gitproxy/pve_toss_notes
1
0
Fork 0
mirror of https://gitee.com/callmer/pve_toss_notes.git synced 2026-08-31 14:02:53 +08:00
Code Issues Packages Projects Releases Wiki Activity

更新备注

Browse Source
This commit is contained in:
CallMeR
2023-11-28 21:52:29 +08:00
parent 07d5ea174a
commit a2b1278038
5 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/debian/debian_ts_99_sysctl.conf
+1 -1
View File
@@ -1,5 +1,5 @@
# This configuration file is customized by fox, # This configuration file is customized by fox,
# Optimize sysctl parameters for Linux Router. # Optimize sysctl parameters for local TS server.
kernel.panic = 20 kernel.panic = 20
kernel.panic_on_oops = 1 kernel.panic_on_oops = 1
src/debian/debian_ts_dnsmasq.conf
+1 -1
View File
@@ -1,5 +1,5 @@
# This configuration file is customized by fox, # This configuration file is customized by fox,
# Optimize dnsmasq parameters for local DNS server. # Optimize dnsmasq parameters for local TS server.
# Main Config # Main Config
src/debian/debian_ts_lo_network.conf
+1 -1
View File
@@ -1,5 +1,5 @@
# This configuration file is customized by fox, # This configuration file is customized by fox,
# Optimize for lo network. # Optimize lo network for local TS server.
[Match] [Match]
Name=lo Name=lo
src/debian/debian_ts_nftables.conf
+8 -8
View File
@@ -1,7 +1,7 @@
#!/usr/sbin/nft -f #!/usr/sbin/nft -f
# This configuration file is customized by fox, # This configuration file is customized by fox,
# Optimize nftables rules for Linux Router. # Optimize nftables rules for local TS server.
table inet router table inet router
flush table inet router flush table inet router
@@ -29,7 +29,7 @@ table inet router {
ct state invalid counter drop comment "defconf: drop input flows with invalid conntrack state" ct state invalid counter drop comment "defconf: drop input flows with invalid conntrack state"
tcp flags & (fin | syn | rst | ack) == syn counter jump syn_flood comment "defconf: rate limit TCP-SYN packets" tcp flags & (fin | syn | rst | ack) == syn counter jump syn_flood comment "defconf: rate limit TCP-SYN packets"
iifname "eth0" jump input_lan comment "defconf: handle LAN IPv4 / IPv6 input traffic" iifname "eth0" jump input_lan comment "defconf: handle LAN IPv4 / IPv6 input traffic"
iifname "tailscale0" jump input_tailscale comment "defconf: handle Tailscale IPv4 / IPv6 input traffic" iifname "tailscale0" jump input_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 input traffic"
} }
chain forward { chain forward {
@@ -38,7 +38,7 @@ table inet router {
ct state established,related accept comment "defconf: allow forwarded established and related flows" ct state established,related accept comment "defconf: allow forwarded established and related flows"
ct state invalid counter drop comment "defconf: drop forward flows with invalid conntrack state" ct state invalid counter drop comment "defconf: drop forward flows with invalid conntrack state"
iifname "eth0" jump forward_lan comment "defconf: handle LAN IPv4 / IPv6 forward traffic" iifname "eth0" jump forward_lan comment "defconf: handle LAN IPv4 / IPv6 forward traffic"
iifname "tailscale0" jump forward_tailscale comment "defconf: handle Tailscale IPv4 / IPv6 forward traffic" iifname "tailscale0" jump forward_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 forward traffic"
} }
chain output { chain output {
@@ -47,7 +47,7 @@ table inet router {
ct state established,related accept comment "defconf: allow outbound established and related flows" ct state established,related accept comment "defconf: allow outbound established and related flows"
ct state invalid counter drop comment "defconf: drop output flows with invalid conntrack state" ct state invalid counter drop comment "defconf: drop output flows with invalid conntrack state"
oifname "eth0" jump output_lan comment "defconf: handle LAN IPv4 / IPv6 output traffic" oifname "eth0" jump output_lan comment "defconf: handle LAN IPv4 / IPv6 output traffic"
oifname "tailscale0" jump output_tailscale comment "defconf: handle Tailscale IPv4 / IPv6 output traffic" oifname "tailscale0" jump output_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 output traffic"
} }
chain prerouting { chain prerouting {
@@ -66,7 +66,7 @@ table inet router {
} }
chain forward_lan { chain forward_lan {
jump accept_to_tailscale comment "lanconf: accept Tailscale forward" jump accept_to_tailscale comment "tsconf: accept Tailscale forward"
ct status dnat counter accept comment "lanconf: accept port forward" ct status dnat counter accept comment "lanconf: accept port forward"
jump accept_to_lan jump accept_to_lan
} }
@@ -96,16 +96,16 @@ table inet router {
} }
chain forward_tailscale { chain forward_tailscale {
jump accept_to_lan comment "defconf: accept Tailscale to LAN forward" jump accept_to_lan comment "tsconf: accept Tailscale to LAN forward"
jump accept_to_tailscale jump accept_to_tailscale
} }
chain accept_from_tailscale { chain accept_from_tailscale {
iifname "tailscale0" counter accept comment "defconf: accept Tailscale IPv4 / IPv6 traffic" iifname "tailscale0" counter accept comment "tsconf: accept Tailscale IPv4 / IPv6 traffic"
} }
chain accept_to_tailscale { chain accept_to_tailscale {
oifname "tailscale0" counter accept comment "defconf: accept Tailscale IPv4 / IPv6 traffic" oifname "tailscale0" counter accept comment "tsconf: accept Tailscale IPv4 / IPv6 traffic"
} }
src/debian/debian_ts_resolv.conf
+1 -1
View File
@@ -1,5 +1,5 @@
# This configuration file is customized by fox, # This configuration file is customized by fox,
# Optimize system resolve parameters for Linux Router. # Optimize system resolve parameters for local TS server.
# #
# For use local domain, # For use local domain,
# please modify 'search' parameter according to # please modify 'search' parameter according to