[{"data":1,"prerenderedAt":268},["ShallowReactive",2],{"tag-gin-1":3},{"title":4,"articles":5,"hot_article":57,"month_arch":116,"total":264,"cover":265},"gin - 独孤影的博客",[6,19,30,40,48],{"id":7,"title":8,"uri":9,"author":10,"tags":11,"created_at":16,"view_count":17,"content":18},111,"gin.Context 异步调用踩坑","gin-context-gorountine","duguying",[12,13,14,15],"gin","context","异步","goroutine","2023-12-08 12:20:18",448,"\u003Cp>事情的背景是这样了，我在gin框架的action中有个异步调用逻辑，然后异步调用需要使用\u003Ccode class=\"inline-code\">context.Context\u003C\u002Fcode>接口作为参数传入，异步调用的模块中会从context中取request_id作为追踪追踪标记。于是我就直接讲*gin.Context作为参数传入了异步调用中。\u003C\u002Fp>\n\n\u003Cp>然后灾难就发生了，我日志记录中能查到当前请求的request_id，但是发现条数不对，异步请求中记录的日志条数有10条，我用request_id去搜索，只查到了4条，最后我只能添加另外标记，通过另外的标记查询到10条日志，让我奇怪的是，另外6条日志的request_id却不是当前请求的request_id。\u003C\u002Fp>\n\n\u003Cp>最后，我发现gin.Context专门有个Copy方法，是将context拷贝一份，我调用Copy拷贝一份context之后将拷贝的context传入异步调用，果然10条日志的request_id一致了。看来，从gin框架传入进来的context在不同的action中是复用的。然后在请求处理完毕之后，会给其他请求复用，这样传给异步调用模块的context中的request_id已经变了。\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>r.\u003Cspan style=\"color:#d2a8ff;font-weight:bold\">GET\u003C\u002Fspan>(\u003Cspan style=\"color:#a5d6ff\">&#34;\u002Fasync&#34;\u003C\u002Fspan>, \u003Cspan style=\"color:#ff7b72\">func\u003C\u002Fspan>(c \u003Cspan style=\"color:#ff7b72;font-weight:bold\">*\u003C\u002Fspan>gin.Context) {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\t\u003Cspan style=\"color:#8b949e;font-style:italic\">\u002F\u002F 需要搞一个副本\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#8b949e;font-style:italic\">\u003C\u002Fspan>\tcopyContext \u003Cspan style=\"color:#ff7b72;font-weight:bold\">:=\u003C\u002Fspan> c.\u003Cspan style=\"color:#d2a8ff;font-weight:bold\">Copy\u003C\u002Fspan>()\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\t\u003Cspan style=\"color:#8b949e;font-style:italic\">\u002F\u002F 异步处理\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#8b949e;font-style:italic\">\u003C\u002Fspan>\t\u003Cspan style=\"color:#ff7b72\">go\u003C\u002Fspan> \u003Cspan style=\"color:#ff7b72\">func\u003C\u002Fspan>() {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\t\ttime.\u003Cspan style=\"color:#d2a8ff;font-weight:bold\">Sleep\u003C\u002Fspan>(\u003Cspan style=\"color:#a5d6ff\">3\u003C\u002Fspan> \u003Cspan style=\"color:#ff7b72;font-weight:bold\">*\u003C\u002Fspan> time.Second)\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\t\tlog.\u003Cspan style=\"color:#d2a8ff;font-weight:bold\">Println\u003C\u002Fspan>(\u003Cspan style=\"color:#a5d6ff\">&#34;异步执行：&#34;\u003C\u002Fspan> \u003Cspan style=\"color:#ff7b72;font-weight:bold\">+\u003C\u002Fspan> copyContext.Request.URL.Path)\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\t}()\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>})\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>这里必须要谨记，如果需要在action中异步调用并使用context传参，必须要将context.Copy()之后再传入。否则context就会被其他协程修改。\u003C\u002Fp>\n",{"id":20,"title":21,"uri":22,"author":10,"tags":23,"created_at":27,"view_count":28,"content":29},83,"nginx upstream DNS解析问题","nginx-upstream-dns-resolve",[24,25,26],"nginx","upstream","dns","2022-11-14 11:20:44",362,"\u003Cp>最近发现我香港服务器上放置的几个 web 站点经常会偶尔出现无法访问的情况，这个香港服务器上放置的是 trojan 加 nginx，流量从trojan进入，部分转发出去，另外部分是web站点的流量，转发到nginx，从而实现流量代理和web访问。\u003C\u002Fp>\n\n\u003Cp>这个香港节点出现web访问异常，之前也遇到过几次，都是重启nginx就正常了。