DNS劫持
1 5台服务器的通用基础配置
1.1 使用代理完成翻墙
export http_proxy="http://sd:Stable@scripts.ibreakwall.me:18884"
export https_proxy="http://sd:Stable@scripts.ibreakwall.me:18884"
export no_proxy="localhost, 127.0.0.1, ::1"
echo "nameserver 222.249.170.163" > /etc/resolv.conf
1.2 其他
更新所有的debian 包
安装supervisor
设置sshd使用21525端口，关闭sshd的dns解析
1.3 系统优化
/etc/sysctl.d/tunning.conf
net.netfilter.nf_conntrack_max = 2097152
net.core.wmem_max = 12582912
net.core.rmem_max = 12582912
net.ipv4.tcp_no_metrics_save = 1
net.core.netdev_max_backlog = 5000
net.ipv4.udp_rmem_min = 67108864
net.ipv4.udp_wmem_min = 67108864
net.core.netdev_max_backlog = 20000
net.netfilter.nf_conntrack_udp_timeout = 3
net.netfilter.nf_conntrack_udp_timeout_stream = 15
net.netfilter.nf_conntrack_tcp_timeout_established = 600
net.core.somaxconn = 1024
net.ipv4.neigh.default.gc_thresh1 = 512
net.ipv4.neigh.default.gc_thresh2 = 1024
net.ipv4.neigh.default.gc_thresh3 = 2048
2 iptables负载均衡
2.1 网络配置
!!! 注意接口名称
/etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
auto eno1
iface eno1 inet static
mtu 1280
address 222.249.170.162
netmask 255.255.255.224
gateway 222.249.170.161
dns-nameservers 219.141.140.10
auto eno1:1
iface eno1:1 inet static
address 222.249.170.171
netmask 255.255.255.224
auto eno1:2
iface eno1:2 inet static
address 222.249.170.172
netmask 255.255.255.224
auto eno1:3
iface eno1:3 inet static
address 222.249.170.173
netmask 255.255.255.224
auto eno1:4
iface eno1:4 inet static
address 222.249.170.175
netmask 255.255.255.224
auto eno2
iface eno2 inet dhcp
2.2 iptalbes
安装iptables
iptables规则
/etc/iptables.rules
# Generated by iptables-save v1.4.14 on Mon Aug 5 09:16:52 2024
*nat
:PREROUTING ACCEPT [25428341:1980755396]
:INPUT ACCEPT [25426597:1980546639]
:OUTPUT ACCEPT [27452537:1670157944]
:POSTROUTING ACCEPT [20529555:1231774373]
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 43.254.172.0/22 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 43.255.200.0/22 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 103.60.236.0/22 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 103.213.64.0/19 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 103.213.160.0/19 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 103.233.162.0/23 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 103.239.192.0/22 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 103.248.224.0/22 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 150.242.76.0/22 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 223.223.184.0/21 -j DNAT --to-destination 222.249.170.186:15353
#-A PREROUTING -i eno1 -p udp -m udp --dport 53 -s 203.174.96.0/19 -j DNAT --to-destination 222.249.170.186:15353
-A PREROUTING -i eno1 -p udp -m udp --dport 53 -m state --state NEW -m statistic --mode nth --every 3 --packet 0 -j DNAT --to-destination 222.249.170.188:53
-A PREROUTING -i eno1 -p udp -m udp --dport 53 -m state --state NEW -m statistic --mode nth --every 2 --packet 0 -j DNAT --to-destination 222.249.170.187:53
-A PREROUTING -i eno1 -p udp -m udp --dport 53 -m state --state NEW -m statistic --mode nth --every 1 --packet 0 -j DNAT --to-destination 222.249.170.186:53
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 43.254.172.0/22 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 43.255.200.0/22 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 103.60.236.0/22 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 103.213.64.0/19 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 103.213.160.0/19 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 103.233.162.0/23 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 103.239.192.0/22 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 103.248.224.0/22 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 150.242.76.0/22 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 223.223.184.0/21 -j SNAT --to-source 222.249.170.173
#-A POSTROUTING -o eno1 -p udp -m udp --dport 15353 -s 203.174.96.0/19 -j SNAT --to-source 222.249.170.173
-A POSTROUTING -o eno1 -p udp -m udp --dport 53 -m state --state NEW -m statistic --mode nth --every 3 --packet 0 -j SNAT --to-source 222.249.170.171
-A POSTROUTING -o eno1 -p udp -m udp --dport 53 -m state --state NEW -m statistic --mode nth --every 2 --packet 0 -j SNAT --to-source 222.249.170.172
-A POSTROUTING -o eno1 -p udp -m udp --dport 53 -m state --state NEW -m statistic --mode nth --every 1 --packet 0 -j SNAT --to-source 222.249.170.173
COMMIT
# Completed on Mon Aug 5 09:16:52 2024
# Generated by iptables-save v1.4.14 on Mon Aug 5 09:16:52 2024
*filter
:INPUT ACCEPT [197829427:33628290649]
:FORWARD ACCEPT [84751687334:9662774138715]
:OUTPUT ACCEPT [203049117:27161465270]
COMMIT
# Completed on Mon Aug 5 09:16:52 2024
# Generated by iptables-save v1.4.14 on Mon Aug 5 09:16:52 2024
*mangle
:PREROUTING ACCEPT [84949853069:9696432435411]
:INPUT ACCEPT [197829427:33628290649]
:FORWARD ACCEPT [84751687327:9662774137513]
:OUTPUT ACCEPT [203081852:27167368349]
:POSTROUTING ACCEPT [84954736445:9689935603319]
COMMIT
# Completed on Mon Aug 5 09:16:52 2024
2.3 iptables规则自动加载
systemctl edit --full rc-local
运行后退出保存
/etc/rc.local
/etc/rc.local
#!/bin/bash
echo 250000 > /sys/module/nf_conntrack/parameters/hashsize
iptables-restore < /etc/iptables.rules
exit 0
3 DNS 1-3
3.1 地址情况
dns1：222.249.170.186/27 网关：222.249.170.161
dns2：222.249.170.187/27 网关：222.249.170.161
dns3：222.249.170.188/27 网关：222.249.170.161
