆãƒ«ãƒãƒƒã‚¯èª¿æŸ»ã‚’ã™ã‚‹ - 256bitã®æ®ºäººãƒ¡ãƒ‹ãƒ¥ãƒ¼
ã¾ã™ã ã£ãã™ã•ã‚“ãŒ curlã®ã‚¨ãƒ³ãƒˆãƒªæ›¸ã„ã¦ãŸã®ã§ãŠã„ã‚‰ã‚‚1ã¤ã ã‘è¿½è¨˜ã—ã¾ã›ã†ã€‚ Webã‚µã‚¤ãƒˆã®ãƒœãƒˆãƒ«ãƒãƒƒã‚¯èª¿æŸ» ã‚ã‚‹ã‚µã‚¤ãƒˆã§ã‚¢ã‚¯ã‚»ã‚¹ãŒé…ã„ãªãã€ã£ã¦è©±ã«ãªã£ãŸã¨ãã«ã¾ãšå½“ãŸã‚Šã‚’ã¤ã‘ã‚‹ãŸã‚ã«é…ã„éƒ¨åˆ†ã‚’èª¿ã¹ãŸã„ã€‚ ã£ã¦æ™‚ã®curlã®ä½¿ã„æ–¹ã€‚ å®Ÿéš›ã®æ‰‹é † åŸºæœ¬çš„ã«ã¯ã€å‰è¿°ã®ã¾ã™ã ã£ãï¼ˆ@masudakï¼‰ã•ã‚“ã®ã€ã€Œãã®3. ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®å‡ºåŠ›ã‚’åŠ å·¥ã™ã‚‹ã€ã§ã‚ã‚‹ã®ã§ã™ãŒã€è©³ç´°ãªé …ç›®ã‚’è¨å®šã™ã‚‹ã“ã¨ã§å•é¡Œã®åˆ‡ã‚Šåˆ†ã‘ã«ã‚‚ä½¿ç”¨ã§ãã¾ã™ã€‚ å‡ºåŠ›ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆç”¨ã®ãƒ•ã‚¡ã‚¤ãƒ«ã€‚ cat <<'EOF' >/tmp/curl_env.txt url_effective\t\t: %{url_effective}\n http_code\t\t: %{http_code}\n http_connect\t\t: %{http_connect}\n time_total\t\t: %{time_total}\n time_
utsuidai 2014/10/30
linux

curl
ãƒªãƒ³ã‚¯
tcpdump ã‚³ãƒžãƒ³ãƒ‰ã®ä½¿ã„ã‹ãŸã‚’ã¾ã¨ã‚ã¦ã¿ãŸ : sonots:blog
utsuidai 2014/10/30
linux

