{"id":2278,"date":"2013-12-31T04:27:00","date_gmt":"2013-12-30T20:27:00","guid":{"rendered":"http:\/\/www.zuola.com\/weblog\/2013\/12\/2278.htm"},"modified":"2013-12-31T04:27:00","modified_gmt":"2013-12-30T20:27:00","slug":"%e4%b8%a4%e4%b8%aa%e8%87%aa%e8%a1%8c%e6%90%ad%e5%bb%bassl-%e5%8f%af%e7%94%a8ip%e7%9a%84%e6%96%b9%e6%b3%95","status":"publish","type":"post","link":"https:\/\/www.zuola.com\/weblog\/2013\/12\/2278.htm","title":{"rendered":"\u4e24\u4e2a\u81ea\u884c\u642d\u5efaSSL \u53ef\u7528IP\u7684\u65b9\u6cd5"},"content":{"rendered":"

\u4e0d\u77e5\u9053 cloudflare <\/a> \u7684SSL\u652f\u6301\u662f\u600e\u4e48\u5b9e\u73b0\u7684\uff0c\u4e0d\u8fc7\uff0c\u6211\u60f3\u5230twitter\u7684SSL\u53ef\u7528IP\u90fd\u53ef\u4ee5\u81ea\u5efa\uff0c\u4e5f\u8bb8http:\/\/cloudflare.com\/ \u4e5f\u662f\u7528\u7aef\u53e3\u8f6c\u53d1\u5b9e\u73b0 SSL\u7f51\u7ad9\u7684CDN\u3002<\/p>\n

\u627e\u8fd9\u6280\u672f\u6587\u7ae0\u627e\u4e86\u8001\u534a\u5929\uff0c\u8fd8\u62c5\u5fc3\u539f\u6587\u94fe\u63a5\u5931\u6548\uff0c\u6240\u4ee5\u5148\u8f6c\u8f7d\u5907\u4efd\u5728\u8fd9\u91cc.<\/p>\n

\u81ea\u884c\u642d\u5efatwitter https\u4ee3\u7406IP<\/h3>\n
https:\/\/docs.google.com\/document\/pub?id=11FVgSQB3dFP9LrOLpsvHkQhLaCInET8xScjWcF2G8rw&pli=1<\/a><\/span><\/div>\n
\u539f\u7406\uff1a\u7aef\u53e3\u8f6c\u53d1<\/span><\/div>\n
<\/span><\/div>\n
\u9700\u6c42\uff1a<\/span><\/div>\n
\u6709ROOT\u6743\u9650\u7684Linux\u670d\u52a1\u5668\uff08VPS\u6216\u72ec\u7acb\u670d\u52a1\u5668\uff09<\/span><\/div>\n
\u72ec\u7acbIP\u4e00\u4e2a\uff08\u505a\u597d\u5fc3\u7406\u51c6\u5907\uff0c\u53ef\u80fd\u906d\u5899\uff09<\/span><\/div>\n
<\/span><\/div>\n
\u6d41\u7a0b\uff0c\u4ee5Ubuntu\u670d\u52a1\u5668\u4e3a\u4f8b\uff0c\u5176\u4ed6\u8bf7\u53c2\u8003\uff1a<\/span><\/div>\n
    \n
  1. \u5b89\u88c5xinetd\uff1asudo apt-get install xinetd<\/span><\/li>\n
  2. \u4fee\u6539\u914d\u7f6e\u3002\u6ce8\u610f\u7b49\u53f7\u524d\u9762\u5fc5\u987b\u6709\u7a7a\u683c\u6216\u8005tab\uff08\u50bb\u903c\u7684\u683c\u5f0f\u8981\u6c42\uff01\uff09\uff1a<\/span><\/li>\n<\/ol>\n
    sudo vi \/etc\/xinetd.d\/https<\/span><\/div>\n
    service https<\/span><\/div>\n
    {<\/span><\/div>\n
                disable        =no<\/span><\/div>\n
                flags                =REUSE<\/span><\/div>\n
                socket_type        =stream<\/span><\/div>\n
                wait                =no<\/span><\/div>\n
                user                =root<\/span><\/div>\n
                port                =443<\/span><\/div>\n
                protocol            =tcp<\/span><\/div>\n
                redirect            =128.121.146.109 443 # \u8be5IP\u4e3aping api.twitter.com\u83b7\u5f97\u7684<\/span><\/div>\n
            #bind                =\u4f60\u7684local IP(\u5982\u679c\u4f60\u7684\u670d\u52a1\u5668\u6709\u591a\u4e2aIP)<\/span><\/div>\n
    }<\/span><\/div>\n
    <\/span><\/div>\n
    \u7136\u540e\u5728hosts\u6587\u4ef6\u4e2d\u52a0\u5165<\/span><\/div>\n
    \u4f60\u7684\u670d\u52a1\u5668IP <\/span>twitter.com<\/a><\/span><\/div>\n
    \u4f60\u7684\u670d\u52a1\u5668IP <\/span>api.twitter.com<\/a><\/span><\/div>\n
    <\/span><\/div>\n
    DONE<\/span><\/div>\n