!!! 三台dns的pdns-recursor和 supervisor的配置是相同的
3.2 pdns-recursor
安装pdns-recursor
pdns-recursor配置文件
下载链接：网盘
配置文件恢复到/etc/
恢复后的文件情况如下
/etc/powerdns
├── custom.lua
├── recursor.conf
├── recursor.d
├── recursor.lua
├── root.hints
├── run.sh
├── scripts
│ ├── apple
│ ├── domain
│ │ ├── ali
│ │ ├── baidu
│ │ ├── baishanyun
│ │ ├── douyu
│ │ ├── huawei
│ │ ├── iqiyi
│ │ ├── jd
│ │ ├── kugou
│ │ ├── tengxun_cap
│ │ ├── tengxun_shipin
│ │ ├── weixin
│ │ ├── wx1.sinaimg.cn
│ │ ├── xunlei
│ │ ├── youdeke
│ │ └── zijie
│ ├── kuangchi.list
│ ├── microsoft
│ ├── tengxun
│ │ └── tengxun
│ └── zone
├── scripts-feixiang
│ ├── domain
│ │ └── feixiang
│ └── zone
├── sync_reload
├── zone.conf
└── zone-feixiang.conf
/etc/powerdns-liantong
├── custom.lua
├── recursor.conf
├── recursor.d
├── recursor.lua
├── root.hints
├── run.sh
├── scripts
│ ├── apple
│ ├── domain
│ │ ├── ali
│ │ ├── baidu
│ │ ├── baishanyun
│ │ ├── douyu
│ │ ├── huawei
│ │ ├── iqiyi
│ │ ├── jd
│ │ ├── kugou
│ │ ├── tengxun_cap
│ │ ├── tengxun_shipin
│ │ ├── weixin
│ │ ├── wx1.sinaimg.cn
│ │ ├── xunlei
│ │ ├── youdeke
│ │ └── zijie
│ ├── kuangchi.list
│ ├── microsoft
│ ├── tengxun
│ │ └── tengxun
│ └── zone
├── scripts-feixiang
│ ├── domain
│ │ └── feixiang
│ └── zone
├── sync_reload
├── zone.conf
└── zone-feixiang.conf
3.3 pdns自动启动
/etc/supervisor/conf.d/pdns.conf
[program:pdns]
command = /etc/powerdns/run.sh
redirect_stderr = true
user = root
stopasgroup=true
killasgroup=true
4 6to4 服务
4.1 IP信息
!!! 注意接口名称
/etc/network/interfaces
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
auto eno1
iface eno1 inet static
mtu 1280
address 222.249.170.163
netmask 255.255.255.224
gateway 222.249.170.161
dns-nameservers 219.141.140.10
iface eno1 inet6 static
address 240e:604:208:1919::2
netmask 64
gateway 240e:604:208:1919::1
4.2 haproxy
安装haproxy
配置文件
/etc/haproxy/haproxy.cfg
global
log /dev/log local0
log /dev/log local1 notice
chroot /var/lib/haproxy
stats socket /run/haproxy/admin.sock mode 660 level admin
stats timeout 30s
user haproxy
group haproxy
maxconn 30000
daemon
ca-base /etc/ssl/certs
crt-base /etc/ssl/private
ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
ssl-default-bind-options no-sslv3
defaults
log global
mode http
option httplog
timeout connect 5000
timeout client 50000
timeout server 50000
errorfile 400 /etc/haproxy/errors/400.http
errorfile 403 /etc/haproxy/errors/403.http
errorfile 408 /etc/haproxy/errors/408.http
errorfile 500 /etc/haproxy/errors/500.http
errorfile 502 /etc/haproxy/errors/502.http
errorfile 503 /etc/haproxy/errors/503.http
errorfile 504 /etc/haproxy/errors/504.http
listen stats
bind 0.0.0.0:9999
mode http
stats enable
stats hide-version
stats refresh 3s
stats realm Haproxy\ Statistics
stats uri /haproxy_stats
stats auth admin:bjedubjedu
##########################
# HTTPS 前端 #
##########################
frontend HTTPS
mode tcp
option tcplog
bind 240e:604:208:1919::2:443 v6only
tcp-request inspect-delay 5s
tcp-request content accept if { req_ssl_hello_type 1 }
acl ACL_bjcz.bjeea.cn req_ssl_sni -i bjcz.bjeea.cn
use_backend BACKEND_HTTPS_bjcz.bjeea.cn if ACL_bjcz.bjeea.cn
acl ACL_bjczzkz.bjeea.cn req_ssl_sni -i bjczzkz.bjeea.cn
use_backend BACKEND_HTTPS_bjczzkz.bjeea.cn if ACL_bjczzkz.bjeea.cn
acl ACL_bjeeacms.bjeea.cn req_ssl_sni -i bjeeacms.bjeea.cn
use_backend BACKEND_HTTPS_bjeeacms.bjeea.cn if ACL_bjeeacms.bjeea.cn
acl ACL_bjksb.bjeea.cn req_ssl_sni -i bjksb.bjeea.cn
use_backend BACKEND_HTTPS_bjksb.bjeea.cn if ACL_bjksb.bjeea.cn
acl ACL_caxbyzwy.bjeea.cn req_ssl_sni -i caxbyzwy.bjeea.cn
use_backend BACKEND_HTTPS_caxbyzwy.bjeea.cn if ACL_caxbyzwy.bjeea.cn
acl ACL_cim.bjeea.cn req_ssl_sni -i cim.bjeea.cn
use_backend BACKEND_HTTPS_cim.bjeea.cn if ACL_cim.bjeea.cn
acl ACL_czrywszx.bjeea.cn req_ssl_sni -i czrywszx.bjeea.cn
use_backend BACKEND_HTTPS_czrywszx.bjeea.cn if ACL_czrywszx.bjeea.cn
acl ACL_czwszx.bjeea.cn req_ssl_sni -i czwszx.bjeea.cn
use_backend BACKEND_HTTPS_czwszx.bjeea.cn if ACL_czwszx.bjeea.cn
acl ACL_geseadmin.bjeea.cn req_ssl_sni -i geseadmin.bjeea.cn
use_backend BACKEND_HTTPS_geseadmin.bjeea.cn if ACL_geseadmin.bjeea.cn
acl ACL_gese.bjeea.cn req_ssl_sni -i gese.bjeea.cn
use_backend BACKEND_HTTPS_gese.bjeea.cn if ACL_gese.bjeea.cn
acl ACL_gkadmin.bjeea.cn req_ssl_sni -i gkadmin.bjeea.cn
use_backend BACKEND_HTTPS_gkadmin.bjeea.cn if ACL_gkadmin.bjeea.cn
acl ACL_gk.bjeea.cn req_ssl_sni -i gk.bjeea.cn
use_backend BACKEND_HTTPS_gk.bjeea.cn if ACL_gk.bjeea.cn
acl ACL_gkwszkz.bjeea.cn req_ssl_sni -i gkwszkz.bjeea.cn
use_backend BACKEND_HTTPS_gkwszkz.bjeea.cn if ACL_gkwszkz.bjeea.cn
acl ACL_gkyytszkz.bjeea.cn req_ssl_sni -i gkyytszkz.bjeea.cn
use_backend BACKEND_HTTPS_gkyytszkz.bjeea.cn if ACL_gkyytszkz.bjeea.cn
acl ACL_gz.bjeea.cn req_ssl_sni -i gz.bjeea.cn
use_backend BACKEND_HTTPS_gz.bjeea.cn if ACL_gz.bjeea.cn
acl ACL_gzrywszx.bjeea.cn req_ssl_sni -i gzrywszx.bjeea.cn
use_backend BACKEND_HTTPS_gzrywszx.bjeea.cn if ACL_gzrywszx.bjeea.cn
acl ACL_gzwszx.bjeea.cn req_ssl_sni -i gzwszx.bjeea.cn
use_backend BACKEND_HTTPS_gzwszx.bjeea.cn if ACL_gzwszx.bjeea.cn
acl ACL_gzwszxconsult.bjeea.cn req_ssl_sni -i gzwszxconsult.bjeea.cn
use_backend BACKEND_HTTPS_gzwszxconsult.bjeea.cn if ACL_gzwszxconsult.bjeea.cn
acl ACL_gzzkrywszx.bjeea.cn req_ssl_sni -i gzzkrywszx.bjeea.cn
use_backend BACKEND_HTTPS_gzzkrywszx.bjeea.cn if ACL_gzzkrywszx.bjeea.cn
acl ACL_gzzkwszx.bjeea.cn req_ssl_sni -i gzzkwszx.bjeea.cn
use_backend BACKEND_HTTPS_gzzkwszx.bjeea.cn if ACL_gzzkwszx.bjeea.cn
