|
|
<!doctype html>
|
|
|
<html class="no-js" lang="en">
|
|
|
<head>
|
|
|
<meta charset="utf-8">
|
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
|
<meta name="author" content="Eric Chang">
|
|
|
<meta name="description" content="Bilberry Premium Theme for Hugo.">
|
|
|
<meta name="keywords" content="blog,personal,responsive,search,font awesome,pages,posts,multilingual,highlight.js,syntax highlighting,premium,shortcuts">
|
|
|
<meta name="generator" content="Hugo 0.50" />
|
|
|
<title> [筆記] 詭異的client&server間連線的問題，或許跟KVM有關係？ | MC部落</title>
|
|
|
<meta name="description" content="[筆記] 詭異的client&server間連線的問題，或許跟KVM有關係？ - Bilberry Premium Theme for Hugo.">
|
|
|
<meta itemprop="name" content="[筆記] 詭異的client&server間連線的問題，或許跟KVM有關係？">
|
|
|
<meta itemprop="description" content="[筆記] 詭異的client&server間連線的問題，或許跟KVM有關係？ - Bilberry Premium Theme for Hugo.">
|
|
|
<meta property="og:title" content="[筆記] 詭異的client&server間連線的問題，或許跟KVM有關係？">
|
|
|
<meta property="og:description" content="[筆記] 詭異的client&server間連線的問題，或許跟KVM有關係？ - Bilberry Premium Theme for Hugo.">
|
|
|
<meta property="og:image" content="https://h.cowbay.org/images/post-default-4.jpg">
|
|
|
<meta property="og:url" content="https://h.cowbay.org/post/weird-client-server-connection/">
|
|
|
<meta property="og:site_name" content="MC部落">
|
|
|
<meta property="og:type" content="article">
|
|
|
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-32x32.png" sizes="32x32">
|
|
|
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-16x16.png" sizes="16x16">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<link rel="stylesheet" href="https://h.cowbay.org/sass/combined.min.717098cb5503581e75f12e486a847ca410bf8367d4d8713f4c37affc868c5a1d.css">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
|
|
|
|
|
|
|
|
|
</head>
|
|
|
<body class="bilberry-hugo-theme">
|
|
|
|
|
|
<nav class="permanentTopNav">
|
|
|
|
|
|
<div class="container">
|
|
|
<ul class="topnav">
|
|
|
|
|
|
</ul>
|
|
|
|
|
|
|
|
|
<div id="search-box" class="search">
|
|
|
<i class="fa fa-search"></i>
|
|
|
<input id="search" type="text" placeholder="Search ...">
|
|
|
</div>
|
|
|
|
|
|
</div>
|
|
|
</nav>
|
|
|
|
|
|
|
|
|
<header>
|
|
|
<div class="container">
|
|
|
<div class="logo">
|
|
|
<a href="/" class="logo">
|
|
|
|
|
|
<img src="https://www.gravatar.com/avatar/e4eb1f8e016ffb73e9889f87d16e15f0?d=mm&size=200" alt="">
|
|
|
|
|
|
|
|
|
<span class="overlay"><i class="fa fa-home"></i></span>
|
|
|
</a>
|
|
|
</div>
|
|
|
<div class="titles">
|
|
|
<h3 class="title"><a href="/">MC部落</a></h3>
|
|
|
|
|
|
<span class="subtitle">這是MC的HUGO部落格，採用bilberry theme</span>
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<div class="toggler permanentTopNav">
|
|
|
|
|
|
<i class="fa fa-bars" aria-hidden="true"></i>
|
|
|
</div>
|
|
|
</div>
|
|
|
</header>
|
|
|
|
|
|
|
|
|
<div class="main container">
|
|
|
|
|
|
|
|
|
<div class="article-wrapper u-cf single">
|
|
|
|
|
|
<a class="bubble" href="/post/weird-client-server-connection/">
|
|
|
<i class="fa fa-fw fa-pencil"></i>
|
|
|
</a>
|
|
|
|
|
|
<article class="default article">
|
|
|
|
|
|
<div class="featured-image">