    <\/span><\/div>\n
    \u53e6\u4e00\u4e2a\u65b9\u6cd5\uff1a<\/span><\/div>\n

    \u7b80\u5355\u547d\u4ee4\u884c\u67b6\u8bbe https \u8f6c\u53d1\u4ee3\u7406\u652f\u6301twitter api<\/h2>\n
    \u6765\u81ea <\/span>http:\/\/blog.splayer.org\/post\/2009-09-10\/40038271652<\/a><\/div>\n
    <\/div>\n
    \u5982\u679c\u662f Linux(iptables) \u8fd0\u884c\u4e00\u4e0b (\u5927\u62ec\u53f7\u7684\u5185\u5bb9\u81ea\u884c\u66ff\u6362\u4e00\u4e0b)
    echo 1 > \/proc\/sys\/net\/ipv4\/ip_forward
    iptables -t nat -A PREROUTING -i {$\u7f51\u5361\u8bbe\u5907\u540d\uff0c\u4e00\u822c\u662feth0} -p tcp -d {$\u4f60\u7684\u4e3b\u673aIP} –dport 443 -j DNAT –to-destination {$twitter.com\u7684IP}:443
    iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
    \u5982\u679c\u662f FreeBSD(pf)\uff1a
    rdr on {$\u7f51\u5361\u8bbe\u5907\u540d\uff0c\u4e00\u822c\u662feth0} proto tcp from any to {$twitter.com\u7684IP} port 80 -> {$\u4f60\u7684\u4e3b\u673aIP} port 3080
    \u7136\u540e\u518d\u4f7f\u7528Twitter Client\u7684PC\u4e0a \u4fee\u6539host \u6587\u4ef6 \uff1a
    {$\u4f60\u7684\u4e3b\u673aIP} twitter.com www.twitter.com
    \u57fa\u672c\u5c31\u53ef\u4ee5\u7528\u4e86 <\/div>\n
    \u6765\u81ea\u5468\u66d9\u5149\u7684BLOGSPOT\u7a7a\u95f4<\/div>\n","protected":false},"excerpt":{"rendered":"

    \u4e0d\u77e5\u9053 cloudflare  \u7684SSL\u652f\u6301\u662f\u600e\u4e48\u5b9e\u73b0\u7684\uff0c\u4e0d\u8fc7\uff0c\u6211\u60f3\u5230 Continue Reading …<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2278","post","type-post","status-publish","format-standard","hentry","category-random"],"views":115,"_links":{"self":[{"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/posts\/2278","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/comments?post=2278"}],"version-history":[{"count":0,"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/posts\/2278\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/media?parent=2278"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/categories?post=2278"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zuola.com\/weblog\/wp-json\/wp\/v2\/tags?post=2278"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}