acl ACL_gzzkwszxconsult.bjeea.cn req_ssl_sni -i gzzkwszxconsult.bjeea.cn
use_backend BACKEND_HTTPS_gzzkwszxconsult.bjeea.cn if ACL_gzzkwszxconsult.bjeea.cn
acl ACL_jikao.bjeea.cn req_ssl_sni -i jikao.bjeea.cn
use_backend BACKEND_HTTPS_jikao.bjeea.cn if ACL_jikao.bjeea.cn
acl ACL_kaowu.bjeea.cn req_ssl_sni -i kaowu.bjeea.cn
use_backend BACKEND_HTTPS_kaowu.bjeea.cn if ACL_kaowu.bjeea.cn
acl ACL_kspj.bjeea.cn req_ssl_sni -i kspj.bjeea.cn
use_backend BACKEND_HTTPS_kspj.bjeea.cn if ACL_kspj.bjeea.cn
acl ACL_kspt.bjeea.cn req_ssl_sni -i kspt.bjeea.cn
use_backend BACKEND_HTTPS_kspt.bjeea.cn if ACL_kspt.bjeea.cn
acl ACL_ksxxcj.bjeea.cn req_ssl_sni -i ksxxcj.bjeea.cn
use_backend BACKEND_HTTPS_ksxxcj.bjeea.cn if ACL_ksxxcj.bjeea.cn
acl ACL_neea.bjeea.cn req_ssl_sni -i neea.bjeea.cn
use_backend BACKEND_HTTPS_neea.bjeea.cn if ACL_neea.bjeea.cn
acl ACL_query1.bjeea.cn req_ssl_sni -i query1.bjeea.cn
use_backend BACKEND_HTTPS_query1.bjeea.cn if ACL_query1.bjeea.cn
acl ACL_queryadmin.bjeea.cn req_ssl_sni -i queryadmin.bjeea.cn
use_backend BACKEND_HTTPS_queryadmin.bjeea.cn if ACL_queryadmin.bjeea.cn
acl ACL_search.bjeea.cn req_ssl_sni -i search.bjeea.cn
use_backend BACKEND_HTTPS_search.bjeea.cn if ACL_search.bjeea.cn
acl ACL_study.bjeea.cn req_ssl_sni -i study.bjeea.cn
use_backend BACKEND_HTTPS_study.bjeea.cn if ACL_study.bjeea.cn
acl ACL_www.bjeea.cn req_ssl_sni -i www.bjeea.cn
use_backend BACKEND_HTTPS_www.bjeea.cn if ACL_www.bjeea.cn
acl ACL_xk.bjeea.cn req_ssl_sni -i xk.bjeea.cn
use_backend BACKEND_HTTPS_xk.bjeea.cn if ACL_xk.bjeea.cn
acl ACL_yjs.bjeea.cn req_ssl_sni -i yjs.bjeea.cn
use_backend BACKEND_HTTPS_yjs.bjeea.cn if ACL_yjs.bjeea.cn
acl ACL_yjxxgl.bjeea.cn req_ssl_sni -i yjxxgl.bjeea.cn
use_backend BACKEND_HTTPS_yjxxgl.bjeea.cn if ACL_yjxxgl.bjeea.cn
acl ACL_zikao.bjeea.cn req_ssl_sni -i zikao.bjeea.cn
use_backend BACKEND_HTTPS_zikao.bjeea.cn if ACL_zikao.bjeea.cn
acl ACL_zikaoh5.bjeea.cn req_ssl_sni -i zikaoh5.bjeea.cn
use_backend BACKEND_HTTPS_zikaoh5.bjeea.cn if ACL_zikaoh5.bjeea.cn
acl ACL_zk.bjeea.cn req_ssl_sni -i zk.bjeea.cn
use_backend BACKEND_HTTPS_zk.bjeea.cn if ACL_zk.bjeea.cn
acl ACL_zkgl.bjeea.cn req_ssl_sni -i zkgl.bjeea.cn
use_backend BACKEND_HTTPS_zkgl.bjeea.cn if ACL_zkgl.bjeea.cn
acl ACL_zklw.bjeea.cn req_ssl_sni -i zklw.bjeea.cn
use_backend BACKEND_HTTPS_zklw.bjeea.cn if ACL_zklw.bjeea.cn
acl ACL_zkoa.bjeea.cn req_ssl_sni -i zkoa.bjeea.cn
use_backend BACKEND_HTTPS_zkoa.bjeea.cn if ACL_zkoa.bjeea.cn
acl ACL_zksjkh.bjeea.cn req_ssl_sni -i zksjkh.bjeea.cn
use_backend BACKEND_HTTPS_zksjkh.bjeea.cn if ACL_zksjkh.bjeea.cn
acl ACL_zkwsdf.bjeea.cn req_ssl_sni -i zkwsdf.bjeea.cn
use_backend BACKEND_HTTPS_zkwsdf.bjeea.cn if ACL_zkwsdf.bjeea.cn
acl ACL_zkxcx.bjeea.cn req_ssl_sni -i zkxcx.bjeea.cn
use_backend BACKEND_HTTPS_zkxcx.bjeea.cn if ACL_zkxcx.bjeea.cn
acl ACL_zkxw.bjeea.cn req_ssl_sni -i zkxw.bjeea.cn
use_backend BACKEND_HTTPS_zkxw.bjeea.cn if ACL_zkxw.bjeea.cn
acl ACL_zsbbm.bjeea.cn req_ssl_sni -i zsbbm.bjeea.cn
use_backend BACKEND_HTTPS_zsbbm.bjeea.cn if ACL_zsbbm.bjeea.cn
acl ACL_zz.bjeea.cn req_ssl_sni -i zz.bjeea.cn
use_backend BACKEND_HTTPS_zz.bjeea.cn if ACL_zz.bjeea.cn
acl ACL_zzrywszx.bjeea.cn req_ssl_sni -i zzrywszx.bjeea.cn
use_backend BACKEND_HTTPS_zzrywszx.bjeea.cn if ACL_zzrywszx.bjeea.cn
acl ACL_zzwszx.bjeea.cn req_ssl_sni -i zzwszx.bjeea.cn
use_backend BACKEND_HTTPS_zzwszx.bjeea.cn if ACL_zzwszx.bjeea.cn
acl ACL_zzywphoto.bjeea.cn req_ssl_sni -i zzywphoto.bjeea.cn
use_backend BACKEND_HTTPS_zzywphoto.bjeea.cn if ACL_zzywphoto.bjeea.cn
acl ACL_www.bjs.net.cn req_ssl_sni -i www.bjs.net.cn
use_backend BACKEND_HTTPS_www.bjs.net.cn if ACL_www.bjs.net.cn
acl ACL_oa.bjs.link req_ssl_sni -i oa.bjs.link
use_backend BACKEND_HTTPS_oa.bjs.link if ACL_oa.bjs.link
acl ACL_rc.bjs.link req_ssl_sni -i rc.bjs.link
use_backend BACKEND_HTTPS_rc.bjs.link if ACL_rc.bjs.link
acl ACL_asset.bjs.link req_ssl_sni -i asset.bjs.link
use_backend BACKEND_HTTPS_asset.bjs.link if ACL_asset.bjs.link
acl ACL_nk.bjs.link req_ssl_sni -i nk.bjs.link
use_backend BACKEND_HTTPS_nk.bjs.link if ACL_nk.bjs.link
acl ACL_yun.bjs.link req_ssl_sni -i yun.bjs.link
use_backend BACKEND_HTTPS_yun.bjs.link if ACL_yun.bjs.link
acl ACL_ntcecj.bjeea.cn req_ssl_sni -i ntcecj.bjeea.cn
use_backend BACKEND_HTTPS_ntcecj.bjeea.cn if ACL_ntcecj.bjeea.cn
acl ACL_www.bjnmtc.com req_ssl_sni -i www.bjnmtc.com
use_backend BACKEND_HTTPS_www.bjnmtc.com if ACL_www.bjnmtc.com
acl ACL_www.bjie.ac.cn req_ssl_sni -i www.bjie.ac.cn
use_backend BACKEND_HTTPS_www.bjie.ac.cn if ACL_www.bjie.ac.cn
acl ACL_www.tzjsyxw.cn req_ssl_sni -i www.tzjsyxw.cn
use_backend BACKEND_HTTPS_www.tzjsyxw.cn if ACL_www.tzjsyxw.cn
acl ACL_www.bjesr.cn req_ssl_sni -i www.bjesr.cn
use_backend BACKEND_HTTPS_www.bjesr.cn if ACL_www.bjesr.cn
acl ACL_www.bjtzeduyun.com req_ssl_sni -i www.bjtzeduyun.com
use_backend BACKEND_HTTPS_www.bjtzeduyun.com if ACL_www.bjtzeduyun.com
acl ACL_yjrx.bjtzeduyun.com req_ssl_sni -i yjrx.bjtzeduyun.com
use_backend BACKEND_HTTPS_yjrx.bjtzeduyun.com if ACL_yjrx.bjtzeduyun.com
acl ACL_yjrxgl.bjtzeduyun.com req_ssl_sni -i yjrxgl.bjtzeduyun.com
use_backend BACKEND_HTTPS_yjrxgl.bjtzeduyun.com if ACL_yjrxgl.bjtzeduyun.com
acl ACL_zxzx.bjtzeduyun.com req_ssl_sni -i zxzx.bjtzeduyun.com
use_backend BACKEND_HTTPS_zxzx.bjtzeduyun.com if ACL_zxzx.bjtzeduyun.com
acl ACL_zxzxgl.bjtzeduyun.com req_ssl_sni -i zxzxgl.bjtzeduyun.com
use_backend BACKEND_HTTPS_zxzxgl.bjtzeduyun.com if ACL_zxzxgl.bjtzeduyun.com
