广告时间 by Hugo Zhu

Storm Installation

hugozhu — Tue, 10 Jan 2012 11:27:01 +0000

Storm installation Note:

sudo ln -s /usr/local/share/aclocal/pkg.m4 /usr/share/aclocal/pkg.m4

sudo ln -s /System/Library/Frameworks/JavaVM.framework/Headers/ /System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home/include

Filed under: 生活随笔

用Markdown格式写Blog

hugozhu — Wed, 07 Sep 2011 06:17:47 +0000

Markdown (http://en.wikipedia.org/wiki/Markdown)

标题:

第一行
- 第二行
第二行

代码（用四个空格缩进）

local action = ngx.ctx.action
local cgi    = ngx.ctx.cgi
for k, v in pairs(cgi.params) do
    print(v)
end

强调

顶

文章块

> This text will be enclosed in an HTML blockquote element. > Blockquote elements are reflowable. You may arbitrarily > wrap the text to your liking, and it will all be parsed > into a single blockquote element.

链接：

短短的

Filed under: 生活随笔 Tagged: markdown

Yet another Mac常用软件列表

hugozhu — Sun, 04 Sep 2011 12:22:27 +0000

又一个Mac常用软件列表

输入法
- QQ Mac 拼音(五笔）输入法 (freeware)推荐，速度更快，界面更简洁
- 搜狗 Mac 拼音输入法 (freeware)
文档处理
- Microsoft Office 2011 for Mac，建议使用Outlook做为Exchange客户端，Apple Mail有时会乱码
- iWorks 09: Keynote, Pages, Numbers
图片，多媒体处理，流程图绘制
- iLife 2011：这个应该都内置了
- OmniGaffle 画各种图（流程图，架构图，UML图）必须安装！
- Pixelmator 或 Acorn：精简版的Photoshop
- Skitch: 截屏软件 (Appstore freeware)
- LittleSnapper: 截屏截网页软件 (freeware)
- Xee: 看图软件，类似ACDsee(freeware)
文本编辑器
- BBEdit
- Coda
- jEdit (freeware)
开发工具
- Xcode 4.2 and iOS SDK for Lion 及其以上: 包含了gcc等编译工具，必须装
- Versions: SVN客户端
- Github for Mac: Git客户端 (freeware)
- Eclipse (freeware)
- IntelliJ IDEA: Java IDE
- Charles: debug proxy
- Navicat Premium: oracle/mysql GUI
- Sequel Pro: mysql GUI (freeware)
其它工具
- QuickSilver: 快捷键启动应用或执行命令
- The Unarchiver: 解压缩软件 (AppStore freeware)
- Reeder: Google Reader客户端
- MPlayerX: 视频播放器 (AppStore freeware)
- Evernote: 记笔记软件 (AppStore freeware)
- Wunderlist: 个人安排软件 (AppStore freeware)
- Quick Note: 个人安排软件 (AppStore freeware)
- Caffeine: 暂时禁用屏幕保护，看电影时有用(AppStore freeware)
- Sparrow Lite: Gmail 客户端(AppStore freeware)
- Transmit: FTP/SFTP client
- uTorrent: BT client (freeware)
- Carbon Copy Cloner: 系统工具，快速全量备份大量文件
- iChm: 看CHM格式文档
- FanRadio: 豆瓣电台客户端，比官方的要好一些
- VMware
- Aliwangwang

Filed under: 苹果技巧 Tagged: mac software

Hello world OpenWRT！

hugozhu — Mon, 25 Jul 2011 13:32:39 +0000

安装VMWare；
下载Ubuntu Server最新版，有32位和64位，应该都可以，但我下载的是32位；
通过下载到的Ubuntu ISO文件在VMWare里安装；
准备必要的包：
sudo apt-get update sudo apt-get install subversion git openssh-server gcc g++ binutils patch bzip2 flex bison make autoconf gettext texinfo unzip sharutils subversion libncurses5-dev ncurses-term zlib1g-dev
获取OpenWRT源代码： svn checkout svn://svn.openwrt.org/openwrt/trunk
cd trunk
./scripts/feeds update -a
./scripts/feeds install -a
配置编译选项 make menuconfig
最后一步，编译生成固件 make V=99 这一步会比较耗时，慢慢等
编译成功后，bin下会生成各种固件，这也说明你的环境已经准备好了，
写一个helloworld.c程序, 内容如下：
#include
int main(void) { printf("Hello world!\n"); return 0; }
staging_dir/toolchain-mips_r2_gcc-linaro_uClibc-0.9.32/bin/mips-openwrt-linux-uclibc-gcc -o helloworld helloworld.c
把生成的helloworld程序上传到路由器上就可以跑起来了