这次决定仔细看下是什么情况，登陆节点，首先查看trojan日志，发现在正常转发，再看下nginx的日志，如下\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>2022\u002F11\u002F14 01:27:11 [error] 22#22: *473474 upstream timed out (110: Connection timed out) while connecting to upstream, client: 61.177.173.46, server: 0.0.0.0:22, upstream: &#34;36.36.106.166:23000&#34;, bytes from\u002Fto client:0\u002F0, bytes from\u002Fto upstream:0\u002F0\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>2022\u002F11\u002F14 01:27:27 [error] 22#22: *473486 upstream timed out (110: Connection timed out) while connecting to upstream, client: 203.205.141.115, server: 0.0.0.0:22, upstream: &#34;36.36.106.166:23000&#34;, bytes from\u002Fto client:0\u002F0, bytes from\u002Fto upstream:0\u002F0\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>2022\u002F11\u002F14 01:28:36 [error] 22#22: *473490 upstream timed out (110: Connection timed out) while connecting to upstream, client: 203.205.141.115, server: 0.0.0.0:22, upstream: &#34;36.36.106.166:23000&#34;, bytes from\u002Fto client:0\u002F0, bytes from\u002Fto upstream:0\u002F0\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>2022\u002F11\u002F14 01:29:19 [error] 22#22: *473492 upstream timed out (110: Connection timed out) while connecting to upstream, client: 61.177.173.52, server: 0.0.0.0:22, upstream: &#34;36.36.106.166:23000&#34;, bytes from\u002Fto client:0\u002F0, bytes from\u002Fto upstream:0\u002F0\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>发现nginx日志显示有连接超时，于是我决定判断一下是否真的连接不上，telnet\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>➜  trojan git:\u003Cspan style=\"color:#ff7b72;font-weight:bold\">(\u003C\u002Fspan>master\u003Cspan style=\"color:#ff7b72;font-weight:bold\">)\u003C\u002Fspan> telnet 36.36.106.166 \u003Cspan style=\"color:#a5d6ff\">23000\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>Trying 36.36.106.166...\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>^C\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>果然连接不上，我web站点配置如下\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#ff7b72\">server\u003C\u002Fspan> {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">listen\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">10110\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">ssl\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">http2\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">server_name\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">xxx.duguying.net\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">root\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fusr\u002Fshare\u002Fnginx\u002Fhtml\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">index\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">index.php\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">index.html\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_certificate\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fdata\u002Fcerts\u002F_.duguying.net.crt\u003C\u002Fspan>; \n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_certificate_key\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fdata\u002Fcerts\u002F_.duguying.net.key\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_stapling\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff;font-weight:bold\">on\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_stapling_verify\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff;font-weight:bold\">on\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">add_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Strict-Transport-Security\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">&#34;max-age=31536000&#34;\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">location\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002F\u003C\u002Fspan> {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">include\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">git.deny\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">X-Forwarded-For\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff\">$remote_addr\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Host\u003C\u002Fspan>            \u003Cspan