tcpdump
ãƒªãƒ³ã‚¯
ä½•ã‹æ±ºã‚ãªãã‚ƒé§„ç›®ã§ã™ã‹ã€‚ Linuxã®backlogã«ã¤ã„ã¦
å°‘ã—ã ã‘çªã£è¾¼ã‚“ã è©±ã€‚ ï¼ˆæ›–æ˜§ã•ã¯äººé–“ã®è„³å†…è£œå®Œã«å§”ãã‚‹ã¨ã—ã¦ï½¥ï½¥ï½¥ã€‚ï¼‰ Linuxã«ã¯TCPã®3Wayãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ï¼ˆå³ã¡ã€SYN,SYN/SCK,ACKï¼‰çŠ¶æ…‹ä¿æŒã«é–¢é€£ã—ã¦ã€ æ¬¡ã®ã‚ˆã†ãªãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’æŒã£ã¦ã„ã‚‹ã€‚ net.ipv4.tcp_max_syn_backlog=1024 ä½•ãã‚Œï¼Ÿã£ã¦äººã¯ # sysctl -a | grep tcp ç‰ã®ã‚³ãƒžãƒ³ãƒ‰ã§æŽ¢ã—ã¾ã™ã€‚ # sysctl -a | grep backlogï¼Ÿãã‚Œã˜ã‚ƒãƒŽã‚¤ã‚ºãŒç„¡ã•ã™ãŽã¦é¢ç™½ãï½Ž(ry ã“ã‚Œã¯ã€ã€ŒLinuxãŒSYNã‚’å—ä¿¡ã—ã€SYN/ACKã§å¿œç”ã—ãŸçŠ¶æ…‹ã‚’ã„ãã¤ä¿æŒã™ã‚‹ã‹ã€ã¨ã„ã†ã‚‚ã®ã€‚ é–¾å€¤ã‚’è¶…ãˆã‚‹ã¨ã€Linuxã¯æ–°è¦ã«æŽ¥ç¶šã—ã‚ˆã†ã¨ã™ã‚‹ãƒ›ã‚¹ãƒˆã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆï¼ˆSYNï¼‰ã‚’ç„¡è¦–ã™ã‚‹ã€‚ æœ€è¿‘ã®Linuxã‚’ã€æœ€è¿‘ã®ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ã«ã¨ã‚Šã‚ãˆãšã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã¨ã€ åˆæœŸå€¤ã¯ä¸Šè¨˜ã®ã‚ˆã†ãª1024ã¨ã‹è¨€ã†æ•°å€¤ã«ãªã£ã¦ã„ã‚‹ã¨æ€ã†ã€‚ åˆ©ç”¨
utsuidai 2014/10/30
Linux
ãƒªãƒ³ã‚¯
ã©ã†ã—ã¦ãƒ¡ãƒ¢ãƒªã¯ã‚¹ãƒ¯ãƒƒãƒ—ã™ã‚‹ã®ã‹ï¼ï¼Ÿ
ã“ã‚“ã«ã¡ã¯ã€‚æ–Žè—¤ã§ã™ã€‚ æœ€è¿‘ã€æ–°ã—ã„ã‚¹ã‚ãƒ¼æ¿ãŒæ¬²ã—ã„ãªã¨æ€ã£ã¦ã„ã¾ã™ã€‚ç¾åœ¨ä½¿ã£ã¦ã„ã‚‹OGASAKAã®æ¿ã¯5å¹´ç›®ã«å…¥ã‚Šã€ãƒ¡ãƒ¼ã‚«ãƒ¼ã‹ã‚‰ã“ã‚Œä»¥ä¸Šã¯ãƒãƒ¥ãƒ¼ãƒ³ãƒŠãƒƒãƒ—(ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹)ã¯ã§ããªã„ã‚ˆã€ã¨è¨€ã‚ã‚Œã¦ã—ã¾ã„ã¾ã—ãŸã€‚ã‚‚ã—ã€æ¬¡ã«è²·ã†ãªã‚‰ã€ã‚¹ãƒŽãƒ¼ãƒœãƒ¼ãƒ€ãƒ¼ã®äººã¨ä¸€ç·’ã«ãƒ‘ã‚¦ãƒ€ãƒ¼ã«é£›ã³è¾¼ã¿ã‚„ã™ã„ã‚»ãƒŸãƒ•ã‚¡ãƒƒãƒˆã‚¿ã‚¤ãƒ—ãŒè‰¯ã„ã®ã‹ãªã¨è€ƒãˆã¦ã„ã¾ã™ã€‚çš†ã•ã‚“ã®ã‚ªã‚¹ã‚¹ãƒ¡ã€ãœã²æ•™ãˆã¦ãã ã•ã„ã€‚ ã•ã¦ã€ä»Šæ—¥ã¯Linux Kernelä¸Šã§ã®ãƒ¡ãƒ¢ãƒªç®¡ç†ã€ç‰¹ã«ãƒšãƒ¼ã‚¸å›žåŽ(Page Reclaim)ã¨ã‚¹ãƒ¯ãƒƒãƒ—ã«çµžã‚Šã€ã€Œã‚¹ãƒ¯ãƒƒãƒ—ã®ç†ç”±ã€ã€Œãƒšãƒ¼ã‚¸ã‚’å›žåŽã™ã‚‹ä»•çµ„ã¿ã€ãã—ã¦ã€Œã‚¹ãƒ¯ãƒƒãƒ—ã®æ§˜åã‚’è¦³å¯Ÿã™ã‚‹ã€ã®3ç‚¹ã«åˆ†ã‘ã¦ãŠè©±ã—ã—ã¾ã™ã€‚ã€Œã‚¹ãƒ¯ãƒƒãƒ—ã™ã‚‹ã®ãŒæ°—æŒã¡æ‚ªã„ã€ã¨è€ƒãˆã¦ã„ã‚‹æ–¹ã¯å°‘ãªããªã„ã¨æ€ã„ã¾ã™ã—ã€ç§ã‚‚ãã†è€ƒãˆã¦ã„ãŸæ™‚æœŸãŒã‚ã‚Šã¾ã—ãŸã€‚ã—ã‹ã—ã€ãã‚Œã¯æœ¬å½“ã«æ‚ªã„äº‹ãªã®ã‹ã€ä»Šå›žæŽ˜ã‚Šä¸‹ã’ã¦è¡Œãã¾ã™ã€‚ â€»ä¸»ãªå¯¾è±¡Kernelã¯2.6.32(Red Ha
utsuidai 2014/01/16
ã‚ã‹ã‚Šã‚„ã™ãƒ¼ã„

