\n
![\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260724201851-6a63c8abd73eb.png\")
<\/p>\n\u670d\u52a1\u5668\u4e0a\u884c\u5e26\u5bbd\u8fc7\u9ad8，\u4f1a\u5bfc\u81f4\u4e1a\u52a1\u5361\u987f\u3001\u5ef6\u8fdf\u98d9\u5347\u3001\u751a\u81f3\u670d\u52a1\u4e2d\u65ad，\u89e3\u51b3\u6838\u5fc3\u662f \u300c\u5b9a\u4f4d\u5e26\u5bbd\u5360\u7528\u6e90\u5934\u2192\u533a\u5206\u6b63\u5e38\/\u5f02\u5e38\u6d41\u91cf\u2192\u9488\u5bf9\u6027\u9650\u6d41\/\u4f18\u5316\u300d，\u5177\u4f53\u6b65\u9aa4\u5982\u4e0b：
\n<\/p>\n
\u5148\u641e\u6e05\u695a\u54ea\u4e2a\u8fdb\u7a0b\/\u670d\u52a1\/IP\u5728\u6d88\u8017\u4e0a\u884c\u5e26\u5bbd，\u907f\u514d\u76f2\u76ee\u64cd\u4f5c\u3002<\/p>\n
# \u5b89\u88c5iftop<\/span> # \u67e5\u770b\u6240\u6709\u7f51\u7edc\u8fde\u63a5\u53ca\u5bf9\u5e94\u7684\u8fdb\u7a0bPID<\/span> # \u5b89\u88c5nethogs<\/span> \u5982\u679c\u5b9a\u4f4d\u5230\u975e\u4e1a\u52a1IP（\u5982\u964c\u751f\u5883\u5916IP\u3001\u5927\u91cf\u91cd\u590dIP），\u6216\u975e\u4e1a\u52a1\u8fdb\u7a0b（\u5982\u672a\u77e5\u8fdb\u7a0b\u3001\u6316\u77ff\u75c5\u6bd2），\u5c5e\u4e8e\u5f02\u5e38\u6d41\u91cf，\u9700\u7acb\u5373\u62e6\u622a\u3002<\/p>\n # Linux\u5c01\u7981\u5355\u4e2a\u6076\u610fIP（\u7981\u6b62\u5176\u8bbf\u95ee\u670d\u52a1\u5668）<\/span> # Nginx\u914d\u7f6e：\u5355IP\u6bcf\u5206\u949f\u6700\u591a60\u4e2a\u8bf7\u6c42 \u5982\u679c\u9ad8\u5360\u7528\u8fdb\u7a0b\u662f\u6838\u5fc3\u4e1a\u52a1（\u5982Web\u670d\u52a1\u3001\u6570\u636e\u5e93\u540c\u6b65\u3001\u89c6\u9891\u76f4\u64ad），\u5c5e\u4e8e\u6b63\u5e38\u6d41\u91cf，\u9700\u901a\u8fc7\u4f18\u5316\u964d\u4f4e\u4e0a\u884c\u5e26\u5bbd\u6d88\u8017\u3002<\/p>\n \u914d\u7f6e\u5e26\u5bbd\u76d1\u63a7\u4e0e\u544a\u8b66<\/p>\n \u5b9a\u671f\u6e05\u7406\u65e0\u7528\u670d\u52a1<\/p>\n \u91c7\u7528\u201c\u6e90\u7ad9+CDN+\u9ad8\u9632\u201d\u67b6\u6784<\/p>\n \u5173\u952e\u63d0\u9192：\u4e0d\u8981\u76f2\u76ee\u5347\u7ea7\u5e26\u5bbd！\u5148\u6392\u67e5\u662f\u5426\u6709\u5f02\u5e38\u6d41\u91cf，\u5f88\u591a\u65f6\u5019\u5c01\u7981\u51e0\u4e2a\u6076\u610fIP\u5c31\u80fd\u89e3\u51b3\u95ee\u9898，\u6bd4\u5347\u7ea7\u5e26\u5bbd\u66f4\u7701\u94b1\u3002<\/p>\n","protected":false},"excerpt":{"rendered":" \u670d\u52a1\u5668\u4e0a\u884c\u5e26\u5bbd\u8fc7\u9ad8，\u4f1a\u5bfc\u81f4\u4e1a\u52a1\u5361\u987f\u3001\u5ef6\u8fdf\u98d9\u5347\u3001\u751a\u81f3\u670d\u52a1\u4e2d\u65ad，\u89e3\u51b3\u6838\u5fc3\u662f \u300c\u5b9a\u4f4d\u5e26\u5bbd\u5360\u7528\u6e90\u5934\u2192\u533a\u5206\u6b63\u5e38\/\u5f02\u5e38\u6d41\u91cf\u2192\u9488\u5bf9\u6027\u9650\u6d41\/\u4f18\u5316\u300d，\u5177\u4f53\u6b65\u9aa4\u5982\u4e0b：\u4e00\u3001\u7b2c\u4e00\u6b65：\u7cbe\u51c6\u5b9a\u4f4d\u4e0a\u884c\u5e26\u5bbd\u5360\u7528\u7684\u6e90\u5934
\nyum install<\/span> iftop -y # CentOS<\/span>
\napt<\/span> install<\/span> iftop -y # Ubuntu<\/span>
