mirror of
https://github.com/vimagick/dockerfiles.git
synced 2025-12-21 21:33:02 +01:00
update
This commit is contained in:
@@ -10,7 +10,7 @@ RUN apk add -U iproute2
|
|||||||
ENV TCP_PORTS 80,443
|
ENV TCP_PORTS 80,443
|
||||||
ENV UDP_PORTS 53
|
ENV UDP_PORTS 53
|
||||||
ENV RATE 1mbit
|
ENV RATE 1mbit
|
||||||
ENV BURST 1mbit
|
ENV BURST 1kb
|
||||||
ENV LATENCY 50ms
|
ENV LATENCY 50ms
|
||||||
ENV INTERVAL 60
|
ENV INTERVAL 60
|
||||||
|
|
||||||
|
|||||||
@@ -1,8 +1,10 @@
|
|||||||
iptables
|
iptables
|
||||||
========
|
========
|
||||||
|
|
||||||
- iptables: filter ports
|

|
||||||
- tc: control traffic
|
|
||||||
|
- _iptables_: filter ports (allow: 53/UDP, 80/TCP, 443/TCP)
|
||||||
|
- _tc_: control traffic via [tbf][1]
|
||||||
|
|
||||||
## docker-compose.yml
|
## docker-compose.yml
|
||||||
|
|
||||||
@@ -12,7 +14,7 @@ shadowsocks:
|
|||||||
environment:
|
environment:
|
||||||
- DNS_ADDR=8.8.8.8
|
- DNS_ADDR=8.8.8.8
|
||||||
- METHOD=chacha20
|
- METHOD=chacha20
|
||||||
- PASSWORD=GUB61zGB2
|
- PASSWORD=9MLSpPmNt
|
||||||
net: container:iptables
|
net: container:iptables
|
||||||
restart: always
|
restart: always
|
||||||
|
|
||||||
@@ -24,8 +26,25 @@ iptables:
|
|||||||
- TCP_PORTS=80,443
|
- TCP_PORTS=80,443
|
||||||
- UDP_PORTS=53
|
- UDP_PORTS=53
|
||||||
- RATE=4mbit
|
- RATE=4mbit
|
||||||
- BURST=4mbit
|
- BURST=4kb
|
||||||
cap_add:
|
cap_add:
|
||||||
- NET_ADMIN
|
- NET_ADMIN
|
||||||
restart: always
|
restart: always
|
||||||
```
|
```
|
||||||
|
|
||||||
|
## Up and Running
|
||||||
|
|
||||||
|
```
|
||||||
|
$ docker-compose up -d
|
||||||
|
Creating shadowsocks_iptables_1...
|
||||||
|
Creating shadowsocks_shadowsocks_1...
|
||||||
|
|
||||||
|
$ docker-compose logs
|
||||||
|
Every 60s: tc -s qdisc ls dev eth0 2015-09-27 02:27:57
|
||||||
|
iptables_1 |
|
||||||
|
iptables_1 | qdisc tbf 8012: root refcnt 2 rate 4Mbit burst 4Kb lat 50.0ms
|
||||||
|
iptables_1 | Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
|
||||||
|
iptables_1 | backlog 0b 0p requeues 0
|
||||||
|
```
|
||||||
|
|
||||||
|
[1]: http://linux.die.net/man/8/tc-tbf
|
||||||
|
|||||||
Reference in New Issue
Block a user