DEV Community: kunzhu0710

Tencent Cloud COS enables FTP function

kunzhu0710 — Mon, 18 Jul 2022 07:36:15 +0000

My website has always used Tencent Cloud's COS , and static resources such as pictures, JS, and CSS exist on it, and the speed is ideal. But there is a common point: file management is quite inconvenient. Although uploading files can support a single file of 20G, deleting files can only be deleted one by one, and when there are files in the folder, they cannot be deleted. Delete things one by one, then delete the folder. Some people may say, just put it there, it doesn't affect it anyway, but for my obsessive-compulsive disorder, this is unbearable! ! Sometimes I really delete one by one, it's really hard.

So today I did some research on the Internet and found that there is an official API on the Internet to write scripts for batch control, which is not bad, and the wp plug-in is used. Next is the focus of this article, super invincible and convenient: apply for official FTP permissions to manage files.
step:

Log in to Tencent Cloud official website and enter the console;
Click on the upper right corner: work order - my work order;
Left: Submit a work order - please select the problem category - storage and CDN - object storage COS;
Then select: Enable FTP function. Fill in the Bucket for which you want to enable the FTP function below;
You're done! The review speed did not say, I had to pass it in about 7-8 minutes.

At this point, it is almost completed, the rest is to create an FTP account (object storage service-Bucke list-modify configuration-FTP settings), and then log in with Winscp, you can see all files, no more Every time I upload a file, I have to log in to the official website and upload it. You can operate it at will here. Of course, the risk is also greater. If you make a mistake, it will be in vain. Here are some instructions for FTP:
Client configuration:

Address: ftp://ftp.file.myqcloud.com Port number: 9421 Encryption method: TLS explicit encryption (recommended) or no encryption (not recommended) Connection mode: pasv Passive mode timeout setting: 300 seconds (recommended)

Functional limitations:

Download operations are not supported. Remote move, copy, and rename operations are not supported. The maximum file limit is 100 MB.

Tencent cloud cos upload file template

kunzhu0710 — Fri, 15 Jul 2022 08:50:06 +0000

# -*- coding=utf-8
# 1. set config, 包括 secretId，secretKey 以及 Region
# python3 install
# pip3 install qcloud_cos_py3
# pip3 install cos-python-sdk-v5
from qcloud_cos import CosConfig
from qcloud_cos import CosS3Client
import sys

secret_id = 'xxxxxx'  
secret_key = 'xxxxxxx'  
region = 'ap-shanghai'  
APPID = "xxxxxx"  # APPID
bucket_name = "xxxx"  
bucket = f'{bucket_name}-{APPID}' 
config = CosConfig(Region=region, SecretId=secret_id, SecretKey=secret_key)
# 2. get client object
client = CosS3Client(config)


def cos_list_buckets():

    response = client.list_buckets(
    )
    print(response)


def cos_bucket_status(Bucket):

    try:
        response = client.head_bucket(
            Bucket=Bucket,
        )
        if not response:
            return True
    except:
        return None


def cos_upload_file(Bucket, LocalFilePath, Key):

    response = client.upload_file(
        Bucket='xxxxxx',  
        LocalFilePath=LocalFilePath,  
        Key=Key,  
    )
    ETag = response["ETag"]
    return f'https://{Bucket}.cos.{region}.myqcloud.com/{Key}'


if __name__ == '__main__':
    bucket = 'xxxx'
    LocalFilePath = 'test.jpeg'  
    Key = 'test.jpeg' 

    print(cos_upload_file(bucket, LocalFilePath, Key))

tencent cloud cos

Playing with Tencent Cloud CVM to test external network bandwidth

kunzhu0710 — Fri, 15 Jul 2022 07:48:46 +0000

In the cloud environment, CVMs generally access the network through multi-line BGP. In the actual use process, users may encounter situations where the bandwidth of the external network does not meet expectations. Under normal circumstances, as long as the terminal operator is a domestic and foreign mainstream operator, the operator will directly interconnect with Tencent Cloud, and the inbound and outbound bandwidth of CVM can meet expectations. If the client is a small operator and there is no access to the cloud, the inbound and outbound bandwidth of the CVM is often not up to the standard due to cross-operator communication. In this case, it is generally necessary to use a third-party speed measurement tool to prove that the inbound and outbound bandwidth on the cloud is normal.
Generally for bandwidth and latency testing, Speedtest is usually used, which is the most popular and most reliable method for measuring Internet performance. With Speedtest, you can accurately test the connection speed of any device at any time at home, at work, or on the go. Speedtest does not rely on background testing to covertly collect data at inappropriate times. Speedtest's analytics are based solely on actual internet speeds experienced by hundreds of millions of consumers around the world. Speedtest has 8,500 test points around the world, which can guarantee the greatest possible measurement of the real actual bandwidth during the test.

Windows System Bandwidth Test

The test method for Windows is relatively simple. You only need to use the flow device to visit the https://www.speedtest.net website to test. The webpage is based on html5 and can be tested without installing the Flash plug-in on the client side. The system will automatically recommend the nearest test point for testing according to the client's access IP address, and you can directly click the GO button to test.
Visit Speedtest.net website and click the GO button to test
First, the delay is tested. The delay test is based on the delay statistics from the client to the speedtest test node. The download bandwidth and upload bandwidth of the client are tested. After the test, the maximum value of the final test result will be printed.

Speedtest test results display

Linux system bandwidth test

Since most of the Linux systems on the cloud do not have a desktop environment installed, the browser is used to access the speed test website for testing. This article uses the test script provided by Speedtest to perform network testing on the command line interface. For specific test scripts, you can visit GitHub to download the test scripts, or run the following commands directly on the system to download:
git clone https://github.com/suxin1110/SpeedTest.git
The downloaded py script needs to execute the following command to directly perform the delay and external network inbound and outbound bandwidth test in bash
chmod a+rx speedtest.py
sudo mv speedtest.py /usr/local/bin/speedtest
sudo chown root:root /usr/local/bin/speedtest
At this point, you can directly type speedtest in bash to test, or test the delay first, and then test the download and upload bandwidth from the Internet.
Enter the speedtest command on the Linux command line interface to start the test script
Here are some simple speedtest test commands
speedtest
speedtest --share
speedtest --list
speedtest --server ***
For detailed speedtest test commands, you can directly type speedtest -h to view the help description.

Migrate Apache data on Tencent Cloud CVM

kunzhu0710 — Fri, 15 Jul 2022 07:40:43 +0000

Introduction

On Debian 8, the Apache2 web server default file is /var/www/html in . This directory is located on the root file system along with the operating system. You might want to move the document to another directory, such as mounting the filesystem separately.
In this tutorial, you will migrate Apache default files to a new location by moving files and changing Apache's configuration files.

Prepare

To complete this tutorial, you will need:

A non-root Debian 8 server that can use the sudo command, I recommend using Tencent Cloud's configured server . Or use Tencent Cloud Developer Lab for*free* to experiment.
An Apache2 web server. For the installation tutorial, you can refer to here.
Move the new location of the directory, here I use Tencent Cloud's file storage service .

In this tutorial, we will use a directory, which points to a file storage /mnt/volume-nyc1-01 service mounted to the server .

Step 1 - Copy the files to the new location

When installing a fresh Apache, the document root is located at /var/www/html . If you have a lot of websites on your server, the documentation directory will be different, and it is recommended that you search using the scheme below.
You can grep search the directory for Apache configuration documentation using the /etc/apache2/sites-enabled following command:
grep -R "DocumentRoot" /etc/apache2/sites-enabled copy
-R The flag ensures that grep the contents of the DocumentRoot are output in it.
The results will be similar to the following, if you install the site multiple results names and numbers may be different:
sites-enabled/000-default.conf DocumentRoot /var/www/html copy
Now that you have confirmed the location of the document root, rsync copy the files to the new location using the command.
First, install with the following command rsync :
sudo apt-get install rsync copy
Then execute this command to copy the files:
sudo rsync -av /var/www/html /mnt/volume-nyc1-01 copy
Using -a flags preserves permissions and other directory attributes, while -v providing verbose output so you can track progress.

Note: Make sure there are no trailing slashes on the directory. When there is a slash, rsync dumps the contents of the directory to the mount point instead of transferring it into the html directory.