|
|
|
<a href="/post/weird-client-server-connection/">
|
|
|
<img src="/images/post-default-4.jpg" alt="">
|
|
|
</a>
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<div class="content">
|
|
|
<h3><a href="/post/weird-client-server-connection/">[筆記] 詭異的client&server間連線的問題，或許跟KVM有關係？</a></h3>
|
|
|
<div class="meta">
|
|
|
|
|
|
|
|
|
<span class="date moment">2018-11-08</span>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<span class="categories">
|
|
|
|
|
|
<a href="/categories/%E7%AD%86%E8%A8%98">筆記</a>
|
|
|
|
|
|
</span>
|
|
|
|
|
|
|
|
|
|
|
|
<span class="author"><a href="/author/eric-chang">Eric Chang</a></span>
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<p>這是發生在一個夜黑風高的寂寥深夜….. ( What The FXXX … )</p>
|
|
|
|
|
|
<p>來到這個環境之後，有一個很詭異的狀況一直困擾著我</p>
|
|
|
|
|
|
<p>在每個分公司，都會有一台伺服器作為KVM Host</p>
|
|
|
|
|
|
<p>上面跑兩台VM，一台作為ansible controller (目前沒作用)</p>
|
|
|
|
|
|
<p>另一台作為這邊所謂的 “Build Server”</p>
|
|
|
|
|
|
<p>用途包含了DHCP Server / Proxy Server (squid3) / APT Proxy (squid-deb-proxy)</p>
|
|
|
|
|
|
<p>問題就發生在這台 Build Server 上…</p>
|
|
|
|
|
|
<p></p>
|
|
|
|
|
|
<p>有陣子花了點時間去檢查各個分公司的網路環境，確保每一台Build Server都能夠連接Internet</p>
|
|
|
|
|
|
<p>然後找了一個離總部最近的據點，把這些電腦連接Internet 的方式改為用 proxy 來控制</p>
|
|
|
|
|
|
<p>在proxy內加入了 allowhost 的設定，然後把user電腦上的瀏覽器都代入 proxy server (firefox/chrome 的設定方式不同)</p>
|
|
|
|
|
|
<pre><code>acl localnet src 192.168.28.0/24
|
|
|
acl allowhost src "/etc/squid3/allowhost.txt"
|
|
|
acl localdomain dstdomain "/etc/squid3/localdomain.txt"
|
|
|
acl SSL_ports port 443
|
|
|
acl Safe_ports port 80 # http
|
|
|
acl Safe_ports port 21 # ftp
|
|
|
acl Safe_ports port 443 # https
|
|
|
acl Safe_ports port 70 # gopher
|
|
|
acl Safe_ports port 210 # wais
|
|
|
acl Safe_ports port 1025-65535 # unregistered ports
|
|
|
acl Safe_ports port 280 # http-mgmt
|
|
|
acl Safe_ports port 488 # gss-http
|
|
|
acl Safe_ports port 591 # filemaker
|
|
|
acl Safe_ports port 777 # multiling http
|
|
|
acl CONNECT method CONNECT
|
|
|
</code></pre>
|
|
|
|
|
|
<p>一開始這樣作還相安無事，但是呢，慢慢的時不時會有USER反應說無法連接 Internet</p>
|
|
|
|
|
|
<p>照理來說，因為都是透過proxy上網，所以如果是proxy server出問題，那其他電腦應該也不行上Internet</p>
|
|
|
|
|
|
<p>但如果這樣的話，那就一點也不詭異了呀(攤手)</p>
|
|
|
|
|
|
<p>實際上的狀況是，只有反應的USER的電腦無法連接Internet</p>
|
|
|
|
|
|
<p>然後真的詭異的來了</p>
|
|
|
|
|
|
<p>用USER電腦去 ping proxy server ，有時候會通，有時候不通..</p>
|
|
|
|
|
|
<p>從Proxy Server去 ping USER電腦，也是類似的狀況</p>
|
|
|
|
|
|
<p>可是我卻可以透過IPSEC VPN，分別SSH連接到這兩台機器上</p>
|
|
|
|
|
|
<p>這代表兩台的網路都OK呀..</p>
|
|
|
|
|
|
<p>正當我百思不得其解的時候，突然 USER電腦那邊的 ping 有反應了</p>
|
|
|
|
|
|
<p>變成可以 ping proxy Server 了！ (What the FXXX !!!!)</p>
|
|
|
|
|
|
<p>我什麼都沒改呀…</p>
|
|
|
|
|
|
<hr>
|
|
|
|
|
|
<p>反正呢…</p>
|
|
|
|
|
|
<p>這種狀況三不五時就會出現一次，會出現在哪一台電腦也不一定</p>
|
|
|
|
|
|
<p>不過，依照觀察到的狀況來說，似乎都是發生在很少開機的電腦上</p>
|
|
|
|
|
|
<p>然後呢，因為底層是 KVM</p>
|
|
|
|
|
|
<p>我也嘗試過用virsh 去restart VM 或者是 restart network</p>
|
|
|
|
|
|
<p>有時候可以解決，有時候又還是不能連接</p>
|
|
|
|
|
|
<p>於是另外測試安裝了 proxmox VE 的虛擬平台</p>
|
|
|
|
|
|
<p>在上面起一台新的Server，再用 ansible 做成 build server的角色</p>
|
|
|
|
|
|
<p>這樣子作的機器，就不會發生這種狀況</p>
|
|
|
|
|
|
<p>所以我在猜是不是跟底層是KVM有關係..</p>
|
|
|
|
|
|
<p>不過要動這個的話，工程有點大，手邊也沒那麼多機器可以替換(很慘)</p>
|
|
|
|
|
|
