add do not use 10.0.0.0 privae lan in GCP

This commit is contained in:
2019-08-16 10:36:54 +08:00
parent 2a946fe47b
commit 99aa15344f
111 changed files with 6387 additions and 2693 deletions

View File

@@ -0,0 +1,107 @@
---
title: "[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP"
date: 2019-08-16T10:18:06+08:00
noSummary: false
featuredImage: "https://h.cowbay.org/images/post-default-8.jpg"
categories: ['筆記']
tags: ['vpn','wireguard']
author: "Eric Chang"
---
最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立
想說再打個VPN tunnel 來當跳板連 ptt 好了
因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境
本來是在vultr 的VPS上面建立這個tunnel
但是那台VPS連去ptt 很頓,卡卡的
所以改用google cloud platform 的free tier 來做
反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態
<!--more-->
GCP的申請、設定就不多說了
這次碰到的怪異現象是當wireguard 都已經設定好client 也都連上了之後
會發生client 開不了 www.google.com.tw / youtube / google map 等等google 服務的狀況
VPN確定是通的我可以在client 這邊連上其他網站但就是google的服務開不了
後來不知道是怎麼樣突然靈機一動因為一開始設定server/peer 都是用 10.0.0.x/24 的IP
想說會不會是因為這個也是google cloud platform 預設的LAN IP 網段,所以沒辦法繞出去
看一下設定,確認一下這個想法對不對,果然是這樣沒錯
![](https://i.imgur.com/XkrH4Pa.png)
解決方法很簡單要不修改VPS的內部IP要不修改wireguard的設定
當然我是選擇改wireguard ,因為簡單嘛!
修改後的configuration 長這樣
```
[Interface]
Address = 192.168.10.1/24
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o ens4 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o ens4 -j MASQUERADE
ListenPort = 12000
PrivateKey = E..........................E
#OFFICE DESKTOP
[Peer]
PublicKey = W...........................W
AllowedIPs = 192.168.10.2/32
#ANDROID
[Peer]
PublicKey = w............................w
AllowedIPs = 192.168.10.3/32
#HOME
[Peer]
PublicKey = 2.........................................2
AllowedIPs = 192.168.10.4/32
```
重起wireguard (或者說重起 wg0 這個interface)之後client 開google 網頁就正常了
client 這邊也是簡單設定一下把要透過跳板出去的IP 改走wireguard 出去
底下這個,就是把往台大(140.112.0.0) 和 term.ptt.cc(104.31.0.0)的封包改走wireguard
```
[Interface]
PrivateKey = e............................e
Address = 192.168.10.2/24
DNS = 8.8.8.8
MTU = 1420
[Peer]
PublicKey = q...........................q
Endpoint = public_ip_of_gcp:12000
AllowedIPs = 140.112.0.0/16,104.31.0.0/16,192.168.10.1/32
PersistentKeepalive = 25
```
然後看一下路由對不對
```
2019-08-16 10:34:21 [cch@hq34 ~]$ traceroute term.ptt.cc
traceroute to term.ptt.cc (104.31.231.9), 30 hops max, 60 byte packets
1 192.168.10.1 (192.168.10.1) 191.826 ms 192.556 ms 192.678 ms
2 * * *
3 * * *
4 * * *
5 104.31.231.9 (104.31.231.9) 203.918 ms 203.982 ms 203.979 ms
2019-08-16 10:34:33 [cch@hq34 ~]$
```
果然是走wireguard (192.168.10.1) 出去 ,跳板成功!

View File

@@ -0,0 +1,293 @@
---
title: "[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard"
date: 2019-08-13T15:50:31+08:00
noSummary: false
featuredImage: "https://h.cowbay.org/images/post-default-10.jpg"
categories: ['筆記']
tags: ['vpn','ubuntu','wireguard']
author: "Eric Chang"
---
因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN
雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了
完全沒辦法了解當時設計的邏輯造成後續debug 困難
可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌
之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點
這次試試看躲在gateway後面看看能不能建立多點的VPN環境
<!--more-->
#### every node
##### enable ip_forward
edit /etc/sysctl.conf
add below line in the end of the file
```
net.ipv4.ip_forward=1
```
##### install wireguard
```
sudo apt-get install libmnl-dev linux-headers-$(uname -r) build-essential make git libelf-dev
git clone https://git.zx2c4.com/WireGuard
cd WireGuard/src/
make
sudo make install
```
or
**via apt**
```
sudo add-apt-repository ppa:wireguard/wireguard
sudo apt install wireguard
```
##### create wireguard service file
add /etc/systemd/system/multi-user.target.wants/wg-quick@wg0.service
```
[Unit]
Description=WireGuard via wg-quick(8) for %I
After=network-online.target nss-lookup.target
Wants=network-online.target nss-lookup.target
Documentation=man:wg-quick(8)
Documentation=man:wg(8)
Documentation=https://www.wireguard.com/
Documentation=https://www.wireguard.com/quickstart/
Documentation=https://git.zx2c4.com/WireGuard/about/src/tools/man/wg-quick.8
Documentation=https://git.zx2c4.com/WireGuard/about/src/tools/man/wg.8
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/bin/wg-quick up %i
ExecStop=/usr/bin/wg-quick down %i
Environment=WG_ENDPOINT_RESOLUTION_RETRIES=infinity
[Install]
WantedBy=multi-user.target
```
#### Node A
##### create wireguard private/public key
```
wg genkey > /etc/wireguard/private
cat /etc/wireguard/private | wg pubkey > /etc/wireguard/public
```
##### /etc/wireguard/wg0.conf
watch the interface name , must meets the interface name in system , ens18 is the default value of my test VM
```
[Interface]
Address = 10.0.0.40/24
ListenPort = 12000
PrivateKey = private key of node A
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE
[Peer]
PublicKey = public key of node B
AllowedIPs = 10.0.0.28/32,192.168.28.0/24
Endpoint = 2.2.2.2:12000
PersistentKeepalive = 15
[Peer]
PublicKey = public key of node C
AllowedIPs = 10.0.0.80/32,192.168.80.0/24
Endpoint = 3.3.3.3:12000
PersistentKeepalive = 15
```
#### Node B (peer 1)
##### create wireguard private/public key
```
wg genkey > /etc/wireguard/private
cat /etc/wireguard/private | wg pubkey > /etc/wireguard/public
```
##### /etc/wireguard/wg0.conf
watch the interface name , must meets the interface name in system , ens18 is the default value of my test VM
```
[Interface]
ListenPort = 12000
PrivateKey = private key of node B
Address = 10.0.0.28/24
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE
[Peer]
PublicKey = public key of node A
AllowedIPs = 10.0.0.40/32,192.168.40.0/24
Endpoint = 1.1.1.1:12000
PersistentKeepalive = 15
[Peer]
PublicKey = public key of node C
AllowedIPs = 10.0.0.80/32,192.168.80.0/24
Endpoint = 3.3.3.3:12000
PersistentKeepalive = 15
```
#### Node C (peer 2)
##### create wireguard private/public key
```
wg genkey > /etc/wireguard/private
cat /etc/wireguard/private | wg pubkey > /etc/wireguard/public
```
#### /etc/wireguard/wg0.conf
watch the interface name , must meets the interface name in system , ens18 is the default value of my test VM
```
[Interface]
ListenPort = 12000
PrivateKey = private key of node C
Address = 10.0.0.80/24
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE
[Peer]
PublicKey = public key of node A
AllowedIPs = 10.0.0.40/32,192.168.40.0/24
Endpoint = 1.1.1.1:12000
PersistentKeepalive = 15
[Peer]
PublicKey = public key of node B
AllowedIPs = 10.0.0.28/32,192.168.28.0/24
Endpoint = 2.2.2.2:12000
PersistentKeepalive = 15
```
##### Test
Reboot all nodes , check if interface wg0 up by default or not
use command wg show to check status
for example , this is result of wg show in node C
```
root@sdvpn:~# wg show
interface: wg0
public key: public key of Node C
private key: (hidden)
listening port: 12000
peer: public key of node A
endpoint: 1.1.1.1:12000
allowed ips: 10.0.0.40/32, 192.168.40.0/24
latest handshake: 49 seconds ago
transfer: 9.77 KiB received, 9.73 KiB sent
persistent keepalive: every 15 seconds
peer: public key of node B
endpoint: 2.2.2.2:12000
allowed ips: 10.0.0.28/32, 192.168.28.0/24
latest handshake: 2 minutes, 8 seconds ago
transfer: 3.93 KiB received, 7.89 KiB sent
persistent keepalive: every 15 seconds
```
and the ping test
```
root@sdvpn:~# ping -c 1 192.168.40.40
PING 192.168.40.40 (192.168.40.40) 56(84) bytes of data.
64 bytes from 192.168.40.40: icmp_seq=1 ttl=63 time=21.2 ms
--- 192.168.40.40 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 21.204/21.204/21.204/0.000 ms
root@sdvpn:~# ping -c 1 192.168.28.40
PING 192.168.28.40 (192.168.28.40) 56(84) bytes of data.
64 bytes from 192.168.28.40: icmp_seq=1 ttl=63 time=24.2 ms
--- 192.168.28.40 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 24.208/24.208/24.208/0.000 ms
root@sdvpn:~#
```
and the traceroute
```
root@sdvpn:~# traceroute 192.168.40.40
traceroute to 192.168.40.40 (192.168.40.40), 30 hops max, 60 byte packets
1 10.0.0.40 (10.0.0.40) 21.349 ms 22.337 ms 22.576 ms
2 tcpc040.abc.com (192.168.40.40) 22.565 ms 22.551 ms 22.541 ms
root@sdvpn:~# traceroute 192.168.28.40
traceroute to 192.168.28.40 (192.168.28.40), 30 hops max, 60 byte packets
1 10.0.0.28 (10.0.0.28) 25.481 ms 30.117 ms 32.086 ms
2 dcpc040.abc.com (192.168.28.40) 33.811 ms 35.360 ms 36.769 ms
root@sdvpn:~#
```
#### additonal steps
##### enable firewall NAT in each nodes router
not necessary , but if the wireguard node is behind a NAT router , then must enable NAT for wireguard
1.1.1.1 is the WAN IP of the router , and 192.168.80.4 is the wireguard LAN ip, I map port 224 to ssh and 12000 for wireguard
```
iptables -t nat -A PREROUTING -i eth1 -d 1.1.1.1 -p tcp --dport 224 -j DNAT --to-destination 192.168.80.4:22
iptables -t nat -A PREROUTING -i eth1 -d 1.1.1.1 -p udp --dport 12000 -j DNAT --to-destination 192.168.80.4:12000
```
#### summary
if want to add more nodes into VPN , just follow the logic and steps.
```
create private/public key
create wg0.conf
add new nodes in every other nodes wg0.conf as peer
```
1. for route , must add remote network in AllowedIPs
2. check ip_forward is enable
3. I think the postup haws no effect here , because the firewall service was disable by default , and if I use iptables -F to flush all firewall rules , the network still remain in connected.
4. need to create an ansible playbook for this
#### Update
##### strongswan IPSEC VS wireguard
**wireguard almost twice faster than strongswan**
iperf test with wireguard VPN 30 seconds benchmark
```
root@sdvpn:~# iperf -c 192.168.40.7 -t 30
------------------------------------------------------------
Client connecting to 192.168.40.7, TCP port 5001
TCP window size: 85.0 KByte (default)
------------------------------------------------------------
[ 3] local 10.0.0.80 port 48270 connected with 192.168.40.7 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-30.1 sec 65.1 MBytes 18.1 Mbits/sec
root@sdvpn:~#
```
iperf test with strongswan VPN
```
root@sdvpn:~# iperf -c 192.168.40.7 -t 30
------------------------------------------------------------
Client connecting to 192.168.40.7, TCP port 5001
TCP window size: 85.0 KByte (default)
------------------------------------------------------------
[ 3] local 192.168.80.4 port 57806 connected with 192.168.40.7 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-30.1 sec 35.6 MBytes 9.94 Mbits/sec
root@sdvpn:~#
```

View File

@@ -115,6 +115,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -135,14 +143,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -153,7 +153,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,180 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a></h3>
<div class="meta">
<span class="date moment">2019-08-16</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立</p>
<p>想說再打個VPN tunnel 來當跳板連 ptt 好了</p>
<p>因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境</p>
<p>本來是在vultr 的VPS上面建立這個tunnel</p>
<p>但是那台VPS連去ptt 很頓,卡卡的</p>
<p>所以改用google cloud platform 的free tier 來做</p>
<p>反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態</p>
<p></p>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/multiple-site-to-site-vpn-using-wireguard/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a></h3>
<div class="meta">
<span class="date moment">2019-08-13</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN</p>
<p>雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了</p>
<p>完全沒辦法了解當時設計的邏輯造成後續debug 困難</p>
<p>可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌</p>
<p>之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點</p>
<p>這次試試看躲在gateway後面看看能不能建立多點的VPN環境</p>
<p></p>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">
@@ -746,170 +920,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/transfer-file-content-using-xclip-in-terminal/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/transfer-file-content-using-xclip-in-terminal/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/transfer-file-content-using-xclip-in-terminal/">Transfer File Content Using Xclip in Terminal</a></h3>
<div class="meta">
<span class="date moment">2019-05-17</span>
<span class="categories">
<a href="/categories/linux">linux</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>工作上常會需要用ssh登入遠端主機檢查LOG有必要的時候還要把log複製回本機來處理。</p>
<p>以前都是傻傻的用 scp 傳檔案</p>
<p>之前就記得有這個xclip/xsel 可以用,但是一直沒有弄清楚怎麼執行</p>
<p>早上研究了一下,順便做個筆記。</p>
<p></p>
<a href="/post/transfer-file-content-using-xclip-in-terminal/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/inx-collect-detail-hardware-info/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/inx-collect-detail-hardware-info/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/inx-collect-detail-hardware-info/">[筆記] inxi 蒐集詳盡的硬體資訊 / inxi Collect Detail Hardware Info</a></h3>
<div class="meta">
<span class="date moment">2019-04-23</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近因為一直碰到硬碟故障的問題算起來那一批同時購買的5X顆 seagate 2T硬碟已經有一半以上故障返修了&hellip;.</p>
<p>然後又因為一直沒有添購新的硬碟,只能用這些快過保/已過保的撐著</p>
<p>所以最近不斷的在更換機器內的硬碟,而且還沒有熱插拔!</p>
<p>也導致原本負責處理盤點資產的同事困擾,因為跟手邊的紀錄已經對不起來了</p>
<p>然後就變成要對資產的時候,需要一台一台登入,然後去下不同的指令,取得想要的硬體資訊,超級麻煩的!</p>
<p></p>
<a href="/post/inx-collect-detail-hardware-info/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
<a href="/tags/bsd">bsd</a>
<a href="/tags/inventory">inventory</a>
</div>
</div>
</div>
</article>
@@ -940,6 +950,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -960,14 +978,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -978,7 +988,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -5,11 +5,55 @@
<link>https://h.cowbay.org/author/eric-chang/</link>
<description>Recent content in Eric Chang on MCの飄狂山莊㊣</description>
<generator>Hugo -- gohugo.io</generator>
<lastBuildDate>Tue, 06 Aug 2019 17:14:17 +0800</lastBuildDate>
<lastBuildDate>Fri, 16 Aug 2019 10:18:06 +0800</lastBuildDate>
<atom:link href="https://h.cowbay.org/author/eric-chang/index.xml" rel="self" type="application/rss+xml" />
<item>
<title>[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</title>
<link>https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/</link>
<pubDate>Fri, 16 Aug 2019 10:18:06 +0800</pubDate>
<guid>https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/</guid>
<description>&lt;p&gt;最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立&lt;/p&gt;
&lt;p&gt;想說再打個VPN tunnel 來當跳板連 ptt 好了&lt;/p&gt;
&lt;p&gt;因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境&lt;/p&gt;
&lt;p&gt;本來是在vultr 的VPS上面建立這個tunnel&lt;/p&gt;
&lt;p&gt;但是那台VPS連去ptt 很頓,卡卡的&lt;/p&gt;
&lt;p&gt;所以改用google cloud platform 的free tier 來做&lt;/p&gt;
&lt;p&gt;反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</title>
<link>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</link>
<pubDate>Tue, 13 Aug 2019 15:50:31 +0800</pubDate>
<guid>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</guid>
<description>&lt;p&gt;因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN&lt;/p&gt;
&lt;p&gt;雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了&lt;/p&gt;
&lt;p&gt;完全沒辦法了解當時設計的邏輯造成後續debug 困難&lt;/p&gt;
&lt;p&gt;可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌&lt;/p&gt;
&lt;p&gt;之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點&lt;/p&gt;
&lt;p&gt;這次試試看躲在gateway後面看看能不能建立多點的VPN環境&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</title>
<link>https://h.cowbay.org/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/</link>