download
download all source tarballs (from the selected packages and it’s dependencies) at once before starting the build

prereq
checks if you have all prerequisites installed on the host-system for building the selected packages

world
build everything

tools/install toolchain/install
only build the tools and the toolchain

clean
cleans the packages (NOT the tools and toolchain)

distclean
cleans up everything expect $(TOPDIR)/.config and $(TOPDIR)/dl/

package/-{clean,compile}
rebuild a single package

package/index
updates $(TOPDIR)/bin/packages/Packages

V=99
turns on debugging

make kernel_menuconfig
If you want, you can also modify the kernel config for the selected target system. Simply run “make kernel_menuconfig”
and the build system will unpack the kernel sources (if necessary), run menuconfig inside of the kernel tree, and then
copy the kernel config to target/linux//config so that it is preserved over “make clean” call.

Also look at the OpenWrt Kamikaze documentation at
- http://nbd.name/openwrt.html#x1-250002.1 or
- http://nbd.name/openwrt.pdf

Some more useful URLs:
- Free VMware Player (enough for most users, no need for the VMware Server)
- Download VMDK and VMX files for VMware Player
- Ubuntu (for the Ubuntu ISO image)
- Free VMware Server (also includes the VMware Tools)

Filed under: 生活随笔 Tagged: openwrt

OpenWRT设置Openvpn并自动智能翻墙

hugozhu — Sun, 17 Jul 2011 19:20:04 +0000

网络拓朴

1) 在NW300R上编辑openvpn client配置如下：
cat /etc/config/openvpn

config 'openvpn' 'client'
	option 'enable' '1'
	option 'client' '1'
	option 'dev' 'tun'
	option 'proto' 'udp'
	option 'keepalive' '10 120'
	option 'resolv_retry' 'infinite'
	option 'nobind' '1'
	option 'persist_key' '1'
	option 'persist_tun' '1'
	option 'comp_lzo' '1'
	option 'verb' '3'
	option 'tun_ipv6' '0'
	option 'remote' ' '
	option 'ca' '/etc/openvpn/client.ca'
	option 'cert' '/etc/openvpn/client.cert'
	option 'key' '/etc/openvpn/client.key'
	option 'max-routes' '3000'

注意your_openvpn_port在服务器端最好设置成非缺省端口1194，因为这个端口在实际使用时由于GFW监控而不稳定。
openvpn相关的CA证书/etc/openvpn/client.ca等需要通过scp传上去。

2) /etc/init.d/openvpn start启动openvpn

3）可以输入route命令来校验（注意如下的路由表显示所有外网流量都将经过vpn服务器，这是因为在服务器端有设置push “redirect-gateway def1″）

root@OpenWrt2:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
  192.168.1.1     255.255.255.255 UGH   0      0        0 br-lan
10.8.0.5        *               255.255.255.255 UH    0      0        0 tun0
10.8.0.0        10.8.0.5        255.255.255.0   UG    0      0        0 tun0
192.168.1.0     *               255.255.255.0   U     0      0        0 br-lan
default         10.8.0.5        128.0.0.0       UG    0      0        0 tun0
128.0.0.0       10.8.0.5        128.0.0.0       UG    0      0        0 tun0
default         192.168.1.1     0.0.0.0         UG    0      0        0 br-lan

或者通过ifconfig命令可以看到多了一个tun0接口
这时可以通过ping 10.8.0.1来确认openvpn已通

4) 修改NW300R的DNS服务器设置，确保DNS解析不被污染；否则DNS解析会走192.168.1.1而未经VPN保护
root@OpenWrt2:~# cat /etc/resolv.conf

search lan
nameserver 127.0.0.1

root@OpenWrt2:~# cat /etc/config/dhcp

config 'dnsmasq'
	option 'domainneeded' '1'
	option 'boguspriv' '1'
	option 'localise_queries' '1'
	option 'rebind_protection' '1'
	option 'rebind_localhost' '1'
	option 'local' '/lan/'
	option 'domain' 'lan'
	option 'expandhosts' '1'
	option 'readethers' '1'
	option 'leasefile' '/tmp/dhcp.leases'
	option 'resolvfile' '/etc/openvpn/resolv.conf'

config 'dhcp' 'lan'
	option 'interface' 'lan'
	option 'ignore' '1'

config 'dhcp' 'wan'
	option 'interface' 'wan'
	option 'ignore' '1'