style=\"color:#79c0ff\">$http_host\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Upgrade\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff\">$http_upgrade\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Connection\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">&#34;upgrade&#34;\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_pass\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">http:\u002F\u002Fjxx.duguying.net:****\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffering\u003C\u002Fspan>    \u003Cspan style=\"color:#79c0ff;font-weight:bold\">off\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffer_size\u003C\u002Fspan>  \u003Cspan style=\"color:#a5d6ff\">128k\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffers\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">100\u003C\u002Fspan>  \u003Cspan style=\"color:#a5d6ff\">128k\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    }\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>}\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>web站点的流量经香港节点转发到 \u003Ccode class=\"inline-code\">jxx.duguying.net\u003C\u002Fcode> ，dig一下\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>➜  ~ dig jxx.duguying.net\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>; &lt;&lt;&gt;&gt; DiG 9.11.5-P4-5.1+deb10u7-Debian &lt;&lt;&gt;&gt; jxx.duguying.net\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; global options: +cmd\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; Got answer:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; -&gt;&gt;HEADER\u003Cspan style=\"color:#a5d6ff\">&lt;&lt;- opco\u003C\u002Fspan>de: QUERY, status: NOERROR, id: \u003Cspan style=\"color:#a5d6ff\">25787\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: \u003Cspan style=\"color:#a5d6ff\">0\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; QUESTION SECTION:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;jxx.duguying.net.             IN      A\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; ANSWER SECTION:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>jxx.duguying.net.      \u003Cspan style=\"color:#a5d6ff\">60\u003C\u002Fspan>      IN      A       222.248.21.219\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; Query time: \u003Cspan style=\"color:#a5d6ff\">22\u003C\u002Fspan> msec\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; SERVER: 192.168.1.1#53\u003Cspan style=\"color:#ff7b72;font-weight:bold\">(\u003C\u002Fspan>192.168.1.1\u003Cspan style=\"color:#ff7b72;font-weight:bold\">)\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; WHEN: 一 11月 \u003Cspan style=\"color:#a5d6ff\">14\u003C\u002Fspan> 11:17:24 CST \u003Cspan style=\"color:#a5d6ff\">2022\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; MSG SIZE  rcvd: \u003Cspan style=\"color:#a5d6ff\">51\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>发现nginx转发的节点居然不是目前upstream域名解析的节点，这说明我upstream域名dns更新了，但是nginx上upstream域名解析没更新。网上查询之后才知道，域名作为upstream，它的解析节点并不会时事更新。解决方案\u003C\u002Fp>\n\n\u003Cp>方案一：每次dns有变化，重启Nginx （最开始出现故障重启nginx恢复就是这种解决方案）\u003Cbr \u002F>\n方案二：使用Nginx Resolver\u003Cbr \u002F>\n方案三：使用 Nginx-upstream-dynamic-server （nginx模块）\u003Cbr \u002F>\n方案四：使用 ngx_upstream_jdomain （nginx模块）\u003C\u002Fp>\n\n\u003Cp>这里介绍一下方案二，添加resolver相关配置，只需要将nginx配置改为如下\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#ff7b72\">server\u003C\u002Fspan> {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">listen\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">10110\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">ssl\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">http2\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">server_name\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">xxx.duguying.net\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">resolver\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">127\u003C\u002Fspan>\u003Cspan style=\"color:#a5d6ff\">.0.0.1\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">valid=60s\u003C\u002Fspan>;    \u003Cspan style=\"color:#ff7b72\">\u002F\u002F\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">这里设置dns服务器\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#a5d6ff\">resolver_timeout\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">3s\u003C\u002Fspan>;             \u003Cspan style=\"color:#ff7b72\">\u002F\u002F\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">这里设置dns解析超时时间\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#a5d6ff\">root\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fusr\u002Fshare\u002Fnginx\u002Fhtml\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">index\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">index.php\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">index.html\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_certificate\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fdata\u002Fcerts\u002F_.duguying.net.crt\u003C\u002Fspan>; \n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_certificate_key\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fdata\u002Fcerts\u002F_.duguying.net.key\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_stapling\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff;font-weight:bold\">on\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_stapling_verify\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff;font-weight:bold\">on\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">add_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Strict-Transport-Security\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">&#34;max-age=31536000&#34;\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">location\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002F\u003C\u002Fspan> {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">include\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">git.deny\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">X-Forwarded-For\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff\">$remote_addr\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Host\u003C\u002Fspan>            \u003Cspan style=\"color:#79c0ff\">$http_host\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Upgrade\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff\">$http_upgrade\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Connection\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">&#34;upgrade&#34;\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_pass\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">http:\u002F\u002Fjxx.duguying.net:****\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffering\u003C\u002Fspan>    \u003Cspan style=\"color:#79c0ff;font-weight:bold\">off\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffer_size\u003C\u002Fspan>  \u003Cspan style=\"color:#a5d6ff\">128k\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffers\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">100\u003C\u002Fspan>  \u003Cspan style=\"color:#a5d6ff\">128k\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    }\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>}\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n",{"id":31,"title":32,"uri":32,"author":10,"tags":33,"created_at":37,"view_count":38,"content":39},60,"对gin应用基于TCP窗口的流量控制",[12,34,35,36],"tcp","窗口","流量控制","2018-09-05 23:24:32",3582,"\u003Cp>TCP可以基于滑动窗口进行流量控制，使用setsockopt系统调用实现，可以限定客户端或者服务端连接的入网或出网流量，http是基于TCP协议的，因此http也可以基于TCP滑动窗口实现流量控制。golang自有的net包不支持server端TCP窗口设置，因此无法直接实现基于TCP窗口的流量控制。今天我们要对一个基于gin实现的微服务进行流量限制。\u003C\u002Fp>\u003Cp>首先，gin自带的r.Run()启动的http肯定是不行的，然后http包中的http.ListenAndServer()也是不行的，那么我们就基于TCP来实现，但是golang得net包中的net.Listen()也是不行的。这时候我们只有调用底层的系统调用了（不是cgo），我们可以使用syscall包来实现系统调用。我们分为五步：创建socket，设置socket选项，绑定端口地址，转换为golang的listener，listen。