These files will be synced to the new location, but now that the Apache configuration files are still using the old directory, we need to configure the new files.

Step 2 - Update the configuration file

By default Apache comes with two virtual host files, 000-default.conf and default-ssl.conf .
First edit the 000-default.conf file:
sudo nano /etc/apache2/sites-enabled/000-default.conf copy
Find DocumentRoot the line starting with and update it with the new position:

<VirtualHost *:80>
 ...
        ServerAdmin webmaster@localhost
        DocumentRoot /mnt/volume-nyc1-01/html

copy
Next, look up Directory to see if it points to the original path, we need to update it to the new path. In a fresh install of Apache, there is no entry in the Directory default site. Add the following code to the configuration file so that Apache can use the new file from the new location:

 ...
     ServerAdmin webmaster@localhost
     DocumentRoot /mnt/volume-nyc1-01/html

     <Directory />
         Options FollowSymLinks
         AllowOverride None
     </Directory>
     <Directory /mnt/volume-nyc1-01/html/>
         Options Indexes FollowSymLinks MultiViews
         AllowOverride None
         Require all granted
    </Directory>
 ...

copy
The first Directory block sets some restrictive default permissions, and the second block configures the options for the new web /mnt/volume-nyc1-01/html/ in .

Note: You should look for the other location in the config file where the original path shows and change it to the new location. In addition to DocumentRoot and Directory settings, you can also find things like aliases and overrides that need to be updated. Wherever you grep see the path to the original document root in the output, you will need to update the path to reflect the new location.

After making the necessary changes, save the file.
Next, we turn to SSL configuration. On a fresh install, SSL has not been configured, if you have never configured SSL, ignore the following.

Note: If SSL is not enabled, the ssl-default.conf files are only in the /etc/apache2/sites-available directory. If you have SSL enabled, the server will sites-available link to the /etc/apache2/sites-enabled directory from the file. In this case, you can edit the file from either directory.

sudo nano /etc/apache2/sites-available/ssl-default.conf copy
Make the same changes as before by making changes DocumentRoot and making sure to configure them correctly: Directory

 ...
<IfModule mod_ssl.c>
  <VirtualHost _default_:443>
     ServerAdmin webmaster@localhost
     DocumentRoot /mnt/volume-nyc1-01

     <Directory />
         Options FollowSymLinks
         AllowOverride None
     </Directory>
     <Directory /mnt/volume-nyc1-01/html/>
         Options Indexes FollowSymLinks MultiViews
         AllowOverride None
         Require all granted
    </Directory>
 ...

copy
After making configuration changes, make sure the syntax is correct with the following command:
sudo apachectl configtest copy
You will see results like this:

AH00558: apache2: Could not reliably determine the server's fully qualified domain name, 
using 127.0.1.1. Set the 'ServerName' directive globally to suppress this message
Syntax OK

copy
In a default installation, you will see the preceding message, which you can safely ignore. As long as you see Syntax OK, restart the web server.
Restart Apache with the following command:
sudo systemctl reload apache2 copy
After the server restarts, go to the website you changed, and if all is well, don't forget to delete the original copy of the data.

in conclusion

In this tutorial, you learn to change the Apache document root to a new location. This can help you with basic web server management, and it also allows you to take advantage of other storage devices, such as Tencent Cloud File Storage Service , an important step in scaling your website as your needs change.

Play with Tencent Cloud CVM to build a WordPress site

kunzhu0710 — Fri, 15 Jul 2022 03:28:27 +0000

Cloud Virtual Machine (CVM) provides you with secure and flexible computing capabilities. You can enable CVM in the cloud in just minutes to meet your diverse computing needs. Through CVM, you can easily scale up or down your computing resources as your business needs change. Billed based on your actual resource consumption, CVM reduces your computing costs and simplifies IT-related OPS.

Operation scene

WordPress is a commonly used software for building personal blog websites, which is developed using PHP language. You can deploy WordPress and publish your personal blog through simple operations on Tencent Cloud servers.
This article introduces the method of manually deploying WordPress. If your website does not have high requirements for scalability, Tencent Cloud also provides an image method to deploy WordPress. For details, please refer to Deploying WordPress Using an Image .
This tutorial takes the Linux system CentOS 7.5 as an example to build a WordPress personal site. The specific operation methods are as follows:

Related Introduction

The following are the services or tools that will be used in this tutorial:

Cloud server : This tutorial uses Tencent Cloud Cloud Server (Cloud Virtual Machine, CVM) to create a cloud server instance to complete the construction of WordPress.
Domain Name Registration : If you want to use an easy-to-remember domain name to access your WordPress site, you can use Tencent Cloud Domain Name Registration Service to purchase a domain name.
*Website *filing : For websites whose domain names point to servers in China, website filing is required. Before the domain name obtains the record number, the website cannot be opened for use. You can record your domain name through the Tencent Cloud website record product.
Cloud DNS: After configuring domain name resolution, users can access your website through the domain name without using complex IP addresses to access your website. You can resolve domain names through Tencent Cloud's cloud DNS service.

Preconditions

You have logged in to the cloud server console .

Steps

Create and log in to a cloud server

Note: This step is for a new purchase of a cloud server. If you have purchased a cloud server instance, you can choose the WordPress website building system by reinstalling the system.

On the Instance List page, click New. For details, see QuickConfiguration of Linux ECS .
After the cloud server is successfully created, return to the cloud server console to view and obtain the following information about the instance. As shown below:

Cloud server instance username and password
Cloud server instance public IP

Build LNMP environment

LNMP is short for Linux, Nginx, MariaDB, and PHP, and this combination is one of the most common operating environments for web servers. After creating and logging in to the cloud server instance, you can start to build the LNMP environment. LNMP composition and use version description:

Linux: Linux system, this article uses CentOS7.5
Nginx: Web server program, used to parse Web programs, this article uses Nginx1.12.2
MariaDB: A database management system, this article uses MariaDB10.2.4
PHP: A program for generating web pages by a web server. This article uses PHP7.2.17

Install software and configure using yum

After logging in to the cloud server, you have obtained root privileges by default. With root privileges, follow the steps below to install step by step.

Install and configure Nginx

Execute the following command to install Nginx. yum -y install nginx
1. Execute the following command to open the nginx.conf file. vim /etc/nginx/nginx.conf
2. Press " i " or " Insert " to switch to edit mode, nginx.conf and replace the contents of server{...} in the file with the following. It is used to cancel the monitoring of IPv6 addresses, and configure Nginx to realize linkage with PHP.

server {
 listen       80;
 root   /usr/share/nginx/html;
 server_name  localhost;
 #charset koi8-r;
 #access_log  /var/log/nginx/log/host.access.log  main;
 #
 location / {
         index index.php index.html index.htm;
 }
 #error_page  404              /404.html;
 #redirect server error pages to the static page /50x.html
 #
 error_page   500 502 503 504  /50x.html;
 location = /50x.html {
     root   /usr/share/nginx/html;
 }
 #pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
 #
 location ~ .php$ {
     fastcgi_pass   127.0.0.1:9000;
     fastcgi_index  index.php;
     fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
     include        fastcgi_params;
  }
}

copy

Press " Esc ", enter " :wq ", save the file and return.
Execute the following commands in sequence to start Nginx and set it to auto-start at boot. systemctl start nginx systemctl enable nginx In a browser, visit the public IP address of the CentOS cloud server instance to check whether the Nginx service is running normally. If the following is displayed, it means that the Nginx installation and configuration are successful.

Verify that nginx is installed successfully

Install and configure PHP

Execute the following command to update the PHP mirror source in yum. rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
1. Execute the following command to view all packages of PHP 7.2 that can be installed. yum search php72w
2. Execute the following commands to install the required packages. yum -y install mod_php72w.x86_64 php72w-cli.x86_64 php72w-common.x86_64 php72w-mysqlnd php72w-fpm.x86_64
3. Execute the following commands in sequence to start the PHP-FPM service and set it to auto-start at boot. systemctl start php-fpm systemctl enable php-fpm

Verify PHP-Nginx environment configuration

Execute the following command to create a index.php file in the web directory. vim /usr/share/nginx/html/index.php
1. Press " i " or " Insert " key to switch to edit mode, and write the following content. <?php echo "hello world!"; ?> Press " Esc ", enter " :wq ", save the file and return. In a browser, visit the index.php file to see if the environment configuration was successful. http://云服务器实例的公网 IP/index.php If the page is displayed as follows, the LNMP environment configuration is successful.