linux

swap
ãƒªãƒ³ã‚¯
sysã®CPUä½¿ç”¨çŽ‡ãŒé«˜ã„å ´åˆã«ãã®å†…è¨³ã‚’èª¿ã¹ã‚‹æ–¹æ³• - ablog
OSãƒ¬ãƒ™ãƒ«ã§ sys ã®CPUä½¿ç”¨çŽ‡ãŒé«˜ã„å ´åˆã« perf*1 ã‚’ä½¿ã£ã¦ã€ä½•ã®å‡¦ç†ã®å‰²åˆãŒé«˜ã„ã‹èª¿ã¹ã‚‹æ–¹æ³•ã§ã™ã€‚ perf ã¯ ç‰¹å®šã®ãƒ—ãƒã‚»ã‚¹ã ã‘ã§ãªãOSå…¨ä½“ã®çµ±è¨ˆã‚’è¦‹ã‚Œã‚‹ ã‚«ãƒ¼ãƒãƒ«ï¼ˆsysï¼‰ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼ï¼ˆuserï¼‰ã®ä¸¡æ–¹ã‚’è¦‹ã‚Œã‚‹ ã¨ã“ã‚ãŒéžå¸¸ã«ä¾¿åˆ©ã ã¨æ€ã†*2ã€‚ æº–å‚™ ã²ãŸã™ã‚‰ write ã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«ã‚’ç™ºè¡Œã—ç¶šã‘ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½œæˆã™ã‚‹ $ cat write_loop.c #include <unistd.h> int main(void) { while(1) { write(1, "foo\n", 4); } } ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã™ã‚‹ $ gcc write_loop.c -o write_loop å®Ÿè¡Œæ¨©é™ã‚’ä»˜ä¸Žã™ã‚‹ $ chmod u+x write_loop æ¤œè¨¼ ã²ãŸã™ã‚‰writeã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«ã‚’ç™ºè¡Œã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å®Ÿè¡Œã™ã‚‹ $ ./write_loop > /dev/null
utsuidai 2013/12/09
cpu

Linux

Performance

perf
ãƒªãƒ³ã‚¯
ç§ãŒä»–äººã®ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‹ã‚‰å¦ã‚“ã ã“ã¨ | Yakst
ç§ã¯ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®å¤§ãƒ•ã‚¡ãƒ³ã§ã€ä»–äººã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‹ã‚‰é¢ç™½ã„æ–¹æ³•ã‚’å¦ã¶ã®ãŒå¤§å¥½ãã ã€‚æœ€è¿‘ã€SSHã‚µãƒ¼ãƒã®2è¦ç´ èªè¨¼ã‚’ç°¡å˜ã«ã™ã‚‹ãŸã‚ã®authy-sshã‚¹ã‚¯ãƒªãƒ—ãƒˆã«å‡ºä¼šã£ãŸã€‚ã“ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆç¾¤ã‚’è¦‹ã¾ã‚ã—ã¦ã„ã¦ã€ã¿ã‚“ãªã¨å…±æœ‰ã—ãŸã„ãŸãã•ã‚“ã®ã‚¯ãƒ¼ãƒ«ãªã“ã¨ã‚’è¦‹ã¤ã‘ãŸã€‚ å‡ºåŠ›ã«è‰²ä»˜ã‘ã™ã‚‹ å‡ºåŠ›æ–‡å—åˆ—ã‚’ã€æˆåŠŸã—ãŸæ™‚ã¯ç·‘ã«ã€å¤±æ•—ã—ãŸæ™‚ã¯èµ¤ã«ã€è¦å‘Šã¯é»„è‰²ã«è‰²ã¥ã‘ã—ãŸã„ã¨æ€ã†ã“ã¨ã¯ãŸãã•ã‚“ã‚ã‚‹ã ã‚ã†ã€‚ NORMAL=$(tput sgr0) GREEN=$(tput setaf 2; tput bold) YELLOW=$(tput setaf 3) RED=$(tput setaf 1) function red() { echo -e "$RED$*$NORMAL" } function green() { echo -e "$GREEN$*$NORMAL" } function yellow() { e
utsuidai 2013/08/21
bash