View File

@@ -90,6 +90,170 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/transfer-file-content-using-xclip-in-terminal/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/transfer-file-content-using-xclip-in-terminal/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/transfer-file-content-using-xclip-in-terminal/">Transfer File Content Using Xclip in Terminal</a></h3>
<div class="meta">
<span class="date moment">2019-05-17</span>
<span class="categories">
<a href="/categories/linux">linux</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>工作上常會需要用ssh登入遠端主機檢查LOG有必要的時候還要把log複製回本機來處理。</p>
<p>以前都是傻傻的用 scp 傳檔案</p>
<p>之前就記得有這個xclip/xsel 可以用,但是一直沒有弄清楚怎麼執行</p>
<p>早上研究了一下,順便做個筆記。</p>
<p></p>
<a href="/post/transfer-file-content-using-xclip-in-terminal/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/inx-collect-detail-hardware-info/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/inx-collect-detail-hardware-info/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/inx-collect-detail-hardware-info/">[筆記] inxi 蒐集詳盡的硬體資訊 / inxi Collect Detail Hardware Info</a></h3>
<div class="meta">
<span class="date moment">2019-04-23</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近因為一直碰到硬碟故障的問題算起來那一批同時購買的5X顆 seagate 2T硬碟已經有一半以上故障返修了&hellip;.</p>
<p>然後又因為一直沒有添購新的硬碟,只能用這些快過保/已過保的撐著</p>
<p>所以最近不斷的在更換機器內的硬碟,而且還沒有熱插拔!</p>
<p>也導致原本負責處理盤點資產的同事困擾,因為跟手邊的紀錄已經對不起來了</p>
<p>然後就變成要對資產的時候,需要一台一台登入,然後去下不同的指令,取得想要的硬體資訊,超級麻煩的!</p>
<p></p>
<a href="/post/inx-collect-detail-hardware-info/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
<a href="/tags/bsd">bsd</a>
<a href="/tags/inventory">inventory</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/log-all-bash-commands/">
@@ -688,166 +852,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/incredibly-slow-mdadm-rebuild/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/incredibly-slow-mdadm-rebuild/">
<img src="/images/post-default-1.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/incredibly-slow-mdadm-rebuild/">[碎念] mdadm 超級慢的rebuild 速度 Incredibly Slow mdadm Rebuild</a></h3>
<div class="meta">
<span class="date moment">2018-12-12</span>
<span class="categories">
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近在做一台老機器的P2V</p>
<p>偏偏user說不能關機所以我用dd + ssh 做線上移轉</p>
<p>這部份有空再來寫</p>
<p>只是因為原來的設定有用mdadm 做raid1</p>
<p>這部份導致移轉過去proxmox 後會出現raid degrade 導致無法正常開機</p>
<p></p>
<a href="/post/incredibly-slow-mdadm-rebuild/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/mdadm">mdadm</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/create-portable-vim-environment/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/create-portable-vim-environment/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/create-portable-vim-environment/">[筆記] 建立一個帶著走的 VIM 環境 Creating portable Vim environment</a></h3>
<div class="meta">
<span class="date moment">2018-12-07</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為工作的關係現在很多時間都花在VIM的操作上</p>
<p>所以之前花了滿多時間調整出一個適合自己的VIM環境</p>
<p>原本的作法是把這個設定好的環境丟到自己建立的gitea 上面</p>
<p>然後每到一台新的機器就要去clone 下來</p>
<p></p>
<a href="/post/create-portable-vim-environment/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vim">vim</a>
</div>
</div>
</div>
</article>
@@ -880,6 +884,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -900,14 +912,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -918,7 +922,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,166 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/incredibly-slow-mdadm-rebuild/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/incredibly-slow-mdadm-rebuild/">
<img src="/images/post-default-1.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/incredibly-slow-mdadm-rebuild/">[碎念] mdadm 超級慢的rebuild 速度 Incredibly Slow mdadm Rebuild</a></h3>
<div class="meta">
<span class="date moment">2018-12-12</span>
<span class="categories">
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近在做一台老機器的P2V</p>
<p>偏偏user說不能關機所以我用dd + ssh 做線上移轉</p>
<p>這部份有空再來寫</p>
<p>只是因為原來的設定有用mdadm 做raid1</p>
<p>這部份導致移轉過去proxmox 後會出現raid degrade 導致無法正常開機</p>
<p></p>
<a href="/post/incredibly-slow-mdadm-rebuild/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/mdadm">mdadm</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/create-portable-vim-environment/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/create-portable-vim-environment/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/create-portable-vim-environment/">[筆記] 建立一個帶著走的 VIM 環境 Creating portable Vim environment</a></h3>
<div class="meta">
<span class="date moment">2018-12-07</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為工作的關係現在很多時間都花在VIM的操作上</p>
<p>所以之前花了滿多時間調整出一個適合自己的VIM環境</p>
<p>原本的作法是把這個設定好的環境丟到自己建立的gitea 上面</p>
<p>然後每到一台新的機器就要去clone 下來</p>
<p></p>
<a href="/post/create-portable-vim-environment/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vim">vim</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/synology-ds415-repair-cost/">
@@ -791,189 +951,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/bookstack-docker/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/bookstack-docker/">
<img src="/images/post-default-12.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/bookstack-docker/">Bookstack Docker</a></h3>
<div class="meta">
<span class="date moment">2018-11-06</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>Bookstack 是一套非常好用的線上&rdquo;筆記&rdquo;系統</p>
<p>他用圖書館/書本的概念,讓使用者可以建立自己的&rdquo;圖書館&rdquo;</p>
<p>同時在圖書館內建立不同的&rdquo;書籍&rdquo;</p>
<p>而且支援 Markdown 語法</p>
<p>其他的方式像是在nextcloud上編輯 md檔案(字體太小)</p>
<p>或者是boostnote(只能在本機)</p>
<p>都或多或少有點小缺點</p>
<p>Bookstack則是沒有這些問題不過就是系統「大」了點&hellip;</p>
<p>不過還好有人做成docker的方式來啟動大大的降低了建置的難度(其實也沒有很難啦只是要裝個PHP、弄個DB而已)</p>
<p></p>
<a href="/post/bookstack-docker/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/docker">docker</a>
<a href="/tags/bookstack">Bookstack</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/enable-synology-public-ssh/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/enable-synology-public-ssh/">
<img src="https://i.imgur.com/jcDQmI1.png" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/enable-synology-public-ssh/">筆記- 啟用群暉NAS (Synology NAS)的SSH Server 透過Publickey 認證免密碼登入</a></h3>
<div class="meta">
<span class="date moment">2018-11-05</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>公司內有幾台NAS其中有一台用來放開發人員的postgresql dump file
之前都是主要的開發人員上傳到google drive分享出來 ,然後其他人去抓回來</p>
<p>這樣子有個問題是當server要存取這些檔案時就沒辦法了除非透過一些 3rd party的軟體
像是這篇</p>
<p><a href="https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux">https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux</a></p>
<p>或者是這篇</p>
<p><a href="https://www.maketecheasier.com/mount-google-drive-ubuntu/">https://www.maketecheasier.com/mount-google-drive-ubuntu/</a></p>
<p>但是手邊的伺服器原則上除非有必要不然都沒有開放internet
所以導致明明檔案就在那邊,但是要取得就是很麻煩</p>
<p></p>
<a href="/post/enable-synology-public-ssh/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
<a href="/tags/synology">synology</a>
<a href="/tags/nas">NAS</a>
<a href="/tags/ssh">SSH</a>
</div>
</div>
</div>
</article>
@@ -1006,6 +983,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -1026,14 +1011,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -1044,7 +1021,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,189 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/bookstack-docker/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/bookstack-docker/">
<img src="/images/post-default-12.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/bookstack-docker/">Bookstack Docker</a></h3>
<div class="meta">
<span class="date moment">2018-11-06</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>Bookstack 是一套非常好用的線上&rdquo;筆記&rdquo;系統</p>
<p>他用圖書館/書本的概念,讓使用者可以建立自己的&rdquo;圖書館&rdquo;</p>
<p>同時在圖書館內建立不同的&rdquo;書籍&rdquo;</p>
<p>而且支援 Markdown 語法</p>
<p>其他的方式像是在nextcloud上編輯 md檔案(字體太小)</p>
<p>或者是boostnote(只能在本機)</p>
<p>都或多或少有點小缺點</p>
<p>Bookstack則是沒有這些問題不過就是系統「大」了點&hellip;</p>
<p>不過還好有人做成docker的方式來啟動大大的降低了建置的難度(其實也沒有很難啦只是要裝個PHP、弄個DB而已)</p>
<p></p>
<a href="/post/bookstack-docker/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/docker">docker</a>
<a href="/tags/bookstack">Bookstack</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/enable-synology-public-ssh/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/enable-synology-public-ssh/">
<img src="https://i.imgur.com/jcDQmI1.png" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/enable-synology-public-ssh/">筆記- 啟用群暉NAS (Synology NAS)的SSH Server 透過Publickey 認證免密碼登入</a></h3>
<div class="meta">
<span class="date moment">2018-11-05</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>公司內有幾台NAS其中有一台用來放開發人員的postgresql dump file
之前都是主要的開發人員上傳到google drive分享出來 ,然後其他人去抓回來</p>
<p>這樣子有個問題是當server要存取這些檔案時就沒辦法了除非透過一些 3rd party的軟體
像是這篇</p>
<p><a href="https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux">https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux</a></p>
<p>或者是這篇</p>
<p><a href="https://www.maketecheasier.com/mount-google-drive-ubuntu/">https://www.maketecheasier.com/mount-google-drive-ubuntu/</a></p>
<p>但是手邊的伺服器原則上除非有必要不然都沒有開放internet
所以導致明明檔案就在那邊,但是要取得就是很麻煩</p>
<p></p>
<a href="/post/enable-synology-public-ssh/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
<a href="/tags/synology">synology</a>
<a href="/tags/nas">NAS</a>
<a href="/tags/ssh">SSH</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/gallery/sammy93/">
@@ -181,6 +364,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -201,14 +392,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -219,7 +402,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -101,7 +101,7 @@
<hr>
<ul id="all-categories">
<li><a href="/author/eric-chang">Eric chang (31)</a></li>
<li><a href="/author/eric-chang">Eric chang (33)</a></li>
</ul>
</div>
@@ -120,6 +120,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -140,14 +148,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -158,7 +158,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -12,7 +12,7 @@
<item>
<title>Eric Chang</title>
<link>https://h.cowbay.org/author/eric-chang/</link>
<pubDate>Tue, 06 Aug 2019 17:14:17 +0800</pubDate>
<pubDate>Fri, 16 Aug 2019 10:18:06 +0800</pubDate>
<guid>https://h.cowbay.org/author/eric-chang/</guid>
<description></description>

View File

@@ -349,6 +349,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -369,14 +377,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -387,7 +387,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -111,7 +111,7 @@
<li><a href="/categories/%E7%A2%8E%E5%BF%B5">碎念 (1)</a></li>
<li><a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a></li>
<li><a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a></li>
<li><a href="/categories/%E7%BE%A4%E6%9A%89">群暉 (1)</a></li>
@@ -132,6 +132,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -152,14 +160,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -170,7 +170,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -58,7 +58,7 @@
<item>
<title>筆記</title>
<link>https://h.cowbay.org/categories/%E7%AD%86%E8%A8%98/</link>
<pubDate>Tue, 06 Aug 2019 17:14:17 +0800</pubDate>
<pubDate>Fri, 16 Aug 2019 10:18:06 +0800</pubDate>
<guid>https://h.cowbay.org/categories/%E7%AD%86%E8%A8%98/</guid>
<description></description>