Verify PHP-Nginx environment configuration

Install and configure MariaDB

Execute the following command to check whether there is an existing MariaDB package in the system. rpm -qa | grep -i mariadb If the returned result is similar to the following, it means that MariaDB already exists, go to step 2. The mariadb component installed by default in CVM
Execute the following command to delete the existing MariaDB package. yum remove 包名
Execute the following command to install MariaDB. yum -y install mariadb mariadb-serve
Execute the following commands in sequence to start the MariaDB service and set it to auto-start at boot. systemctl start mariadb systemctl enable mariadb Run the following commands to set the root account login password and basic configuration. Notice:

For users who log in to MariaDB for the first time, execute the following commands to enter the user password and basic settings.
After entering the root account password for the first time, you need to press " Enter " (the interface is not displayed by default when the root password is set), and enter the root password again for confirmation. Please follow the prompts on the interface to complete the basic configuration.

mysql_secure_installation

Run the following command to log in to MariaDB, enter the password set in step 5, and press Enter. mysql -uroot -p If the result is as follows, it has successfully entered MariaDB. ## Install and configure WordPress

download

Note: WordPress can download the Chinese version of WordPress from the official WordPress website and install it. This tutorial uses the Chinese version of WordPress.

Execute the following command to delete the index.php file used to test the PHP-Nginx configuration in the root directory of the website. rm -rf /usr/share/nginx/html/index.php
Execute the following commands in sequence, enter the /usr/share/nginx/html/ directory, and download and decompress WordPress. cd /usr/share/nginx/html wget https://cn.wordpress.org/wordpress-4.7.4-zh_CN.tar.gz tar zxvf wordpress-4.7.4-zh_CN.tar.gz ### configuration database

Before writing a blog, you need to build a database to store all kinds of data. Follow the steps below for MariaDB database configuration.

Execute the following command to log in to the MariaDB server as the root user. mysql -uroot -pXXXXX（安装配置 MariaDB 设置的登录密码）
Run the following command to create the MariaDB database. For example "wordpress". CREATE DATABASE wordpress;
Execute the following command to create a new user. For example "user@localhost". CREATE USER user@localhost;
Execute the following command to set a password for the "user@localhost" user. For example "wordpresspassword". SET PASSWORD FOR user@localhost=PASSWORD("wordpresspassword");
Execute the following command to give the user full permissions to the "wordpress" database. GRANT ALL PRIVILEGES ON wordpress.* TO user@localhost IDENTIFIED BY 'wordpresspassword';
Execute the following commands to make all configurations take effect. FLUSH PRIVILEGES;
Execute the following command to exit MariaDB.
exit

write database information
Execute the following commands one by one, enter the WordPress installation directory, copy the wp-config-sample.php file to the wp-config.php file, and keep the original sample configuration file as a backup.
cd /usr/share/nginx/html/wordpress
cp wp-config-sample.php wp-config.php
Execute the following command to open and edit the newly created configuration file.
vim wp-config.php
Press "i" or "Insert" to switch to the edit mode, find the MySQL part in the file, and write the information about the configured database in the configuration database.

 // ** MySQL settings - You can get this info from your web host ** //
 /** The name of the database for WordPress */
 define('DB_NAME', 'wordpress');

 /** MySQL database username */
 define('DB_USER', 'user');

 /** MySQL database password */
 define('DB_PASSWORD', 'wordpresspassword');

 /** MySQL hostname */
 define('DB_HOST', 'localhost');

copy

After the modification is completed, press " Esc ", enter " :wq ", save the file and return.

Verify WordPress installation

Enter the public IP of the cloud server instance in the browser address bar or add the wordperss folder after the IP, for example: http://192.xxx.xxx.xx http://192.xxx.xxx.xx /wordpress Go to the WordPress installation page and start configuring WordPress. Configure WordPress
Enter the following installation information as prompted by the WordPress installation wizard, and click [Install WordPress] to complete the installation. Required Information Description Site Title WordPress Site Name. Username WordPress administrator name. For security reasons, it is recommended to set a name different from admin. Because this name is more difficult to crack than the default user name admin. The password can be a strong default password or a custom password. Do not reuse existing passwords, and be sure to keep them in a safe place. Your email The email address used to receive notifications.
You can now log in to your WordPress blog with and start publishing blog posts.

Follow-up
You can set up a separate domain name for your WordPress blog site. Your users can access your website with an easy-to-remember domain name without complex IP addresses. You can purchase domain names through Tencent Cloud .
Websites whose domain names point to servers in China must be registered. Before the domain name obtains the record number, the website cannot be opened for use. You can record your website. The filing is free, and the review time is about 20 days.
You need to configure domain name resolution on Tencent Cloud DNS before users can access your website through the domain name. For guidance, refer to Domain Name Resolution .

In addition, you can scale service capacity horizontally and vertically on the Tencent Cloud platform, for example:

Expand the CPU and memory specifications of a single CVM instance to increase the processing power of the server.
Add multiple CVM instances and use load balancing to balance load among multiple instances.
With elastic scaling , the number of CVM instances can be automatically increased or decreased according to the business volume.
Use object storage to store static web pages and massive pictures, videos, etc.

Install Ghost Personal Blog on Tencent Cloud CVM

kunzhu0710 — Fri, 15 Jul 2022 03:26:51 +0000

Cloud Virtual Machine (CVM) provides you with secure and flexible computing capabilities. You can enable CVM in the cloud in just minutes to meet your diverse computing needs. Through (CVM)[https://www.tencentcloud.com/products/cvm?from_social=dev_9] , you can easily scale up or down your computing resources as your business needs change. Billed based on your actual resource consumption, CVM reduces your computing costs and simplifies IT-related OPS.

introduce

Ghost is a lightweight JavaScript blogging platform, open source under the MIT license Ghost is designed to simplify the process of publishing personal websites and publishing online. Ghost is a personal blogging system, which is developed using Node.jslanguage and MySQL database, and supports MySQL , MariaDB , SQLite and PostgreSQL . Users can use their own blogs on servers that supportNode.js.Ghost officially supports the version, and there are third-party Chinese Chinese versions developed by fans, such as Ghost's Chinese Chinese version. Ghost provides an API for developing plugins and customizable Handlebars theme template styles.
In this tutorial, you will use the official ghost-cli Ghost instance to install on Ubuntu 16.04. We'll install Ghost, configure Nginx to proxy requests to Ghost, secure it with a Tencent Cloud free SSL certificate , and configure Ghost to run as a system service in the background.

Prepare

To complete this tutorial, you will need:

An Ubuntu 16.04 server, we recommend that you use Tencent Cloud's free developer lab to experiment.
Install Node.js on your server, how to install Node.js please refer to this article
Install Nginx on your server, how to install Nginx please refer to this article
Install MySQL on your server, how to install MySQL please refer to this article
Configure a domain name pointing to the server. You need to use the Tencent Cloud SSL certificate to enable SSL support through the installation of Ghost .

Step 1: Install the Ghost CLI application

ghost-cli We will install Ghost using the official program. The program installs Ghost, creates MySQL users and databases, configures Nginx as a reverse proxy, and secures the site with SSL/TLS encryption.
First, npm download with ghost-cli :
sudo npm i -g ghost-cli copy
We put Ghost in the var/www/ghost directory, which is the recommended installation location. Create this directory:
mkdir /var/www/ghost copy
Then make sure your user owns this directory.
sudo chown $USER:$USER /var/www/ghost copy
/var/www/ghost The directory must have all permissions for your user, and read and execute for everyone else, so set the permissions with:
sudo chmod 775 /var/www/ghost copy
After installing the CLI and mounting the directory, we can set up our blog.

