`<\/code>bash<\/p>\n# \u4f4e\u5bb9\u91cf (1 CPU, 4GB RAM)<\/p>\n
sudo pritunl set app.request_queue_size 200<\/p>\n
sudo pritunl set app.request_accepted_queue_size 100<\/p>\n
sudo pritunl set app.request_thread_count 20<\/p>\n
sudo pritunl set app.request_max_thread_count 100<\/p>\n
# \u6807\u51c6\u5bb9\u91cf (2 CPU, 4GB RAM)<\/p>\n
sudo pritunl set app.request_queue_size 600<\/p>\n
sudo pritunl set app.request_accepted_queue_size 300<\/p>\n
sudo pritunl set app.request_thread_count 50<\/p>\n
sudo pritunl set app.request_max_thread_count 300<\/p>\n
# \u9ad8\u5bb9\u91cf (4 CPU, 4GB RAM)<\/p>\n
sudo pritunl set app.request_queue_size 1200<\/p>\n
sudo pritunl set app.request_accepted_queue_size 600<\/p>\n
sudo pritunl set app.request_thread_count 100<\/p>\n
sudo pritunl set app.request_max_thread_count 600<\/p>\n
# \u6781\u9650\u5bb9\u91cf (8 CPU, 8GB RAM)<\/p>\n
sudo pritunl set app.request_queue_size 4000<\/p>\n
sudo pritunl set app.request_accepted_queue_size 2000<\/p>\n
sudo pritunl set app.request_thread_count 100<\/p>\n
sudo pritunl set app.request_max_thread_count 2000<\/p>\n
`<\/code><\/p>\nOpenVPN \u8c03\u4f18<\/h3>\n1. \u9009\u62e9\u5408\u9002\u7684\u52a0\u5bc6\u7b97\u6cd5<\/h4>\n
`<\/code>bash<\/p>\n# AES-128-GCM\uff08\u63a8\u8350\uff0c\u6027\u80fd\u6700\u4f73\uff09<\/p>\n
sudo pritunl set app.encryption_cipher aes-128-gcm<\/p>\n
# SHA-256 \u54c8\u5e0c<\/p>\n
sudo pritunl set app.hash_algorithm SHA-256<\/p>\n
`<\/code><\/p>\n2. \u542f\u7528 WireGuard<\/h4>\n
WireGuard \u6027\u80fd\u4f18\u4e8e OpenVPN\uff1a<\/p>\n
\n- \u5728\u670d\u52a1\u5668\u8bbe\u7f6e\u4e2d\u542f\u7528 WireGuard<\/li>\n
- \u7528\u6237\u53ef\u5728\u5ba2\u6237\u7aef\u5207\u6362\u534f\u8bae<\/li>\n<\/ol>\n
3. \u8c03\u6574 MTU<\/h4>\n
`<\/code>bash<\/p>\n# \u68c0\u67e5\u8def\u5f84 MTU<\/p>\n
ping -M do -s 1400 <\/p>\n
# \u8bbe\u7f6e MTU\uff08\u5982\u9700\u8981\uff09<\/p>\n
sudo pritunl set app.mtu 1400<\/p>\n
`<\/code><\/p>\n\u6570\u636e\u5e93\u8c03\u4f18<\/h3>\nMongoDB WiredTiger \u7f13\u5b58<\/h4>\n
`<\/code>yaml<\/p>\n# \/etc\/mongod.conf<\/p>\n
storage:<\/p>\n
wiredtiger:<\/p>\n
engineConfig:<\/p>\n
cacheSizeGB: 2 # \u6839\u636e\u5185\u5b58\u8c03\u6574<\/p>\n
`<\/code><\/p>\n\u7d22\u5f15\u4f18\u5316<\/h4>\n
`<\/code>javascript<\/p>\n\/\/ \u8fde\u63a5\u5230 MongoDB<\/p>\n
mongo<\/p>\n
\/\/ \u67e5\u770b\u7d22\u5f15<\/p>\n
use pritunl<\/p>\n
db.users.getIndexes()<\/p>\n
\/\/ \u521b\u5efa\u7d22\u5f15\uff08\u5982\u9700\u8981\uff09<\/p>\n
db.users.createIndex({ “org_id”: 1, “status”: 1 })<\/p>\n
`<\/code><\/p>\n\u63d2\u4ef6\u5f00\u53d1<\/h2>\n\u63d2\u4ef6\u7cfb\u7edf\u6982\u8ff0<\/h3>\n
Pritunl \u652f\u6301 Python \u63d2\u4ef6\u6269\u5c55\u529f\u80fd\uff1a<\/p>\n
`<\/code>python<\/p>\n# plugin_example.py<\/p>\n
def on_user_connect(user, server, client_address):<\/p>\n
“””\u7528\u6237\u8fde\u63a5\u65f6\u89e6\u53d1”””<\/p>\n