View File

@@ -190,6 +190,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -210,14 +218,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -228,7 +228,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -192,6 +192,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -212,14 +220,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -230,7 +230,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -179,6 +179,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -199,14 +207,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -217,7 +217,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -192,6 +192,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -212,14 +220,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -230,7 +230,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,180 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a></h3>
<div class="meta">
<span class="date moment">2019-08-16</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立</p>
<p>想說再打個VPN tunnel 來當跳板連 ptt 好了</p>
<p>因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境</p>
<p>本來是在vultr 的VPS上面建立這個tunnel</p>
<p>但是那台VPS連去ptt 很頓,卡卡的</p>
<p>所以改用google cloud platform 的free tier 來做</p>
<p>反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態</p>
<p></p>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/multiple-site-to-site-vpn-using-wireguard/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a></h3>
<div class="meta">
<span class="date moment">2019-08-13</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN</p>
<p>雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了</p>
<p>完全沒辦法了解當時設計的邏輯造成後續debug 困難</p>
<p>可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌</p>
<p>之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點</p>
<p>這次試試看躲在gateway後面看看能不能建立多點的VPN環境</p>
<p></p>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">
@@ -744,161 +918,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/install-timeshift-on-ubuntu1804/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/install-timeshift-on-ubuntu1804/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/install-timeshift-on-ubuntu1804/">Install Timeshift on Ubuntu1804</a></h3>
<div class="meta">
<span class="date moment">2019-03-11</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近要開始測試client安裝 ubuntu 18.04 的 ansible playbook</p>
<p>因為要不斷的修正所以想到一直有在自己電腦上執行的timeshift這個軟體</p>
<p>可以很簡單快速的備份、恢復系統狀態</p>
<p>可是不知道為什麼在ubuntu 18.04 上安裝就是會發生錯誤&hellip;.</p>
<p></p>
<a href="/post/install-timeshift-on-ubuntu1804/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/backup">backup</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/install-ubuntu1804-on-dell-6ir-raid-controller/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/install-ubuntu1804-on-dell-6ir-raid-controller/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/install-ubuntu1804-on-dell-6ir-raid-controller/">用DELL 6 i/R 建立RAID並在上面安裝ubuntu 18.04 </a></h3>
<div class="meta">
<span class="date moment">2019-01-16</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>買了一張 DELL 6/iR 低階的raid 卡</p>
<p>來測試把系統裝在硬體做的RAID上結果沒想到居然不能開機&hellip;
</p>
<a href="/post/install-ubuntu1804-on-dell-6ir-raid-controller/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/ubuntu">ubuntu</a>
</div>
</div>
</div>
</article>
@@ -929,6 +948,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -949,14 +976,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -967,7 +986,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -5,11 +5,55 @@
<link>https://h.cowbay.org/categories/%E7%AD%86%E8%A8%98/</link>
<description>Recent content in 筆記 on MCの飄狂山莊㊣</description>
<generator>Hugo -- gohugo.io</generator>
<lastBuildDate>Tue, 06 Aug 2019 17:14:17 +0800</lastBuildDate>
<lastBuildDate>Fri, 16 Aug 2019 10:18:06 +0800</lastBuildDate>
<atom:link href="https://h.cowbay.org/categories/%E7%AD%86%E8%A8%98/index.xml" rel="self" type="application/rss+xml" />
<item>
<title>[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</title>
<link>https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/</link>
<pubDate>Fri, 16 Aug 2019 10:18:06 +0800</pubDate>
<guid>https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/</guid>
<description>&lt;p&gt;最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立&lt;/p&gt;
&lt;p&gt;想說再打個VPN tunnel 來當跳板連 ptt 好了&lt;/p&gt;
&lt;p&gt;因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境&lt;/p&gt;
&lt;p&gt;本來是在vultr 的VPS上面建立這個tunnel&lt;/p&gt;
&lt;p&gt;但是那台VPS連去ptt 很頓,卡卡的&lt;/p&gt;
&lt;p&gt;所以改用google cloud platform 的free tier 來做&lt;/p&gt;
&lt;p&gt;反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</title>
<link>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</link>
<pubDate>Tue, 13 Aug 2019 15:50:31 +0800</pubDate>
<guid>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</guid>
<description>&lt;p&gt;因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN&lt;/p&gt;
&lt;p&gt;雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了&lt;/p&gt;
&lt;p&gt;完全沒辦法了解當時設計的邏輯造成後續debug 困難&lt;/p&gt;
&lt;p&gt;可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌&lt;/p&gt;
&lt;p&gt;之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點&lt;/p&gt;
&lt;p&gt;這次試試看躲在gateway後面看看能不能建立多點的VPN環境&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</title>
<link>https://h.cowbay.org/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/</link>

View File

@@ -90,6 +90,161 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/install-timeshift-on-ubuntu1804/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/install-timeshift-on-ubuntu1804/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/install-timeshift-on-ubuntu1804/">Install Timeshift on Ubuntu1804</a></h3>
<div class="meta">
<span class="date moment">2019-03-11</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近要開始測試client安裝 ubuntu 18.04 的 ansible playbook</p>
<p>因為要不斷的修正所以想到一直有在自己電腦上執行的timeshift這個軟體</p>
<p>可以很簡單快速的備份、恢復系統狀態</p>
<p>可是不知道為什麼在ubuntu 18.04 上安裝就是會發生錯誤&hellip;.</p>
<p></p>
<a href="/post/install-timeshift-on-ubuntu1804/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/backup">backup</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/install-ubuntu1804-on-dell-6ir-raid-controller/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/install-ubuntu1804-on-dell-6ir-raid-controller/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/install-ubuntu1804-on-dell-6ir-raid-controller/">用DELL 6 i/R 建立RAID並在上面安裝ubuntu 18.04 </a></h3>
<div class="meta">
<span class="date moment">2019-01-16</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>買了一張 DELL 6/iR 低階的raid 卡</p>
<p>來測試把系統裝在硬體做的RAID上結果沒想到居然不能開機&hellip;
</p>
<a href="/post/install-ubuntu1804-on-dell-6ir-raid-controller/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/ubuntu">ubuntu</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/ubuntu-1804-install-root-on-raid/">
@@ -772,171 +927,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/weird-client-server-connection/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/weird-client-server-connection/">
<img src="/images/post-default-4.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/weird-client-server-connection/">[筆記] 詭異的client&amp;server間連線的問題或許跟KVM有關係</a></h3>
<div class="meta">
<span class="date moment">2018-11-08</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>這是發生在一個夜黑風高的寂寥深夜&hellip;.. ( What The FXXX &hellip; )</p>
<p>來到這個環境之後,有一個很詭異的狀況一直困擾著我</p>
<p>在每個分公司都會有一台伺服器作為KVM Host</p>
<p>上面跑兩台VM一台作為ansible controller (目前沒作用)</p>
<p>另一台作為這邊所謂的 &ldquo;Build Server&rdquo;</p>
<p>用途包含了DHCP Server / Proxy Server (squid3) / APT Proxy (squid-deb-proxy)</p>
<p>問題就發生在這台 Build Server 上&hellip;</p>
<p></p>
<a href="/post/weird-client-server-connection/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/nice-du-report-tool-durep/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/nice-du-report-tool-durep/">
<img src="/images/post-default-9.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/nice-du-report-tool-durep/">Nice Du Report Tool Durep</a></h3>
<div class="meta">
<span class="date moment">2018-11-06</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近在重新規劃前人留下的backup爛攤子
各個伺服器統一備份到一台backup storage
想說如果每天能夠看到backup storage的磁碟用量的話
就可以抓出備份空間成長速度、推估需要多大的磁碟空間
找了一些工具,結果發現 durep 這個 ubuntu 內建的工具
基本上可以滿足我的需求</p>
<a href="/post/nice-du-report-tool-durep/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
<a href="/tags/du">du</a>
</div>
</div>
</div>
</article>
@@ -969,6 +959,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -989,14 +987,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -1007,7 +997,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,171 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/weird-client-server-connection/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/weird-client-server-connection/">
<img src="/images/post-default-4.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/weird-client-server-connection/">[筆記] 詭異的client&amp;server間連線的問題或許跟KVM有關係</a></h3>
<div class="meta">
<span class="date moment">2018-11-08</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>這是發生在一個夜黑風高的寂寥深夜&hellip;.. ( What The FXXX &hellip; )</p>
<p>來到這個環境之後,有一個很詭異的狀況一直困擾著我</p>
<p>在每個分公司都會有一台伺服器作為KVM Host</p>
<p>上面跑兩台VM一台作為ansible controller (目前沒作用)</p>
<p>另一台作為這邊所謂的 &ldquo;Build Server&rdquo;</p>
<p>用途包含了DHCP Server / Proxy Server (squid3) / APT Proxy (squid-deb-proxy)</p>
<p>問題就發生在這台 Build Server 上&hellip;</p>
<p></p>
<a href="/post/weird-client-server-connection/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/nice-du-report-tool-durep/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/nice-du-report-tool-durep/">
<img src="/images/post-default-9.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/nice-du-report-tool-durep/">Nice Du Report Tool Durep</a></h3>
<div class="meta">
<span class="date moment">2018-11-06</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近在重新規劃前人留下的backup爛攤子
各個伺服器統一備份到一台backup storage
想說如果每天能夠看到backup storage的磁碟用量的話
就可以抓出備份空間成長速度、推估需要多大的磁碟空間
找了一些工具,結果發現 durep 這個 ubuntu 內建的工具
基本上可以滿足我的需求</p>
<a href="/post/nice-du-report-tool-durep/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
<a href="/tags/du">du</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/bookstack-docker/">
@@ -296,6 +461,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -316,14 +489,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -334,7 +499,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -202,6 +202,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -222,14 +230,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -240,7 +240,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -179,6 +179,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -199,14 +207,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -217,7 +217,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -191,6 +191,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -211,14 +219,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -229,7 +229,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -95,6 +95,184 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a></h3>
<div class="meta">
<span class="date moment">2019-08-16</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立</p>
<p>想說再打個VPN tunnel 來當跳板連 ptt 好了</p>
<p>因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境</p>
<p>本來是在vultr 的VPS上面建立這個tunnel</p>
<p>但是那台VPS連去ptt 很頓,卡卡的</p>
<p>所以改用google cloud platform 的free tier 來做</p>
<p>反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態</p>
<p></p>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/multiple-site-to-site-vpn-using-wireguard/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a></h3>
<div class="meta">
<span class="date moment">2019-08-13</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN</p>
<p>雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了</p>
<p>完全沒辦法了解當時設計的邏輯造成後續debug 困難</p>
<p>可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌</p>
<p>之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點</p>
<p>這次試試看躲在gateway後面看看能不能建立多點的VPN環境</p>
<p></p>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">
@@ -765,174 +943,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/transfer-file-content-using-xclip-in-terminal/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/transfer-file-content-using-xclip-in-terminal/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/transfer-file-content-using-xclip-in-terminal/">Transfer File Content Using Xclip in Terminal</a></h3>
<div class="meta">
<span class="date moment">2019-05-17</span>
<span class="categories">
<a href="/categories/linux">linux</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>工作上常會需要用ssh登入遠端主機檢查LOG有必要的時候還要把log複製回本機來處理。</p>
<p>以前都是傻傻的用 scp 傳檔案</p>
<p>之前就記得有這個xclip/xsel 可以用,但是一直沒有弄清楚怎麼執行</p>
<p>早上研究了一下,順便做個筆記。</p>
<p></p>
<a href="/post/transfer-file-content-using-xclip-in-terminal/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/inx-collect-detail-hardware-info/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/inx-collect-detail-hardware-info/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/inx-collect-detail-hardware-info/">[筆記] inxi 蒐集詳盡的硬體資訊 / inxi Collect Detail Hardware Info</a></h3>
<div class="meta">
<span class="date moment">2019-04-23</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近因為一直碰到硬碟故障的問題算起來那一批同時購買的5X顆 seagate 2T硬碟已經有一半以上故障返修了&hellip;.</p>
<p>然後又因為一直沒有添購新的硬碟,只能用這些快過保/已過保的撐著</p>
<p>所以最近不斷的在更換機器內的硬碟,而且還沒有熱插拔!</p>
<p>也導致原本負責處理盤點資產的同事困擾,因為跟手邊的紀錄已經對不起來了</p>
<p>然後就變成要對資產的時候,需要一台一台登入,然後去下不同的指令,取得想要的硬體資訊,超級麻煩的!</p>
<p></p>
<a href="/post/inx-collect-detail-hardware-info/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
<a href="/tags/bsd">bsd</a>
<a href="/tags/inventory">inventory</a>
</div>
</div>
</div>
</article>
@@ -964,6 +974,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -984,14 +1002,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -1002,7 +1012,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -272,6 +272,13 @@
"type": "tag",
"url": "https://h.cowbay.org/tags/vpn"
},
{
"iconClass": "fa-tag",
"objectID": "https://h.cowbay.org/tags/wireguard",
"title": "Wireguard",
"type": "tag",
"url": "https://h.cowbay.org/tags/wireguard"
},
{
"iconClass": "fa-tag",
"objectID": "https://h.cowbay.org/tags/zfs",

View File

@@ -5,11 +5,55 @@
<link>https://h.cowbay.org/</link>
<description>Recent content on MCの飄狂山莊㊣</description>
<generator>Hugo -- gohugo.io</generator>
<lastBuildDate>Tue, 06 Aug 2019 17:14:17 +0800</lastBuildDate>
<lastBuildDate>Fri, 16 Aug 2019 10:18:06 +0800</lastBuildDate>
<atom:link href="https://h.cowbay.org/index.xml" rel="self" type="application/rss+xml" />
<item>
<title>[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</title>
<link>https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/</link>
<pubDate>Fri, 16 Aug 2019 10:18:06 +0800</pubDate>
<guid>https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/</guid>
<description>&lt;p&gt;最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立&lt;/p&gt;
&lt;p&gt;想說再打個VPN tunnel 來當跳板連 ptt 好了&lt;/p&gt;
&lt;p&gt;因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境&lt;/p&gt;
&lt;p&gt;本來是在vultr 的VPS上面建立這個tunnel&lt;/p&gt;
&lt;p&gt;但是那台VPS連去ptt 很頓,卡卡的&lt;/p&gt;
&lt;p&gt;所以改用google cloud platform 的free tier 來做&lt;/p&gt;
&lt;p&gt;反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</title>
<link>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</link>
<pubDate>Tue, 13 Aug 2019 15:50:31 +0800</pubDate>
<guid>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</guid>
<description>&lt;p&gt;因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN&lt;/p&gt;
&lt;p&gt;雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了&lt;/p&gt;
&lt;p&gt;完全沒辦法了解當時設計的邏輯造成後續debug 困難&lt;/p&gt;
&lt;p&gt;可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌&lt;/p&gt;
&lt;p&gt;之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點&lt;/p&gt;
&lt;p&gt;這次試試看躲在gateway後面看看能不能建立多點的VPN環境&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</title>
<link>https://h.cowbay.org/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/</link>