The second step, install and configure Ghost

Ghost CLI The application has an installation wizard that will walk you through all the steps to configure a working Ghost blog.
Change to /var/www/ghost/ directory .
cd /var/www/ghost/ copy
Then ghost install Ghost with that command. It will configure Ghost to use MySQL as the default database. While you can use other databases, MySQL is the recommended choice.
ghost install copy
The installer will first make sure you have the necessary preparations installed, then download and install Ghost:

✔ Checking system Node.js version
✔ Checking logged in user
✔ Checking current folder permissions
✔ Checking operating system compatibility
✔ Checking for a MySQL installation
✔ Checking memory availability
✔ Checking for latest Ghost version
✔ Setting up install directory
✔ Downloading and installing Ghost v1.22.2
✔ Finishing install process

copy
Once the installation process is complete, you will be prompted to enter your blog URL along with MySQL database information. Provide the root username and password in this step . You can use the default ghost_prod as the database name.

? Enter your blog URL: http://example.com
? Enter your MySQL hostname: localhost
? Enter your MySQL username: root
? Enter your MySQL password: [hidden]
? Enter your Ghost database name: ghost_prod

copy
The configuration wizard will create a ghost system user and ask if a ghost MySQL user should be created, you should allow:

✔ Configuring Ghost
✔ Setting up instance
Running sudo command: useradd --system --user-group ghost
Running sudo command: chown -R ghost:ghost /var/www/ghost/content
✔ Setting up "ghost" system user
? Do you wish to set up "ghost" mysql user? Yes
✔ Setting up "ghost" mysql user

copy
Next, it will ask you if you want to configure Nginx. Click OK and the installer will create the appropriate reverse proxy server block for your blog:

? Do you wish to set up Nginx? Yes
✔ Creating nginx config file at /var/www/ghost/system/files/example.con.conf
Running sudo command: ln -sf /var/www/ghost/system/files/example.com.conf /etc/nginx/sites-available/example.com.conf
Running sudo command: ln -sf /etc/nginx/sites-available/example.com.conf /etc/nginx/sites-enabled/example.com.conf
Running sudo command: nginx -s reload
✔ Setting up Nginx

copy
Next, you will be prompted to set up SSL support. If you are using a registered domain name and have configured your DNS settings to point to your server's IP address, press N to continue.
Output? Do you wish to set up SSL? NO
First select NO here, and then we will apply for Tencent Cloud's SSL certificate for installation
Next, the configuration wizard will prompt you to set up the systemd service. Press Y continue and the wizard will create a ghost_example-com new systemd service called and make it start on boot:

? Do you wish to set up Systemd? Yes
✔ Creating systemd service file at /var/www/ghost/system/files/ghost_example-com.service
Running sudo command: ln -sf /var/www/ghost/system/files/ghost_example-com.service /lib/systemd/system/ghost_example-com.service
Running sudo command: systemctl daemon-reload
✔ Setting up Systemd

copy
Finally, the wizard will configure your database and ask if it should start Ghost, you should press Y :

Running sudo command: /var/www/ghost/current/node_modules/.bin/knex-migrator-migrate --init --mgpath /var/www/ghost/current
✔ Running database migrations
? Do you want to start Ghost? Yes
Running sudo command: systemctl is-active ghost_example-com
✔ Ensuring user is not logged in as ghost user
✔ Checking if logged in user is directory owner
✔ Checking current folder permissions
Running sudo command: systemctl is-active ghost_example-com
✔ Validating config
✔ Checking folder permissions
✔ Checking file permissions
✔ Checking content folder ownership
✔ Checking memory availability
Running sudo command: systemctl start ghost_example-com
✔ Starting Ghost
Running sudo command: systemctl is-enabled ghost_example-com
Running sudo command: systemctl enable ghost_example-com --quiet
✔ Starting Ghost

copy
Before enabling the configuration, we need to install the SSL certificate. The specific operation process is as follows:

Apply for Domain Name (DV) SSL Certificate

Apply for entrance

Enter the SSL certificate management console
Click【Apply for Certificate】
View the model of the domain name certificate applied for, and click [OK]

fill out the application

Fill in the application domain name, such as qcloud.com, cloud.tencent.com, demo.test.qlcud.com.

Manual DNS verification method

The certificate supports receiving DNS verification by default, and the verification method can be viewed for details.

Verify identity after submitting application

After the application is submitted successfully, the pop-up window prompts as follows, you need to go to the [Certificate Details Page] to obtain the CName record and add analysis:
To obtain the CName record as shown in the Tips, you need to successfully add the resolution as soon as possible before it can be reviewed by the CA agency:

Install the certificate

Download the certificate as follows:
cert.crt privkey.key copy
We need to copy the certificate file that needs to be downloaded after the application is successful to nginx the directory in the configuration file certs . Here you need to switch to root privileges, use the following command to switch to the root user.
sudo su copy
Next we find the nginx directory
cd /etc/nginx/ copy
Next, create a directory for the SSL certificate, we name it certs

mkdir certs
cd certs

copy
Then copy the certificate you downloaded in Tencent Cloud to this directory, note that the name must be cert.crt privkey.key .
Next please open ghost the configuration file in the directory
nano /var/www/ghost/system/files/example.con.conf copy
Add the following configuration

ssl_certificate /etc/ssl/certs/cert.crt;
ssl_certificate_key /etc/ssl/private/privkey.key;

copy
Next, restart the nginx service to use the Tencent Cloud certificate normally.
service nginx restart copy
Your Ghost blog is now installed and ready to use. You can http://example.com visit your blog at . Now let's create an account so you can create your first article.

Step 3. Create an account and configure your blog

To log in and configure your blog, visit http://example.com/login . You will see the following page:

Press the " Create Account" button to get started.
You'll see the " Create Account" page, which will let you set a blog title, as well as your name, email address, and password:

Fill in the details and press the " Final Step: Invite Your Team" button.
The wizard will ask you to enter another author's email address, but you can choose the link I'll do this **later** at the bottom of the screen .
You will then see a list of posts, called "Stories" in Ghost:

You can create new stories or manage other settings for your blog from the menu on the left.

Play with the iPerf test of Tencent Cloud CVM

kunzhu0710 — Fri, 15 Jul 2022 03:25:09 +0000

Cloud Virtual Machine (CVM) provides you with secure and flexible computing capabilities. You can enable CVM in the cloud in just minutes to meet your diverse computing needs. Through (CVM)[https://www.tencentcloud.com/products/cvm?from_social=dev_8], you can easily scale up or down your computing resources as your business needs change. Billed based on your actual resource consumption, CVM reduces your computing costs and simplifies IT-related OPS.

When it comes to iPerf, everyone must know that it is a command used to test network performance. iPerf is an open source network performance testing tool developed by the University of Illinois. It can be used to test the performance of TCP or UDP connections between network nodes (including loopback), including bandwidth, jitter and packet loss rate, where jitter and packet loss rate are suitable for UDP testing, and bandwidth testing is suitable for TCP and UDP.
Generally speaking, the bandwidth test adopts UDP mode test, because the limit bandwidth, path delay, and packet loss rate can be measured in UDP mode, and these test items will be printed out in the bandwidth test report. When testing, first use the theoretical bandwidth of the link as the data transmission rate to test, for example, the theoretical bandwidth of the link from the client to the server is 1000Mbps, first use -b 1000M to test, and then according to the test results (including Actual bandwidth, delay jitter and packet loss rate), and then use the actual bandwidth as the data transmission rate to test, you will find that the delay jitter and packet loss rate are much better than the first time, repeat the test several times, you can get a stable actual bandwidth.
iPerf works based on the server-client mode. Therefore, to use iPerf to test bandwidth, you need to establish a server (for discarding traffic) and a client (for generating traffic). The iPerf server or client uses the same command, but the options to start the command are different.

Key Features of iPerf

TCP

Measure network bandwidth
Report size and observations of MSS/MTU values
Support for TCP window values via socket buffering
Multithreading is supported when P threads or Win32 threads are available. Client and server support simultaneous multiple connections

UDP

Clients can create UDP streams of specified bandwidth
Measure packet loss
Measurement delay
Multicast support
Multithreading is supported when P threads are available. Client and server support simultaneous multiple connections (does not support Windows)

iPerf installation

To install IPerf, you can download it for different operating systems at https://iperf.fr/iperf-download.php. It is recommended to download the iPerf2 version. Since iPerf3 cannot support multi-process download, it is more troublesome to perform multi-process testing. The specific command can be modeled as follows:
Enable multithreading on the server:
iperf3 -s -p 5101&; iperf3 -s -p 5102&; iperf3 -s -p 5103 &
The client enables multithreading:
iperf3 -c hostname -T s1 -p 5101 &;
iperf3 -c hostname -T s2 -p 5102 &;
iperf3 -c hostname -T s3 -p 5103 &;
It can be seen that iPerf3 multi-threading is actually opening multiple ports for testing, which is troublesome, so it is recommended to download iperf2.