print(f”User {user[‘name’]} connected from {client_address}”)<\/p>\n
def on_user_disconnect(user, server, client_address):<\/p>\n
“””\u7528\u6237\u65ad\u5f00\u65f6\u89e6\u53d1”””<\/p>\n
print(f”User {user[‘name’]} disconnected”)<\/p>\n
def on_server_start(server):<\/p>\n
“””\u670d\u52a1\u5668\u542f\u52a8\u65f6\u89e6\u53d1”””<\/p>\n
print(f”Server {server[‘name’]} started”)<\/p>\n
def on_server_stop(server):<\/p>\n
“””\u670d\u52a1\u5668\u505c\u6b62\u65f6\u89e6\u53d1”””<\/p>\n
print(f”Server {server[‘name’]} stopped”)<\/p>\n
`<\/code><\/p>\n\u63d2\u4ef6\u4e8b\u4ef6<\/h3>\n
\n\n| \u4e8b\u4ef6<\/th>\n | \u8bf4\u660e<\/th>\n | \u53c2\u6570<\/th>\n<\/tr>\n<\/table>\n |——|——|——|<\/p>\n \n\non_user_connect<\/code><\/th>\n| \u7528\u6237\u8fde\u63a5<\/th>\n | user, server, client_address<\/th>\n<\/tr>\n | \non_user_disconnect<\/code><\/td>\n| \u7528\u6237\u65ad\u5f00<\/td>\n | user, server, client_address<\/td>\n<\/tr>\n | \non_server_start<\/code><\/td>\n| \u670d\u52a1\u5668\u542f\u52a8<\/td>\n | server<\/td>\n<\/tr>\n | \non_server_stop<\/code><\/td>\n| \u670d\u52a1\u5668\u505c\u6b62<\/td>\n | server<\/td>\n<\/tr>\n | \non_server_update<\/code><\/td>\n| \u670d\u52a1\u5668\u66f4\u65b0<\/td>\n | server<\/td>\n<\/tr>\n<\/table>\n\u5b89\u88c5\u63d2\u4ef6<\/h3>\n\n- \u5c06\u63d2\u4ef6\u6587\u4ef6\u653e\u5230
\/var\/lib\/pritunl\/plugins\/<\/code><\/li>\n- \u5728 Web \u63a7\u5236\u53f0\u542f\u7528\u63d2\u4ef6<\/li>\n
- \u91cd\u542f Pritunl<\/li>\n<\/ol>\n
API \u4f7f\u7528<\/h2>\n\u8ba4\u8bc1<\/h3>\n`<\/code>bash<\/p>\n# \u83b7\u53d6 API \u5bc6\u94a5<\/p>\n sudo pritunl set app.api_key “YOUR_API_KEY”<\/p>\n # \u6216\u5728 Web \u63a7\u5236\u53f0\u8bbe\u7f6e\u4e2d\u914d\u7f6e<\/p>\n `<\/code><\/p>\n\u5e38\u7528 API \u793a\u4f8b<\/h3>\n\u83b7\u53d6\u6240\u6709\u7528\u6237<\/h4>\n`<\/code>bash<\/p>\ncurl -k “https:\/\/your-server\/api\/v1\/user” <\/p>\n -H “Auth-Token: YOUR_TOKEN” <\/p>\n -H “Auth-Secret: YOUR_SECRET”<\/p>\n `<\/code><\/p>\n\u521b\u5efa\u7528\u6237<\/h4>\n`<\/code>bash<\/p>\ncurl -k -X POST “https:\/\/your-server\/api\/v1\/user” <\/p>\n -H “Auth-Token: YOUR_TOKEN” <\/p>\n -H “Auth-Secret: YOUR_SECRET” <\/p>\n -H “Content-Type: application\/json” <\/p>\n -d ‘{<\/p>\n “organization_id”: “ORG_ID”,<\/p>\n “name”: “new_user”,<\/p>\n “email”: “user@example.com”,<\/p>\n “pin”: “1234”<\/p>\n }’<\/p>\n `<\/code><\/p>\n\u83b7\u53d6\u670d\u52a1\u5668\u72b6\u6001<\/h4>\n`<\/code>bash<\/p>\ncurl -k “https:\/\/your-server\/api\/v1\/server\/SERVER_ID” <\/p>\n -H “Auth-Token: YOUR_TOKEN” <\/p>\n -H “Auth-Secret: YOUR_SECRET”<\/p>\n `<\/code><\/p>\nAPI \u81ea\u52a8\u5316\u811a\u672c<\/h3>\n`<\/code>python<\/p>\n#!