View File

@@ -95,6 +95,174 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/transfer-file-content-using-xclip-in-terminal/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/transfer-file-content-using-xclip-in-terminal/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/transfer-file-content-using-xclip-in-terminal/">Transfer File Content Using Xclip in Terminal</a></h3>
<div class="meta">
<span class="date moment">2019-05-17</span>
<span class="categories">
<a href="/categories/linux">linux</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>工作上常會需要用ssh登入遠端主機檢查LOG有必要的時候還要把log複製回本機來處理。</p>
<p>以前都是傻傻的用 scp 傳檔案</p>
<p>之前就記得有這個xclip/xsel 可以用,但是一直沒有弄清楚怎麼執行</p>
<p>早上研究了一下,順便做個筆記。</p>
<p></p>
<a href="/post/transfer-file-content-using-xclip-in-terminal/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/inx-collect-detail-hardware-info/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/inx-collect-detail-hardware-info/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/inx-collect-detail-hardware-info/">[筆記] inxi 蒐集詳盡的硬體資訊 / inxi Collect Detail Hardware Info</a></h3>
<div class="meta">
<span class="date moment">2019-04-23</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近因為一直碰到硬碟故障的問題算起來那一批同時購買的5X顆 seagate 2T硬碟已經有一半以上故障返修了&hellip;.</p>
<p>然後又因為一直沒有添購新的硬碟,只能用這些快過保/已過保的撐著</p>
<p>所以最近不斷的在更換機器內的硬碟,而且還沒有熱插拔!</p>
<p>也導致原本負責處理盤點資產的同事困擾,因為跟手邊的紀錄已經對不起來了</p>
<p>然後就變成要對資產的時候,需要一台一台登入,然後去下不同的指令,取得想要的硬體資訊,超級麻煩的!</p>
<p></p>
<a href="/post/inx-collect-detail-hardware-info/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
<a href="/tags/bsd">bsd</a>
<a href="/tags/inventory">inventory</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/log-all-bash-commands/">
@@ -707,170 +875,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/incredibly-slow-mdadm-rebuild/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/incredibly-slow-mdadm-rebuild/">
<img src="/images/post-default-1.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/incredibly-slow-mdadm-rebuild/">[碎念] mdadm 超級慢的rebuild 速度 Incredibly Slow mdadm Rebuild</a></h3>
<div class="meta">
<span class="date moment">2018-12-12</span>
<span class="categories">
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近在做一台老機器的P2V</p>
<p>偏偏user說不能關機所以我用dd + ssh 做線上移轉</p>
<p>這部份有空再來寫</p>
<p>只是因為原來的設定有用mdadm 做raid1</p>
<p>這部份導致移轉過去proxmox 後會出現raid degrade 導致無法正常開機</p>
<p></p>
<a href="/post/incredibly-slow-mdadm-rebuild/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/mdadm">mdadm</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/create-portable-vim-environment/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/create-portable-vim-environment/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/create-portable-vim-environment/">[筆記] 建立一個帶著走的 VIM 環境 Creating portable Vim environment</a></h3>
<div class="meta">
<span class="date moment">2018-12-07</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為工作的關係現在很多時間都花在VIM的操作上</p>
<p>所以之前花了滿多時間調整出一個適合自己的VIM環境</p>
<p>原本的作法是把這個設定好的環境丟到自己建立的gitea 上面</p>
<p>然後每到一台新的機器就要去clone 下來</p>
<p></p>
<a href="/post/create-portable-vim-environment/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vim">vim</a>
</div>
</div>
</div>
</article>
@@ -904,6 +908,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -924,14 +936,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -942,7 +946,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -95,6 +95,170 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/incredibly-slow-mdadm-rebuild/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/incredibly-slow-mdadm-rebuild/">
<img src="/images/post-default-1.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/incredibly-slow-mdadm-rebuild/">[碎念] mdadm 超級慢的rebuild 速度 Incredibly Slow mdadm Rebuild</a></h3>
<div class="meta">
<span class="date moment">2018-12-12</span>
<span class="categories">
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近在做一台老機器的P2V</p>
<p>偏偏user說不能關機所以我用dd + ssh 做線上移轉</p>
<p>這部份有空再來寫</p>
<p>只是因為原來的設定有用mdadm 做raid1</p>
<p>這部份導致移轉過去proxmox 後會出現raid degrade 導致無法正常開機</p>
<p></p>
<a href="/post/incredibly-slow-mdadm-rebuild/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/mdadm">mdadm</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/create-portable-vim-environment/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/create-portable-vim-environment/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/create-portable-vim-environment/">[筆記] 建立一個帶著走的 VIM 環境 Creating portable Vim environment</a></h3>
<div class="meta">
<span class="date moment">2018-12-07</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為工作的關係現在很多時間都花在VIM的操作上</p>
<p>所以之前花了滿多時間調整出一個適合自己的VIM環境</p>
<p>原本的作法是把這個設定好的環境丟到自己建立的gitea 上面</p>
<p>然後每到一台新的機器就要去clone 下來</p>
<p></p>
<a href="/post/create-portable-vim-environment/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vim">vim</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/synology-ds415-repair-cost/">
@@ -810,193 +974,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/bookstack-docker/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/bookstack-docker/">
<img src="/images/post-default-12.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/bookstack-docker/">Bookstack Docker</a></h3>
<div class="meta">
<span class="date moment">2018-11-06</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>Bookstack 是一套非常好用的線上&rdquo;筆記&rdquo;系統</p>
<p>他用圖書館/書本的概念,讓使用者可以建立自己的&rdquo;圖書館&rdquo;</p>
<p>同時在圖書館內建立不同的&rdquo;書籍&rdquo;</p>
<p>而且支援 Markdown 語法</p>
<p>其他的方式像是在nextcloud上編輯 md檔案(字體太小)</p>
<p>或者是boostnote(只能在本機)</p>
<p>都或多或少有點小缺點</p>
<p>Bookstack則是沒有這些問題不過就是系統「大」了點&hellip;</p>
<p>不過還好有人做成docker的方式來啟動大大的降低了建置的難度(其實也沒有很難啦只是要裝個PHP、弄個DB而已)</p>
<p></p>
<a href="/post/bookstack-docker/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/docker">docker</a>
<a href="/tags/bookstack">Bookstack</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/enable-synology-public-ssh/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/enable-synology-public-ssh/">
<img src="https://i.imgur.com/jcDQmI1.png" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/enable-synology-public-ssh/">筆記- 啟用群暉NAS (Synology NAS)的SSH Server 透過Publickey 認證免密碼登入</a></h3>
<div class="meta">
<span class="date moment">2018-11-05</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>公司內有幾台NAS其中有一台用來放開發人員的postgresql dump file
之前都是主要的開發人員上傳到google drive分享出來 ,然後其他人去抓回來</p>
<p>這樣子有個問題是當server要存取這些檔案時就沒辦法了除非透過一些 3rd party的軟體
像是這篇</p>
<p><a href="https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux">https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux</a></p>
<p>或者是這篇</p>
<p><a href="https://www.maketecheasier.com/mount-google-drive-ubuntu/">https://www.maketecheasier.com/mount-google-drive-ubuntu/</a></p>
<p>但是手邊的伺服器原則上除非有必要不然都沒有開放internet
所以導致明明檔案就在那邊,但是要取得就是很麻煩</p>
<p></p>
<a href="/post/enable-synology-public-ssh/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
<a href="/tags/synology">synology</a>
<a href="/tags/nas">NAS</a>
<a href="/tags/ssh">SSH</a>
</div>
</div>
</div>
</article>
@@ -1030,6 +1007,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -1050,14 +1035,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -1068,7 +1045,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -95,6 +95,193 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/bookstack-docker/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/bookstack-docker/">
<img src="/images/post-default-12.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/bookstack-docker/">Bookstack Docker</a></h3>
<div class="meta">
<span class="date moment">2018-11-06</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>Bookstack 是一套非常好用的線上&rdquo;筆記&rdquo;系統</p>
<p>他用圖書館/書本的概念,讓使用者可以建立自己的&rdquo;圖書館&rdquo;</p>
<p>同時在圖書館內建立不同的&rdquo;書籍&rdquo;</p>
<p>而且支援 Markdown 語法</p>
<p>其他的方式像是在nextcloud上編輯 md檔案(字體太小)</p>
<p>或者是boostnote(只能在本機)</p>
<p>都或多或少有點小缺點</p>
<p>Bookstack則是沒有這些問題不過就是系統「大」了點&hellip;</p>
<p>不過還好有人做成docker的方式來啟動大大的降低了建置的難度(其實也沒有很難啦只是要裝個PHP、弄個DB而已)</p>
<p></p>
<a href="/post/bookstack-docker/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/docker">docker</a>
<a href="/tags/bookstack">Bookstack</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/enable-synology-public-ssh/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/enable-synology-public-ssh/">
<img src="https://i.imgur.com/jcDQmI1.png" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/enable-synology-public-ssh/">筆記- 啟用群暉NAS (Synology NAS)的SSH Server 透過Publickey 認證免密碼登入</a></h3>
<div class="meta">
<span class="date moment">2018-11-05</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>公司內有幾台NAS其中有一台用來放開發人員的postgresql dump file
之前都是主要的開發人員上傳到google drive分享出來 ,然後其他人去抓回來</p>
<p>這樣子有個問題是當server要存取這些檔案時就沒辦法了除非透過一些 3rd party的軟體
像是這篇</p>
<p><a href="https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux">https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux</a></p>
<p>或者是這篇</p>
<p><a href="https://www.maketecheasier.com/mount-google-drive-ubuntu/">https://www.maketecheasier.com/mount-google-drive-ubuntu/</a></p>
<p>但是手邊的伺服器原則上除非有必要不然都沒有開放internet
所以導致明明檔案就在那邊,但是要取得就是很麻煩</p>
<p></p>
<a href="/post/enable-synology-public-ssh/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
<a href="/tags/synology">synology</a>
<a href="/tags/nas">NAS</a>
<a href="/tags/ssh">SSH</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/gallery/sammy93/">
@@ -187,6 +374,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -207,14 +402,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -225,7 +412,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -415,6 +415,14 @@ TCP window size: 85.0 KByte (default)
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -435,14 +443,6 @@ TCP window size: 85.0 KByte (default)
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -453,7 +453,7 @@ TCP window size: 85.0 KByte (default)
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -215,6 +215,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -235,14 +243,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -253,7 +253,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -297,6 +297,14 @@ hwaddress: f4:4d:30:45:ef:aa', host: pc120', ipv4: 192.168.1.120', user: [wany']
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -317,14 +325,6 @@ hwaddress: f4:4d:30:45:ef:aa', host: pc120', ipv4: 192.168.1.120', user: [wany']
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -335,7 +335,7 @@ hwaddress: f4:4d:30:45:ef:aa', host: pc120', ipv4: 192.168.1.120', user: [wany']
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -218,6 +218,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -238,14 +246,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -256,7 +256,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -273,6 +273,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -293,14 +301,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -311,7 +311,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -329,6 +329,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -349,14 +357,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -367,7 +367,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -284,6 +284,14 @@ b8d74048eba1 mysql:5.7.21 &quot;docker-entrypoint.s…&qu
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -304,14 +312,6 @@ b8d74048eba1 mysql:5.7.21 &quot;docker-entrypoint.s…&qu
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -322,7 +322,7 @@ b8d74048eba1 mysql:5.7.21 &quot;docker-entrypoint.s…&qu
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -258,6 +258,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -278,14 +286,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -296,7 +296,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -321,6 +321,14 @@ Tue May 21 17:39:48 CST 2019
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -341,14 +349,6 @@ Tue May 21 17:39:48 CST 2019
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -359,7 +359,7 @@ Tue May 21 17:39:48 CST 2019
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -392,6 +392,14 @@ openssl s_client -showcerts -connect mail.example.com:465
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -412,14 +420,6 @@ openssl s_client -showcerts -connect mail.example.com:465
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -430,7 +430,7 @@ openssl s_client -showcerts -connect mail.example.com:465
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -216,6 +216,14 @@ GRANT a TO b;
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -236,14 +244,6 @@ GRANT a TO b;
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -254,7 +254,7 @@ GRANT a TO b;
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -229,6 +229,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -249,14 +257,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -267,7 +267,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -0,0 +1,493 @@
<!doctype html>
<html class="no-js" lang="tw">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="author" content="Eric Chang">
<meta name="description" content="Whats the Worst That Could Happen?">
<meta name="keywords" content="linux,blog,responsive,search,font awesome,pages,posts,multilingual,highlight.js,syntax highlighting,premium,shortcuts">
<meta name="generator" content="Hugo 0.50" />
<title> [筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP | MCの飄狂山莊㊣</title>
<meta name="description" content="[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP - Whats the Worst That Could Happen?">
<meta itemprop="name" content="[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP">
<meta itemprop="description" content="[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP - Whats the Worst That Could Happen?">
<meta property="og:title" content="[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP">
<meta property="og:description" content="[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP - Whats the Worst That Could Happen?">
<meta property="og:image" content="https://h.cowbay.org/images/post-default-8.jpg">
<meta property="og:url" content="https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<meta property="og:site_name" content="MCの飄狂山莊㊣">
<meta property="og:type" content="article">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-32x32.png" sizes="32x32">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-16x16.png" sizes="16x16">
<link rel="stylesheet" href="https://h.cowbay.org/sass/combined.min.a89dfa577f701bffe9659f476ef61241cb2a3452b913e793463b0074a10c0a59.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
</head>
<body class="bilberry-hugo-theme">
<nav class="permanentTopNav">
<div class="container">
<ul class="topnav">
</ul>
<div id="search-box" class="search">
<i class="fa fa-search"></i>
<input id="search" type="text" placeholder="">
</div>
</div>
</nav>
<header>
<div class="container">
<div class="logo">
<a href="/" class="logo">
<img src="https://www.gravatar.com/avatar/e4eb1f8e016ffb73e9889f87d16e15f0?d=mm&size=200" alt="">
<span class="overlay"><i class="fa fa-home"></i></span>
</a>
</div>
<div class="titles">
<h3 class="title"><a href="/">MCの飄狂山莊㊣</a></h3>
<span class="subtitle">Whats the Worst That Could Happen?</span>
</div>
<div class="toggler permanentTopNav">
<i class="fa fa-bars" aria-hidden="true"></i>
</div>
</div>
</header>
<div class="main container">
<div class="article-wrapper u-cf single">
<a class="bubble" href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a></h3>
<div class="meta">
<span class="date moment">2019-08-16</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立</p>
<p>想說再打個VPN tunnel 來當跳板連 ptt 好了</p>
<p>因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境</p>
<p>本來是在vultr 的VPS上面建立這個tunnel</p>
<p>但是那台VPS連去ptt 很頓,卡卡的</p>
<p>所以改用google cloud platform 的free tier 來做</p>
<p>反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態</p>
<p></p>
<p>GCP的申請、設定就不多說了</p>
<p>這次碰到的怪異現象是當wireguard 都已經設定好client 也都連上了之後</p>
<p>會發生client 開不了 www.google.com.tw / youtube / google map 等等google 服務的狀況</p>
<p>VPN確定是通的我可以在client 這邊連上其他網站但就是google的服務開不了</p>
<p>後來不知道是怎麼樣突然靈機一動因為一開始設定server/peer 都是用 10.0.0.x/24 的IP</p>
<p>想說會不會是因為這個也是google cloud platform 預設的LAN IP 網段,所以沒辦法繞出去</p>
<p>看一下設定,確認一下這個想法對不對,果然是這樣沒錯</p>
<p><img src="https://i.imgur.com/XkrH4Pa.png" alt="" /></p>
<p>解決方法很簡單要不修改VPS的內部IP要不修改wireguard的設定</p>
<p>當然我是選擇改wireguard ,因為簡單嘛!</p>
<p>修改後的configuration 長這樣</p>
<pre><code>[Interface]
Address = 192.168.10.1/24
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o ens4 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o ens4 -j MASQUERADE
ListenPort = 12000
PrivateKey = E..........................E
#OFFICE DESKTOP
[Peer]
PublicKey = W...........................W
AllowedIPs = 192.168.10.2/32
#ANDROID
[Peer]
PublicKey = w............................w
AllowedIPs = 192.168.10.3/32
#HOME
[Peer]
PublicKey = 2.........................................2
AllowedIPs = 192.168.10.4/32
</code></pre>
<p>重起wireguard (或者說重起 wg0 這個interface)之後client 開google 網頁就正常了</p>
<p>client 這邊也是簡單設定一下把要透過跳板出去的IP 改走wireguard 出去</p>
<p>底下這個,就是把往台大(140.112.0.0) 和 term.ptt.cc(104.31.0.0)的封包改走wireguard</p>
<pre><code>[Interface]
PrivateKey = e............................e
Address = 192.168.10.2/24
DNS = 8.8.8.8
MTU = 1420
[Peer]
PublicKey = q...........................q
Endpoint = public_ip_of_gcp:12000
AllowedIPs = 140.112.0.0/16,104.31.0.0/16,192.168.10.1/32
PersistentKeepalive = 25
</code></pre>
<p>然後看一下路由對不對</p>
<pre><code>2019-08-16 10:34:21 [cch@hq34 ~]$ traceroute term.ptt.cc
traceroute to term.ptt.cc (104.31.231.9), 30 hops max, 60 byte packets
1 192.168.10.1 (192.168.10.1) 191.826 ms 192.556 ms 192.678 ms
2 * * *
3 * * *
4 * * *
5 104.31.231.9 (104.31.231.9) 203.918 ms 203.982 ms 203.979 ms
2019-08-16 10:34:33 [cch@hq34 ~]$
</code></pre>
<p>果然是走wireguard (192.168.10.1) 出去 ,跳板成功!</p>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div id="disqus_thread"></div>
<script type="application/javascript">
var disqus_config = function () {
};
(function() {
if (["localhost", "127.0.0.1"].indexOf(window.location.hostname) != -1) {
document.getElementById('disqus_thread').innerHTML = 'Disqus comments not available by default when the website is previewed locally.';
return;
}
var d = document, s = d.createElement('script'); s.async = true;
s.src = '//' + "h-cowbay-org-1" + '.disqus.com/embed.js';
s.setAttribute('data-timestamp', +new Date());
(d.head || d.body).appendChild(s);
})();
</script>
<noscript>Please enable JavaScript to view the <a href="https://disqus.com/?ref_noscript">comments powered by Disqus.</a></noscript>
<a href="https://disqus.com" class="dsq-brlink">comments powered by <span class="logo-disqus">Disqus</span></a>
</div>
<footer>
<div class="container">
<div class="recent-posts">
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
<li>
<a href="/post/another-way-to-keep-ansible-log/">[筆記] 為了保存log 用script 指令執行ansible / Another Way to Keep Ansible Log using script command</a>
</li>
<li>
<a href="/post/send-mail-to-notify-after-pxe-install/">[筆記] 用pxe 安裝系統,完成後送出郵件通知 / send mail notification after pxe install</a>
</li>
<li>
<a href="/post/ansible-run-task-depends-on-ipaddr/">[ansible] 用 ip 位置判斷是否要執行task /ansible run task depends on ipaddr</a>
</li>
<li>
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
</ul>
</div>
<div class="categories">
<a href="/categories/"><strong></strong></a>
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>
<a href="/categories/ansible">Ansible (3)</a>
</li>
<li>
<a href="/categories/linux">Linux (1)</a>
</li>
<li>
<a href="/categories/proxmox">Proxmox (1)</a>
</li>
<li>
<a href="/categories/ps">Ps (1)</a>
</li>
<li>
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念 (1)</a>
</li>
<li>
<a href="/categories/%E7%BE%A4%E6%9A%89">群暉 (1)</a>
</li>
</ul>
</div>
<div class="right">
<div class="external-profiles">
<strong></strong>
<a href="https://www.facebook.com/mariahchang" target="_blank"><i class="fa fa-facebook-adblock-proof"></i></a>
<a href="https://twitter.com/changchichung" target="_blank"><i class="fa fa-twitter-adblock-proof"></i></a>
<a href="https://github.com/changchichung" target="_blank"><i class="fa fa-github"></i></a>
<a href="https://www.yapee.tw/mvc/onlinePay/webLink?key=lMC74kucH21JChCR77-wJ80ZZ-Poh11amP24BwiDdHw" target="_blank"><img border="0" src="https://www.yapee.tw/mvc/file/publicFile?pathType=data/linkLogo/B0S0F0002585.jpg"></img></a>
</div>
</div>
</div>
</footer>
<div class="credits">
<div class="container">
<div class="copyright">
<a href="https://github.com/Lednerb" target="_blank">
&copy;
2017
by Lednerb
</a>
</div>
<div class="author">
<a href="https://www.yapee.tw/mvc/onlinePay/webLink?key=lMC74kucH21JChCR77-wJ80ZZ-Poh11amP24BwiDdHw" target="_blank">Bilberry Hugo Theme</a>
</div>
</div>
</div>
<script type="application/javascript">
var doNotTrack = false;
if (!doNotTrack) {
window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date;
ga('create', 'UA-138954876-1', 'auto');
ga('send', 'pageview');
}
</script>
<script async src='https://www.google-analytics.com/analytics.js'></script>
<script type="text/javascript" src="https://h.cowbay.org/js/externalDependencies.39c47e10e241eae2947b3fe21809c572.js" integrity="md5-OcR&#43;EOJB6uKUez/iGAnFcg=="></script>
<script type="text/javascript" src="https://h.cowbay.org/js/theme.ff50ae6dc1bfc220b23bf69dbb41b54e.js" integrity="md5-/1CubcG/wiCyO/adu0G1Tg=="></script>
<script>
$(".moment").each(function() {
$(this).text(
moment( $(this).text() )
.locale( "tw" )
.format('LL')
);
});
$(".footnote-return sup").html("");
</script>
<script>
var client = algoliasearch("2XL0P8XDCY", "4ef65b37b627bb886b46c34a10e63aa6");
var index = client.initIndex("h_cowbay_org");
$('#search').autocomplete({ hint: false, autoselect: true, debug: false },
[
{
source: $.fn.autocomplete.sources.hits(index, { hitsPerPage: 10 }),
displayKey: function(suggestion) {
return suggestion.title || suggestion.author
},
templates: {
suggestion: function(suggestion) {
return "<span class='entry " + suggestion.type + "'>"
+ "<span class='title'>" + suggestion.title + "</span>"
+ "<span class='fa fa-fw " + suggestion.iconClass + "'></span>"
+ "</span>"
;
},
empty: function() {
return "<span class='empty'></span>"
},
footer: function() {
return '<div class="branding">Powered by <img src="https:\/\/h.cowbay.org\/dist\/algolia-logo-light.svg" /></div>'
}
},
}
])
.on('autocomplete:selected', function(event, suggestion, dataset) {
window.location = (suggestion.url);
})
.keypress(function (event, suggestion) {
if (event.which == 13) {
window.location = (suggestion.url);
}
});
</script>
</body>
</html>