shell

shellscript

linux
ãƒªãƒ³ã‚¯
kernelãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°
linuxã‚µãƒ¼ãƒã®OSå…¨ä½“ã«åŠ¹ãã‚«ãƒ¼ãƒãƒ«ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ç®‡æ‰€ã¨ ãã®è¨å®šå€¤ã€ã¾ãŸãã®ç†ç”±ã‚’ã¾ã¨ã‚ã¦ãŠãã€‚ ã‚ãã¾ã§è‡ªåˆ†ã®ç’°å¢ƒã§ã¯ã“ã†ã—ãŸã€ã¨ã„ã†ã ã‘ã§ã‚ã‚Šã€ æä¾›ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã”ã¨ã«æ¤œè¨ŽãŒå¿…è¦ã§ã‚ã‚‹ã€‚ ã©ã“ã‚’ã©ã†å¤‰æ›´ã™ã‚‹ã®ã‹ã€ã¾ãŸã¯å¤‰ãˆãªã„ã®ã‹ã€ãã®åˆ¤æ–ææ–™ã«ã¯ãªã‚‹ã ã‚ã†ã€‚ â€»ãƒ¦ãƒ¼ã‚¶å˜ä½ã§ã‚·ã‚¹ãƒ†ãƒ ãƒªã‚½ãƒ¼ã‚¹ã«åˆ¶é™ã‚’ã‹ã‘ã‚‹å ´åˆã‚’ã“ã¡ã‚‰ã‚’å‚ç…§ã—ã¦ã»ã—ã„ã€‚ ä»¥ä¸‹ã¯/etc/sysctl.conf ã§è¨å®šã™ã‚‹ã‚‚ã®ã¨ã™ã‚‹ã€‚ â— å¤§è¦æ¨¡ã‚µã‚¤ãƒˆç”¨ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚° kernel.pid_max å‹•ä½œï¼špidã®æœ€å¤§æ•° è¨å®šå€¤ï¼š131072 ç†ç”±ï¼špidã‚’æž¯æ¸‡ã•ã›ãªã„ vm.max_map_count å‹•ä½œï¼šmmapã‚„mallocæ™‚ã«ãƒ¡ãƒ¢ãƒªã‚’ä»®æƒ³ç©ºé–“ã«ãƒžãƒƒãƒ”ãƒ³ã‚°ã§ãã‚‹æœ€å¤§ãƒšãƒ¼ã‚¸æ•° è¨å®šå€¤ï¼š300000 ç†ç”±ï¼šãƒžãƒƒãƒ”ãƒ³ã‚°ã§ããªããªã‚‹äº‹æ…‹ã‚’é˜²ã net.core.somaxconn å‹•ä½œï¼šæŽ¥ç¶š(ã‚½ã‚±ãƒƒãƒˆ)ã‚ãƒ¥ãƒ¼ã®
utsuidai 2013/07/30
Linux

ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°

kernel
ãƒªãƒ³ã‚¯
2013å¹´7æœˆ18æ—¥ ã€Œæ±šã„è¨€è‘‰ã¯ã‚„ã‚ã¦ï¼ã€å¥³æ€§é–‹ç™ºè€…ã®è‹¦è¨€ã«Linuså€è¿”ã— | gihyo.jp
ã‚‚ã¯ã‚„æœ¬ã‚³ãƒ¼ãƒŠãƒ¼ã¯"Linusæš´è¨€éŒ²"ã¨é™°ã§å‘¼ã°ã‚Œã¦ã„ã‚‹ã‚ˆã†ã ãŒã€æˆ‘ã‚‰ãŒLinus TorvaldsãŒã¾ãŸã¾ãŸã‚«ãƒ¼ãƒãƒ«é–‹ç™ºãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã€ŒLKML.orgã€ã§ã®ç™ºè¨€ã§ç‰©è°ã‚’é†¸ã—ã¦ã„ã‚‹ã€‚ã¨ã„ã£ã¦ã‚‚ä»Šå›žã®å ´åˆã€ã©ã¡ã‚‰ã‹ã¨è¨€ã†ã¨Linusã¯å·»ãè¾¼ã¾ã‚ŒãŸæ„ŸãŒå¼·ã„ã‹ã‚‚ã—ã‚Œãªã„ã€‚ ã‚³ãƒˆã®ç™ºç«¯ã¯LKMLã«7æœˆ15æ—¥ä»˜ã§ãƒã‚¹ãƒˆã•ã‚ŒãŸIntelã®å¥³æ€§é–‹ç™ºè€… Sarah Sharpã‹ã‚‰ã®ãƒ¡ãƒ¼ãƒ«ã§ã‚ã‚‹ã€‚ LKML: Sarah Sharp: Re: [ 00/19] 3.10.1-stable review å½¼å¥³ã¯ã€LinusãŒã‚«ãƒ¼ãƒãƒ«ãƒ¡ãƒ³ãƒ†ãƒŠãƒ¼ã®å¤å‚"GKH"ã“ã¨Greg Kroah-Heartmanã«å¯¾ã—"door-matï¼ˆãƒ‰ã‚¢ãƒžãƒƒãƒˆã€è¸ã¿ã¤ã‘ã‚‰ã‚Œã¦ã‚‚ã—ã‚‡ã†ãŒãªã„ã»ã©ã®ãƒœã‚±ï¼‰"ã¨å‘¼ã‚“ã ã“ã¨ã«ã²ã©ãç«‹è…¹ã—ã€ã€Œâ ã“ã‚Œã¯ã‚‚ã†æš´åŠ›ã§ã™! ã‚«ãƒ¼ãƒãƒ«ã®è³ªã®å‘ä¸Šã«ã€ã“ã‚“ãªæ±šã„è¨€è‘‰ã¯å¿…è¦ã‚ã‚Šã¾ã›ã‚“!! ã¨ã¦ã‚‚å—ã‘å…¥ã‚ŒãŒãŸ
utsuidai 2013/07/18
Linux

linus
ãƒªãƒ³ã‚¯
ãƒ‡ãƒ¼ãƒ¢ãƒ³ã®èµ·å‹•ãƒ»çµ‚äº†ã«ã¯serviceã‚³ãƒžãƒ³ãƒ‰ã‚’åˆ©ç”¨ã—ã‚ˆã†
æ–Žè—¤ã§ã™ã€‚ã“ã‚“ã«ã¡ã¯ã€‚ ä»Šæ—¥ã¯ã€ãƒ‡ãƒ¼ãƒ¢ãƒ³ã®èµ·å‹•ãƒ»çµ‚äº†ã«éš›ã—ã¦ã¯serviceã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã£ãŸæ–¹ãŒã„ã„ã‚ˆã€ã¨ã„ã†ãŠè©±ã§ã™ã€‚ â€»CentOS 6.4 (x86_64) ã§ãƒ†ã‚¹ãƒˆã—ã¦ã„ã¾ã™ã€‚å°šã€ç‰¹è¨˜ãŒã‚ã‚‹æ‰€ã‚’é™¤ãã¾ã™ã€‚ ãƒ‡ãƒ¼ãƒ¢ãƒ³ã®èµ·å‹•ãƒ»çµ‚äº†ã«ã¯å¤§ãã2æ‰‹ Linuxã€ç‰¹ã«RedHat, CentOS, Fedora, Ubuntu[1]ãªã©ã§ã¯ã€ãƒ‡ãƒ¼ãƒ¢ãƒ³ã®èµ·å‹•ãƒ»çµ‚äº†ã®åˆ¶å¾¡ã®éš›ã«ã€å¤§ããåˆ†ã‘ã¦æ¬¡ã®2ã¤ã®æ–¹æ³•ã‚’ç”¨ã„ã‚‹äº‹ãŒã§ãã¾ã™ã€‚ "/etc/init.d/"é…ä¸‹ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆ(ä»¥ä¸‹ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆ)ã‚’ç›´æŽ¥å®Ÿè¡Œã™ã‚‹ "service"ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ ä¸€è¦‹ã€åŒã˜äº‹ã‚’ã‚„ã£ã¦ã„ã‚‹ã‚ˆã†ã«æ€ãˆã‚‹ã®ã§ã™ãŒã€å®Ÿã¯é•ã†éƒ¨åˆ†ãŒã‚ã‚Šã¾ã™ã€‚ãã‚Œã¯ã€èµ·å‹•ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒæ‰±ã†ç’°å¢ƒå¤‰æ•°ãŒé•ã†ã®ã§ã™ã€‚æ¬¡ã®ç¯€ã§ã€æ¤œè¨¼ã—ã¦ã¿ã¾ã™ã€‚ æ‰±ã†ç’°å¢ƒå¤‰æ•°ãŒé•ã† ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’ç›´æŽ¥å®Ÿè¡Œã™ã‚‹å ´åˆã¯ã€å®Ÿè¡Œæ™‚ã®éš›ã®ç’°å¢ƒå¤‰æ•°ã‚’ãã®ã¾ã¾åˆ©ç”¨ã—ã¾ã™ã€‚ä¸€æ–¹ã€serv
utsuidai 2013/06/26
ã‚³ãƒžãƒ³ãƒ‰