For the windows version of iPerf, directly copy the decompressed iperf.exe and cygwin1.dll to the %systemroot% directory
For the linux version of iPerf, please use the following command to install rpm -ivh iperf-.rpm # iPerf Startup Test

The iPerf test requires that the server side and the client side execute commands respectively to start

Server

iperf -s -p [端口]

client

iperf -c [server IP]
Note: iPerf tests the bandwidth of the TCP protocol by default. If you need to test the bandwidth of UDP, you need to add the -u option
The following is a simple test example:

1. Bandwidth test for TCP:

iperf -s -p 3389
iperf -c 10.104.17.84 -p 3389 -t 30 -i 1

Introduction of common indicators:

-c: client mode, followed by server ip
-p: followed by the port the server is listening on
-i: Set the time interval for bandwidth reporting, in seconds
-t: Set the duration of the test, the unit is seconds, the default is 10s if not set
-w: Set the size of the tcp window, generally do not need to be set, the default can be

To test multi-threaded TCP, add the -P parameter to the client to test the multi-threaded TCP performance
Server and client for TCP bandwidth test

2. Bandwidth test for UDP:

iperf -s -p 3389 -u
iperf -c 10.104.17.84 -p 3389 -i 1 -u -b 2000M

Introduction of common indicators:

-c: client mode, followed by server ip
-p: followed by the port the server is listening on
-i: Set the time interval for bandwidth reporting, in seconds
-t: Set the duration of the test, the unit is seconds, the default is 10s if not set
-b: Set the sending bandwidth of udp, in bit/s
UDP bandwidth test on server and client

iPerf common options

command line options	describe
-f, --format [bkmaBKMA]	Formatted bandwidth number output. The supported formats are: 'b' = bits/sec 'B' = Bytes/sec 'k' = Kbits/sec 'K' = KBytes/sec 'm' = Mbits/sec 'M' = MBytes/sec 'g' = Gbits/sec 'G' = GBytes/sec 'a' = adaptive bits/sec 'A' = adaptive Bytes/sec The adaptive format is one of kilo- and mega-. Fields other than bandwidth are output as bytes, unless the output format is specified, the default parameter is a. Note: When calculating bytes, Kilo = 1024, Mega = 1024^2, Giga = 1024^3. Usually, in the network, Kilo = 1000, Mega = 1000^2, and Giga = 1000^3, so Iperf also calculates bits (bits) accordingly. If this bothers you, use the -f b parameter and do the math yourself.
-i, --interval #	Set the time interval between each report, in seconds. If set to a non-zero value, the test report will be output at this interval. The default value is zero.
-l, --len #[KM]	Sets the length of the read and write buffers. The default value of TCP mode is 8KB, and the default value of UDP mode is 1470 bytes.
-m, --print_mss	Output the TCP MSS value (supported via TCP_MAXSEG). The MSS value is generally 40 bytes smaller than the MTU value. Usually
-p, --port #	Set the port to be the same as the listening port on the server side. The default is port 5001, the same as ttcp.
-u, --udp	Use the UDP method instead of the TCP method. See the -b option.
-w, --window #[KM]	Set the socket buffer to the specified size. For TCP mode, this setting is the TCP window size. For UDP mode, this setting is the buffer size for accepting UDP packets, limiting the maximum value that can accept packets.
-B, --bind host	One of several addresses bound to the host. For the client, this parameter sets the popup interface. For the server side, this parameter sets the push interface. This parameter is only used on hosts with multiple network interfaces. In Iperf's UDP mode, this parameter is used to bind and join a multicast group. Use a multicast address in the range 224.0.0.0 to 239.255.255.255. See the -T parameter.
-C, --compatibility	Compatibility mode can be used when working with lower versions of Iperf. It is not necessary to use compatibility mode on both ends, but it is strongly recommended to use compatibility mode on both ends. In some cases, the use of certain data streams can cause server-side crashes in version 1.7 or cause unexpected connection attempts.
-M, --mss #[KM}	Attempt to set the TCP maximum segment value with the TCP_MAXSEG option. The size of the MSS value is usually the TCP/IP header minus 40 bytes. In Ethernet, the MSS value is 1460 bytes (MTU 1500 bytes). Many operating systems do not support this option.
-N, --nodelay	Set the TCP no delay option to disable Nagle's algorithm. Normally this option is disabled for interactive programs, such as telnet.
-V (from v1.6 or higher)	Bind an IPv6 address.
Server: $ iperf -s –V
Client: $ iperf -c -V
Note: In 1.6.3 or later, specifying an IPv6 address does not require binding with the -B parameter, as in versions prior to 1.6. On most operating systems, an IPv4 client-mapped IPv4 address will be responded.
Server-side dedicated options
-s, --server	Iperf server mode
-D (v1.2 or later)	Iperf runs as a background daemon under Unix platforms. Under the Win32 platform, Iperf will run as a service.
-R (v1.2 or later, Windows only)	Uninstall the Iperf service (if it is running).
-o (v1.2 or later, Windows only)	Redirect output to specified file
-c, --client host	If Iperf is running in server mode and a host is specified with the -c parameter, then Iperf will only accept connections from the specified host. This parameter does not work in UDP mode.
-P, --parallel #	The number of connections to keep before the server shuts down. The default is 0, which means connections are always accepted.
Client specific options
-b, --bandwidth #[KM]	Bandwidth used in UDP mode, in bits/sec. This option is related to the -u option. The default value is 1 Mbit/sec.
-c, --client host	Run Iperf in client mode and connect to the specified Iperf server.
-d, --dualtest	Run dual test mode. This will reverse the connection from the server side to the client side, using the port specified in the -L parameter (or by default the port from which the client side connects to the server side). These are done immediately at the same time as the operation. If you want an interactive test, try the -r parameter.
-n, --num #[KM]	The number of buffers to transmit. Normally, Iperf sends data every 10 seconds. The -n parameter crosses this limit, sending data of the specified length the specified number of times, regardless of how long the operation takes. See the -l and -t options.
-r, --tradeoff	Reciprocating test mode. When the client-to-server test ends, the server connects back to the client through the port specified by the -l option (or the port that the client connects to the server by default). When the client connection is terminated, the reverse connection begins. If you need to test both ways at the same time, try the -d parameter.
-t, --time #	Sets the total time for the transfer. Iperf repeatedly sends packets of the specified length within the specified time. The default is 10 seconds. See the -l and -n options.
-L, --listenport #	Specifies the port used by the server to connect back to the client. By default, the port that the client connects to the server is used.
-P, --parallel #	Threads. Specifies the number of threads to use between client and server. The default is 1 thread. This parameter needs to be used by both the client and the server.
-S, --tos #	Type of service for outgoing packets. Many routers ignore the TOS field. You can specify this value using hexadecimal numbers starting with "0x", or octal or decimal numbers starting with "0".
For example, '0x10' in hexadecimal = '020' in octal = '16' in decimal. The TOS value of 1349 is:
IPTOS_LOWDELAY minimize delay 0x10
IPTOS_THROUGHPUT maximize throughput 0x08
IPTOS_RELIABILITY maximize reliability 0x04
IPTOS_LOWCOST minimize cost 0x02
-T, --ttl #	The TTL value of the outgoing multicast packet. This is essentially the number of hops the data takes through the router. The default is 1, link-local.
-F (from v1.2 or higher)	Bandwidth is measured using a specific data stream, such as a specified file.
$ iperf -c -F
-I (from v1.2 or higher)	As with -F, input data from standard input and output files.
Miscellaneous
-h, --help	Display the command line reference and exit.
-v, --version	Display version information and build information and exit.

Tencent Cloud Cos Get File Operation Practice--Go SDK

kunzhu0710 — Fri, 15 Jul 2022 03:23:45 +0000

question

Tencent Cloud's object storage can be regarded as an online KV, so I tried to use it because of the recent demand. I encountered some problems when using it, specifically cos.BucketGetOptions the use of Delimiter in .