View File

@@ -302,6 +302,14 @@ admin@storage:~$
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -322,14 +330,6 @@ admin@storage:~$
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -340,7 +340,7 @@ admin@storage:~$
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -249,6 +249,14 @@ root@pve:~#
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -269,14 +277,6 @@ root@pve:~#
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -287,7 +287,7 @@ root@pve:~#
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -272,6 +272,14 @@ unused devices: &lt;none&gt;
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -292,14 +300,6 @@ unused devices: &lt;none&gt;
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -310,7 +310,7 @@ unused devices: &lt;none&gt;
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,180 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a></h3>
<div class="meta">
<span class="date moment">2019-08-16</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立</p>
<p>想說再打個VPN tunnel 來當跳板連 ptt 好了</p>
<p>因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境</p>
<p>本來是在vultr 的VPS上面建立這個tunnel</p>
<p>但是那台VPS連去ptt 很頓,卡卡的</p>
<p>所以改用google cloud platform 的free tier 來做</p>
<p>反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態</p>
<p></p>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/multiple-site-to-site-vpn-using-wireguard/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a></h3>
<div class="meta">
<span class="date moment">2019-08-13</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN</p>
<p>雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了</p>
<p>完全沒辦法了解當時設計的邏輯造成後續debug 困難</p>
<p>可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌</p>
<p>之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點</p>
<p>這次試試看躲在gateway後面看看能不能建立多點的VPN環境</p>
<p></p>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">
@@ -746,170 +920,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/transfer-file-content-using-xclip-in-terminal/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/transfer-file-content-using-xclip-in-terminal/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/transfer-file-content-using-xclip-in-terminal/">Transfer File Content Using Xclip in Terminal</a></h3>
<div class="meta">
<span class="date moment">2019-05-17</span>
<span class="categories">
<a href="/categories/linux">linux</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>工作上常會需要用ssh登入遠端主機檢查LOG有必要的時候還要把log複製回本機來處理。</p>
<p>以前都是傻傻的用 scp 傳檔案</p>
<p>之前就記得有這個xclip/xsel 可以用,但是一直沒有弄清楚怎麼執行</p>
<p>早上研究了一下,順便做個筆記。</p>
<p></p>
<a href="/post/transfer-file-content-using-xclip-in-terminal/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/inx-collect-detail-hardware-info/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/inx-collect-detail-hardware-info/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/inx-collect-detail-hardware-info/">[筆記] inxi 蒐集詳盡的硬體資訊 / inxi Collect Detail Hardware Info</a></h3>
<div class="meta">
<span class="date moment">2019-04-23</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近因為一直碰到硬碟故障的問題算起來那一批同時購買的5X顆 seagate 2T硬碟已經有一半以上故障返修了&hellip;.</p>
<p>然後又因為一直沒有添購新的硬碟,只能用這些快過保/已過保的撐著</p>
<p>所以最近不斷的在更換機器內的硬碟,而且還沒有熱插拔!</p>
<p>也導致原本負責處理盤點資產的同事困擾,因為跟手邊的紀錄已經對不起來了</p>
<p>然後就變成要對資產的時候,需要一台一台登入,然後去下不同的指令,取得想要的硬體資訊,超級麻煩的!</p>
<p></p>
<a href="/post/inx-collect-detail-hardware-info/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
<a href="/tags/bsd">bsd</a>
<a href="/tags/inventory">inventory</a>
</div>
</div>
</div>
</article>
@@ -940,6 +950,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -960,14 +978,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -978,7 +988,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -5,11 +5,55 @@
<link>https://h.cowbay.org/post/</link>
<description>Recent content in Posts on MCの飄狂山莊㊣</description>
<generator>Hugo -- gohugo.io</generator>
<lastBuildDate>Tue, 06 Aug 2019 17:14:17 +0800</lastBuildDate>
<lastBuildDate>Fri, 16 Aug 2019 10:18:06 +0800</lastBuildDate>
<atom:link href="https://h.cowbay.org/post/index.xml" rel="self" type="application/rss+xml" />
<item>
<title>[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</title>
<link>https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/</link>
<pubDate>Fri, 16 Aug 2019 10:18:06 +0800</pubDate>
<guid>https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/</guid>
<description>&lt;p&gt;最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立&lt;/p&gt;
&lt;p&gt;想說再打個VPN tunnel 來當跳板連 ptt 好了&lt;/p&gt;
&lt;p&gt;因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境&lt;/p&gt;
&lt;p&gt;本來是在vultr 的VPS上面建立這個tunnel&lt;/p&gt;
&lt;p&gt;但是那台VPS連去ptt 很頓,卡卡的&lt;/p&gt;
&lt;p&gt;所以改用google cloud platform 的free tier 來做&lt;/p&gt;
&lt;p&gt;反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</title>
<link>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</link>
<pubDate>Tue, 13 Aug 2019 15:50:31 +0800</pubDate>
<guid>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</guid>
<description>&lt;p&gt;因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN&lt;/p&gt;
&lt;p&gt;雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了&lt;/p&gt;
&lt;p&gt;完全沒辦法了解當時設計的邏輯造成後續debug 困難&lt;/p&gt;
&lt;p&gt;可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌&lt;/p&gt;
&lt;p&gt;之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點&lt;/p&gt;
&lt;p&gt;這次試試看躲在gateway後面看看能不能建立多點的VPN環境&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</title>
<link>https://h.cowbay.org/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/</link>

