fqrouter

tcpdump -tnn -c 20000 -i venet0 src port 443  | awk -F "." '{print $1"."$2"."$3"."$4}' | sort | uniq -c | sort -nr | awk ' $1 > 100 '
tshark -i venet0 -Y "ssl.handshake.extensions_server_name" -Tfields -e "ip.dst" -e "ssl.handshake.extensions_server_name"

fqrouter

good, 你已经有了一个自己的shadowsocks代理了，现在想要把这个代理公布出去给所有人分享。
但是没有两个小时，代理就没法使用了，为什么？因为你需要额外注意以下事项（以下步骤需要比较高的linux技能）
本文只关注于确保shadowsocks服务还“活着”，如果你希望让其跑得更快，请参考 
https://github.com/clowwindy/shadowsocks/wiki/Optimizing-Shadowsocks

1、 shadowsocks的timeout设置
超时时间越长，连接被保持得也就越长，导致并发的tcp的连接数也就越多。对于公共代理，这个值应该调整得小一些。推荐60秒。

2、 检查操作系统的各种限制
对于openvz的vps，特别需要检查一下

fqrouter

IP Addresses of Google Global Cache
www.kookle.co.nr

Bulgaria	93.123.23.1	93.123.23.2	93.123.23.3	93.123.23.4	93.123.23.5	93.123.23.6	93.123.23.7	93.123.23.8	93.123.23.9
93.123.23.10	93.123.23.11	93.123.23.12	93.123.23.13	93.123.23.14	93.123.23.15	93.123.23.16	93.123.23.17	93.123.23.18	93.123.23.19
93.123.23.20	93.123.23.21	93.123.23.22	93.123.23.23	93.123.23.24	93.123.23.25	93.123.23.26	93.123.23.27	93.123.23.28	93.123.23.29
93.123.23.30	93.123.23.31	93.123.23.32	93.123.23.33	93.123.23.34	93.123.23.35	93.123.23.36	93.123.23.37	93.123.23.38	93.123.23.39
93.123.23.40	93.123.23.41	93.123.23.42	93.123.23.43	93.123.23.44	93.123.23.45	93.123.23.46	93.123.23.47	93.123.23.48	93.123.23.49
93.123.23.50	93.123.23.51	93.123.23.52	93.123.23.53	93.123.23.54	93.123.23.55	93.123.23.56	93.123.23.57	93.123.23.58	93.123.23.59
Egypt	197.199.253.1	197.199.253.2	197.199.253.3	197.199.253.4	197.199.253.5	197.199.253.6	197.199.253.7	197.199.253.8	197.199.253.9

fqrouter

# ASIA
_ = '173.194.36.%s' # del 印度 新德里
SG3 = '173.194.38.%s' # 新加坡
TW3 = '173.194.72.%s' 
SG4 = '173.194.117.%s'
JP2 = '173.194.120.%s'
_ = '173.194.123.%s'
JP1 = '173.194.126.%s'
HK1 = '173.194.127.%s'
TW1 = '74.125.23.%s'

fqrouter

	resolver 8.8.8.8;
	location /video/ {
                if ($request_uri ~ "^/video/(.+?)/.+") {
                        set $upstream_host $1.googlevideo.com;
                        add_header Content-Disposition "attachment; filename=video.mp4;";
                }
                rewrite /video/.+?/(.+)$ /$1 break;
                proxy_buffering off;
                proxy_pass https://$upstream_host;
                proxy_set_header Host $upstream_host;

fqrouter

('199.59.150.45', ['image-proxy-origin.twimg.com', u'image-proxy-origin.twimg.com'])
('199.59.149.90', ['pay.twitter.com', u'pay.twitter.com'])
('199.59.149.200', ['*.twitter.com', 'twitter.com', u'*.twitter.com'])
('199.59.148.139', ['userstream.twitter.com', u'userstream.twitter.com'])
('199.59.148.22', ['*.twitter.com', 'twitter.com', u'*.twitter.com'])
('199.59.148.145', ['partnerstream1.twitter.com', 'partnerstream2.twitter.com', 'stream.twitter.com', u'stream.twitter.com'])
('199.59.149.232', ['api.twitter.com', u'api.twitter.com'])
('199.59.148.91', ['ms1.twitter.com', 'ms2.twitter.com', 'ms3.twitter.com', 'ms4.twitter.com', 'ms5.twitter.com', u'ms1.twitter.com'])
('199.59.150.46', ['syndication.twitter.com', 'cdn.syndication.twimg.com', 'cdn.syndication.twitter.com', 'syndication-o.twitter.com', 'syndication.twimg.com', u'syndication.twitter.com'])
('199.59.149.135', ['partnerdata.twttr.com', u'partnerdata.twttr.com'])

fqrouter

#include <iostream>
#include <cstdlib>
#include <netinet/in.h>
extern "C" {
	#include <linux/netfilter.h>
	#include <libnetfilter_queue/libnetfilter_queue.h>
}

using namespace std;

fqrouter

import subprocess
import shlex
import atexit
import signal
import dpkt
import contextlib
import binascii
from scapy.all import *

LOGGER = logging.getLogger()

fqrouter

int Apple80211Associate(struct Apple80211 *handle, CFDictionaryRef *network, CFString *wpa_key);

fqrouter

# source: http://blog.yegle.net/2012/05/01/email-and-tls/
# 从墙外向墙内SMTP服务器发起telnet连接
$ telnet mail.kingsoft.com 25
Trying 219.141.176.248...
Connected to telecom.mail.kingsoft.com.
Escape character is '^]'.
220 mail.kingsoft.com ESMTP
EHLO yegle.net
250-mail.kingsoft.com
250-8BITMIME