<p>暫時先保留這個作法，等到下次再發生這狀況</p>
|
|
|
|
|
|
<p>再來找老闆看這情形，然後來討論要不要換掉各分公司的VM Host…</p>
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<div class="footer">
|
|
|
|
|
|
|
|
|
|
|
|
<div class="tags">
|
|
|
<i class="fa fa-tags"></i>
|
|
|
<div class="links">
|
|
|
|
|
|
<a href="/tags/ubuntu">ubuntu</a>
|
|
|
|
|
|
<a href="/tags/%E7%AD%86%E8%A8%98">筆記</a>
|
|
|
|
|
|
</div>
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
</article>
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<div id="disqus_thread"></div>
|
|
|
<script type="application/javascript">
|
|
|
var disqus_config = function () {
|
|
|
|
|
|
|
|
|
|
|
|
};
|
|
|
(function() {
|
|
|
if (["localhost", "127.0.0.1"].indexOf(window.location.hostname) != -1) {
|
|
|
document.getElementById('disqus_thread').innerHTML = 'Disqus comments not available by default when the website is previewed locally.';
|
|
|
return;
|
|
|
}
|
|
|
var d = document, s = d.createElement('script'); s.async = true;
|
|
|
s.src = '//' + "h-cowbay-org-1" + '.disqus.com/embed.js';
|
|
|
s.setAttribute('data-timestamp', +new Date());
|
|
|
(d.head || d.body).appendChild(s);
|
|
|
})();
|
|
|
</script>
|
|
|
<noscript>Please enable JavaScript to view the <a href="https://disqus.com/?ref_noscript">comments powered by Disqus.</a></noscript>
|
|
|
<a href="https://disqus.com" class="dsq-brlink">comments powered by <span class="logo-disqus">Disqus</span></a>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<footer>
|
|
|
<div class="container">
|
|
|
|
|
|
|
|
|
<div class="recent-posts">
|
|
|
<strong>Latest posts</strong>
|
|
|
<ul>
|
|
|
|
|
|
<li>
|
|
|
<a href="/post/change-preferred-language-in-firefox/">[筆記] 為了metabase 修改 firefox 開啟網頁時使用的預設語言 change the preferred language in firefox for metabase</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/post/copy_role_in_pgsql/">PostgreSQL 直接從已經存在的使用者複製權限到另一個使用者</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/post/weird-client-server-connection/">[筆記] 詭異的client&server間連線的問題，或許跟KVM有關係？</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/post/nice-du-report-tool-durep/">Nice Du Report Tool Durep</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/post/bookstack-docker/">Bookstack Docker</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/articles/enable-synology-public-ssh/">筆記- 啟用群暉NAS (Synology NAS)的SSH Server 透過Publickey 認證免密碼登入</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/gallery/sammy93/">Sammy93</a>
|
|
|
</li>
|
|
|
|
|
|
</ul>
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
|
|
<div class="categories">
|
|
|
<a href="/categories/"><strong>Categories</strong></a>
|
|
|
<ul>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (6)</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/ps">Ps (1)</a>
|
|
|
</li>
|
|
|
|
|
|
</ul>
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<div class="right">
|
|
|
|
|
|
<div class="external-profiles">
|
|
|
<strong>Social media</strong>
|
|
|
|
|
|
|
|
|
<a href="https://www.facebook.com/mariahchang" target="_blank"><i class="fa fa-facebook-adblock-proof"></i></a>
|
|
|
|
|
|
|
|
|