View File

@@ -310,6 +310,14 @@ root@pve:~#
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -330,14 +338,6 @@ root@pve:~#
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -348,7 +348,7 @@ root@pve:~#
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -774,6 +774,14 @@ sudo apt install joe-jupp
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -794,14 +802,6 @@ sudo apt install joe-jupp
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -812,7 +812,7 @@ sudo apt install joe-jupp
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -234,6 +234,14 @@ GRUB_CMDLINE_LINUX=&quot;rootdelay=90&quot;
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -254,14 +262,6 @@ GRUB_CMDLINE_LINUX=&quot;rootdelay=90&quot;
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -272,7 +272,7 @@ GRUB_CMDLINE_LINUX=&quot;rootdelay=90&quot;
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -320,6 +320,14 @@ bbs089.abc.com ansible_ssh_host=192.168.0.89 ansible_ssh_user=root
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -340,14 +348,6 @@ bbs089.abc.com ansible_ssh_host=192.168.0.89 ansible_ssh_user=root
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -358,7 +358,7 @@ bbs089.abc.com ansible_ssh_host=192.168.0.89 ansible_ssh_user=root
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -253,6 +253,14 @@ Apr 23 15:18:48 hqs010 minion: minion [30832]: ip addr [0]
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -273,14 +281,6 @@ Apr 23 15:18:48 hqs010 minion: minion [30832]: ip addr [0]
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -291,7 +291,7 @@ Apr 23 15:18:48 hqs010 minion: minion [30832]: ip addr [0]
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -0,0 +1,686 @@
<!doctype html>
<html class="no-js" lang="tw">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="author" content="Eric Chang">
<meta name="description" content="Whats the Worst That Could Happen?">
<meta name="keywords" content="linux,blog,responsive,search,font awesome,pages,posts,multilingual,highlight.js,syntax highlighting,premium,shortcuts">
<meta name="generator" content="Hugo 0.50" />
<title> [筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard | MCの飄狂山莊㊣</title>
<meta name="description" content="[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard - Whats the Worst That Could Happen?">
<meta itemprop="name" content="[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard">
<meta itemprop="description" content="[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard - Whats the Worst That Could Happen?">
<meta property="og:title" content="[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard">
<meta property="og:description" content="[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard - Whats the Worst That Could Happen?">
<meta property="og:image" content="https://h.cowbay.org/images/post-default-10.jpg">
<meta property="og:url" content="https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/">
<meta property="og:site_name" content="MCの飄狂山莊㊣">
<meta property="og:type" content="article">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-32x32.png" sizes="32x32">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-16x16.png" sizes="16x16">
<link rel="stylesheet" href="https://h.cowbay.org/sass/combined.min.a89dfa577f701bffe9659f476ef61241cb2a3452b913e793463b0074a10c0a59.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
</head>
<body class="bilberry-hugo-theme">
<nav class="permanentTopNav">
<div class="container">
<ul class="topnav">
</ul>
<div id="search-box" class="search">
<i class="fa fa-search"></i>
<input id="search" type="text" placeholder="">
</div>
</div>
</nav>
<header>
<div class="container">
<div class="logo">
<a href="/" class="logo">
<img src="https://www.gravatar.com/avatar/e4eb1f8e016ffb73e9889f87d16e15f0?d=mm&size=200" alt="">
<span class="overlay"><i class="fa fa-home"></i></span>
</a>
</div>
<div class="titles">
<h3 class="title"><a href="/">MCの飄狂山莊㊣</a></h3>
<span class="subtitle">Whats the Worst That Could Happen?</span>
</div>
<div class="toggler permanentTopNav">
<i class="fa fa-bars" aria-hidden="true"></i>
</div>
</div>
</header>
<div class="main container">
<div class="article-wrapper u-cf single">
<a class="bubble" href="/post/multiple-site-to-site-vpn-using-wireguard/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a></h3>
<div class="meta">
<span class="date moment">2019-08-13</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN</p>
<p>雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了</p>
<p>完全沒辦法了解當時設計的邏輯造成後續debug 困難</p>
<p>可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌</p>
<p>之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點</p>
<p>這次試試看躲在gateway後面看看能不能建立多點的VPN環境</p>
<p></p>
<h4 id="every-node">every node</h4>
<h5 id="enable-ip-forward">enable ip_forward</h5>
<p>edit /etc/sysctl.conf
add below line in the end of the file</p>
<pre><code>net.ipv4.ip_forward=1
</code></pre>
<h5 id="install-wireguard">install wireguard</h5>
<pre><code>sudo apt-get install libmnl-dev linux-headers-$(uname -r) build-essential make git libelf-dev
git clone https://git.zx2c4.com/WireGuard
cd WireGuard/src/
make
sudo make install
</code></pre>
<p>or
<strong>via apt</strong></p>
<pre><code>sudo add-apt-repository ppa:wireguard/wireguard
sudo apt install wireguard
</code></pre>
<h5 id="create-wireguard-service-file">create wireguard service file</h5>
<p>add /etc/systemd/system/multi-user.target.wants/wg-quick@wg0.service</p>
<pre><code>[Unit]
Description=WireGuard via wg-quick(8) for %I
After=network-online.target nss-lookup.target
Wants=network-online.target nss-lookup.target
Documentation=man:wg-quick(8)
Documentation=man:wg(8)
Documentation=https://www.wireguard.com/
Documentation=https://www.wireguard.com/quickstart/
Documentation=https://git.zx2c4.com/WireGuard/about/src/tools/man/wg-quick.8
Documentation=https://git.zx2c4.com/WireGuard/about/src/tools/man/wg.8
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/bin/wg-quick up %i
ExecStop=/usr/bin/wg-quick down %i
Environment=WG_ENDPOINT_RESOLUTION_RETRIES=infinity
[Install]
WantedBy=multi-user.target
</code></pre>
<h4 id="node-a">Node A</h4>
<h5 id="create-wireguard-private-public-key">create wireguard private/public key</h5>
<pre><code>wg genkey &gt; /etc/wireguard/private
cat /etc/wireguard/private | wg pubkey &gt; /etc/wireguard/public
</code></pre>
<h5 id="etc-wireguard-wg0-conf">/etc/wireguard/wg0.conf</h5>
<p>watch the interface name , must meets the interface name in system , ens18 is the default value of my test VM</p>
<pre><code>[Interface]
Address = 10.0.0.40/24
ListenPort = 12000
PrivateKey = private key of node A
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE
[Peer]
PublicKey = public key of node B
AllowedIPs = 10.0.0.28/32,192.168.28.0/24
Endpoint = 2.2.2.2:12000
PersistentKeepalive = 15
[Peer]
PublicKey = public key of node C
AllowedIPs = 10.0.0.80/32,192.168.80.0/24
Endpoint = 3.3.3.3:12000
PersistentKeepalive = 15
</code></pre>
<h4 id="node-b-peer-1">Node B (peer 1)</h4>
<h5 id="create-wireguard-private-public-key-1">create wireguard private/public key</h5>
<pre><code>wg genkey &gt; /etc/wireguard/private
cat /etc/wireguard/private | wg pubkey &gt; /etc/wireguard/public
</code></pre>
<h5 id="etc-wireguard-wg0-conf-1">/etc/wireguard/wg0.conf</h5>
<p>watch the interface name , must meets the interface name in system , ens18 is the default value of my test VM</p>
<pre><code>[Interface]
ListenPort = 12000
PrivateKey = private key of node B
Address = 10.0.0.28/24
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE
[Peer]
PublicKey = public key of node A
AllowedIPs = 10.0.0.40/32,192.168.40.0/24
Endpoint = 1.1.1.1:12000
PersistentKeepalive = 15
[Peer]
PublicKey = public key of node C
AllowedIPs = 10.0.0.80/32,192.168.80.0/24
Endpoint = 3.3.3.3:12000
PersistentKeepalive = 15
</code></pre>
<h4 id="node-c-peer-2">Node C (peer 2)</h4>
<h5 id="create-wireguard-private-public-key-2">create wireguard private/public key</h5>
<pre><code>wg genkey &gt; /etc/wireguard/private
cat /etc/wireguard/private | wg pubkey &gt; /etc/wireguard/public
</code></pre>
<h4 id="etc-wireguard-wg0-conf-2">/etc/wireguard/wg0.conf</h4>
<p>watch the interface name , must meets the interface name in system , ens18 is the default value of my test VM</p>
<pre><code>[Interface]
ListenPort = 12000
PrivateKey = private key of node C
Address = 10.0.0.80/24
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE
[Peer]
PublicKey = public key of node A
AllowedIPs = 10.0.0.40/32,192.168.40.0/24
Endpoint = 1.1.1.1:12000
PersistentKeepalive = 15
[Peer]
PublicKey = public key of node B
AllowedIPs = 10.0.0.28/32,192.168.28.0/24
Endpoint = 2.2.2.2:12000
PersistentKeepalive = 15
</code></pre>
<h5 id="test">Test</h5>
<p>Reboot all nodes , check if interface wg0 up by default or not</p>
<p>use command wg show to check status</p>
<p>for example , this is result of wg show in node C</p>
<pre><code>root@sdvpn:~# wg show
interface: wg0
public key: public key of Node C
private key: (hidden)
listening port: 12000
peer: public key of node A
endpoint: 1.1.1.1:12000
allowed ips: 10.0.0.40/32, 192.168.40.0/24
latest handshake: 49 seconds ago
transfer: 9.77 KiB received, 9.73 KiB sent
persistent keepalive: every 15 seconds
peer: public key of node B
endpoint: 2.2.2.2:12000
allowed ips: 10.0.0.28/32, 192.168.28.0/24
latest handshake: 2 minutes, 8 seconds ago
transfer: 3.93 KiB received, 7.89 KiB sent
persistent keepalive: every 15 seconds
</code></pre>
<p>and the ping test</p>
<pre><code>root@sdvpn:~# ping -c 1 192.168.40.40
PING 192.168.40.40 (192.168.40.40) 56(84) bytes of data.
64 bytes from 192.168.40.40: icmp_seq=1 ttl=63 time=21.2 ms
--- 192.168.40.40 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 21.204/21.204/21.204/0.000 ms
root@sdvpn:~# ping -c 1 192.168.28.40
PING 192.168.28.40 (192.168.28.40) 56(84) bytes of data.
64 bytes from 192.168.28.40: icmp_seq=1 ttl=63 time=24.2 ms
--- 192.168.28.40 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 24.208/24.208/24.208/0.000 ms
root@sdvpn:~#
</code></pre>
<p>and the traceroute</p>
<pre><code>root@sdvpn:~# traceroute 192.168.40.40
traceroute to 192.168.40.40 (192.168.40.40), 30 hops max, 60 byte packets
1 10.0.0.40 (10.0.0.40) 21.349 ms 22.337 ms 22.576 ms
2 tcpc040.abc.com (192.168.40.40) 22.565 ms 22.551 ms 22.541 ms
root@sdvpn:~# traceroute 192.168.28.40
traceroute to 192.168.28.40 (192.168.28.40), 30 hops max, 60 byte packets
1 10.0.0.28 (10.0.0.28) 25.481 ms 30.117 ms 32.086 ms
2 dcpc040.abc.com (192.168.28.40) 33.811 ms 35.360 ms 36.769 ms
root@sdvpn:~#
</code></pre>
<h4 id="additonal-steps">additonal steps</h4>
<h5 id="enable-firewall-nat-in-each-nodes-router">enable firewall NAT in each nodes router</h5>
<p>not necessary , but if the wireguard node is behind a NAT router , then must enable NAT for wireguard</p>
<p>1.1.1.1 is the WAN IP of the router , and 192.168.80.4 is the wireguard LAN ip, I map port 224 to ssh and 12000 for wireguard</p>
<pre><code>iptables -t nat -A PREROUTING -i eth1 -d 1.1.1.1 -p tcp --dport 224 -j DNAT --to-destination 192.168.80.4:22
iptables -t nat -A PREROUTING -i eth1 -d 1.1.1.1 -p udp --dport 12000 -j DNAT --to-destination 192.168.80.4:12000
</code></pre>
<h4 id="summary">summary</h4>
<p>if want to add more nodes into VPN , just follow the logic and steps.</p>
<pre><code>create private/public key
create wg0.conf
add new nodes in every other nodes wg0.conf as peer
</code></pre>
<ol>
<li>for route , must add remote network in AllowedIPs</li>
<li>check ip_forward is enable</li>
<li>I think the postup haws no effect here , because the firewall service was disable by default , and if I use iptables -F to flush all firewall rules , the network still remain in connected.</li>
<li>need to create an ansible playbook for this</li>
</ol>
<h4 id="update">Update</h4>
<h5 id="strongswan-ipsec-vs-wireguard">strongswan IPSEC VS wireguard</h5>
<p><strong>wireguard almost twice faster than strongswan</strong></p>
<p>iperf test with wireguard VPN 30 seconds benchmark</p>
<pre><code>root@sdvpn:~# iperf -c 192.168.40.7 -t 30
------------------------------------------------------------
Client connecting to 192.168.40.7, TCP port 5001
TCP window size: 85.0 KByte (default)
------------------------------------------------------------
[ 3] local 10.0.0.80 port 48270 connected with 192.168.40.7 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-30.1 sec 65.1 MBytes 18.1 Mbits/sec
root@sdvpn:~#
</code></pre>
<p>iperf test with strongswan VPN</p>
<pre><code>root@sdvpn:~# iperf -c 192.168.40.7 -t 30
------------------------------------------------------------
Client connecting to 192.168.40.7, TCP port 5001
TCP window size: 85.0 KByte (default)
------------------------------------------------------------
[ 3] local 192.168.80.4 port 57806 connected with 192.168.40.7 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-30.1 sec 35.6 MBytes 9.94 Mbits/sec
root@sdvpn:~#
</code></pre>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div id="disqus_thread"></div>
<script type="application/javascript">
var disqus_config = function () {
};
(function() {
if (["localhost", "127.0.0.1"].indexOf(window.location.hostname) != -1) {
document.getElementById('disqus_thread').innerHTML = 'Disqus comments not available by default when the website is previewed locally.';
return;
}
var d = document, s = d.createElement('script'); s.async = true;
s.src = '//' + "h-cowbay-org-1" + '.disqus.com/embed.js';
s.setAttribute('data-timestamp', +new Date());
(d.head || d.body).appendChild(s);
})();
</script>
<noscript>Please enable JavaScript to view the <a href="https://disqus.com/?ref_noscript">comments powered by Disqus.</a></noscript>
<a href="https://disqus.com" class="dsq-brlink">comments powered by <span class="logo-disqus">Disqus</span></a>
</div>
<footer>
<div class="container">
<div class="recent-posts">
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
<li>
<a href="/post/another-way-to-keep-ansible-log/">[筆記] 為了保存log 用script 指令執行ansible / Another Way to Keep Ansible Log using script command</a>
</li>
<li>
<a href="/post/send-mail-to-notify-after-pxe-install/">[筆記] 用pxe 安裝系統,完成後送出郵件通知 / send mail notification after pxe install</a>
</li>
<li>
<a href="/post/ansible-run-task-depends-on-ipaddr/">[ansible] 用 ip 位置判斷是否要執行task /ansible run task depends on ipaddr</a>
</li>
<li>
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
</ul>
</div>
<div class="categories">
<a href="/categories/"><strong></strong></a>
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>
<a href="/categories/ansible">Ansible (3)</a>
</li>
<li>
<a href="/categories/linux">Linux (1)</a>
</li>
<li>
<a href="/categories/proxmox">Proxmox (1)</a>
</li>
<li>
<a href="/categories/ps">Ps (1)</a>
</li>
<li>
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念 (1)</a>
</li>
<li>
<a href="/categories/%E7%BE%A4%E6%9A%89">群暉 (1)</a>
</li>
</ul>
</div>
<div class="right">
<div class="external-profiles">
<strong></strong>
<a href="https://www.facebook.com/mariahchang" target="_blank"><i class="fa fa-facebook-adblock-proof"></i></a>
<a href="https://twitter.com/changchichung" target="_blank"><i class="fa fa-twitter-adblock-proof"></i></a>
<a href="https://github.com/changchichung" target="_blank"><i class="fa fa-github"></i></a>
<a href="https://www.yapee.tw/mvc/onlinePay/webLink?key=lMC74kucH21JChCR77-wJ80ZZ-Poh11amP24BwiDdHw" target="_blank"><img border="0" src="https://www.yapee.tw/mvc/file/publicFile?pathType=data/linkLogo/B0S0F0002585.jpg"></img></a>
</div>
</div>
</div>
</footer>
<div class="credits">
<div class="container">
<div class="copyright">
<a href="https://github.com/Lednerb" target="_blank">
&copy;
2017
by Lednerb
</a>
</div>
<div class="author">
<a href="https://www.yapee.tw/mvc/onlinePay/webLink?key=lMC74kucH21JChCR77-wJ80ZZ-Poh11amP24BwiDdHw" target="_blank">Bilberry Hugo Theme</a>
</div>
</div>
</div>
<script type="application/javascript">
var doNotTrack = false;
if (!doNotTrack) {
window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date;
ga('create', 'UA-138954876-1', 'auto');
ga('send', 'pageview');
}
</script>
<script async src='https://www.google-analytics.com/analytics.js'></script>
<script type="text/javascript" src="https://h.cowbay.org/js/externalDependencies.39c47e10e241eae2947b3fe21809c572.js" integrity="md5-OcR&#43;EOJB6uKUez/iGAnFcg=="></script>
<script type="text/javascript" src="https://h.cowbay.org/js/theme.ff50ae6dc1bfc220b23bf69dbb41b54e.js" integrity="md5-/1CubcG/wiCyO/adu0G1Tg=="></script>
<script>
$(".moment").each(function() {
$(this).text(
moment( $(this).text() )
.locale( "tw" )
.format('LL')
);
});
$(".footnote-return sup").html("");
</script>
<script>
var client = algoliasearch("2XL0P8XDCY", "4ef65b37b627bb886b46c34a10e63aa6");
var index = client.initIndex("h_cowbay_org");
$('#search').autocomplete({ hint: false, autoselect: true, debug: false },
[
{
source: $.fn.autocomplete.sources.hits(index, { hitsPerPage: 10 }),
displayKey: function(suggestion) {
return suggestion.title || suggestion.author
},
templates: {
suggestion: function(suggestion) {
return "<span class='entry " + suggestion.type + "'>"
+ "<span class='title'>" + suggestion.title + "</span>"
+ "<span class='fa fa-fw " + suggestion.iconClass + "'></span>"
+ "</span>"
;
},
empty: function() {
return "<span class='empty'></span>"
},
footer: function() {
return '<div class="branding">Powered by <img src="https:\/\/h.cowbay.org\/dist\/algolia-logo-light.svg" /></div>'
}
},
}
])
.on('autocomplete:selected', function(event, suggestion, dataset) {
window.location = (suggestion.url);
})
.keypress(function (event, suggestion) {
if (event.which == 13) {
window.location = (suggestion.url);
}
});
</script>
</body>
</html>

