Linux mirror port 設定筆記

清除 eth2 IP 設定混雜模式
sudo ip addr flush dev eth2
sudo ip link set dev eth2 up
sudo ip link set dev eth2 promisc on

設定 tc eth1 進入規則
sudo tc qdisc add dev eth1 handle ffff: ingress
sudo tc filter add dev eth1 parent ffff: protocol all u32 match u32 0 0 action mirred egress mirror dev eth2

設定 tc eth1 流出規則
sudo tc qdisc add dev eth1 root handle 1: prio
sudo tc filter add dev eth1 parent 1: protocol all u32 match u32 0 0 action mirred egress mirror dev eth2

檢查 tc 規則
sudo tc filter show dev eth1 ingress
sudo tc filter show dev eth1 parent 1:

刪除 tc 規則
sudo tc qdisc del dev eth1 handle ffff: ingress
sudo tc qdisc del dev eth1 root

關閉 eth1 的混雜模式
sudo ip link set dev eth2 promisc off


modprobe ifb act_mirred
ip link set dev nic2 promisc on
tc qdisc add dev nic1 handle ffff: ingress
tc filter add dev nic1 parent ffff: protocol all u32 match u32 0 0 action mirred egress mirror dev nic2

tc qdisc add dev nic1 root handle 1: prio
tc filter add dev nic1 parent 1: protocol all u32 match u32 0 0 action mirred egress mirror dev nic2

tc filter show dev nic1 ingress
tc filter show dev nic1 parent 1:

Open WebUI 設定為免帳號、免登入使用 Docker 執行

 docker run -d -p 3000:8080 \
  -e WEBUI_AUTH=False \
  -e OLLAMA_BASE_URL=http://host.docker.internal:11434 \
  --add-host=host.docker.internal:host-gateway \
  -v open-webui-data:/app/backend/data \
  --name open-webui \
  --restart always \
  ghcr.io/open-webui/open-webui:main

Apache2 修改 加密設定

 SSLHonorCipherOrder on

SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384

SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

nginx 修改 加密設定

ssl_prefer_server_ciphers on;

ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';

#ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384;

ssl_protocols TLSv1.2 TLSv1.3;