The Delimiter used in the list object is "/"
The Delimiter used in the download object is ""

According to the official statement, delimiter means to list the objects in the current directory. When it is set to empty, it lists all objects. I don't know exactly what this all means, so I put it into practice.

Practice and Code

The code is similar to Tencent's cos Go SDK to use and learn , and there should be no difficulty in itself.
The code contains the following:

Environment Construction: Build a complex file environment by uploading files in batches, providing a basis for subsequent acquisition and download of files
File download: Test whether the content of the file is as expected
File batch download: test the effect of the delimiter option on the download
file listing: test the effect of the delimiter option in file listing

environmental construction

Use the following functions to construct the environment. Note: Tencent Cloud Object Storage is not a free service. Pay attention to the cost when using it. The file operations of the example in this article will theoretically not exceed the free limit, but please pay attention when modifying the code.

func main(){
    u, _ := url.Parse("https://wtytest-1252789333.cos.ap-guangzhou.myqcloud.com")
b := &amp;cos.BaseURL{BucketURL: u}
c := cos.NewClient(b, &amp;http.Client{
Transport: &amp;cos.AuthorizationTransport{
https://console.cloud.tencent.com/cam/capi
SecretID: "secretID",
SecretKey: "secret",

Transport: &amp;debug.DebugRequestTransport{
RequestHeader:  true,
RequestBody:    true,
ResponseHeader: true,
ResponseBody:   false,
},
},
})

uploadFileToCos(0, "", c)
}

func uploadFileToCos(depth int, prefix string, c *cos.Client) {
if depth > 5 {
return
}
for i := 0; i < 3; i++ {
s := rand.Intn(100)
filePath := prefix + "file" + strconv.Itoa(s)
err := uploadFileByName(filePath, "file"+strconv.Itoa(s), c)
if err != nil {
log_status(err)
}
}

for i := 0; i < 2; i++ {
s := rand.Intn(100)
filePrefix := prefix + "path" + strconv.Itoa(s) + "/"
uploadFileToCos(depth+1, filePrefix, c)
}
}

copy

file download


func getFileByName(name string, c *cos.Client) {
resp, err := c.Object.Get(context.Background(), name, nil)
log_status(err)
bs, _ := ioutil.ReadAll(resp.Body)
resp.Body.Close()
fmt.Println("content:", string(bs))
}

copy

File batch download

func main(){
const NoDelimiter = ""
const FolderDelimiter = "/"
const path1 = "path59/path33/path43/" 
    const path2 = "path59/path33/path43" 
getAllFileInPrefix(path1, NoDelimiter, c)
getAllFileInPrefix(path1, FolderDelimiter, c)
}

func getAllFileInPrefix(prefix string, delimiter string, c *cos.Client) {
totalFileCount := 0
isTruncated := true
marker := ""
count := 0
for isTruncated {
fmt.Printf("count:%d marker:%s isTruncated:%v", count, marker, isTruncated)
count++

opt := &amp;cos.BucketGetOptions{
Prefix:    prefix,
Marker:    marker,
Delimiter: delimiter,
}
v, _, err := c.Bucket.Get(context.Background(), opt)
if err != nil {
log_status(err)
return
}
for _, content := range v.Contents {
resp, err := c.Object.Get(context.Background(), content.Key, nil)
if err != nil {
log_status(err)
return
}
bs, _ := ioutil.ReadAll(resp.Body)
resp.Body.Close()
fmt.Printf("key:%s content:%s\n", content.Key, string(bs))
totalFileCount++
}
marker = v.NextMarker
isTruncated = v.IsTruncated
}
fmt.Println("total file count is ", totalFileCount, " with count:", count)
}

copy
When the prefix of the cos key has "/" at the end, 21 files can be obtained with NoDelimiter, and 3 files can be obtained with FolderDelimiter.
When there is no "/" at the end of the prefix of the cos key, 21 files can be obtained with NoDelimiter, and 0 files can be obtained with FolderDelimiter.
This shows that when the delimiter is "/", it can be understood as a folder mode, and the folder mode only works on the simulated folder (that is, there is a "/" at the end of the prefix).
If delimiter is an empty string, it will try to match objects with the same prefix.

file list

The file listing is somewhat similar to the logic at the beginning of the file download, but with the commonPrefix added. The test code is the same as before and will not be repeated here.

func listAllFileInPrefix(prefix string, delimiter string, c *cos.Client) {
var marker string
opt := &amp;cos.BucketGetOptions{
Prefix:    prefix,
Delimiter: delimiter,
MaxKeys:   1000,
}
totalFileCount := 0
commonPrefixCount := 0
isTruncated := true
for isTruncated {
opt.Marker = marker
v, _, err := c.Bucket.Get(context.Background(), opt)
if err != nil {
fmt.Println(err)
break
}
for _, content := range v.Contents {
fmt.Printf("Object: %v\n", content.Key)
}
totalFileCount += len(v.Contents)

for _, commonPrefix := range v.CommonPrefixes {
fmt.Printf("CommonPrefixes: %v\n", commonPrefix)
}
commonPrefixCount += len(v.CommonPrefixes)
isTruncated = v.IsTruncated 
marker = v.NextMarker       
}
fmt.Println("total file count", totalFileCount, " commonPrefix:", commonPrefixCount)
}

copy
When the prefix of the cos key has "/" at the end, using NoDelimiter can get 21 files without truncating the path, and using FolderDelimiter can get 3 files and truncating 2 paths (two subdirectories under the current directory).
When there is no "/" at the end of the prefix of the cos key, using NoDelimiter can get 21 files without truncating the path, and using FolderDelimiter can get 0 files, but truncating a path ( path59/path33/path43/ ).

Summarize

The delimiter of object storage can enable folder mode to simulate folders in general operating systems, which is generally useful.

How to deploy Caddy on Tencent Cloud CVM

kunzhu0710 — Fri, 15 Jul 2022 03:22:00 +0000

Cloud Virtual Machine (CVM) provides you with secure and flexible computing capabilities. You can enable CVM in the cloud in just minutes to meet your diverse computing needs. Through CVM, you can easily scale up or down your computing resources as your business needs change. Billed based on your actual resource consumption, CVM reduces your computing costs and simplifies IT-related OPS.

This is an era of Web Server. Apache and nginx compete for excellence. In the pursuit of ultimate performance, there is no highest, only higher. But this is also an era of pursuit of personalization. Some Web Servers do not squeeze the "Performance Improvement" single-plank bridge, but have their own positioning. Caddy is such an open source Web Server.
Matt Holt, the author of Caddy, explained the goal of caddy in the caddy official website and FAQ as follows: Other Web Servers are designed for the Web, and Caddy is designed for humans. In terms of functional positioning, unlike nginx, which often acts as the front-end reverse proxy, caddy is committed to becoming an easy-to-use static file Web Server. It can be seen that Caddy focuses on ease of use and simple configuration. And thanks to the cross-platform features of Go, caddy easily supports three major platforms: Windows, Linux, and Mac. In the Caddy developer documentation, we can see that caddy can also run on Android (linux arm).
Pay attention to caddy because caddy fills the gap of go in general web server (maybe there are others, but I don't know yet), and at the same time, web server in go also "responds" to the recent trend of de-C in Golang (in Go 1.5 C is gone!), even though the caddy author mentions that caddy is not targeted like nginx. But who knows in the future? Once Go performance is high enough, once caddy is stable enough, someone will naturally use it to replace nginx or apache2 in the production environment of some applications. An all-Go system also has advantages in deployment, operation and maintenance.
A notable feature of Caddy is that HTTPS is enabled by default. It was the first web server to provide HTTPS features without additional configuration. The default certificate is valid for 3 months and can be automatically renewed after expiration, which greatly reduces the cost and convenience of enabling HTTPS for small and medium-sized websites. Caddy enables HTTPS by default by checking the domain name (checking the domain name and issuing the certificate via the ACME protocol), and redirecting HTTP requests to HTTPS. It issues certificates on demand during startup and automatically reissues during server use. Let's Encrypt is the default certificate authority, but the user can customize the ACME CA used, which is necessary when testing the configuration. Of course, users can also configure certificates by themselves.
1. Install Caddy
This article provides a one-click installation of the Caddy script, which is simple and fast without the trivial installation method. Applicable operating systems are: CentOS/Debian/Ubuntu. The installation script can be downloaded on GitHub .