View File

@@ -251,6 +251,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -271,14 +279,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -289,7 +289,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,170 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/transfer-file-content-using-xclip-in-terminal/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/transfer-file-content-using-xclip-in-terminal/">
<img src="/images/post-default-11.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/transfer-file-content-using-xclip-in-terminal/">Transfer File Content Using Xclip in Terminal</a></h3>
<div class="meta">
<span class="date moment">2019-05-17</span>
<span class="categories">
<a href="/categories/linux">linux</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>工作上常會需要用ssh登入遠端主機檢查LOG有必要的時候還要把log複製回本機來處理。</p>
<p>以前都是傻傻的用 scp 傳檔案</p>
<p>之前就記得有這個xclip/xsel 可以用,但是一直沒有弄清楚怎麼執行</p>
<p>早上研究了一下,順便做個筆記。</p>
<p></p>
<a href="/post/transfer-file-content-using-xclip-in-terminal/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/inx-collect-detail-hardware-info/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/inx-collect-detail-hardware-info/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/inx-collect-detail-hardware-info/">[筆記] inxi 蒐集詳盡的硬體資訊 / inxi Collect Detail Hardware Info</a></h3>
<div class="meta">
<span class="date moment">2019-04-23</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近因為一直碰到硬碟故障的問題算起來那一批同時購買的5X顆 seagate 2T硬碟已經有一半以上故障返修了&hellip;.</p>
<p>然後又因為一直沒有添購新的硬碟,只能用這些快過保/已過保的撐著</p>
<p>所以最近不斷的在更換機器內的硬碟,而且還沒有熱插拔!</p>
<p>也導致原本負責處理盤點資產的同事困擾,因為跟手邊的紀錄已經對不起來了</p>
<p>然後就變成要對資產的時候,需要一台一台登入,然後去下不同的指令,取得想要的硬體資訊,超級麻煩的!</p>
<p></p>
<a href="/post/inx-collect-detail-hardware-info/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/linux">linux</a>
<a href="/tags/bsd">bsd</a>
<a href="/tags/inventory">inventory</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/log-all-bash-commands/">
@@ -688,166 +852,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/incredibly-slow-mdadm-rebuild/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/incredibly-slow-mdadm-rebuild/">
<img src="/images/post-default-1.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/incredibly-slow-mdadm-rebuild/">[碎念] mdadm 超級慢的rebuild 速度 Incredibly Slow mdadm Rebuild</a></h3>
<div class="meta">
<span class="date moment">2018-12-12</span>
<span class="categories">
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近在做一台老機器的P2V</p>
<p>偏偏user說不能關機所以我用dd + ssh 做線上移轉</p>
<p>這部份有空再來寫</p>
<p>只是因為原來的設定有用mdadm 做raid1</p>
<p>這部份導致移轉過去proxmox 後會出現raid degrade 導致無法正常開機</p>
<p></p>
<a href="/post/incredibly-slow-mdadm-rebuild/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/mdadm">mdadm</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/create-portable-vim-environment/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/create-portable-vim-environment/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/create-portable-vim-environment/">[筆記] 建立一個帶著走的 VIM 環境 Creating portable Vim environment</a></h3>
<div class="meta">
<span class="date moment">2018-12-07</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為工作的關係現在很多時間都花在VIM的操作上</p>
<p>所以之前花了滿多時間調整出一個適合自己的VIM環境</p>
<p>原本的作法是把這個設定好的環境丟到自己建立的gitea 上面</p>
<p>然後每到一台新的機器就要去clone 下來</p>
<p></p>
<a href="/post/create-portable-vim-environment/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vim">vim</a>
</div>
</div>
</div>
</article>
@@ -880,6 +884,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -900,14 +912,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -918,7 +922,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,166 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/incredibly-slow-mdadm-rebuild/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/incredibly-slow-mdadm-rebuild/">
<img src="/images/post-default-1.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/incredibly-slow-mdadm-rebuild/">[碎念] mdadm 超級慢的rebuild 速度 Incredibly Slow mdadm Rebuild</a></h3>
<div class="meta">
<span class="date moment">2018-12-12</span>
<span class="categories">
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>最近在做一台老機器的P2V</p>
<p>偏偏user說不能關機所以我用dd + ssh 做線上移轉</p>
<p>這部份有空再來寫</p>
<p>只是因為原來的設定有用mdadm 做raid1</p>
<p>這部份導致移轉過去proxmox 後會出現raid degrade 導致無法正常開機</p>
<p></p>
<a href="/post/incredibly-slow-mdadm-rebuild/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/mdadm">mdadm</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/create-portable-vim-environment/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/create-portable-vim-environment/">
<img src="/images/post-default-8.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/create-portable-vim-environment/">[筆記] 建立一個帶著走的 VIM 環境 Creating portable Vim environment</a></h3>
<div class="meta">
<span class="date moment">2018-12-07</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為工作的關係現在很多時間都花在VIM的操作上</p>
<p>所以之前花了滿多時間調整出一個適合自己的VIM環境</p>
<p>原本的作法是把這個設定好的環境丟到自己建立的gitea 上面</p>
<p>然後每到一台新的機器就要去clone 下來</p>
<p></p>
<a href="/post/create-portable-vim-environment/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vim">vim</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/synology-ds415-repair-cost/">
@@ -791,189 +951,6 @@
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/bookstack-docker/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/bookstack-docker/">
<img src="/images/post-default-12.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/bookstack-docker/">Bookstack Docker</a></h3>
<div class="meta">
<span class="date moment">2018-11-06</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>Bookstack 是一套非常好用的線上&rdquo;筆記&rdquo;系統</p>
<p>他用圖書館/書本的概念,讓使用者可以建立自己的&rdquo;圖書館&rdquo;</p>
<p>同時在圖書館內建立不同的&rdquo;書籍&rdquo;</p>
<p>而且支援 Markdown 語法</p>
<p>其他的方式像是在nextcloud上編輯 md檔案(字體太小)</p>
<p>或者是boostnote(只能在本機)</p>
<p>都或多或少有點小缺點</p>
<p>Bookstack則是沒有這些問題不過就是系統「大」了點&hellip;</p>
<p>不過還好有人做成docker的方式來啟動大大的降低了建置的難度(其實也沒有很難啦只是要裝個PHP、弄個DB而已)</p>
<p></p>
<a href="/post/bookstack-docker/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/docker">docker</a>
<a href="/tags/bookstack">Bookstack</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/enable-synology-public-ssh/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/enable-synology-public-ssh/">
<img src="https://i.imgur.com/jcDQmI1.png" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/enable-synology-public-ssh/">筆記- 啟用群暉NAS (Synology NAS)的SSH Server 透過Publickey 認證免密碼登入</a></h3>
<div class="meta">
<span class="date moment">2018-11-05</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>公司內有幾台NAS其中有一台用來放開發人員的postgresql dump file
之前都是主要的開發人員上傳到google drive分享出來 ,然後其他人去抓回來</p>
<p>這樣子有個問題是當server要存取這些檔案時就沒辦法了除非透過一些 3rd party的軟體
像是這篇</p>
<p><a href="https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux">https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux</a></p>
<p>或者是這篇</p>
<p><a href="https://www.maketecheasier.com/mount-google-drive-ubuntu/">https://www.maketecheasier.com/mount-google-drive-ubuntu/</a></p>
<p>但是手邊的伺服器原則上除非有必要不然都沒有開放internet
所以導致明明檔案就在那邊,但是要取得就是很麻煩</p>
<p></p>
<a href="/post/enable-synology-public-ssh/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
<a href="/tags/synology">synology</a>
<a href="/tags/nas">NAS</a>
<a href="/tags/ssh">SSH</a>
</div>
</div>
</div>
</article>
@@ -985,6 +962,8 @@
<div class="paginator">
<a href="/post/page/4/" class="older"><i class="fa fa-angle-double-left"></i> </a>
<a href="/post/page/2/" class="newer"> <i class="fa fa-angle-double-right"></i></a>
@@ -1004,6 +983,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -1024,14 +1011,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -1042,7 +1021,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -0,0 +1,506 @@
<!doctype html>
<html class="no-js" lang="tw">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="author" content="Eric Chang">
<meta name="description" content="Whats the Worst That Could Happen?">
<meta name="keywords" content="linux,blog,responsive,search,font awesome,pages,posts,multilingual,highlight.js,syntax highlighting,premium,shortcuts">
<meta name="generator" content="Hugo 0.50" />
<title> Posts | MCの飄狂山莊㊣</title>
<meta name="description" content="Posts - Whats the Worst That Could Happen?">
<meta itemprop="name" content="Posts">
<meta itemprop="description" content="Posts - Whats the Worst That Could Happen?">
<meta property="og:title" content="Posts">
<meta property="og:description" content="Posts - Whats the Worst That Could Happen?">
<meta property="og:image" content="https://www.gravatar.com/avatar/e4eb1f8e016ffb73e9889f87d16e15f0?size=200">
<meta property="og:url" content="https://h.cowbay.org/post/">
<meta property="og:site_name" content="MCの飄狂山莊㊣"><meta property="og:type" content="website">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-32x32.png" sizes="32x32">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-16x16.png" sizes="16x16">
<link href="https://h.cowbay.org/post/index.xml" rel="alternate" type="application/rss+xml" title="MCの飄狂山莊㊣" />
<link href="https://h.cowbay.org/post/index.xml" rel="feed" type="application/rss+xml" title="MCの飄狂山莊㊣" />
<link rel="stylesheet" href="https://h.cowbay.org/sass/combined.min.a89dfa577f701bffe9659f476ef61241cb2a3452b913e793463b0074a10c0a59.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
</head>
<body class="bilberry-hugo-theme">
<nav class="permanentTopNav">
<div class="container">
<ul class="topnav">
</ul>
<div id="search-box" class="search">
<i class="fa fa-search"></i>
<input id="search" type="text" placeholder="">
</div>
</div>
</nav>
<header>
<div class="container">
<div class="logo">
<a href="/" class="logo">
<img src="https://www.gravatar.com/avatar/e4eb1f8e016ffb73e9889f87d16e15f0?d=mm&size=200" alt="">
<span class="overlay"><i class="fa fa-home"></i></span>
</a>
</div>
<div class="titles">
<h3 class="title"><a href="/">MCの飄狂山莊㊣</a></h3>
<span class="subtitle">Whats the Worst That Could Happen?</span>
</div>
<div class="toggler permanentTopNav">
<i class="fa fa-bars" aria-hidden="true"></i>
</div>
</div>
</header>
<div class="main container">
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/bookstack-docker/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/bookstack-docker/">
<img src="/images/post-default-12.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/bookstack-docker/">Bookstack Docker</a></h3>
<div class="meta">
<span class="date moment">2018-11-06</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>Bookstack 是一套非常好用的線上&rdquo;筆記&rdquo;系統</p>
<p>他用圖書館/書本的概念,讓使用者可以建立自己的&rdquo;圖書館&rdquo;</p>
<p>同時在圖書館內建立不同的&rdquo;書籍&rdquo;</p>
<p>而且支援 Markdown 語法</p>
<p>其他的方式像是在nextcloud上編輯 md檔案(字體太小)</p>
<p>或者是boostnote(只能在本機)</p>
<p>都或多或少有點小缺點</p>
<p>Bookstack則是沒有這些問題不過就是系統「大」了點&hellip;</p>
<p>不過還好有人做成docker的方式來啟動大大的降低了建置的難度(其實也沒有很難啦只是要裝個PHP、弄個DB而已)</p>
<p></p>
<a href="/post/bookstack-docker/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/docker">docker</a>
<a href="/tags/bookstack">Bookstack</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/enable-synology-public-ssh/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/enable-synology-public-ssh/">
<img src="https://i.imgur.com/jcDQmI1.png" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/enable-synology-public-ssh/">筆記- 啟用群暉NAS (Synology NAS)的SSH Server 透過Publickey 認證免密碼登入</a></h3>
<div class="meta">
<span class="date moment">2018-11-05</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>公司內有幾台NAS其中有一台用來放開發人員的postgresql dump file
之前都是主要的開發人員上傳到google drive分享出來 ,然後其他人去抓回來</p>
<p>這樣子有個問題是當server要存取這些檔案時就沒辦法了除非透過一些 3rd party的軟體
像是這篇</p>
<p><a href="https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux">https://www.omgubuntu.co.uk/2017/04/mount-google-drive-ocamlfuse-linux</a></p>
<p>或者是這篇</p>
<p><a href="https://www.maketecheasier.com/mount-google-drive-ubuntu/">https://www.maketecheasier.com/mount-google-drive-ubuntu/</a></p>
<p>但是手邊的伺服器原則上除非有必要不然都沒有開放internet
所以導致明明檔案就在那邊,但是要取得就是很麻煩</p>
<p></p>
<a href="/post/enable-synology-public-ssh/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
<a href="/tags/synology">synology</a>
<a href="/tags/nas">NAS</a>
<a href="/tags/ssh">SSH</a>
</div>
</div>
</div>
</article>
</div>
<div class="paginator">
<a href="/post/page/3/" class="newer"> <i class="fa fa-angle-double-right"></i></a>
</div>
</div>
<footer>
<div class="container">
<div class="recent-posts">
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
<li>
<a href="/post/another-way-to-keep-ansible-log/">[筆記] 為了保存log 用script 指令執行ansible / Another Way to Keep Ansible Log using script command</a>
</li>
<li>
<a href="/post/send-mail-to-notify-after-pxe-install/">[筆記] 用pxe 安裝系統,完成後送出郵件通知 / send mail notification after pxe install</a>
</li>
<li>
<a href="/post/ansible-run-task-depends-on-ipaddr/">[ansible] 用 ip 位置判斷是否要執行task /ansible run task depends on ipaddr</a>
</li>
<li>
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
</ul>
</div>
<div class="categories">
<a href="/categories/"><strong></strong></a>
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>
<a href="/categories/ansible">Ansible (3)</a>
</li>
<li>
<a href="/categories/linux">Linux (1)</a>
</li>
<li>
<a href="/categories/proxmox">Proxmox (1)</a>
</li>
<li>
<a href="/categories/ps">Ps (1)</a>
</li>
<li>
<a href="/categories/%E7%A2%8E%E5%BF%B5">碎念 (1)</a>
</li>
<li>
<a href="/categories/%E7%BE%A4%E6%9A%89">群暉 (1)</a>
</li>
</ul>
</div>
<div class="right">
<div class="external-profiles">
<strong></strong>
<a href="https://www.facebook.com/mariahchang" target="_blank"><i class="fa fa-facebook-adblock-proof"></i></a>
<a href="https://twitter.com/changchichung" target="_blank"><i class="fa fa-twitter-adblock-proof"></i></a>
<a href="https://github.com/changchichung" target="_blank"><i class="fa fa-github"></i></a>
<a href="https://www.yapee.tw/mvc/onlinePay/webLink?key=lMC74kucH21JChCR77-wJ80ZZ-Poh11amP24BwiDdHw" target="_blank"><img border="0" src="https://www.yapee.tw/mvc/file/publicFile?pathType=data/linkLogo/B0S0F0002585.jpg"></img></a>
</div>
</div>
</div>
</footer>
<div class="credits">
<div class="container">
<div class="copyright">
<a href="https://github.com/Lednerb" target="_blank">
&copy;
2017
by Lednerb
</a>
-
<a href="https://h.cowbay.org/post/index.xml">RSS</a>
</div>
<div class="author">
<a href="https://www.yapee.tw/mvc/onlinePay/webLink?key=lMC74kucH21JChCR77-wJ80ZZ-Poh11amP24BwiDdHw" target="_blank">Bilberry Hugo Theme</a>
</div>
</div>
</div>
<script type="application/javascript">
var doNotTrack = false;
if (!doNotTrack) {
window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date;
ga('create', 'UA-138954876-1', 'auto');
ga('send', 'pageview');
}
</script>
<script async src='https://www.google-analytics.com/analytics.js'></script>
<script type="text/javascript" src="https://h.cowbay.org/js/externalDependencies.39c47e10e241eae2947b3fe21809c572.js" integrity="md5-OcR&#43;EOJB6uKUez/iGAnFcg=="></script>
<script type="text/javascript" src="https://h.cowbay.org/js/theme.ff50ae6dc1bfc220b23bf69dbb41b54e.js" integrity="md5-/1CubcG/wiCyO/adu0G1Tg=="></script>
<script>
$(".moment").each(function() {
$(this).text(
moment( $(this).text() )
.locale( "tw" )
.format('LL')
);
});
$(".footnote-return sup").html("");
</script>
<script>
var client = algoliasearch("2XL0P8XDCY", "4ef65b37b627bb886b46c34a10e63aa6");
var index = client.initIndex("h_cowbay_org");
$('#search').autocomplete({ hint: false, autoselect: true, debug: false },
[
{
source: $.fn.autocomplete.sources.hits(index, { hitsPerPage: 10 }),
displayKey: function(suggestion) {
return suggestion.title || suggestion.author
},
templates: {
suggestion: function(suggestion) {
return "<span class='entry " + suggestion.type + "'>"
+ "<span class='title'>" + suggestion.title + "</span>"
+ "<span class='fa fa-fw " + suggestion.iconClass + "'></span>"
+ "</span>"
;
},
empty: function() {
return "<span class='empty'></span>"
},
footer: function() {
return '<div class="branding">Powered by <img src="https:\/\/h.cowbay.org\/dist\/algolia-logo-light.svg" /></div>'
}
},
}
])
.on('autocomplete:selected', function(event, suggestion, dataset) {
window.location = (suggestion.url);
})
.keypress(function (event, suggestion) {
if (event.which == 13) {
window.location = (suggestion.url);
}
});
</script>
</body>
</html>