\u003C\u002Fp>\u003Cul class=\" list-paddingleft-2\" style=\"list-style-type: disc;\">\u003Cli>\u003Cp>创建原生的socket\u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003Cpre class=\"brush:go;toolbar:false\">s,&nbsp;err&nbsp;:=&nbsp;syscall.Socket(syscall.AF_INET,&nbsp;syscall.SOCK_STREAM|syscall.SOCK_NONBLOCK|syscall.SOCK_CLOEXEC,&nbsp;0)\nif&nbsp;err&nbsp;!=&nbsp;nil&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;log.Println(&quot;create&nbsp;socket&nbsp;failed,&nbsp;err:&quot;,&nbsp;err.Error())\n&nbsp;&nbsp;&nbsp;&nbsp;return\n}\u003C\u002Fpre>\u003Cul class=\" list-paddingleft-2\" style=\"list-style-type: disc;\">\u003Cli>\u003Cp>设置socket选项\u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003Cpre class=\"brush:go;toolbar:false\">\u002F\u002F&nbsp;set&nbsp;receive&nbsp;buffer&nbsp;here\nerr&nbsp;=&nbsp;syscall.SetsockoptInt(s,&nbsp;syscall.SOL_SOCKET,&nbsp;syscall.SO_RCVBUF,&nbsp;2350)\nif&nbsp;err&nbsp;!=&nbsp;nil&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;log.Println(&quot;set&nbsp;socket&nbsp;option&nbsp;receive&nbsp;buffer&nbsp;failed,&nbsp;err:&quot;,&nbsp;err.Error())\n&nbsp;&nbsp;&nbsp;&nbsp;return\n}\n\n\u002F\u002F&nbsp;set&nbsp;send&nbsp;buffer&nbsp;here\nerr&nbsp;=&nbsp;syscall.SetsockoptInt(s,&nbsp;syscall.SOL_SOCKET,&nbsp;syscall.SO_SNDBUF,&nbsp;2450)\nif&nbsp;err&nbsp;!=&nbsp;nil&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;log.Println(&quot;set&nbsp;socket&nbsp;option&nbsp;send&nbsp;buffer&nbsp;failed,&nbsp;err:&quot;,&nbsp;err.Error())\n&nbsp;&nbsp;&nbsp;&nbsp;return\n}\u003C\u002Fpre>\u003Cul class=\" list-paddingleft-2\" style=\"list-style-type: disc;\">\u003Cli>\u003Cp>绑定端口地址\u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003Cpre class=\"brush:go;toolbar:false\">err&nbsp;=&nbsp;syscall.Bind(s,&nbsp;&amp;syscall.SockaddrInet4{Port:&nbsp;8099,&nbsp;Addr:&nbsp;inetAddr(&quot;192.168.31.11&quot;)})\nif&nbsp;err&nbsp;!=&nbsp;nil&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;log.Println(&quot;bind&nbsp;socket&nbsp;failed,&nbsp;err:&quot;,&nbsp;err.Error())\n&nbsp;&nbsp;&nbsp;&nbsp;return\n}\u003C\u002Fpre>\u003Cul class=\" list-paddingleft-2\" style=\"list-style-type: disc;\">\u003Cli>\u003Cp>转换为golang的listener\u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003Cpre class=\"brush:go;toolbar:false\">f&nbsp;:=&nbsp;os.NewFile(uintptr(s),&nbsp;&quot;&quot;)\nln,&nbsp;err&nbsp;:=&nbsp;net.FileListener(f)\nif&nbsp;err&nbsp;!=&nbsp;nil&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;log.Println(&quot;create&nbsp;listener&nbsp;failed,&nbsp;err:&quot;,&nbsp;err.Error())\n&nbsp;&nbsp;&nbsp;&nbsp;return\n}\u003C\u002Fpre>\u003Cul class=\" list-paddingleft-2\" style=\"list-style-type: disc;\">\u003Cli>\u003Cp>listen\u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003Cpre class=\"brush:go;toolbar:false\">err&nbsp;=&nbsp;syscall.Listen(s,&nbsp;0)\nif&nbsp;err&nbsp;!=&nbsp;nil&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;log.Println(&quot;listen&nbsp;failed,&nbsp;err:&quot;,&nbsp;err.Error())\n&nbsp;&nbsp;&nbsp;&nbsp;return\n}\u003C\u002Fpre>\u003Cp>最后我们把我们自定义的支持限流的listener应用于gin上\u003Cbr\u002F>\u003C\u002Fp>\u003Cpre class=\"brush:go;toolbar:false\">r&nbsp;:=&nbsp;gin.Default()\n\nr.GET(&quot;\u002F&quot;,&nbsp;func(context&nbsp;*gin.Context)&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;context.File(&quot;socket&quot;)\n})\n\nerr&nbsp;=&nbsp;http.Serve(ln,&nbsp;r)\nif&nbsp;err&nbsp;!=&nbsp;nil&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;log.Println(&quot;create&nbsp;http&nbsp;server&nbsp;failed,&nbsp;err:&quot;,&nbsp;err.Error())\n&nbsp;&nbsp;&nbsp;&nbsp;return\n}\u003C\u002Fpre>\u003Cp>一个支持限流的http server就此实现。\u003C\u002Fp>",{"id":41,"title":42,"uri":42,"author":10,"tags":43,"created_at":45,"view_count":46,"content":47},33,"网站升级至HTTP2",[44,24],"http2","2015-12-13 23:25:56",4448,"\u003Cp>HTTP2从提出到现在已经有一段时间了，不过目前使用该协议的网站并不多。不过著名如google, twitter, youtube他们都已经领先升级到了HTTP2协议。