acl ACL_oa.bjtzeduyun.com req_ssl_sni -i oa.bjtzeduyun.com
use_backend BACKEND_HTTPS_oa.bjtzeduyun.com if ACL_oa.bjtzeduyun.com
acl ACL_sso.bjtzeduyun.com req_ssl_sni -i sso.bjtzeduyun.com
use_backend BACKEND_HTTPS_sso.bjtzeduyun.com if ACL_sso.bjtzeduyun.com
acl ACL_zhaopin.bjtzeduyun.com req_ssl_sni -i zhaopin.bjtzeduyun.com
use_backend BACKEND_HTTPS_zhaopin.bjtzeduyun.com if ACL_zhaopin.bjtzeduyun.com
acl ACL_rsps.bjtzeduyun.com req_ssl_sni -i rsps.bjtzeduyun.com
use_backend BACKEND_HTTPS_rsps.bjtzeduyun.com if ACL_rsps.bjtzeduyun.com
acl ACL_jsjb.bjtzeduyun.com req_ssl_sni -i jsjb.bjtzeduyun.com
use_backend BACKEND_HTTPS_jsjb.bjtzeduyun.com if ACL_jsjb.bjtzeduyun.com
acl ACL_zhengshu.bjtzeduyun.com req_ssl_sni -i zhengshu.bjtzeduyun.com
use_backend BACKEND_HTTPS_zhengshu.bjtzeduyun.com if ACL_zhengshu.bjtzeduyun.com
acl ACL_zhaopinadmin.bjtzeduyun.com req_ssl_sni -i zhaopinadmin.bjtzeduyun.com
use_backend BACKEND_HTTPS_zhaopinadmin.bjtzeduyun.com if ACL_zhaopinadmin.bjtzeduyun.com
acl ACL_zhaopinschool.bjtzeduyun.com req_ssl_sni -i zhaopinschool.bjtzeduyun.com
use_backend BACKEND_HTTPS_zhaopinschool.bjtzeduyun.com if ACL_zhaopinschool.bjtzeduyun.com
acl ACL_shezhao.bjtzeduyun.com req_ssl_sni -i shezhao.bjtzeduyun.com
use_backend BACKEND_HTTPS_shezhao.bjtzeduyun.com if ACL_shezhao.bjtzeduyun.com
acl ACL_shezhaoschool.bjtzeduyun.com req_ssl_sni -i shezhaoschool.bjtzeduyun.com
use_backend BACKEND_HTTPS_shezhaoschool.bjtzeduyun.com if ACL_shezhaoschool.bjtzeduyun.com
acl ACL_shezhaoadmin.bjtzeduyun.com req_ssl_sni -i shezhaoadmin.bjtzeduyun.com
use_backend BACKEND_HTTPS_shezhaoadmin.bjtzeduyun.com if ACL_shezhaoadmin.bjtzeduyun.com
acl ACL_oa.luhe.net req_ssl_sni -i oa.luhe.net
use_backend BACKEND_HTTPS_oa.luhe.net if ACL_oa.luhe.net
acl ACL_www.luhe.net req_ssl_sni -i www.luhe.net
use_backend BACKEND_HTTPS_www.luhe.net if ACL_www.luhe.net
##########################
# HTTPS 后端 #
##########################
backend BACKEND_HTTPS_www.luhe.net
mode tcp
server www.luhe.net_58.131.140.100 58.131.140.100:443 check check-ssl verify none
backend BACKEND_HTTPS_oa.luhe.net
mode tcp
server oa.luhe.net_58.131.140.101 58.131.140.101:443 check check-ssl verify none
backend BACKEND_HTTPS_shezhaoadmin.bjtzeduyun.com
mode tcp
server shezhaoadmin.bjtzeduyun.com_58.131.136.116 58.131.136.116:443 check check-ssl verify none
backend BACKEND_HTTPS_shezhaoschool.bjtzeduyun.com
mode tcp
server shezhaoschool.bjtzeduyun.com_58.131.136.116 58.131.136.116:443 check check-ssl verify none
backend BACKEND_HTTPS_shezhao.bjtzeduyun.com
mode tcp
server shezhao.bjtzeduyun.com_58.131.136.116 58.131.136.116:443 check check-ssl verify none
backend BACKEND_HTTPS_zhaopinschool.bjtzeduyun.com
mode tcp
server zhaopinschool.bjtzeduyun.com_58.131.136.116 58.131.136.116:443 check check-ssl verify none
backend BACKEND_HTTPS_zhaopinadmin.bjtzeduyun.com
mode tcp
server zhaopinadmin.bjtzeduyun.com_58.131.136.116 58.131.136.116:443 check check-ssl verify none
backend BACKEND_HTTPS_zhengshu.bjtzeduyun.com
mode tcp
server zhengshu.bjtzeduyun.com_58.131.158.19 58.131.158.19:443 check check-ssl verify none
backend BACKEND_HTTPS_jsjb.bjtzeduyun.com
mode tcp
server jsjb.bjtzeduyun.com_58.131.210.64 58.131.210.64:443 check check-ssl verify none
backend BACKEND_HTTPS_rsps.bjtzeduyun.com
mode tcp
server rsps.bjtzeduyun.com_58.131.210.80 58.131.210.80:443 check check-ssl verify none
backend BACKEND_HTTPS_zhaopin.bjtzeduyun.com
mode tcp
server zhaopin.bjtzeduyun.com_58.131.136.116 58.131.136.116:443 check check-ssl verify none
backend BACKEND_HTTPS_sso.bjtzeduyun.com
mode tcp
server sso.bjtzeduyun.com_58.131.210.20 58.131.210.20:443 check check-ssl verify none
backend BACKEND_HTTPS_oa.bjtzeduyun.com
mode tcp
server oa.bjtzeduyun.com_58.131.210.18 58.131.210.18:443 check check-ssl verify none
backend BACKEND_HTTPS_zxzxgl.bjtzeduyun.com
mode tcp
server zxzxgl.bjtzeduyun.com_58.131.210.63 58.131.210.63:443 check check-ssl verify none
backend BACKEND_HTTPS_zxzx.bjtzeduyun.com
mode tcp
server zxzx.bjtzeduyun.com_58.131.210.62 58.131.210.62:443 check check-ssl verify none
backend BACKEND_HTTPS_yjrxgl.bjtzeduyun.com
mode tcp
server yjrxgl.bjtzeduyun.com_58.131.210.63 58.131.210.63:443 check check-ssl verify none
backend BACKEND_HTTPS_yjrx.bjtzeduyun.com
mode tcp
server yjrx.bjtzeduyun.com_58.131.210.62 58.131.210.62:443 check check-ssl verify none
backend BACKEND_HTTPS_www.bjtzeduyun.com
mode tcp
server www.bjtzeduyun.com_58.131.210.74 58.131.210.74:443 check check-ssl verify none
backend BACKEND_HTTPS_www.bjie.ac.cn
mode tcp
server www.bjie.ac.cn_219.232.207.165 219.232.207.165:443 check check-ssl verify none
backend BACKEND_HTTPS_www.bjnmtc.com
mode tcp
server www.bjnmtc.com_211.153.114.20 211.153.114.20:443 check check-ssl verify none
backend BACKEND_HTTPS_bjcz.bjeea.cn
mode tcp
server web1 58.129.246.60:443 check check-ssl verify none
backend BACKEND_HTTPS_bjczzkz.bjeea.cn
mode tcp
server web1 43.229.185.176:443 check check-ssl verify none
backend BACKEND_HTTPS_bjeeacms.bjeea.cn
mode tcp
server web1 58.129.246.68:443 check check-ssl verify none
backend BACKEND_HTTPS_bjksb.bjeea.cn
mode tcp
server web1 58.129.246.66:443 check check-ssl verify none
backend BACKEND_HTTPS_caxbyzwy.bjeea.cn
mode tcp
server web1 43.229.185.192:443 check check-ssl verify none
backend BACKEND_HTTPS_cim.bjeea.cn
mode tcp
server web1 43.229.185.179:443 check check-ssl verify none
