昨天借着出去签验收单的功夫,去公园爬了个山,穿高跟鞋爬山,真的是上山容易下山难。往上走还好,往下走的时候一不留神差点飞出去。在下山的时候接到了宽带安装师傅的电话预约上门安装时间,只能忙里偷闲约了今天中午。
之所以升级宽带,这个并不是主要目的,是因为这个月的流量又用光了。微信找到之前的客服小姐姐,让重新给续费个流量包,小姐姐表示每个月都续费,就不如直接换个套餐。
其实,联通的账单,我一直都没看懂这个东西到底该怎么看。反正是怎么算都算不出出来。不过每个月消费159貌似是准确的。
为了升级流量,顺便就升级了下宽带。这也是师傅预约的原因。
中午约了十二点,十一点半从公司往家走,刚出发没十分钟,接到了师傅电话说自己到了。挂断之后,订的外卖也到了,电话里让他把外卖放门口。不过听到了对门阿姨的声音,说外卖放她家,等自己到家了再去拿。
停车的时候就看到宽带师傅坐在楼前门口的台阶上玩手机,停好车过去打个招呼,带着大哥往楼上走。到门口先敲了下对面的门取下外买,阿姨一再让自己去她家吃。推脱了一下拿着外卖赶紧带师傅进门安装。
进门师傅就看到了机柜,熟练的打开机柜门,说;“这次升级给的路由器是挺不错的,不过你这有机柜应该也用不上”
“嗯,是的。我家里的nas要放到公网上用,一直是路由器拨号的。所以应该不会用这个路由器的功能”我答道。
“你还是有钱啊,里面好几块iPhone,哪里有电源,帮我把线插一下”
“我开下机柜后门吧,电源都在后面”我一边拿钥匙,一边回复“那些都是倒下来的比较老的型号,没卖就放在那里了”
“我给你调试好,你还是用你的路由器拨号,剩下的你就自己处理,我就不管了哈”
“没问题,你把设备调试好就行啦”
安装速度比他预计的要快一些,主要是我这里不需要他进行太多其他的操作,只要保证他们的设备调试好就ok了。
新的一体机比原来的光猫要大很多,并且多给了一个终端。但是这个终端目前也用不上,就先收起来了。
安装好之后师傅说:“我再给你调成桥接模式,你用你的路由器拨号就行了,趁这个功夫先签个字吧”
我接过他的手机签字还给他,然后去重启路由器,这才发现路由器的指示灯死活不亮。换到下面的插排上才重新点亮,一度以为是机柜的ptu坏了,这就尴尬了。
师傅看了下链接状态正常之后就走了,整体用了不到半个小时。
测速还是ok的,虽然是千兆,实际跑下来800多。
不过走了之后我发现了另外一个问题,那就是博客打不开了。重启路由器无效,依然打不开。自己折腾了半个小时就快一点了,饭还没来的急吃,赶紧吃点东西回公司,不然被发现不在公司又是各种事b要折腾了。
直到下午联系上scdn的售后,把域名改成ip发现一切都好使了。但是重新拨号更换ip之后依然会断很长时间,即使ddns已经更新了,但是cdn的节点解析貌似刷新的非常慢。
终于折腾好之后,另外一个问题出现了,freshrss一直提示错误,但是这个错误也很奇怪。502 等等的各种错误,就是不报具体的原因。
晚上回来之后重启服务器,发现还是一样的问题。并且上面跑的另外一个博客服务访问失败。看nginx错误日志是:
tail h4ck.error.log 2024/05/29 21:04:23 [error] 3264#0: *1 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 192.168.1.5, server: h4ck.org.cn, request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/tmp/php-cgi.sock:", host: "h4ck.org.cn" 2024/05/29 21:05:03 [error] 3264#0: *1 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 192.168.1.5, server: h4ck.org.cn, request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/tmp/php-cgi.sock:", host: "h4ck.org.cn"
表面上是php-cgi的问题,看php错误是:
[29-May-2024 20:57:43] NOTICE: [pool www] child 3174 started [29-May-2024 21:00:33] WARNING: [pool www] child 2544, script '/home/wwwroot/h4ck.org.cn/index.php' (request: "GET ") execution timed out (30.151471 sec), terminating [29-May-2024 21:00:33] WARNING: [pool www] child 2544 exited on signal 15 (SIGTERM) after 3040.428205 seconds from start [29-May-2024 21:00:33] NOTICE: [pool www] child 3198 started [29-May-2024 21:04:23] WARNING: [pool www] child 2545, script '/home/wwwroot/h4ck.org.cn/index.php' (request: "GET ") execution timed out (36.395989 sec), terminating [29-May-2024 21:04:23] WARNING: [pool www] child 2545 exited on signal 15 (SIGTERM) after 3270.448370 seconds from start [29-May-2024 21:04:23] NOTICE: [pool www] child 3431 started [29-May-2024 21:05:03] WARNING: [pool www] child 2546, script '/home/wwwroot/h4ck.org.cn/index.php' (request: "GET ") execution timed out (37.169543 sec), terminating [29-May-2024 21:05:03] WARNING: [pool www] child 2546 exited on signal 15 (SIGTERM) after 3310.446905 seconds from start [29-May-2024 21:05:03] NOTICE: [pool www] child 3434 started
执行超时了,但是这个超时就很奇怪啊,不应该话费几千秒,打开wp的debug,也没有错误提示。这尼玛,让人头大。同样freshrss一样的问题,此时才想到是不是iptabls防火墙的问题,倒是链接数据库挂了:
看了下记录,如果mysql直接drop了,并且还有多条重复的内容,把这茬给忘了:
obaby@hack:~$ sudo iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https DROP tcp -- anywhere anywhere tcp dpt:mysql ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https DROP tcp -- anywhere anywhere tcp dpt:mysql ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https DROP tcp -- anywhere anywhere tcp dpt:mysql ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https DROP tcp -- anywhere anywhere tcp dpt:mysql ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https DROP tcp -- anywhere anywhere tcp dpt:mysql ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https DROP tcp -- anywhere anywhere tcp dpt:mysql ACCEPT icmp -- anywhere anywhere icmp echo-request DROP tcp -- anywhere anywhere tcp dpt:redis ACCEPT tcp -- anywhere anywhere tcp dpt:mysql Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- 10.1.0.0/16 anywhere /* generated for MicroK8s pods */ ACCEPT all -- anywhere 10.1.0.0/16 /* generated for MicroK8s pods */ ACCEPT all -- 10.1.0.0/16 anywhere /* generated for MicroK8s pods */ ACCEPT all -- anywhere 10.1.0.0/16 /* generated for MicroK8s pods */ Chain OUTPUT (policy ACCEPT) target prot opt source destination
清空规则,开放3306一切都ok了。
但是连不上数据库wp没报错,freshrss也没报错,这个就很离谱。数据库都连不上还执行查询,执行个寂寞啊?
终于,最后一切问题还是解决啦,博客也恢复了:
当然,最主要的还是手机流量够用了,即使是上班用也差不多足够啦。