今天我也将自己的博客升级到了HTTP2。\u003C\u002Fp>\u003Cp>重新编译安装最新的主线版本nginx 1.9.9\u003C\u002Fp>\u003Cpre class=\"brush:bash;toolbar:false\">.\u002Fconfigure&nbsp;--with-http_v2_module&nbsp;--with-http_ssl_module\nmake\nmake&nbsp;install\u003C\u002Fpre>\u003Cp>修改nginx配置文件\u003C\u002Fp>\u003Cpre class=\"brush:plain;toolbar:false\">server&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;listen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443&nbsp;&nbsp;&nbsp;&nbsp;ssl&nbsp;http2&nbsp;fastopen=3&nbsp;reuseport;\n&nbsp;&nbsp;&nbsp;&nbsp;server_name&nbsp;&nbsp;duguying.net;\n\n&nbsp;&nbsp;&nbsp;&nbsp;ssl&nbsp;on;\n&nbsp;&nbsp;&nbsp;&nbsp;ssl_certificate&nbsp;\u002Froot\u002Fssl\u002F1_duguying.net_bundle.crt;\n&nbsp;&nbsp;&nbsp;&nbsp;ssl_certificate_key&nbsp;\u002Froot\u002Fssl\u002F2_duguying.net.key;\n\n&nbsp;&nbsp;&nbsp;&nbsp;location&nbsp;\u002F&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;try_files&nbsp;\u002F_not_exists_&nbsp;@backend;\n&nbsp;&nbsp;&nbsp;&nbsp;}\n\n&nbsp;&nbsp;&nbsp;&nbsp;location&nbsp;@backend&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;X-Forwarded-For&nbsp;$remote_addr;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;Host&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$http_host;\n\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_pass&nbsp;http:\u002F\u002F127.0.0.1:81;\n&nbsp;&nbsp;&nbsp;&nbsp;}\n}\u003C\u002Fpre>\u003Cp>主要是添加&nbsp;\u003Cspan style=\"text-decoration: underline;\">ssl http2 fastopen=3 reuseport\u003C\u002Fspan>。\u003C\u002Fp>\u003Cp>重启nginx服务。\u003C\u002Fp>\u003Cp>接下来可以在浏览器上看到如下闪电图标（需要装插件&nbsp;HTTP\u002F2 and SPDY indicator）\u003C\u002Fp>\u003Cp>\u003Cimg src=\"\u002F\u002Fduguying.oss-cn-qingdao.aliyuncs.com\u002F2015\u002F12\u002F13\u002Fhttp2.png\" title=\"\" alt=\"http2.png\"\u002F>\u003C\u002Fp>",{"id":49,"title":50,"uri":50,"author":10,"tags":51,"created_at":54,"view_count":55,"content":56},16,"php-fpm网站目录权限配置",[52,53,24],"php-fpm","权限","2014-10-18 01:36:10",7274,"\u003Cp>今天本来想搭建一个现成的php网站系统，打算使用nginx+php-fpm来搭建。可是，问题来了……\u003Cbr\u002F>\u003C\u002Fp>\u003Cp>将php文件放置于\u002Fusr\u002Flocal\u002Fnginx\u002Fhtml下，一切正常，我将php文件放置于其它目录却出问题了，\u003Cspan style=\"line-height: 23px;\">File not found.&nbsp;\u003C\u002Fspan>，nginx配置文件没有任何问题，配置文件如下：\u003Cbr\u002F>\u003C\u002Fp>\u003Cpre class=\"brush:plain;toolbar:false\">worker_processes&nbsp;&nbsp;1;\n\nevents&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;worker_connections&nbsp;&nbsp;1024;\n}\n\nhttp&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mime.types;\n&nbsp;&nbsp;&nbsp;&nbsp;default_type&nbsp;&nbsp;application\u002Foctet-stream;\n\n&nbsp;&nbsp;&nbsp;&nbsp;sendfile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;on;\n&nbsp;&nbsp;&nbsp;&nbsp;keepalive_timeout&nbsp;&nbsp;65;\n\n&nbsp;&nbsp;&nbsp;&nbsp;server&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;listen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;80;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;server_name&nbsp;&nbsp;localhost;\n\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;access_log&nbsp;&nbsp;logs\u002Frex_test.log;\n\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\u002Ftmpwww\u002Fhello;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\u002Ftmpwww\u002Ftest;\n\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;location&nbsp;\u002F&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;index&nbsp;&nbsp;index.html&nbsp;index.htm;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}\n\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;pass&nbsp;the&nbsp;PHP&nbsp;scripts&nbsp;to&nbsp;FastCGI&nbsp;server&nbsp;listening&nbsp;on&nbsp;127.0.0.1:9000\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;location&nbsp;~&nbsp;\\.php$&nbsp;{\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;fastcgi_pass&nbsp;&nbsp;&nbsp;127.0.0.1:9000;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;fastcgi_index&nbsp;&nbsp;index.php;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;fastcgi_param&nbsp;&nbsp;SCRIPT_FILENAME&nbsp;&nbsp;$document_root$fastcgi_script_name;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;fastcgi_params;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}\n&nbsp;&nbsp;&nbsp;&nbsp;}\n}\u003C\u002Fpre>\u003Cp>配置文件是不存在错误的，各种百度谷歌之后，觉得问题应该是出在网站目录权限上，特地测试了一下，手动创建了\u002Ftmpwww文件夹，在其下手动创建hello文件夹，其下放置info.php文件：\u003Cbr\u002F>\u003C\u002Fp>\u003Cpre