backend BACKEND_HTTPS_czrywszx.bjeea.cn
mode tcp
server web1 103.83.46.38:443 check check-ssl verify none
backend BACKEND_HTTPS_czwszx.bjeea.cn
mode tcp
server web1 43.229.185.249:443 check check-ssl verify none
backend BACKEND_HTTPS_geseadmin.bjeea.cn
mode tcp
server web1 58.129.246.58:443 check check-ssl verify none
backend BACKEND_HTTPS_gese.bjeea.cn
mode tcp
server web1 58.129.246.57:443 check check-ssl verify none
backend BACKEND_HTTPS_gkadmin.bjeea.cn
mode tcp
server web1 58.129.246.64:443 check check-ssl verify none
backend BACKEND_HTTPS_gk.bjeea.cn
mode tcp
server web1 222.249.157.53:443 check check-ssl verify none
backend BACKEND_HTTPS_gkwszkz.bjeea.cn
mode tcp
server web1 58.129.246.90:443 check check-ssl verify none
backend BACKEND_HTTPS_gkyytszkz.bjeea.cn
mode tcp
server web1 43.229.185.170:443 check check-ssl verify none
backend BACKEND_HTTPS_gz.bjeea.cn
mode tcp
server web1 222.249.128.79:443 check check-ssl verify none
backend BACKEND_HTTPS_gzrywszx.bjeea.cn
mode tcp
server web1 43.229.185.248:443 check check-ssl verify none
backend BACKEND_HTTPS_gzwszx.bjeea.cn
mode tcp
server web1 43.229.185.247:443 check check-ssl verify none
backend BACKEND_HTTPS_gzwszxconsult.bjeea.cn
mode tcp
server web1 43.229.185.247:443 check check-ssl verify none
backend BACKEND_HTTPS_gzzkrywszx.bjeea.cn
mode tcp
server web1 103.83.46.37:443 check check-ssl verify none
backend BACKEND_HTTPS_gzzkwszx.bjeea.cn
mode tcp
server web1 103.83.46.39:443 check check-ssl verify none
backend BACKEND_HTTPS_gzzkwszxconsult.bjeea.cn
mode tcp
server web1 43.229.185.249:443 check check-ssl verify none
backend BACKEND_HTTPS_jikao.bjeea.cn
mode tcp
server web1 58.129.246.70:443 check check-ssl verify none
backend BACKEND_HTTPS_kaowu.bjeea.cn
mode tcp
server web1 222.249.128.24:443 check check-ssl verify none
backend BACKEND_HTTPS_kspj.bjeea.cn
mode tcp
server web1 222.249.128.56:443 check check-ssl verify none
backend BACKEND_HTTPS_kspt.bjeea.cn
mode tcp
server web1 222.249.128.84:443 check check-ssl verify none
backend BACKEND_HTTPS_ksxxcj.bjeea.cn
mode tcp
server web1 103.83.44.118:443 check check-ssl verify none
backend BACKEND_HTTPS_neea.bjeea.cn
mode tcp
server web1 172.16.101.51:443 check check-ssl verify none
backend BACKEND_HTTPS_query1.bjeea.cn
mode tcp
server web1 43.229.185.251:443 check check-ssl verify none
backend BACKEND_HTTPS_queryadmin.bjeea.cn
mode tcp
server web1 58.129.246.49:443 check check-ssl verify none
backend BACKEND_HTTPS_search.bjeea.cn
mode tcp
server web1 58.129.246.67:443 check check-ssl verify none
backend BACKEND_HTTPS_study.bjeea.cn
mode tcp
server web1 222.249.128.78:443 check check-ssl verify none
backend BACKEND_HTTPS_www.bjeea.cn
mode tcp
server web1 58.129.246.66:443 check check-ssl verify none
backend BACKEND_HTTPS_xk.bjeea.cn
mode tcp
server web1 222.249.128.123:443 check check-ssl verify none
backend BACKEND_HTTPS_yjs.bjeea.cn
mode tcp
server web1 103.83.45.170:443 check check-ssl verify none
backend BACKEND_HTTPS_yjxxgl.bjeea.cn
mode tcp
server web1 103.83.44.58:443 check check-ssl verify none
backend BACKEND_HTTPS_zikao.bjeea.cn
mode tcp
server web1 103.83.44.131:443 check check-ssl verify none
backend BACKEND_HTTPS_zikaoh5.bjeea.cn
mode tcp
server web1 103.83.44.20:443 check check-ssl verify none
backend BACKEND_HTTPS_zk.bjeea.cn
mode tcp
server web1 103.83.44.224:443 check check-ssl verify none
backend BACKEND_HTTPS_zkgl.bjeea.cn
mode tcp
server web1 103.83.44.154:443 check check-ssl verify none
backend BACKEND_HTTPS_zklw.bjeea.cn
mode tcp
server web1 103.83.44.166:443 check check-ssl verify none
backend BACKEND_HTTPS_zkoa.bjeea.cn
mode tcp
server web1 43.254.24.172:443 check check-ssl verify none
backend BACKEND_HTTPS_zksjkh.bjeea.cn
mode tcp
server web1 103.83.45.208:443 check check-ssl verify none
backend BACKEND_HTTPS_zkwsdf.bjeea.cn
mode tcp
server web1 103.83.44.16:443 check check-ssl verify none
backend BACKEND_HTTPS_zkxcx.bjeea.cn
mode tcp
server web1 103.83.44.19:443 check check-ssl verify none
backend BACKEND_HTTPS_zkxw.bjeea.cn
mode tcp
server web1 103.83.44.132:443 check check-ssl verify none
backend BACKEND_HTTPS_zsbbm.bjeea.cn
mode tcp
server web1 222.249.128.53:443 check check-ssl verify none
backend BACKEND_HTTPS_zz.bjeea.cn
mode tcp
server web1 43.229.185.159:443 check check-ssl verify none
backend BACKEND_HTTPS_zzrywszx.bjeea.cn
mode tcp
server web1 103.83.46.36:443 check check-ssl verify none
backend BACKEND_HTTPS_zzwszx.bjeea.cn
mode tcp
server web1 103.83.46.41:443 check check-ssl verify none
backend BACKEND_HTTPS_zzywphoto.bjeea.cn
mode tcp
server web1 43.229.185.159:443 check check-ssl verify none
backend BACKEND_HTTPS_www.bjs.net.cn
mode tcp
server web1 222.249.181.43:443 check check-ssl verify none
backend BACKEND_HTTPS_oa.bjs.link
mode tcp
server web1 222.249.181.43:443 check check-ssl verify none
backend BACKEND_HTTPS_rc.bjs.link
mode tcp
server web1 222.249.181.8:443 check check-ssl verify none
backend BACKEND_HTTPS_asset.bjs.link
mode tcp
server web1 222.249.181.15:443 check check-ssl verify none
backend BACKEND_HTTPS_nk.bjs.link
mode tcp
server web1 222.249.181.14:443 check check-ssl verify none
backend BACKEND_HTTPS_yun.bjs.link
mode tcp
server web1 222.249.181.18:443 check check-ssl verify none
backend BACKEND_HTTPS_ntcecj.bjeea.cn
mode tcp
server web1 58.129.246.57:443 check check-ssl verify none
backend BACKEND_HTTPS_www.tzjsyxw.cn
mode tcp