Linux

CentOS

service

daemon

bash

tips
ãƒªãƒ³ã‚¯
ã‚ãªãŸã®å¤§é‡é…ä¿¡ã‚µãƒ¼ãƒip_conntrack æº¢ã‚Œã¦ã„ã¾ã›ã‚“ã‹ï¼Ÿ | ãƒ–ãƒã‚° | æ ªå¼ä¼šç¤¾ã‚¤ãƒ¼ãƒ»ã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ã‚·ãƒ¼
ip_conntrackã‚’è¨å®šã™ã‚‹ç†ç”± ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ãƒ„ãƒ¼ãƒ«ã§ã‚ã‚‹iptablesã¯ã€ãƒ‘ã‚±ãƒƒãƒˆã‚’è§£æžã™ã‚‹ã¨ãã«ip_conntrackã¨ã„ã†ãƒ•ã‚¡ã‚¤ãƒ«ã«ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°æƒ…å ±ã‚’è¨˜éŒ²ã—ã¾ã™ã€‚ ip_conntrackã«ã¯ã€æœ€å¤§ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°æ•°ãŒã‚ã‚Šã€ãã‚Œã‚’ã‚ªãƒ¼ãƒãƒ¼ã™ã‚‹ã¨æ–°è¦ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’å¼¾ã„ã¦ã—ã¾ã£ã¦ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã®åŠ£åŒ–ã‚’æ‹›ãã¾ã™ã€‚ /var/log/messageã«ã“ã®ã‚ˆã†ãªãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒå‡ºã¦ã„ãŸã‚‰ã€ip_conntrackãŒæº¢ã‚Œã¦ã„ã‚‹çŠ¶æ…‹ã§ã™ã€‚ å¤§é‡ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚’æŒããƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã‚„ã‚ãƒ£ãƒƒã‚·ãƒ¥ãªã©ã®ç›®çš„ã‚’æŒã£ãŸLinuxãƒžã‚·ãƒ³ã§ã€iptablesã‚’ä½¿ã£ã¦ã„ã‚‹ã¨ãã«ã¯ã€ip_conntrackã®æœ€å¤§ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°æ•°ã‚’å¿˜ã‚Œãšã«è¨å®šã—ã¦ãŠãã¾ã—ã‚‡ã†ã€‚ ã“ã“ã§ã¯ã€æ‰‹å…ƒã®ãƒžã‚·ãƒ³CentOS 5ã¨6ã§è¨å®šã‚’ã—ã¦ã„ãã¾ã™ã€‚ æ¤œè¨¼ç’°å¢ƒ CentOS 6.3(64bit) CentOS 5.8(
utsuidai 2013/06/14
iptables