root@OpenWrt2:~# cat /etc/openvpn/resolv.conf

nameserver 8.8.8.8
nameserver 8.8.4.4

5) 设置智能路由
这里用到了chnroutes项目，点击下载openvpn版本，并找一台有python的机器执行生成最新的路由规则脚本然后上传到路由器。
该脚本会生成两个命令：vpnup, vpndown分别是启动和关闭openvpn时需要修改的路由规则（原理是把所有中国IP路由到192.168.1.1)。
执行vpnup命令后再用route命令列出路由表会发现多了2000多路由规则。。。
这时分别找一个中国和一个外国的IP来traceroute

root@OpenWrt2:~# traceroute tao123.com
traceroute to tao123.com (121.14.24.241), 30 hops max, 38 byte packets
 1  192.168.1.1 (192.168.1.1)  1.496 ms  1.322 ms  1.440 ms
 2  61.130.120.156 (61.130.120.156)  2.910 ms  2.218 ms  3.183 ms
 3  220.191.156.181 (220.191.156.181)  2.214 ms  2.136 ms  13.653 ms
 4  61.164.19.205 (61.164.19.205)  5.299 ms  2.298 ms  2.576 ms
 5  61.164.17.61 (61.164.17.61)  8.297 ms  7.966 ms  8.335 ms
 6  202.97.56.241 (202.97.56.241)  24.566 ms^C

root@OpenWrt2:~# traceroute facebook.com
traceroute to facebook.com (69.63.189.11), 30 hops max, 38 byte packets
 1  10.8.0.1 (10.8.0.1)  231.700 ms  210.645 ms  224.737 ms
 2  184.105.143.85 (184.105.143.85)  239.952 ms  259.713 ms  266.340 ms
 3  10gigabitethernet2-3.core1.fmt1.he.net (64.62.250.5)  273.158 ms  285.133 ms  285.376 ms
 4  10gigabitethernet1-1.core1.pao1.he.net (66.160.158.242)  284.708 ms  277.205 ms  277.986 ms
 5  paix.pr02.pao1.tfbnw.net (198.32.176.108)  275.467 ms  321.888 ms^C

可以注意到第一行走的路由正确了！

6) 设置iptable
iptables -I FORWARD -o br-lan -j ACCEPT #允许br-lan端口流量被转发
iptables -I FORWARD -o tun0 -j ACCEPT #允许tun0端口流量被转发
iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE #tun0出口的流量SNAT出去

7) 设置客户端
因为NW300R关掉了DHCP（如果开启NW300R就需要设一个不同的子网如：192.168.2.1，这样还需要特殊设置来使得两个子网的机器可以互相访问），所以使用DHCP连上的客户端的gateway和dns都是192.168.1.1，这样是不能自动翻墙的，需要要手工配一下需要自动翻墙的网络设备的gateway和dns都为192.168.1.2，当然如果你只有一个无线路由器，就没这个问题了。这个部分我还没找到有多个无线路由器时比较好的解决办法，还请高手指教一下。

Filed under: 数码产品 Tagged: openwrt openvpn 翻墙

OpenVPN服务器的配置

hugozhu — Fri, 15 Jul 2011 07:12:17 +0000

服务器端的iptable设置

iptables -F
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o venet0 -j MASQUERADE

iptables -A INPUT -p tcp -m state --state NEW --dport 22 -j ACCEPT
iptables -t nat -A PREROUTING -p udp -m udp --dport 53 -j DNAT --to-destination 8.8.8.8

iptables -A INPUT -p udp --dport 1194 -j ACCEPT
iptables -A INPUT -s 10.8.0.0/24 -p all -j ACCEPT
iptables -A FORWARD -d 10.8.0.0/24 -j ACCEPT

iptables -A INPUT -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source

Filed under: 生活随笔

OpenWRT设置WDS

hugozhu — Wed, 13 Jul 2011 14:28:45 +0000

如果你家里需要多个无线路由器，并需要组成一个局域网，使得所有连上的电脑（有线或无线）都能互相访问，WDS就是最简单的一种配置方法，无线组网还有Client + AP（需要设置两个网络），或Bridaged Client（仅适用与Broadcom芯片）等方法，这里只讨论WDS。

WDS原理图

使用WDS组网最好采用相同无线芯片的路由器，原因是各个厂商对WDS的实现不完全相同。

OpenWRT是一个强大的基于Linux的开源路由器操作系统。关于无线的配置文件在/etc/config/wireless。

假设你有两个路由器分别为A和B，其中A通过ADSL拨号上网，B则通过无线连接A。
假设A的mac地址是aa:aa:aa:aa:aa:aa，B的mac地址是：bb:bb:bb:bb:bb:bb