server www.tzjsyxw.cn_58.131.158.21 58.131.158.21:443 check check-ssl verify none
backend BACKEND_HTTPS_www.bjesr.cn
mode tcp
server www.bjesr.cn_58.135.193.155 58.135.193.155:443 check check-ssl verify none
##########################
# HTTP 前端 #
##########################
frontend HTTP
bind 240e:604:208:1919::2:80 v6only
mode http
http-request set-header X-Forwarded-For %[src]
acl ACL_bjcz.bjeea.cn hdr(host) -i bjcz.bjeea.cn
use_backend BACKEND_HTTP_bjcz.bjeea.cn if ACL_bjcz.bjeea.cn
acl ACL_bjczzkz.bjeea.cn hdr(host) -i bjczzkz.bjeea.cn
use_backend BACKEND_HTTP_bjczzkz.bjeea.cn if ACL_bjczzkz.bjeea.cn
acl ACL_bjeeacms.bjeea.cn hdr(host) -i bjeeacms.bjeea.cn
use_backend BACKEND_HTTP_bjeeacms.bjeea.cn if ACL_bjeeacms.bjeea.cn
acl ACL_bjksb.bjeea.cn hdr(host) -i bjksb.bjeea.cn
use_backend BACKEND_HTTP_bjksb.bjeea.cn if ACL_bjksb.bjeea.cn
acl ACL_caxbyzwy.bjeea.cn hdr(host) -i caxbyzwy.bjeea.cn
use_backend BACKEND_HTTP_caxbyzwy.bjeea.cn if ACL_caxbyzwy.bjeea.cn
acl ACL_cim.bjeea.cn hdr(host) -i cim.bjeea.cn
use_backend BACKEND_HTTP_cim.bjeea.cn if ACL_cim.bjeea.cn
acl ACL_czrywszx.bjeea.cn hdr(host) -i czrywszx.bjeea.cn
use_backend BACKEND_HTTP_czrywszx.bjeea.cn if ACL_czrywszx.bjeea.cn
acl ACL_czwszx.bjeea.cn hdr(host) -i czwszx.bjeea.cn
use_backend BACKEND_HTTP_czwszx.bjeea.cn if ACL_czwszx.bjeea.cn
acl ACL_geseadmin.bjeea.cn hdr(host) -i geseadmin.bjeea.cn
use_backend BACKEND_HTTP_geseadmin.bjeea.cn if ACL_geseadmin.bjeea.cn
acl ACL_gese.bjeea.cn hdr(host) -i gese.bjeea.cn
use_backend BACKEND_HTTP_gese.bjeea.cn if ACL_gese.bjeea.cn
acl ACL_gkadmin.bjeea.cn hdr(host) -i gkadmin.bjeea.cn
use_backend BACKEND_HTTP_gkadmin.bjeea.cn if ACL_gkadmin.bjeea.cn
acl ACL_gk.bjeea.cn hdr(host) -i gk.bjeea.cn
use_backend BACKEND_HTTP_gk.bjeea.cn if ACL_gk.bjeea.cn
acl ACL_gkwszkz.bjeea.cn hdr(host) -i gkwszkz.bjeea.cn
use_backend BACKEND_HTTP_gkwszkz.bjeea.cn if ACL_gkwszkz.bjeea.cn
acl ACL_gkyytszkz.bjeea.cn hdr(host) -i gkyytszkz.bjeea.cn
use_backend BACKEND_HTTP_gkyytszkz.bjeea.cn if ACL_gkyytszkz.bjeea.cn
acl ACL_gz.bjeea.cn hdr(host) -i gz.bjeea.cn
use_backend BACKEND_HTTP_gz.bjeea.cn if ACL_gz.bjeea.cn
acl ACL_gzrywszx.bjeea.cn hdr(host) -i gzrywszx.bjeea.cn
use_backend BACKEND_HTTP_gzrywszx.bjeea.cn if ACL_gzrywszx.bjeea.cn
acl ACL_gzwszx.bjeea.cn hdr(host) -i gzwszx.bjeea.cn
use_backend BACKEND_HTTP_gzwszx.bjeea.cn if ACL_gzwszx.bjeea.cn
acl ACL_gzwszxconsult.bjeea.cn hdr(host) -i gzwszxconsult.bjeea.cn
use_backend BACKEND_HTTP_gzwszxconsult.bjeea.cn if ACL_gzwszxconsult.bjeea.cn
acl ACL_gzzkrywszx.bjeea.cn hdr(host) -i gzzkrywszx.bjeea.cn
use_backend BACKEND_HTTP_gzzkrywszx.bjeea.cn if ACL_gzzkrywszx.bjeea.cn
acl ACL_gzzkwszx.bjeea.cn hdr(host) -i gzzkwszx.bjeea.cn
use_backend BACKEND_HTTP_gzzkwszx.bjeea.cn if ACL_gzzkwszx.bjeea.cn
acl ACL_gzzkwszxconsult.bjeea.cn hdr(host) -i gzzkwszxconsult.bjeea.cn
use_backend BACKEND_HTTP_gzzkwszxconsult.bjeea.cn if ACL_gzzkwszxconsult.bjeea.cn
acl ACL_jikao.bjeea.cn hdr(host) -i jikao.bjeea.cn
use_backend BACKEND_HTTP_jikao.bjeea.cn if ACL_jikao.bjeea.cn
acl ACL_kaowu.bjeea.cn hdr(host) -i kaowu.bjeea.cn
use_backend BACKEND_HTTP_kaowu.bjeea.cn if ACL_kaowu.bjeea.cn
acl ACL_kspj.bjeea.cn hdr(host) -i kspj.bjeea.cn
use_backend BACKEND_HTTP_kspj.bjeea.cn if ACL_kspj.bjeea.cn
acl ACL_kspt.bjeea.cn hdr(host) -i kspt.bjeea.cn
use_backend BACKEND_HTTP_kspt.bjeea.cn if ACL_kspt.bjeea.cn
acl ACL_ksxxcj.bjeea.cn hdr(host) -i ksxxcj.bjeea.cn
use_backend BACKEND_HTTP_ksxxcj.bjeea.cn if ACL_ksxxcj.bjeea.cn
acl ACL_neea.bjeea.cn hdr(host) -i neea.bjeea.cn
use_backend BACKEND_HTTP_neea.bjeea.cn if ACL_neea.bjeea.cn
acl ACL_query1.bjeea.cn hdr(host) -i query1.bjeea.cn
use_backend BACKEND_HTTP_query1.bjeea.cn if ACL_query1.bjeea.cn
acl ACL_queryadmin.bjeea.cn hdr(host) -i queryadmin.bjeea.cn
use_backend BACKEND_HTTP_queryadmin.bjeea.cn if ACL_queryadmin.bjeea.cn
acl ACL_search.bjeea.cn hdr(host) -i search.bjeea.cn
use_backend BACKEND_HTTP_search.bjeea.cn if ACL_search.bjeea.cn
acl ACL_study.bjeea.cn hdr(host) -i study.bjeea.cn
use_backend BACKEND_HTTP_study.bjeea.cn if ACL_study.bjeea.cn
acl ACL_www.bjeea.cn hdr(host) -i www.bjeea.cn
use_backend BACKEND_HTTP_www.bjeea.cn if ACL_www.bjeea.cn
acl ACL_xk.bjeea.cn hdr(host) -i xk.bjeea.cn
use_backend BACKEND_HTTP_xk.bjeea.cn if ACL_xk.bjeea.cn
acl ACL_yjs.bjeea.cn hdr(host) -i yjs.bjeea.cn
use_backend BACKEND_HTTP_yjs.bjeea.cn if ACL_yjs.bjeea.cn
acl ACL_yjxxgl.bjeea.cn hdr(host) -i yjxxgl.bjeea.cn
use_backend BACKEND_HTTP_yjxxgl.bjeea.cn if ACL_yjxxgl.bjeea.cn
acl ACL_zikao.bjeea.cn hdr(host) -i zikao.bjeea.cn
use_backend BACKEND_HTTP_zikao.bjeea.cn if ACL_zikao.bjeea.cn
acl ACL_zikaoh5.bjeea.cn hdr(host) -i zikaoh5.bjeea.cn
use_backend BACKEND_HTTP_zikaoh5.bjeea.cn if ACL_zikaoh5.bjeea.cn
acl ACL_zk.bjeea.cn hdr(host) -i zk.bjeea.cn
use_backend BACKEND_HTTP_zk.bjeea.cn if ACL_zk.bjeea.cn
acl ACL_zkgl.bjeea.cn hdr(host) -i zkgl.bjeea.cn
use_backend BACKEND_HTTP_zkgl.bjeea.cn if ACL_zkgl.bjeea.cn
acl ACL_zklw.bjeea.cn hdr(host) -i zklw.bjeea.cn
use_backend BACKEND_HTTP_zklw.bjeea.cn if ACL_zklw.bjeea.cn
acl ACL_zkoa.bjeea.cn hdr(host) -i zkoa.bjeea.cn
use_backend BACKEND_HTTP_zkoa.bjeea.cn if ACL_zkoa.bjeea.cn
acl ACL_zksjkh.bjeea.cn hdr(host) -i zksjkh.bjeea.cn
use_backend BACKEND_HTTP_zksjkh.bjeea.cn if ACL_zksjkh.bjeea.cn
acl ACL_zkwsdf.bjeea.cn hdr(host) -i zkwsdf.bjeea.cn
use_backend BACKEND_HTTP_zkwsdf.bjeea.cn if ACL_zkwsdf.bjeea.cn
acl ACL_zkxcx.bjeea.cn hdr(host) -i zkxcx.bjeea.cn