One-click installation of Caddy scriptsAfter downloading, run the script directly to perform one-click installation. wget --no-check-certificate https://github.com/suxin1110/CaddyInstall/caddy_install.sh && chmod +x caddy_install.sh && ./caddy_install.sh
Caddy uses the command: /usr/local/caddy/Caddyfile
Log file: cat /tmp/caddy.log
Instructions for use: service caddy start | stop | restart | status
Or use: /etc/init.d/caddy start | stop | restart | status
2. Configuration instructions
The file that Caddy needs to configure is Caddyfile, and the default path of this file is /usr/local/caddy/Caddyfile
The Caddyfile always puts the website domain name on the first line:
localhost:8080
gzip
log ../access.log
Configure multisite with one Caddyfile, must use curly braces to enclose each site
mysite.com {
root /www/mysite.com
}
sub.mysite.com:443 {
root /www/sub.mysite.com
gzip
log ../access.log
}
Caddy can also implement the reverse proxy function. Compared with the configuration of other Web Servers, the configuration of Caddyfile reverse proxy can be said to be outstanding, and it only needs one command to achieve
mysite.com:8080 {
log ./mysite.log
proxy /a localhost:9091
proxy /bar localhost:9092
}

Caddy supports load balancing configuration and supports three load balancing algorithms: random (random), least_conn (least connection) and round_robin (round-robin scheduling). Load balancing is also implemented through proxy middleware.
localhost:8080 {
log ./mysite.log
proxy / localhost:9091 localhost:9093 {
policy round_robin
}
proxy /b localhost:9092 localhost:9094 {
policy least_conn
}
}

Playing with Tencent Cloud CVM: Port forwarding with iptables

kunzhu0710 — Fri, 15 Jul 2022 03:20:35 +0000

This article will teach you how to use iptables for port forwarding on Tencent Cloud CVM, come and learn!

What is NAT (Port Forwarding)

All data packets sent on the network have an original address and a destination address. NAT is a technology to modify the original address or destination address (or port) of the data packet.
So why do we need to change the IP address? In the Internet, only data packets with public addresses can be transmitted, and data packets with private addresses cannot be transmitted. For example, when watching videos and browsing websites in a WIFI environment, the IP of the terminal (private address, the original addresses of all data packets sent from mobile phones, pads, and computers are basically private addresses). In order for data packets to be transmitted on the Internet, a public IP is required. Therefore, when accessing the Internet, the router will convert the source address of all data packets into the IP address of its WLAN port (this is the public network ip, generally the IP assigned by the ISP). This translation technology is NAT. When the accessed server returns data packets, the router will change the destination address of all data packets, from the IP address of its WLAN port, back to the IP address of the intranet. This will allow you to access the Internet. Therefore, NAT technology is widely used every day.

Port forwarding with iptables

1. Enable the system forwarding function

vi /etc/sysctl.conf
set net.ipv4.ip_forward=0
Modify it to net.ipv4.ip_forward=1
After editing sysctl, if you need to take effect immediately, you need to
sysctl -p

2. Modify the iptables command

If the same port is forwarded, you can directly type the following two-hop command:
iptables -t nat -A PREROUTING -p tcp --dport [port] -j DNAT --to-destination [IP]
iptables -t nat -A PREROUTING -p udp --dport [port] -j DNAT --to-destination [IP]
iptables -t nat -A POSTROUTING -p tcp -d [IP] --dport [port] -j SNAT --to-source [localIP]
iptables -t nat -A POSTROUTING -p udp -d [targetIP] --dport [port] -j SNAT --to-source [localIP]
If different ports are forwarded, you need to specify the destination port number and the local port number:
iptables -t nat -A PREROUTING -p tcp -m tcp --dport [localport] -j DNAT --to-destination [targetIP]:[targetport]
iptables -t nat -A PREROUTING -p udp -m udp --dport [localip] -j DNAT --to-destination [targetIP]:[targetport]
iptables -t nat -A POSTROUTING -d [targetIP]/32 -p tcp -m tcp --dport [targetport] -j SNAT --to-source [localIP]
iptables -t nat -A POSTROUTING -d [targetIP]/32 -p udp -m udp --dport [targetport] -j SNAT --to-source [localIP]

3. Save iptables and restart the configuration to take effect

service iptables save
service iptables restart

4. View iptables configuration

iptables -t nat -L

Extension :

Multi-port forwarding scheme (forwarding the 50000~65535 of the local server to the 50000~65535 port of the target IP 1.1.1.1):
iptables -t nat -A PREROUTING -p tcp -m tcp –dport 50000:65535 -j DNAT –to-destination 1.1.1.1
iptables -t nat -A PREROUTING -p udp -m udp –dport 50000:65535 -j DNAT –to-destination 1.1.1.1
iptables -t nat -A POSTROUTING -d 1.1.1.1/32 -p tcp -m tcp –dport 50000:65535 -j SNAT –to-source [local server IP]
iptables -t nat -A POSTROUTING -d 1.1.1.1/32 -p udp -m udp –dport 50000:65535 -j SNAT –to-source [local server IP]

Cloud Virtual Machine (CVM) provides you with secure and flexible computing capabilities. You can enable CVM in the cloud in just minutes to meet your diverse computing needs. Through CVM, you can easily scale up or down your computing resources as your business needs change. Billed based on your actual resource consumption, CVM reduces your computing costs and simplifies IT-related OPS. Did you learn it? Buy a CVM and try it out!

How to install Tomcat on Tencent Cloud CVM

kunzhu0710 — Fri, 15 Jul 2022 03:18:07 +0000

introduce

Tomcat is a servlet container developed by the Jakarta project under the Apache Software Foundation. According to the technical specifications provided by Sun Microsystems, Tomcat implements support for Servlet and JavaServer Page (JSP), and provides some unique functions as a Web server, such as Tomcat management and control platform, security domain management and Tomcat valve, etc. Since Tomcat itself also includes an HTTP server , it can also be regarded as a separate Web server . If you develop Java applications, Tomcat is a quick and easy way to serve them in a complete server environment designed specifically for this purpose.
In this tutorial, we will install Tomcat and do some basic configuration on a Debian 7 VPS .To complete this tutorial, you must have a normal user with sudo privileges.

Install Apache Tomcat

In this tutorial, we will install Tomcat and its related packages. These are included in the default Debian repositories.
To get the base repository, we can update the sources list and then install the package:

sudo apt-get update
sudo apt-get install tomcat7

That's all we need to do to get to the default Tomcat page. Our installation is not complete, but you can log in to your server's 8080 port to view the default Tomcat page in your browser:

your_domain_or_ip:8080

To take advantage of more of Tomcat's capabilities, we'll install some additional Tomcat packages.
These will allow us to control Tomcat using the web interface. It will install some documentation and examples, which we can also view through the website interface.

 sudo apt-get install tomcat7-admin tomcat7-examples tomcat7-docs

## Install Java Development Tools

In order to develop Java applications on your server using Tomcat, you need to download and install a few things.
The first thing we need to do is install a compatible Java Development Kit. We can install it with the following command:

 sudo apt-get install default-jdk

The version installed here is openjdk-6-jdk , at present, this version is the most stable version running on Debian
The Tomcat documentation also recommends that you install Apache Ant, a build tool for Java applications. The Tomcat documentation also recommends that you install a version control system, here we recommend installing git:

 sudo apt-get install ant git

## Configure the Tomcat website

Before we can start using some of the features we installed, we need to configure our server with a user and password.
Configuration is very simple. We need to edit a file called tomcat-users.xml. Open it with an editor:

 sudo nano /etc/tomcat7/tomcat-users.xml

Inside, you'll find a bunch of annotation configuration files. In fact, the only uncommented part of the file is:

<tomcat-users>
</tomcat-users>

We need to define the user between these two lines. We will grant this user access to the web interface. The configuration is as follows:

<tomcat-users>
    <user username="admin" password="password" roles="manager-gui,admin-gui"/>
</tomcat-users>

Set username and password. Save and close the file when done.
Restart Tomcat to implement the changes:

 sudo service tomcat7 restart

## Test the website interface

Once Tomcat is installed and user login is configured, the main page can be accessed by going to the server IP address or domain name ending in :8080 as follows:

 your_domain_or_ip:8080

You will see the same default Tomcat page you saw before:
However, since we have already installed and configured the components, we have access to more functionality. You can access the Tomcat documentation in your browser by clicking the link shown on the page or by visiting this page:

your_domain_or_ip:8080/docs


When you have questions about how to do something with Tomcat, check out the Q&amp;A on this page.
We also now have access to some different sample programs. These can be accessed via links on the same initial login page, or by visiting:
your_domain_or_ip:8080/examples

Clicking on these items gives us an idea of how the different functions are implemented in this environment. The main functions you want to access are the manager webapp and the host-manager webapp .
Again, you can access these from the initial login page, or visit:

 your_domain_or_ip:8080/manager/html

and:

 your_domain_or_ip:8080/host-manager/html

You can manage Java applications at the first site. It allows you to easily start, stop, deploy and reload your application. It can also find the cause of memory leaks caused by running applications:

In another page, you can test, tune, and add virtual hosts to serve your application. This allows you to easily set up access to deployed applications:

in conclusion

Tomcat provides an excellent platform for controlling and serving Java applications in a website environment. You can easily deploy .war files and have them up and running in a fraction of the time. Did you learn it? Buy a CVM and try it out!