Linux

performance

Network

ip_conntrack

CentOS
ãƒªãƒ³ã‚¯
curlã‚³ãƒžãƒ³ãƒ‰ã®ä¾¿åˆ©ãªã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŸã¡ - ã‚«ã‚¤ãƒ¯ãƒ¬ã®å¤§å†’é™º Third
curlã‚³ãƒžãƒ³ãƒ‰ã®ãŠè©±ã—ã€‚cURLã£ã¦æ›¸ãã‚“ã§ã™ãªã€‚ å¯¾å‘ã®ã‚µãƒ¼ãƒã¨ã®ã‚„ã‚Šå–ã‚Šã‚’è¿½ã„ãŸã„ã¨ãã«ã€é€šä¿¡å†…å®¹ã‚’è¦‹ãŸã„ã‚ã‘ã§ã™ãŒã€ãã†ã„ã†ã¨ãã«curlã‚³ãƒžãƒ³ãƒ‰ã¯ã¡ã‚‡ãã¡ã‚‡ãä¾¿åˆ©ãªã®ã§ã€æ›¸ã„ã¦ã¿ã‚‹ã€‚ è¦ã¯tcpdumpã¨ã‹ä½¿ã£ã¦ãƒ‘ã‚±ãƒƒãƒˆã¾ã§è¦‹ã‚‹å¿…è¦ã¯ãªã„ã‚“ã ã‘ã©ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã¨ã‹ã¯è¦‹ãŸã„ã¨ãã«ä¾¿åˆ©ã ã‚ˆã£ã¦è©±ã—ã€‚ ãã®1. æ™®é€šã«ä½¿ã† $ curl 'http://www.normal.com' <<ä¸ç•¥>> var k=/^http:/i;if(k.test(g)&&google.https()){google.ml(new Error("GLMM"),false,{src:g});delete i[f];return}d.src=g;h.li=f+1},lc:[],li:0,Toolbelt:{},y:{},x:function(a,b){google.y[a.id]=[a,b];return
utsuidai 2013/05/20
Linux

curl
ãƒªãƒ³ã‚¯
Deprecated Linux networking commands and their replacements
In my article detailing the command line utilities available for configuring and troubleshooting network properties on Windows and Linux, I mentioned some Linux tools that, while still included and functional in many Linux distributions, are actually considered deprecated and therefore should be phased out in favor of more modern replacements. Specifically, the deprecated Linux networking commands
utsuidai 2013/05/08
ip addrã ã‘ã¯ã‚ˆãä½¿ã†ã‘ã©ãªâ€¦

Linux

network

command

ã‚³ãƒžãƒ³ãƒ‰
ãƒªãƒ³ã‚¯
iptablesã§é‰„å£ï¼Ÿã®å®ˆã‚Šã‚’å®Ÿç¾ã™ã‚‹3ã¤ã®Tipsï½œTechRacho by BPSæ ªå¼ä¼šç¤¾
iptablesã§ã‚µãƒ¼ãƒã‚’å®ˆã‚‹ã¨ãã«çŸ¥ã£ã¦ãŠãã¨è‰¯ã„ã“ã¨ã‚’3ã¤ç´¹ä»‹ã—ã¾ã™ 1. æŽ¥ç¶šå›žæ•°ã‚’åˆ¶é™ã™ã‚‹(IPã‚¢ãƒ‰ãƒ¬ã‚¹ã”ã¨) hash_limitã‚’ä½¿ã„ã¾ã™ ã“ã‚Œã«ã‚ˆã‚Šç‰¹å®šãƒ›ã‚¹ãƒˆã‹ã‚‰ã®å¤§é‡ã‚¢ã‚¯ã‚»ã‚¹ã€DoSæ”»æ’ƒã‚’ç·©å’Œã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ ä¾‹ 2. æŽ¥ç¶šå›žæ•°ã‚’åˆ¶é™ã™ã‚‹(ã‚µãƒ¼ãƒ“ã‚¹ã”ã¨) limitã‚’ä½¿ã£ã¦åˆ¶é™ã—ã¾ã™ ã“ã‚Œã«ã‚ˆã‚Šå¤šæ•°ã®ãƒ›ã‚¹ãƒˆã‹ã‚‰ã®æ”»æ’ƒã€DDoSæ”»æ’ƒã‚’ç·©å’Œã—ã¾ã™ limitã‚’ä½¿ã£ãŸåˆ¶é™ã¯å…¨ãƒ›ã‚¹ãƒˆãŒç‰ã—ãåˆ¶é™ã‚’å—ã‘ã‚‹ãŸã‚ã€sshç‰ã«è¨å®šã™ã¹ãã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ï¼ˆæ”»æ’ƒã‚’å—ã‘ã¦ã„ã‚‹é–“ã¯è‡ªåˆ†ãŸã¡ã‚‚åˆ¶é™ã•ã‚Œã‚‹ãŸã‚ï¼‰ Webã‚µãƒ¼ãƒãŒå¤§é‡ã‚¢ã‚¯ã‚»ã‚¹ã§è½ã¡ãã†ãªå ´åˆã¯ä½¿ãˆã‚‹ã‚“ã˜ã‚ƒãªã„ã§ã—ã‚‡ã†ã‹ï¼Ÿ ä¾‹ 3. æŽ¥ç¶šIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’é™å®šã™ã‚‹ IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®å›½åˆ¥å‰²ã‚Šå½“ã¦ã‚’APNICç‰ã‹ã‚‰å–å¾—ã—ã¦ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½œã‚Šã¾ã™ ã“ã®æ‰‹ã®ãƒ«ãƒ¼ãƒ«ã¯é•·ããªã‚‹ã®ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼å®šç¾©ãƒã‚§ã‚¤ãƒ³ã«ã—ãŸã»ã†ãŒè¦‹ã‚„ã™ããªã‚Šã¾ã™ ä¾‹ ã‚ã¨ã¯ã“ã‚“ãªæ„Ÿã˜ã®ã‚¹ã‚¯
utsuidai 2013/05/01
iptables

