使用脚本导出MySQL数据库中的视图表

 未分类  No Responses »
11 月 092016
 

 

查看所有视图表

[root@localhost ~]# mysql -uroot -p dbname -e "show full tables where table_type='view'"
Enter password:

编辑视图导出脚本

#vi backupViews.sh

#!/bin/bash
#
/usr/bin/mysql --skip-column-names --batch -e \
"select table_name from information_schema.views \
where table_schema = database()" $* |
xargs --max-args 1 /usr/bin/mysqldump $*

执行视图导出脚本

[root@localhost ~]# ./backupViews.sh -uusername -ppassword dbname > views.sql
Warning: Using a password on the command line interface can be insecure.
......
Warning: Using a password on the command line interface can be insecure.
[root@localhost ~]#

CentOS 7 Apache 2.4开启Gzip压缩配置

 未分类  No Responses »
11 月 072016
 

CentOS 7 Apache 2.4开启Gzip压缩配置

确认以下模块配置未禁用

# vi /etc/httpd/conf.modules.d/00-base.conf

LoadModule deflate_module modules/mod_deflate.so
LoadModule headers_module modules/mod_headers.so
LoadModule filter_module modules/mod_filter.so

增加以下配置文件（文件类型或文件扩展名）

# vi /etc/httpd/conf.d/gzip.conf
AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript
DeflateCompressionLevel 9

或

# vi /etc/httpd/conf.d/gzip.conf
<filesMatch "\.(js|html|css)$">
 SetOutputFilter DEFLATE
</filesMatch>

XFS基于目录配额的Project Quota配置

 未分类  No Responses »
11 月 032016
 

查看已挂载的10GB容量磁盘

centos-7-xfs-project-quota-config-01

对磁盘进行分区
[root@localhost ~]# fdisk /dev/xvdb

centos-7-xfs-project-quota-config-02

查看分区后的磁盘列表信息

centos-7-xfs-project-quota-config-03

使用XFS文件系统格式化磁盘

centos-7-xfs-project-quota-config-04

挂载已格式化的磁盘分区并查看磁盘容量列表
[root@localhost ~]# mkdir -p /data
[root@localhost ~]# mount -o prjquota /dev/xvdb5 /data/

centos-7-xfs-project-quota-config-05
建立一个使用配置文件的Project Quota文件目录并设置配额

 [root@localhost ~]# mkdir -p /data/app
 [root@localhost ~]# echo 42:/data/app >> /etc/projects
 [root@localhost ~]# echo application:42 >> /etc/projid
 [root@localhost ~]# xfs_quota -x -c 'project -s application' /data/
 Setting up project application (path /data/app)...
 Processed 1 (/etc/projects and cmdline) paths for project application with recursion depth infinite (-1).
 [root@localhost ~]# xfs_quota -x -c 'limit -p bhard=1g application' /data/

查看配额报告信息

centos-7-xfs-project-quota-config-06

尝试对新建立的Project Quota文件目录写入一个超过限制的文件centos-7-xfs-project-quota-config-07
命令xfs_quota用法详见man xfs_quota手册

centos-7-xfs-project-quota-config-08

Nginx日志处理和访问异常确认

 未分类  No Responses »
11 月 022016
 

通过日志确认每小时访问量
# cat www.abc.com_access.log-20161102 |grep 02/Nov/2016:03 |wc -l
155
# cat www.abc.com_access.log-20161102 |grep 02/Nov/2016:02 |wc -l
6017
# cat www.abc.com_access.log-20161102 |grep 02/Nov/2016:01 |wc -l
11710
# cat www.abc.com_access.log-20161102 |grep 02/Nov/2016:00 |wc -l
12679
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:23 |wc -l
12970
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:22 |wc -l
12697
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:21 |wc -l
13540
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:20 |wc -l
12147
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:19 |wc -l
3358
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:18 |wc -l
3150
#
导出特定时间段日志记录
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:20 > t1.log
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:21 >> t1.log
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:22 >> t1.log
# cat www.abc.com_access.log-20161102 |grep 01/Nov/2016:23 >> t1.log
# cat www.abc.com_access.log-20161102 |grep 02/Nov/2016:00 >> t1.log
# cat www.abc.com_access.log-20161102 |grep 02/Nov/2016:01 >> t1.log
# cat www.abc.com_access.log-20161102 |grep 02/Nov/2016:02 >> t1.log
确认总请求数量
# cat t1.log |wc -l
81760
#

过滤IP并排序导出文件
# cat t1.log |awk ‘{print $1}’ | sort | uniq -c |sort -k1 -n -r > t2.txt

查看IP排序列表
# less t2.txt
67989 117.65.113.164

导出异常IP的所有请求

# cat t2.txt |grep 117.65.113.164 > t3.txt

使用iptables禁止IP访问
# iptables -I INPUT -s 117.65.113.164 -j DROP
电信入口，异常流量约7个小时（20时-2时），总请求量81760次

按IP排序，117.65.113.164（安徽省 蚌埠市 电信 ）总请求量 67989次（约2.69次/秒）