\/usr\/bin\/env python3<\/p>\n # pritunl_api.py<\/p>\n import requests<\/p>\n import json<\/p>\n class PritunlAPI:<\/p>\n def __init__(self, base_url, api_key, api_secret):<\/p>\n self.base_url = base_url<\/p>\n self.headers = {<\/p>\n ‘Auth-Token’: api_key,<\/p>\n ‘Auth-Secret’: api_secret,<\/p>\n ‘Content-Type’: ‘application\/json’<\/p>\n }<\/p>\n def get_users(self, org_id):<\/p>\n url = f”{self.base_url}\/api\/v1\/user\/{org_id}”<\/p>\n response = requests.get(url, headers=self.headers, verify=False)<\/p>\n return response.json()<\/p>\n def create_user(self, org_id, name, email, pin=None):<\/p>\n url = f”{self.base_url}\/api\/v1\/user\/{org_id}”<\/p>\n data = {<\/p>\n ‘name’: name,<\/p>\n ’email’: email<\/p>\n }<\/p>\n if pin:<\/p>\n data[‘pin’] = pin<\/p>\n response = requests.post(url, headers=self.headers, json=data, verify=False)<\/p>\n return response.json()<\/p>\n def delete_user(self, org_id, user_id):<\/p>\n url = f”{self.base_url}\/api\/v1\/user\/{org_id}\/{user_id}”<\/p>\n response = requests.delete(url, headers=self.headers, verify=False)<\/p>\n return response.status_code<\/p>\n # \u4f7f\u7528\u793a\u4f8b<\/p>\n api = PritunlAPI(‘https:\/\/vpn.example.com’, ‘api_key’, ‘api_secret’)<\/p>\n users = api.get_users(‘org_id’)<\/p>\n print(json.dumps(users, indent=2))<\/p>\n `<\/code><\/p>\n\u5347\u7ea7\u4e0e\u7ef4\u62a4<\/h2>\n\u5347\u7ea7 Pritunl<\/h3>\n`<\/code>bash<\/p>\n# AlmaLinux\/Rocky Linux<\/p>\n sudo dnf update pritunl<\/p>\n # Ubuntu<\/p>\n sudo apt update<\/p>\n sudo apt upgrade pritunl<\/p>\n # \u91cd\u542f\u670d\u52a1<\/p>\n sudo systemctl restart pritunl<\/p>\n `<\/code><\/p>\n\u5347\u7ea7 MongoDB<\/h3>\n`<\/code>bash<\/p>\n# \u5907\u4efd\u6570\u636e\u5e93<\/p>\n mongodump –uri=”mongodb:\/\/…” –out=\/backup\/pre_upgrade<\/p>\n # \u5347\u7ea7 MongoDB<\/p>\n sudo apt update<\/p>\n sudo apt upgrade mongodb-org<\/p>\n # \u91cd\u542f<\/p>\n sudo systemctl restart mongod<\/p>\n `<\/code><\/p>\n\u6eda\u52a8\u5347\u7ea7\uff08\u96c6\u7fa4\uff09<\/h3>\n\n- \u5347\u7ea7 Secondary \u8282\u70b9<\/li>\n
- \u9a8c\u8bc1 Secondary \u6b63\u5e38<\/li>\n
- \u5207\u6362 Primary<\/li>\n
- \u5347\u7ea7\u539f Primary<\/li>\n
- \u9a8c\u8bc1\u6240\u6709\u8282\u70b9<\/li>\n<\/ol>\n
\u6545\u969c\u6392\u67e5<\/h2>\n\u5e38\u89c1\u95ee\u9898<\/h3>\nQ1: \u8fde\u63a5\u91cd\u7f6e\u9519\u8bef<\/h4>\n\u75c7\u72b6<\/strong>\uff1a\u5ba2\u6237\u7aef\u65e5\u5fd7\u663e\u793a “connection reset by peer”<\/p>\n\u89e3\u51b3<\/strong>\uff1a<\/p>\n`<\/code>bash<\/p>\n# \u589e\u52a0\u961f\u5217\u5bb9\u91cf<\/p>\n sudo pritunl set app.request_queue_size 600<\/p>\n sudo pritunl set app.request_thread_count 50<\/p>\n sudo systemctl restart pritunl<\/p>\n `<\/code><\/p>\nQ2: \u6570\u636e\u5e93\u8fde\u63a5\u5931\u8d25<\/h4>\n\u68c0\u67e5<\/strong>\uff1a<\/p>\n`<\/code>bash<\/p>\n# \u68c0\u67e5 MongoDB \u72b6\u6001<\/p>\n sudo systemctl status mongod<\/p>\n # \u6d4b\u8bd5\u8fde\u63a5<\/p>\n mongo –host localhost –port 27017 -u pritunl -p password<\/p>\n `<\/code><\/p>\nQ3: \u96c6\u7fa4\u8282\u70b9\u4e0d\u540c\u6b65<\/h4>\n\u68c0\u67e5<\/strong>\uff1a<\/p>\n
| | | | | | |