linux
ãƒªãƒ³ã‚¯
Linuxã‚«ãƒ¼ãƒãƒ«3.9ãƒªãƒªãƒ¼ã‚¹ã€SSDã‚’ã‚ãƒ£ãƒƒã‚·ãƒ¥ã¨ã—ã¦åˆ©ç”¨ã™ã‚‹ã€Œdm-cacheã€ã‚„Andcroidã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚¿æ©Ÿèƒ½ãªã©ã‚’æ–°ãŸã«æè¼‰ | OSDN Magazine
Linus Torvaldsæ°ã¯4æœˆ29æ—¥ã€Linuxã‚«ãƒ¼ãƒãƒ«3.9ã®ãƒªãƒªãƒ¼ã‚¹ã‚’ç™ºè¡¨ã—ãŸã€‚SSDã‚’ãƒãƒ¼ãƒ‰ãƒ‡ã‚£ã‚¹ã‚¯ã®ã‚ãƒ£ãƒƒã‚·ãƒ¥ã¨ã—ã¦åˆ©ç”¨ã§ãã‚‹ã€Œdm-cacheã€ã‚„ã€æ–°ã—ã„çœé›»åŠ›ãƒ¢ãƒ¼ãƒ‰ã®è¿½åŠ ã€Androidç’°å¢ƒã®ã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ç’°å¢ƒãªã©ãŒåŠ ã‚ã£ã¦ã„ã‚‹ã€‚ 2æœˆå¾ŒåŠã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸLinuxã‚«ãƒ¼ãƒãƒ«3.8ã‹ã‚‰10é€±é–“ã§ã®æœ€æ–°ç‰ˆãƒªãƒªãƒ¼ã‚¹ã¨ãªã‚Šã€Brtfsã§ã®RAID 5/6ã‚µãƒãƒ¼ãƒˆã‚„SSDã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ‡ãƒã‚¤ã‚¹ã‚µãƒãƒ¼ãƒˆã€Androidã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚¿æ©Ÿèƒ½ã€ã„ãã¤ã‹ã®æ–°ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‚µãƒãƒ¼ãƒˆã®è¿½åŠ ã€çœé›»åŠ›æ©Ÿèƒ½ã®å¼·åŒ–ãªã©ãŒç‰¹å¾´ã¨ãªã‚‹ã€‚ Brtfsã§ã¯å¾“æ¥RAID 0/1ã®ã‚µãƒãƒ¼ãƒˆã®ã¿ãŒè¡Œã‚ã‚Œã¦ã„ãŸãŒã€ä»Šå›žæ–°ãŸã«RAID 5ãŠã‚ˆã³6ã®å®Ÿé¨“çš„ã‚µãƒãƒ¼ãƒˆãŒåŠ ã‚ã£ãŸã€‚ãŸã ã—ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã‚»ãƒ¼ãƒ•ã§ã¯ãªã„ãŸã‚ã€ãƒ†ã‚¹ãƒˆç›®çš„ã§ã®å®Ÿè£…ã¨ã„ã†ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã¨ã®ã“ã¨ã€‚ã¾ãŸã€ã‚¹ãƒŠãƒƒãƒ—ã‚·ãƒ§ãƒƒãƒˆæƒ…å ±ã‚’æ„è˜ã—ãŸãƒ‡ãƒ•ãƒ©ã‚°ï¼ˆSnapshot-aware
utsuidai 2013/04/30
ã‚‚ã†3.9ãŒã€‚

Linux
ãƒªãƒ³ã‚¯
1