View File

@@ -314,6 +314,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -334,14 +342,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -352,7 +352,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -281,6 +281,14 @@ echo &quot;#!/bin/sh -e\nexit 0&quot; &gt; /etc/rc.local
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -301,14 +309,6 @@ echo &quot;#!/bin/sh -e\nexit 0&quot; &gt; /etc/rc.local
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -319,7 +319,7 @@ echo &quot;#!/bin/sh -e\nexit 0&quot; &gt; /etc/rc.local
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -410,6 +410,14 @@ ip route add 192.168.112.0/24 dev wg0
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -430,14 +438,6 @@ ip route add 192.168.112.0/24 dev wg0
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -448,7 +448,7 @@ ip route add 192.168.112.0/24 dev wg0
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -214,6 +214,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -234,14 +242,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -252,7 +252,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -264,6 +264,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -284,14 +292,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -302,7 +302,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -579,6 +579,14 @@ df -h
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -599,14 +607,6 @@ df -h
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -617,7 +617,7 @@ df -h
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -263,6 +263,14 @@ Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -283,14 +291,6 @@ Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -301,7 +301,7 @@ Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -326,6 +326,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -346,14 +354,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -364,7 +364,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -295,6 +295,14 @@ acl CONNECT method CONNECT
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -315,14 +323,6 @@ acl CONNECT method CONNECT
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -333,7 +333,7 @@ acl CONNECT method CONNECT
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -14,7 +14,7 @@
<sitemap>
<loc>https://h.cowbay.org/tw/sitemap.xml</loc>
<lastmod>2019-08-06T17:14:17+08:00</lastmod>
<lastmod>2019-08-16T10:18:06+08:00</lastmod>
</sitemap>

View File

@@ -204,6 +204,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -224,14 +232,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -242,7 +242,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -544,6 +544,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -564,14 +572,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -582,7 +582,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -192,6 +192,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -212,14 +220,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -230,7 +230,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -202,6 +202,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -222,14 +230,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -240,7 +240,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -196,6 +196,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -216,14 +224,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -234,7 +234,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -187,6 +187,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -207,14 +215,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -225,7 +225,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -277,6 +277,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -297,14 +305,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -315,7 +315,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -189,6 +189,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -209,14 +217,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -227,7 +227,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -204,6 +204,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -224,14 +232,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -242,7 +242,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -194,6 +194,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -214,14 +222,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -232,7 +232,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -190,6 +190,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -210,14 +218,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -228,7 +228,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -157,11 +157,13 @@
<li><a href="/tags/timezone">Timezone (1)</a></li>
<li><a href="/tags/ubuntu">Ubuntu (5)</a></li>
<li><a href="/tags/ubuntu">Ubuntu (6)</a></li>
<li><a href="/tags/vim">Vim (1)</a></li>
<li><a href="/tags/vpn">Vpn (1)</a></li>
<li><a href="/tags/vpn">Vpn (3)</a></li>
<li><a href="/tags/wireguard">Wireguard (2)</a></li>
<li><a href="/tags/zfs">Zfs (1)</a></li>
@@ -188,6 +190,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -208,14 +218,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -226,7 +228,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -265,7 +265,7 @@
<item>
<title>Ubuntu</title>
<link>https://h.cowbay.org/tags/ubuntu/</link>
<pubDate>Wed, 31 Jul 2019 11:06:33 +0800</pubDate>
<pubDate>Tue, 13 Aug 2019 15:50:31 +0800</pubDate>
<guid>https://h.cowbay.org/tags/ubuntu/</guid>
<description></description>
@@ -283,12 +283,21 @@
<item>
<title>Vpn</title>
<link>https://h.cowbay.org/tags/vpn/</link>
<pubDate>Tue, 06 Aug 2019 17:14:17 +0800</pubDate>
<pubDate>Fri, 16 Aug 2019 10:18:06 +0800</pubDate>
<guid>https://h.cowbay.org/tags/vpn/</guid>
<description></description>
</item>
<item>
<title>Wireguard</title>
<link>https://h.cowbay.org/tags/wireguard/</link>
<pubDate>Fri, 16 Aug 2019 10:18:06 +0800</pubDate>
<guid>https://h.cowbay.org/tags/wireguard/</guid>
<description></description>
</item>
<item>
<title>Zfs</title>
<link>https://h.cowbay.org/tags/zfs/</link>

View File

@@ -196,6 +196,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -216,14 +224,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -234,7 +234,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -723,6 +723,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -743,14 +751,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -761,7 +761,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -190,6 +190,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -210,14 +218,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -228,7 +228,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -192,6 +192,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -212,14 +220,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -230,7 +230,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -204,6 +204,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -224,14 +232,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -242,7 +242,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -196,6 +196,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -216,14 +224,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -234,7 +234,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -194,6 +194,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -214,14 +222,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -232,7 +232,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -294,6 +294,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -314,14 +322,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -332,7 +332,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -192,6 +192,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -212,14 +220,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -230,7 +230,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -179,6 +179,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -199,14 +207,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -217,7 +217,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -192,6 +192,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -212,14 +220,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -230,7 +230,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -202,6 +202,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -222,14 +230,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -240,7 +240,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -190,6 +190,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -210,14 +218,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -228,7 +228,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -196,6 +196,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -216,14 +224,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -234,7 +234,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -203,6 +203,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -223,14 +231,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -241,7 +241,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -294,6 +294,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -314,14 +322,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -332,7 +332,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -186,6 +186,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -206,14 +214,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -224,7 +224,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -90,6 +90,93 @@
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/multiple-site-to-site-vpn-using-wireguard/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="featured-image">
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">
<img src="/images/post-default-10.jpg" alt="">
</a>
</div>
<div class="content">
<h3><a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a></h3>
<div class="meta">
<span class="date moment">2019-08-13</span>
<span class="categories">
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
</span>
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
</div>
<p>因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN</p>
<p>雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了</p>
<p>完全沒辦法了解當時設計的邏輯造成後續debug 困難</p>
<p>可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌</p>
<p>之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點</p>
<p>這次試試看躲在gateway後面看看能不能建立多點的VPN環境</p>
<p></p>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/" class="more"></a>
</div>
<div class="footer">
<div class="tags">
<i class="fa fa-tags"></i>
<div class="links">
<a href="/tags/vpn">vpn</a>
<a href="/tags/ubuntu">ubuntu</a>
<a href="/tags/wireguard">wireguard</a>
</div>
</div>
</div>
</article>
</div>
<div class="article-wrapper u-cf">
<a class="bubble" href="/post/send-mail-to-notify-after-pxe-install/">
@@ -523,6 +610,14 @@
<strong></strong>
<ul>
<li>
<a href="/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">[筆記] 在gcp 中用wireguard建立VPN時不要用 10.0.0.0/16 網段/Do No Use 10 0 0 0 Private Ipaddr in GCP</a>
</li>
<li>
<a href="/post/multiple-site-to-site-vpn-using-wireguard/">[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</a>
</li>
<li>
<a href="/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">[筆記] 在edgerouter上用wireguard 建立site to site VPN / Site to Site Vpn Using Wireguard in Two Edgerouters</a>
</li>
@@ -543,14 +638,6 @@
<a href="/post/ansible-selectattr-from-list-in-dictionary/">[ansible] 引用事先定義好的yaml檔裡面的變數 - Ansible Selectattr From List in Dictionary file</a>
</li>
<li>
<a href="/post/remote-management-system-meshcentral/">linux底下遠端遙控&amp;管理的好用系統 Meshcentral / Remote Management &amp; control system Meshcentral</a>
</li>
<li>
<a href="/post/install-asus-10g-nic-in-proxmox/">Install Asus 10G NIC XG-C100C in Proxmox</a>
</li>
</ul>
</div>
@@ -561,7 +648,7 @@
<ul>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (22)</a>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (24)</a>
</li>
<li>

View File

@@ -5,11 +5,32 @@
<link>https://h.cowbay.org/tags/ubuntu/</link>
<description>Recent content in Ubuntu on MCの飄狂山莊㊣</description>
<generator>Hugo -- gohugo.io</generator>
<lastBuildDate>Wed, 31 Jul 2019 11:06:33 +0800</lastBuildDate>
<lastBuildDate>Tue, 13 Aug 2019 15:50:31 +0800</lastBuildDate>
<atom:link href="https://h.cowbay.org/tags/ubuntu/index.xml" rel="self" type="application/rss+xml" />
<item>
<title>[筆記] 透過 wireguard 建立多點 site to site VPN / Multiple Site to Site VPN Using Wireguard</title>
<link>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</link>
<pubDate>Tue, 13 Aug 2019 15:50:31 +0800</pubDate>
<guid>https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/</guid>
<description>&lt;p&gt;因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN&lt;/p&gt;
&lt;p&gt;雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了&lt;/p&gt;
&lt;p&gt;完全沒辦法了解當時設計的邏輯造成後續debug 困難&lt;/p&gt;
&lt;p&gt;可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌&lt;/p&gt;
&lt;p&gt;之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點&lt;/p&gt;
&lt;p&gt;這次試試看躲在gateway後面看看能不能建立多點的VPN環境&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;</description>
</item>
<item>
<title>[筆記] 用pxe 安裝系統,完成後送出郵件通知 / send mail notification after pxe install</title>
<link>https://h.cowbay.org/post/send-mail-to-notify-after-pxe-install/</link>

Some files were not shown because too many files have changed in this diff Show More