<a href="https://twitter.com/changchichung" target="_blank"><i class="fa fa-twitter-adblock-proof"></i></a>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<a href="https://github.com/changchichung" target="_blank"><i class="fa fa-github"></i></a>
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
</div>
|
|
|
</footer>
|
|
|
|
|
|
|
|
|
<div class="credits">
|
|
|
<div class="container">
|
|
|
<div class="copyright">
|
|
|
<a href="https://github.com/Lednerb" target="_blank">
|
|
|
©
|
|
|
|
|
|
2017
|
|
|
|
|
|
by Lednerb
|
|
|
</a>
|
|
|
|
|
|
</div>
|
|
|
<div class="author">
|
|
|
<a href="https://github.com/Lednerb/bilberry-hugo-theme" target="_blank">Bilberry Hugo Theme</a>
|
|
|
</div>
|
|
|
</div>
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
|
|
<script type="application/javascript">
|
|
|
var doNotTrack = false;
|
|
|
if (!doNotTrack) {
|
|
|
window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date;
|
|
|
ga('create', 'UA-128770427-1', 'auto');
|
|
|
|
|
|
ga('send', 'pageview');
|
|
|
}
|
|
|
</script>
|
|
|
<script async src='https://www.google-analytics.com/analytics.js'></script>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<script type="text/javascript" src="https://h.cowbay.org/js/externalDependencies.39c47e10e241eae2947b3fe21809c572.js" integrity="md5-OcR+EOJB6uKUez/iGAnFcg=="></script>
|
|
|
|
|
|
|
|
|
|
|
|
<script type="text/javascript" src="https://h.cowbay.org/js/theme.ff50ae6dc1bfc220b23bf69dbb41b54e.js" integrity="md5-/1CubcG/wiCyO/adu0G1Tg=="></script>
|
|
|
|
|
|
<script>
|
|
|
$(".moment").each(function() {
|
|
|
$(this).text(
|
|
|
moment( $(this).text() )
|
|
|
.locale( "en" )
|
|
|
.format('LL')
|
|
|
);
|
|
|
});
|
|
|
|
|
|
$(".footnote-return sup").html("");
|
|
|
</script>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<script>
|
|
|
var client = algoliasearch("2XL0P8XDCY", "4ef65b37b627bb886b46c34a10e63aa6");
|
|
|
var index = client.initIndex("h_cowbay_org");
|
|
|
|
|
|
$('#search').autocomplete({ hint: false, autoselect: true, debug: false },
|
|
|
[
|
|
|
{
|
|
|
|
|
|
source: $.fn.autocomplete.sources.hits(index, { hitsPerPage: 10 }),
|
|
|
|
|
|
displayKey: function(suggestion) {
|
|
|
return suggestion.title || suggestion.author
|
|
|
},
|
|
|
templates: {
|
|
|
suggestion: function(suggestion) {
|
|
|
return "<span class='entry " + suggestion.type + "'>"
|
|
|
+ "<span class='title'>" + suggestion.title + "</span>"
|
|
|
+ "<span class='fa fa-fw " + suggestion.iconClass + "'></span>"
|
|
|
+ "</span>"
|
|
|
;
|
|
|
},
|
|
|
empty: function() {
|
|
|
return "<span class='empty'>Nothing found.</span>"
|
|
|
},
|
|
|
footer: function() {
|
|
|
return '<div class="branding">Powered by <img src="https:\/\/h.cowbay.org\/dist\/algolia-logo-light.svg" /></div>'
|
|
|
}
|
|
|
|
|
|
},
|
|
|
}
|
|
|
])
|
|
|
.on('autocomplete:selected', function(event, suggestion, dataset) {
|
|
|
window.location = (suggestion.url);
|
|
|
})
|
|
|
.keypress(function (event, suggestion) {
|
|
|
if (event.which == 13) {
|
|
|
window.location = (suggestion.url);
|
|
|
}
|
|
|
});
|
|
|
</script>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</body>
|
|
|
</html>
|