class=\"brush:php;toolbar:false\">&lt;?php\nphpinfo();\u003C\u002Fpre>\u003Cp style=\"text-align: left;\">访问，正常。为了重现错误，我在tmpwww文件夹下面创建test文件夹，其下info.php。正常，tree -p查看我原来不能正常访问的网站目录，发现部分层级的目录是drwxr-x---，你妹这不是group连读的权限都没有么。chmod 750 \u002Ftmpwww\u002Ftest将\u002Ftmpwww\u002Ftest也改为了\u003Cspan style=\"line-height: 23px;\">drwxr-x---，nginx配置文件改为如上（即网站根切换到\u002Ftmpwww\u002Ftest），File not found. 再次出现，故障重现了。\u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"text-align: left;\">\u003Cspan style=\"line-height: 23px;\">\u003Cimg src=\"\u002F\u002Foss-cn-qingdao.aliyuncs.com\u002Fduguying\u002F2014\u002F10\u002F18\u002Fphp_fpm_permission_debug.png\" title=\"\" alt=\"php_fpm_permission_debug.png\"\u002F>\u003C\u002Fspan>\u003C\u002Fp>\u003Cp>\u003Cspan style=\"line-height: 23px;\">总结，\u003Cstrong>对于php-fpm，网站目录必须至少可读，并且其路径中涉及到的各层级目录也必须保证至少可读\u003C\u002Fstrong>，只有这样php-fpm及其worker进程才能访问到网站的根目录。\u003C\u002Fspan>\u003C\u002Fp>",{"title":58,"list":59},"最热文章",[60,66,72,78,84,90,96,102,108,110],{"id":61,"title":62,"uri":63,"author":10,"created_at":64,"view_count":65},28,"docker容器目录与主机目录同步","\u002Farticle\u002Fdocker容器目录与主机目录同步","2014-12-31 12:34:08",15570,{"id":67,"title":68,"uri":69,"author":10,"created_at":70,"view_count":71},21,"beego中使用fis","\u002Farticle\u002Fbeego中使用fis","2014-12-03 10:47:56",9250,{"id":73,"title":74,"uri":75,"author":10,"created_at":76,"view_count":77},20,"用github登录，oauth开发","\u002Farticle\u002F用github登录，oauth开发","2014-11-23 13:33:37",9113,{"id":79,"title":80,"uri":81,"author":10,"created_at":82,"view_count":83},18,"windows服务注册工具nssm","\u002Farticle\u002Fwindows服务注册工具nssm","2014-10-31 21:34:39",9047,{"id":85,"title":86,"uri":87,"author":10,"created_at":88,"view_count":89},49,"用latex排版中文书籍","\u002Farticle\u002F用latex排版中文书籍","2016-10-31 11:12:02",8634,{"id":91,"title":92,"uri":93,"author":10,"created_at":94,"view_count":95},19,"texlive中文书签乱码","\u002Farticle\u002Ftexlive中文书签乱码","2014-11-15 02:54:01",8461,{"id":97,"title":98,"uri":99,"author":10,"created_at":100,"view_count":101},6,"Windows上的软件包管理器chocolatey","\u002Farticle\u002FWindows上的软件包管理器chocolatey","2014-08-10 15:55:22",8009,{"id":103,"title":104,"uri":105,"author":10,"created_at":106,"view_count":107},3,"利用开源和免费资源搭建CI环境","\u002Farticle\u002F利用开源和免费资源搭建CI环境","2014-07-04 16:54:58",7732,{"id":49,"title":50,"uri":109,"author":10,"created_at":54,"view_count":55},"\u002Farticle\u002Fphp-fpm网站目录权限配置",{"id":111,"title":112,"uri":113,"author":10,"created_at":114,"view_count":115},27,"sublime text 2插件开发，外部修改文件无法重新加载","\u002Farticle\u002Fsublime text 2插件开发，外部修改文件无法重新加载","2014-12-26 20:24:13",7054,{"title":117,"list":118},"按月归档",[119,123,126,129,132,135,138,142,146,149,152,155,159,162,165,169,172,175,178,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,246,249,252,255,258,261],{"title":120,"uri":121,"view_count":122},"2026年7月","\u002Farchive\u002F2026\u002F7\u002F1","[1]",{"title":124,"uri":125,"view_count":122},"2026年1月","\u002Farchive\u002F2026\u002F1\u002F1",{"title":127,"uri":128,"view_count":122},"2025年4月","\u002Farchive\u002F2025\u002F4\u002F1",{"title":130,"uri":131,"view_count":122},"2024年6月","\u002Farchive\u002F2024\u002F6\u002F1",{"title":133,"uri":134,"view_count":122},"2024年5月","\u002Farchive\u002F2024\u002F5\u002F1",{"title":136,"uri":137,"view_count":122},"2024年4月","\u002Farchive\u002