首先配置A的LAN IP为192.168.1.1/24，并开启DHCP服务；B的LAN IP为192.168.1.2/24，Gateway,DNS都设成192.168.1.1，并一定关闭DHCP服务。

A的/etc/config/wireless设置

config 'wifi-device' 'radio0'
	option 'type' 'mac80211'
	option 'macaddr' 'aa:aa:aa:aa:aa:aa'
	option 'hwmode' '11ng'
	list 'ht_capab' 'SHORT-GI-20'
	list 'ht_capab' 'SHORT-GI-40'
	list 'ht_capab' 'TX-STBC'
	list 'ht_capab' 'RX-STBC1'
	list 'ht_capab' 'DSSS_CCK-40'
	option 'channel' '3'
	option 'txpower' '20'
	option 'country' 'US'
	option 'htmode' 'HT20'
	option 'disabled' '0'
	option 'noscan' '1'

config 'wifi-iface'
	option 'device' 'radio0'
	option 'mode' 'ap'
	option 'ssid' 'hugo'
	option 'wds' '1'
	option 'network' 'lan'
	option 'encryption' 'psk2'
	option 'key' 'password'

B的/etc/config/wireless设置

config 'wifi-device' 'radio0'
	option 'type' 'mac80211'
	option 'macaddr' 'bb:bb:bb:bb:bb:bb'
	option 'hwmode' '11ng'
	list 'ht_capab' 'SHORT-GI-20'
	list 'ht_capab' 'SHORT-GI-40'
	list 'ht_capab' 'TX-STBC'
	list 'ht_capab' 'RX-STBC1'
	list 'ht_capab' 'DSSS_CCK-40'
	option 'channel' '3'
	option 'country' 'US'
	option 'txpower' '20'
	option 'htmode' 'HT20'
	option 'noscan' '1'
	option 'disabled' '0'

config 'wifi-iface'
	option 'device' 'radio0'
	option 'ssid' 'hugo'
	option 'mode' 'sta'
	option 'wds' '1'
	option 'network' 'lan'
	option 'essid' 'aa:aa:aa:aa:aa:aa'
	option 'encryption' 'psk2'
	option 'key' 'password'

config 'wifi-iface'
	option 'device' 'radio0'
	option 'mode' 'ap'
	option 'ssid' 'hugo2'
	option 'network' 'lan'
	option 'encryption' 'psk2'
	option 'key' 'password'

修改配置文件后可以执行wifi命令使之生效，这样就基本可以了。

配置好后可以通过A的openWRT的web界面登录进去看已经连上的无线终端中是否有B的mac地址，如果不成功，请注意无线的加密方式，我采用WPA2中继成功，但采用WEP就不行。

Filed under: 生活随笔 Tagged: openwrt, wds

mDNSResponder和syslog两个进程跑满CPU

hugozhu — Thu, 28 Apr 2011 01:41:57 +0000

mDNSResponder进程属于Mac的Bonjour服务，出现这种情况一般是切换网络或休眠后唤醒：
可以用下面命令重新启动Bonjour：

launchctl unload /path/to/relocated/com.apple.mDNSResponder.plist
launchctl load /path/to/relocated/com.apple.mDNSResponder.plist

Filed under: 苹果技巧

Xcode 4不购买证书发布iPhone App到真实设备

hugozhu — Wed, 20 Apr 2011 04:19:53 +0000

1) 通过Keychain Access工具创建一个“iPhone Developer”自签名的证书；
2）sudo /usr/bin/sed -i .bak 's/XCiPhoneOSCodeSignContext/XCCodeSignContext/' /Developer/Platforms/iPhoneOS.platform/Info.plist

Filed under: 苹果技巧 Tagged: xcode

64位Linux跑32位JDK可以用多大的堆？

hugozhu — Thu, 24 Mar 2011 09:11:14 +0000

The maximum theoretical heap limit for the 32-bit JVM is 4G. Due to various additional constraints such as available swap, kernel address space usage, memory fragmentation, and VM overhead, in practice the limit can be much lower. On most modern 32-bit Windows systems the maximum heap size will range from 1.4G to 1.6G. On 32-bit Solaris kernels the address space is limited to 2G. On 64-bit operating systems running the 32-bit VM, the max heap size can be higher, approaching 4G on many Solaris systems.

As of Java SE 6, the Windows /3GB boot.ini feature is not supported.

If your application requires a very large heap you should use a 64-bit VM on a version of the operating system that supports 64-bit applications. See Java SE Supported System Configurations for details.

Filed under: 生活随笔