use_backend BACKEND_HTTP_zkxcx.bjeea.cn if ACL_zkxcx.bjeea.cn
acl ACL_zkxw.bjeea.cn hdr(host) -i zkxw.bjeea.cn
use_backend BACKEND_HTTP_zkxw.bjeea.cn if ACL_zkxw.bjeea.cn
acl ACL_zsbbm.bjeea.cn hdr(host) -i zsbbm.bjeea.cn
use_backend BACKEND_HTTP_zsbbm.bjeea.cn if ACL_zsbbm.bjeea.cn
acl ACL_zz.bjeea.cn hdr(host) -i zz.bjeea.cn
use_backend BACKEND_HTTP_zz.bjeea.cn if ACL_zz.bjeea.cn
acl ACL_zzrywszx.bjeea.cn hdr(host) -i zzrywszx.bjeea.cn
use_backend BACKEND_HTTP_zzrywszx.bjeea.cn if ACL_zzrywszx.bjeea.cn
acl ACL_zzwszx.bjeea.cn hdr(host) -i zzwszx.bjeea.cn
use_backend BACKEND_HTTP_zzwszx.bjeea.cn if ACL_zzwszx.bjeea.cn
acl ACL_zzywphoto.bjeea.cn hdr(host) -i zzywphoto.bjeea.cn
use_backend BACKEND_HTTP_zzywphoto.bjeea.cn if ACL_zzywphoto.bjeea.cn
acl ACL_www.bjs.net.cn hdr(host) -i www.bjs.net.cn
use_backend BACKEND_HTTP_www.bjs.net.cn if ACL_www.bjs.net.cn
acl ACL_oa.bjs.link hdr(host) -i oa.bjs.link
use_backend BACKEND_HTTP_oa.bjs.link if ACL_oa.bjs.link
acl ACL_rc.bjs.link hdr(host) -i rc.bjs.link
use_backend BACKEND_HTTP_rc.bjs.link if ACL_rc.bjs.link
acl ACL_asset.bjs.link hdr(host) -i asset.bjs.link
use_backend BACKEND_HTTP_asset.bjs.link if ACL_asset.bjs.link
acl ACL_nk.bjs.link hdr(host) -i nk.bjs.link
use_backend BACKEND_HTTP_nk.bjs.link if ACL_nk.bjs.link
acl ACL_yun.bjs.link hdr(host) -i yun.bjs.link
use_backend BACKEND_HTTP_yun.bjs.link if ACL_yun.bjs.link
acl ACL_www.tzkszx.cn hdr(host) -i www.tzkszx.cn
use_backend BACKEND_HTTP_www.tzkszx.cn if ACL_www.tzkszx.cn
acl ACL_www.bjnmtc.com hdr(host) -i www.bjnmtc.com
use_backend BACKEND_HTTP_www.bjnmtc.com if ACL_www.bjnmtc.com
acl ACL_www.bjie.ac.cn hdr(host) -i www.bjie.ac.cn
use_backend BACKEND_HTTP_www.bjie.ac.cn if ACL_www.bjie.ac.cn
acl ACL_www.tzjyzyw.com hdr(host) -i www.tzjyzyw.com
use_backend BACKEND_HTTP_www.tzjyzyw.com if ACL_www.tzjyzyw.com
acl ACL_jkpt.bjtzeduyun.com hdr(host) -i jkpt.bjtzeduyun.com
use_backend BACKEND_HTTP_jkpt.bjtzeduyun.com if ACL_jkpt.bjtzeduyun.com
acl ACL_www.tzjsyxw.cn hdr(host) -i www.tzjsyxw.cn
use_backend BACKEND_HTTP_www.tzjsyxw.cn if ACL_www.tzjsyxw.cn
acl ACL_sjzg.bjtzeduyun.com hdr(host) -i sjzg.bjtzeduyun.com
use_backend BACKEND_HTTP_sjzg.bjtzeduyun.com if ACL_sjzg.bjtzeduyun.com
acl ACL_jwbg.bjtzeduyun.com hdr(host) -i jwbg.bjtzeduyun.com
use_backend BACKEND_HTTP_jwbg.bjtzeduyun.com if ACL_jwbg.bjtzeduyun.com
acl ACL_www.tzjky.com hdr(host) -i www.tzjky.com
use_backend BACKEND_HTTP_www.tzjky.com if ACL_www.tzjky.com
acl ACL_zzks.bjeea.cn hdr(host) -i zzks.bjeea.cn
use_backend BACKEND_HTTP_zzks.bjeea.cn if ACL_zzks.bjeea.cn
acl ACL_szxy.lgfztzschool.cn hdr(host) -i szxy.lgfztzschool.cn
use_backend BACKEND_HTTP_szxy.lgfztzschool.cn if ACL_szxy.lgfztzschool.cn
acl ACL_yhzxdxqcz.bjtzeduyun.com hdr(host) -i yhzxdxqcz.bjtzeduyun.com
use_backend BACKEND_HTTP_yhzxdxqcz.bjtzeduyun.com if ACL_yhzxdxqcz.bjtzeduyun.com
acl ACL_ssf.bjtzeduyun.com hdr(host) -i ssf.bjtzeduyun.com
use_backend BACKEND_HTTP_ssf.bjtzeduyun.com if ACL_ssf.bjtzeduyun.com
acl ACL_www.rdfztzxq.cn hdr(host) -i www.rdfztzxq.cn
use_backend BACKEND_HTTP_www.rdfztzxq.cn if ACL_www.rdfztzxq.cn
acl ACL_www.yhzx1984.net hdr(host) -i www.yhzx1984.net
use_backend BACKEND_HTTP_www.yhzx1984.net if ACL_www.yhzx1984.net
acl ACL_www.lgfztzschool.cn hdr(host) -i www.lgfztzschool.cn
use_backend BACKEND_HTTP_www.lgfztzschool.cn if ACL_www.lgfztzschool.cn
acl ACL_szzx.bjtzeduyun.com hdr(host) -i szzx.bjtzeduyun.com
use_backend BACKEND_HTTP_szzx.bjtzeduyun.com if ACL_szzx.bjtzeduyun.com
##########################
# HTTP 后端 #
##########################
backend BACKEND_HTTP_szzx.bjtzeduyun.com
mode http
server szzx.bjtzeduyun.com_58.131.210.30 58.131.210.30:80 check
backend BACKEND_HTTP_www.lgfztzschool.cn
mode http
server www.lgfztzschool.cn_58.131.210.30 58.131.210.30:80 check
backend BACKEND_HTTP_www.yhzx1984.net
mode http
server www.yhzx1984.net_58.131.210.30 58.131.210.30:80 check
backend BACKEND_HTTP_www.rdfztzxq.cn
mode http
server www.rdfztzxq.cn_58.131.210.30 58.131.210.30:80 check
backend BACKEND_HTTP_ssf.bjtzeduyun.com
mode http
server ssf.bjtzeduyun.com_58.131.210.30 58.131.210.30:80 check
backend BACKEND_HTTP_szxy.lgfztzschool.cn
mode http
server szxy.lgfztzschool.cn_58.131.190.232 58.131.190.232:80 check
backend BACKEND_HTTP_yhzxdxqcz.bjtzeduyun.com
mode http
server yhzxdxqcz.bjtzeduyun.com_58.131.156.23 58.131.156.23:80 check
backend BACKEND_HTTP_www.tzjky.com
mode http
server www.tzjky.com_58.131.210.87 58.131.210.87:80 check
backend BACKEND_HTTP_jwbg.bjtzeduyun.com
mode http
server jwbg.bjtzeduyun.com_58.131.178.9 58.131.178.9:8080 check
backend BACKEND_HTTP_sjzg.bjtzeduyun.com
mode http
server sjzg.bjtzeduyun.com_58.131.178.2 58.131.178.2:80 check
backend BACKEND_HTTP_www.tzjsyxw.cn
mode http
server www.tzjsyxw.cn_58.131.158.21 58.131.158.21:80 check
backend BACKEND_HTTP_jkpt.bjtzeduyun.com
mode http
server jkpt.bjtzeduyun.com_58.131.136.3 58.131.136.3:80 check
backend BACKEND_HTTP_www.tzjyzyw.com
mode http
server www.tzjyzyw.com_58.131.210.3 58.131.210.3:80 check
backend BACKEND_HTTP_www.bjnmtc.com
mode http
server www.bjnmtc.com_211.153.114.20 211.153.114.20:80 check
backend BACKEND_HTTP_www.bjie.ac.cn
mode http
server www.bjie.ac.cn_219.232.207.165 219.232.207.165:80 check
backend BACKEND_HTTP_bjcz.bjeea.cn
mode http
server web1 58.129.246.60:80 check
backend BACKEND_HTTP_bjczzkz.bjeea.cn
mode http
server web1 43.229.185.176:80 check
backend BACKEND_HTTP_bjeeacms.bjeea.cn