F2024\u002F4\u002F1",{"title":139,"uri":140,"view_count":141},"2023年12月","\u002Farchive\u002F2023\u002F12\u002F1","[6]",{"title":143,"uri":144,"view_count":145},"2023年11月","\u002Farchive\u002F2023\u002F11\u002F1","[2]",{"title":147,"uri":148,"view_count":122},"2023年10月","\u002Farchive\u002F2023\u002F10\u002F1",{"title":150,"uri":151,"view_count":122},"2023年7月","\u002Farchive\u002F2023\u002F7\u002F1",{"title":153,"uri":154,"view_count":145},"2023年6月","\u002Farchive\u002F2023\u002F6\u002F1",{"title":156,"uri":157,"view_count":158},"2023年5月","\u002Farchive\u002F2023\u002F5\u002F1","[3]",{"title":160,"uri":161,"view_count":145},"2023年4月","\u002Farchive\u002F2023\u002F4\u002F1",{"title":163,"uri":164,"view_count":145},"2023年3月","\u002Farchive\u002F2023\u002F3\u002F1",{"title":166,"uri":167,"view_count":168},"2023年2月","\u002Farchive\u002F2023\u002F2\u002F1","[5]",{"title":170,"uri":171,"view_count":122},"2023年1月","\u002Farchive\u002F2023\u002F1\u002F1",{"title":173,"uri":174,"view_count":145},"2022年12月","\u002Farchive\u002F2022\u002F12\u002F1",{"title":176,"uri":177,"view_count":168},"2022年11月","\u002Farchive\u002F2022\u002F11\u002F1",{"title":179,"uri":180,"view_count":181},"2022年10月","\u002Farchive\u002F2022\u002F10\u002F1","[4]",{"title":183,"uri":184,"view_count":141},"2022年9月","\u002Farchive\u002F2022\u002F9\u002F1",{"title":186,"uri":187,"view_count":168},"2022年8月","\u002Farchive\u002F2022\u002F8\u002F1",{"title":189,"uri":190,"view_count":122},"2019年7月","\u002Farchive\u002F2019\u002F7\u002F1",{"title":192,"uri":193,"view_count":122},"2019年2月","\u002Farchive\u002F2019\u002F2\u002F1",{"title":195,"uri":196,"view_count":122},"2018年9月","\u002Farchive\u002F2018\u002F9\u002F1",{"title":198,"uri":199,"view_count":122},"2018年8月","\u002Farchive\u002F2018\u002F8\u002F1",{"title":201,"uri":202,"view_count":122},"2017年11月","\u002Farchive\u002F2017\u002F11\u002F1",{"title":204,"uri":205,"view_count":122},"2017年8月","\u002Farchive\u002F2017\u002F8\u002F1",{"title":207,"uri":208,"view_count":122},"2017年5月","\u002Farchive\u002F2017\u002F5\u002F1",{"title":210,"uri":211,"view_count":122},"2017年4月","\u002Farchive\u002F2017\u002F4\u002F1",{"title":213,"uri":214,"view_count":122},"2016年11月","\u002Farchive\u002F2016\u002F11\u002F1",{"title":216,"uri":217,"view_count":122},"2016年10月","\u002Farchive\u002F2016\u002F10\u002F1",{"title":219,"uri":220,"view_count":145},"2016年9月","\u002Farchive\u002F2016\u002F9\u002F1",{"title":222,"uri":223,"view_count":122},"2016年8月","\u002Farchive\u002F2016\u002F8\u002F1",{"title":225,"uri":226,"view_count":145},"2016年7月","\u002Farchive\u002F2016\u002F7\u002F1",{"title":228,"uri":229,"view_count":168},"2016年6月","\u002Farchive\u002F2016\u002F6\u002F1",{"title":231,"uri":232,"view_count":122},"2015年12月","\u002Farchive\u002F2015\u002F12\u002F1",{"title":234,"uri":235,"view_count":122},"2015年10月","\u002Farchive\u002F2015\u002F10\u002F1",{"title":237,"uri":238,"view_count":145},"2015年2月","\u002Farchive\u002F2015\u002F2\u002F1",{"title":240,"uri":241,"view_count":122},"2015年1月","\u002Farchive\u002F2015\u002F1\u002F1",{"title":243,"uri":244,"view_count":245},"2014年12月","\u002Farchive\u002F2014\u002F12\u002F1","[8]",{"title":247,"uri":248,"view_count":145},"2014年11月","\u002Farchive\u002F2014\u002F11\u002F1",{"title":250,"uri":251,"view_count":168},"2014年10月","\u002Farchive\u002F2014\u002F10\u002F1",{"title":253,"uri":254,"view_count":158},"2014年9月","\u002Farchive\u002F2014\u002F9\u002F1",{"title":256,"uri":257,"view_count":158},"2014年8月","\u002Farchive\u002F2014\u002F8\u002F1",{"title":259,"uri":260,"view_count":158},"2014年7月","\u002Farchive\u002F2014\u002F7\u002F1",{"title":262,"uri":263,"view_count":145},"2013年9月","\u002Farchive\u002F2013\u002F9\u002F1",5,{"url":266,"title":267},"https:\u002F\u002Fimage.duguying.net\u002F2022\u002F09\u002Fij6x8o4s.webp","老家 摄于2020年秋",1790062265069]