How to use Tencent Cloud CVM for SSH reverse proxy

kunzhu0710 — Fri, 15 Jul 2022 03:15:19 +0000

How to use CVM for SSH reverse proxy? This article will tell you the answer

Scenario requirements

Most of the company's internal test servers are placed on the company's intranet. Generally speaking, this access is one-way due to NAT. For example, we can access Baidu's server with the help of a computer or mobile phone, but Baidu's server cannot actively access our terminal. Since it can only be accessed through the company's intranet, employees cannot access it after returning home. The security is safe, but what if there is a demand that needs to be accessed from outside the company?
Children's shoes who are more familiar with routers will say: "Just do port mapping and forwarding on the router." This solution does work, but there are 2 problems. First, you have to be able to control the router and make settings on it. Secondly, the broadband of the general company does not have a fixed IP, which means that the public network IP will change every 10-20 hours.

scene introduction

There is a server A in the company, the ip address is: 192.168.2.112, only devices on the same network segment within the company can access
There is a CVM with public IP on Tencent Cloud , the IP address is: 119.28.143.101, and everyone can use the key to log in. At this time, if external personnel need to access server A, under normal circumstances, since the company's network exit uses NAT, IT will not open the port forwarding authority, so it cannot be accessed. However, by using SSH port forwarding, it is easy for external personnel to access the internal server. The specific commands are as follows:

 ssh -fNR 222:localhost:22 root@119.28.143.101

Another point is very important, you need to open a configuration for ssh on the server 119.28.143.101 (usually in the /etc/ssh/sshd_config file in linux systems):

 GatewayPorts yes

The meaning of this command is to forward the 222 port request to the CVM to the 22 port of server A, so that we ssh -p 222 119.28.143.101 is equivalent to accessing ssh 192.168.2.112 22 port, of course, you can also forward other ports, such as Common 3389, 22, 21 and other ports.

Telnet 119.28.143.101 port 22 on any computer

Local forwarding and dynamic forwarding

The method mentioned above is also called SSH port remote forwarding. There is also a corresponding method called local forwarding. The command is as follows:

 `ssh -fNL 8080:119.28.143.101:80 root@192.168.2.112` 
 `-f Ask to go to the background before executing a command. It is used when preparing to ask for a password or passphrase, but the user wants it to be done in the background. This option implies the -n option. The recommended way to start an X11 program on a remote machine is something like ssh -f host xterm command` 
 `-N Does not execute remote commands. Used to forward ports. (Protocol version 2 only)` 
 `-L port:host:hostport Forward a port of the local machine (client) to the designated port of the remote designated machine. The working principle is this, a socket listening port port is allocated on the local machine, and once there is a connection on this port, the connection will be Forwarded through a secure channel, and the remote host establishes a connection with the host's hostport port. Port forwarding can be specified in the configuration file. Only root can forward privileged ports. IPv6 addresses are specified in another format: port/host/hostport`

The above command forwards the request for the local port 8080 to port 80 of 119.28.143.101. At this time, accessing http://127.0.0.1:8080 is equivalent to accessing http://119.28.143.101:80. For example, the company has two servers, which can be interconnected. One of the servers can access the Internet, but the other server is restricted from accessing the public network. At this time, this command can be used to "visit foreign websites".
There is another way called dynamic forwarding, the command is as follows:

 ssh -D 50000 root@119.28.143.101

This method is actually equivalent to a socks proxy. It forwards all local requests to the remote server, which is very practical. If the remote server is abroad, foreign proxy access can be achieved.

Remote intranet Windows server

The above explains how to forward a Linux server with only an internal network through the SSH port. The following will introduce how to forward it to a Windows machine that only has an internal network and relies on NAT to access the external network.
Windows forwarding requires the help of the PuTTY tool, which has a simple and friendly interface and is easy to operate. The detailed environment information is as follows:

Windows intranet machine A, IP address: 192.168.2.110, this machine is to access the Internet through NAT.
There is a Linux CVM with public IP in Tencent Cloud, IP address: 119.29.14.248 Open PuTTY on machine A, and enter the IP address and corresponding port of the CVM public network. Enter the public network address and port of the CVM Configure the remote port and the local IP and port that need to be mapped in Connection-SSH-Auth-Tunnels in PuTTY, and click the Add button to add it to the PuTTY configuration. Tunnels configuration introduction Click open, enter the account and password to log in (the account and password of the CVM server) Check the monitor on CVM, you can see that there are already 8080 monitors I see that there is already port 8080 listening on CVM If you need to use RDP to log in to the Windows server, because Windows cannot log in to itself, the above method to remotely log in to Windows requires the help of a third server for intranet forwarding.

Cloud Virtual Machine (CVM) provides you with secure and flexible computing capabilities. You can enable CVM in the cloud in just minutes to meet your diverse computing needs. Through CVM, you can easily scale up or down your computing resources as your business needs change. Billed based on your actual resource consumption, CVM reduces your computing costs and simplifies IT-related OPS. Did you learn it? Buy a CVM and try it out!

DEV Community: kunzhu0710

Tencent Cloud COS enables FTP function

Tencent cloud cos upload file template

Playing with Tencent Cloud CVM to test external network bandwidth

Windows System Bandwidth Test

Linux system bandwidth test

Migrate Apache data on Tencent Cloud CVM

Introduction

Prepare

Step 1 - Copy the files to the new location

Step 2 - Update the configuration file

in conclusion

Play with Tencent Cloud CVM to build a WordPress site

Operation scene

Related Introduction

Preconditions

Steps

Create and log in to a cloud server

Build LNMP environment

Install software and configure using yum

Install and configure Nginx

Install and configure PHP

Verify PHP-Nginx environment configuration

Install and configure MariaDB

download

write database information

Verify WordPress installation

Follow-up

Install Ghost Personal Blog on Tencent Cloud CVM

introduce

Prepare

Step 1: Install the Ghost CLI application

The second step, install and configure Ghost

Apply for Domain Name (DV) SSL Certificate

Apply for entrance

fill out the application

Manual DNS verification method

Verify identity after submitting application

Install the certificate

Step 3. Create an account and configure your blog

Play with the iPerf test of Tencent Cloud CVM

Key Features of iPerf

TCP

UDP

iPerf installation

Server

client

1. Bandwidth test for TCP:

Introduction of common indicators:

2. Bandwidth test for UDP:

Introduction of common indicators:

iPerf common options

Tencent Cloud Cos Get File Operation Practice--Go SDK

question

Practice and Code

environmental construction

file download

File batch download

file list

Summarize

How to deploy Caddy on Tencent Cloud CVM

Playing with Tencent Cloud CVM: Port forwarding with iptables

What is NAT (Port Forwarding)

Port forwarding with iptables

1. Enable the system forwarding function

2. Modify the iptables command

3. Save iptables and restart the configuration to take effect

4. View iptables configuration

Extension :

How to install Tomcat on Tencent Cloud CVM

introduce

Install Apache Tomcat

in conclusion

How to use Tencent Cloud CVM for SSH reverse proxy

Scenario requirements

scene introduction

Local forwarding and dynamic forwarding

Remote intranet Windows server