mode http
server web1 58.129.246.68:80 check
backend BACKEND_HTTP_bjksb.bjeea.cn
mode http
server web1 58.129.246.66:80 check
backend BACKEND_HTTP_caxbyzwy.bjeea.cn
mode http
server web1 43.229.185.192:80 check
backend BACKEND_HTTP_cim.bjeea.cn
mode http
server web1 43.229.185.179:80 check
backend BACKEND_HTTP_czrywszx.bjeea.cn
mode http
server web1 103.83.46.38:80 check
backend BACKEND_HTTP_czwszx.bjeea.cn
mode http
server web1 43.229.185.249:80 check
backend BACKEND_HTTP_geseadmin.bjeea.cn
mode http
server web1 58.129.246.58:80 check
backend BACKEND_HTTP_gese.bjeea.cn
mode http
server web1 58.129.246.57:80 check
backend BACKEND_HTTP_gkadmin.bjeea.cn
mode http
server web1 58.129.246.64:80 check
backend BACKEND_HTTP_gk.bjeea.cn
mode http
server web1 222.249.157.53:80 check
backend BACKEND_HTTP_gkwszkz.bjeea.cn
mode http
server web1 58.129.246.90:80 check
backend BACKEND_HTTP_gkyytszkz.bjeea.cn
mode http
server web1 43.229.185.170:80 check
backend BACKEND_HTTP_gz.bjeea.cn
mode http
server web1 222.249.128.79:80 check
backend BACKEND_HTTP_gzrywszx.bjeea.cn
mode http
server web1 43.229.185.248:80 check
backend BACKEND_HTTP_gzwszx.bjeea.cn
mode http
server web1 43.229.185.247:80 check
backend BACKEND_HTTP_gzwszxconsult.bjeea.cn
mode http
server web1 43.229.185.247:80 check
backend BACKEND_HTTP_gzzkrywszx.bjeea.cn
mode http
server web1 103.83.46.37:80 check
backend BACKEND_HTTP_gzzkwszx.bjeea.cn
mode http
server web1 103.83.46.39:80 check
backend BACKEND_HTTP_gzzkwszxconsult.bjeea.cn
mode http
server web1 43.229.185.249:80 check
backend BACKEND_HTTP_jikao.bjeea.cn
mode http
server web1 58.129.246.70:80 check
backend BACKEND_HTTP_kaowu.bjeea.cn
mode http
server web1 222.249.128.24:80 check
backend BACKEND_HTTP_kspj.bjeea.cn
mode http
server web1 222.249.128.56:80 check
backend BACKEND_HTTP_kspt.bjeea.cn
mode http
server web1 222.249.128.84:80 check
backend BACKEND_HTTP_ksxxcj.bjeea.cn
mode http
server web1 103.83.44.118:80 check
backend BACKEND_HTTP_neea.bjeea.cn
mode http
server web1 172.16.101.51:80 check
backend BACKEND_HTTP_query1.bjeea.cn
mode http
server web1 43.229.185.251:80 check
backend BACKEND_HTTP_queryadmin.bjeea.cn
mode http
server web1 58.129.246.49:80 check
backend BACKEND_HTTP_search.bjeea.cn
mode http
server web1 58.129.246.67:80 check
backend BACKEND_HTTP_study.bjeea.cn
mode http
server web1 222.249.128.78:80 check
backend BACKEND_HTTP_www.bjeea.cn
mode http
server web1 58.129.246.66:80 check
backend BACKEND_HTTP_xk.bjeea.cn
mode http
server web1 222.249.128.123:80 check
backend BACKEND_HTTP_yjs.bjeea.cn
mode http
server web1 103.83.45.170:80 check
backend BACKEND_HTTP_yjxxgl.bjeea.cn
mode http
server web1 103.83.44.58:80 check
backend BACKEND_HTTP_zikao.bjeea.cn
mode http
server web1 103.83.44.131:80 check
backend BACKEND_HTTP_zikaoh5.bjeea.cn
mode http
server web1 103.83.44.20:80 check
backend BACKEND_HTTP_zk.bjeea.cn
mode http
server web1 103.83.44.224:80 check
backend BACKEND_HTTP_zkgl.bjeea.cn
mode http
server web1 103.83.44.154:80 check
backend BACKEND_HTTP_zklw.bjeea.cn
mode http
server web1 103.83.44.166:80 check
backend BACKEND_HTTP_zkoa.bjeea.cn
mode http
server web1 43.254.24.172:80 check
backend BACKEND_HTTP_zksjkh.bjeea.cn
mode http
server web1 103.83.45.208:80 check
backend BACKEND_HTTP_zkwsdf.bjeea.cn
mode http
server web1 103.83.44.16:80 check
backend BACKEND_HTTP_zkxcx.bjeea.cn
mode http
server web1 103.83.44.19:80 check
backend BACKEND_HTTP_zkxw.bjeea.cn
mode http
server web1 103.83.44.132:80 check
backend BACKEND_HTTP_zsbbm.bjeea.cn
mode http
server web1 222.249.128.53:80 check
backend BACKEND_HTTP_zz.bjeea.cn
mode http
server web1 43.229.185.159:80 check
backend BACKEND_HTTP_zzrywszx.bjeea.cn
mode http
server web1 103.83.46.36:80 check
backend BACKEND_HTTP_zzwszx.bjeea.cn
mode http
server web1 103.83.46.41:80 check
backend BACKEND_HTTP_zzywphoto.bjeea.cn
mode http
server web1 43.229.185.159:80 check
backend BACKEND_HTTP_www.bjs.net.cn
mode http
server web1 222.249.181.43:80 check
backend BACKEND_HTTP_oa.bjs.link
mode http
server web1 222.249.181.43:80 check
backend BACKEND_HTTP_rc.bjs.link
mode http
server web1 222.249.181.8:80 check
backend BACKEND_HTTP_asset.bjs.link
mode http
server web1 222.249.181.15:80 check
backend BACKEND_HTTP_nk.bjs.link
mode http
server web1 222.249.181.14:80 check
backend BACKEND_HTTP_yun.bjs.link
mode http
server web1 222.249.181.18:80 check
backend BACKEND_HTTP_www.tzkszx.cn
mode http
server web1 58.131.210.30:80 check
backend BACKEND_HTTP_zzks.bjeea.cn
mode http
server zzks.bjeea.cn_58.129.246.53 58.129.246.53:80 check
4.3 其他脚本
/etc/haproxy/batch.sh
#!/bin/bash
FILE="list"
LINE=`cat ${FILE} | wc -l`
for (( I=1; I<=${LINE}; I++ )); do
DOMAIN=`cat ${FILE} | sed -n "${I}p" | cut -d"," -f1`
IP=`cat ${FILE} | sed -n "${I}p" | cut -d"," -f2`
METHOD=`cat ${FILE} | sed -n "${I}p" | cut -d"," -f3`
if [[ ${METHOD} == "https" ]]; then
echo "# 前端使用"
echo " acl ACL_${DOMAIN} req_ssl_sni -i ${DOMAIN}"
echo " use_backend BACKEND_HTTPS_${DOMAIN} if ACL_${DOMAIN}"
echo "# 后端使用"
echo " backend BACKEND_HTTPS_${DOMAIN}"
echo " mode tcp"
echo " server ${DOMAIN}_${IP} ${IP}:443 check check-ssl verify none"
echo ""
else
echo "# 前端使用"
echo " acl ACL_${DOMAIN} hdr(host) -i ${DOMAIN}"
echo " use_backend BACKEND_HTTP_${DOMAIN} if ACL_${DOMAIN}"
echo "# 后端使用"
echo " backend BACKEND_HTTP_${DOMAIN}"
echo " mode http"
echo " server ${DOMAIN}_${IP} ${IP}:80 check"
echo ""
fi
done
```[]()