\n# \u76d1\u63a7\u7f51\u5361eth0\u7684\u4e0a\u884c\u6d41\u91cf（TX\u4e3a\u4e0a\u884c，RX\u4e3a\u4e0b\u884c）<\/span>
\niftop -i eth0 -P<\/p>\n\n
（2）\u5b9a\u4f4d\u5360\u7528\u5e26\u5bbd\u7684\u8fdb\u7a0b（ss+lsof）<\/h5>\n
\nss -tulnp
\n# \u7ed3\u5408\u7aef\u53e3\u53f7，\u627e\u5230\u8fdb\u7a0b\u8be6\u60c5（\u6bd4\u5982\u7aef\u53e38080）<\/span>
\nlsof<\/span> -i:8080<\/p>\n\n
（3）\u6309\u8fdb\u7a0b\u7edf\u8ba1\u5e26\u5bbd（nethogs，\u66f4\u76f4\u89c2）<\/h5>\n
\nyum install<\/span> nethogs -y
\n# \u6309\u8fdb\u7a0b\u663e\u793a\u5e26\u5bbd\u5360\u7528<\/span>
\nnethogs eth0<\/p>\n\n
2. Windows\u670d\u52a1\u5668（\u8d44\u6e90\u76d1\u89c6\u5668）<\/h4>\n
\n
\u4e8c\u3001\u7b2c\u4e8c\u6b65：\u5206\u60c5\u51b5\u5904\u7406\u4e0a\u884c\u5e26\u5bbd\u8fc7\u9ad8\u95ee\u9898<\/h3>\n
\u60c5\u51b51：\u5f02\u5e38\u6d41\u91cf\u5bfc\u81f4（\u653b\u51fb\/\u722c\u866b\/\u75c5\u6bd2，\u4f18\u5148\u7ea7\u6700\u9ad8）<\/h4>\n
1. \u5c01\u7981\u6076\u610fIP（iptables\/\u9632\u706b\u5899）<\/h5>\n
\niptables -I INPUT -s 123.45<\/span>.67.89 -j DROP
\n# \u5c01\u7981IP\u6bb5（\u5982123.45.0.0\/16）<\/span>
\niptables -I INPUT -s 123.45<\/span>.0.0\/16 -j DROP
\n# \u4fdd\u5b58\u89c4\u5219（CentOS）<\/span>
\nservice<\/span> iptables save<\/p>\n\n
2. \u62e6\u622aDDoS\/CC\u653b\u51fb<\/h5>\n
\n
\nlimit_req_zone $binary_remote_addr zone=one:10m rate=60r\/m;
\nserver {
\n location \/ {
\n limit_req zone=one burst=5 nodelay;
\n }
\n}<\/p>\n<\/li>\n<\/ul>\n3. \u67e5\u6740\u75c5\u6bd2\/\u6316\u77ff\u8fdb\u7a0b<\/h5>\n
\n
\n
\u60c5\u51b52：\u6b63\u5e38\u4e1a\u52a1\u6d41\u91cf\u5bfc\u81f4（\u4e1a\u52a1\u589e\u957f\/\u914d\u7f6e\u4e0d\u5f53）<\/h4>\n
1. \u542f\u7528\u4f20\u8f93\u538b\u7f29（\u51cf\u5c11\u6570\u636e\u4f53\u79ef，\u7acb\u7aff\u89c1\u5f71）<\/h5>\n
\n
\ngzip on;
\ngzip_types text\/html text\/css application\/javascript image\/jpeg;
\ngzip_min_length 1k;<\/p>\n<\/li>\n2. \u7528CDN\u5206\u6d41\u9759\u6001\u8d44\u6e90（\u6838\u5fc3\u4f18\u5316\u624b\u6bb5）<\/h5>\n
\n
3. \u9650\u5236\u5355\u7528\u6237\/\u5355\u8fde\u63a5\u5e26\u5bbd<\/h5>\n
\n
\nlimit_rate 1024k;
\nlimit_rate_after 10m; # \u524d10MB\u4e0d\u9650\u901f，\u4e4b\u540e\u9650\u6d41<\/p>\n<\/li>\n<\/ul>\n4. \u4f18\u5316\u4e1a\u52a1\u903b\u8f91，\u51cf\u5c11\u4e0d\u5fc5\u8981\u7684\u4e0a\u884c\u4f20\u8f93<\/h5>\n
\n
5. \u8c03\u6574\u5e26\u5bbd\u8ba1\u8d39\u6a21\u5f0f（\u4e34\u65f6\u5e94\u6025）<\/h5>\n
\n
\u4e09\u3001\u7b2c\u4e09\u6b65：\u957f\u671f\u4f18\u5316\u65b9\u6848（\u907f\u514d\u5e26\u5bbd\u8fc7\u9ad8\u590d\u53d1）<\/h3>\n
\n
\n
\n
\u56db\u3001\u603b\u7ed3：\u89e3\u51b3\u4e0a\u884c\u5e26\u5bbd\u8fc7\u9ad8\u7684\u6838\u5fc3\u6d41\u7a0b<\/h3>\n
\n\u5148\u641e\u6e05\u695a\u54ea\u4e2a\u8fdb\u7a0b\/\u670d\u52a1\/IP\u5728\u6d88\u8017\u4e0a\u884c\u5e26\u5bbd，\u907f\u514d\u76f2\u76ee\u64cd\u4f5c\u3002
\n1. Linux\u670d\u52a1\u5668（\u63a8\u8350\u5de5\u5177：iftop\/nload\/ss）
\n（1）\u5b9e\u65f6\u76d1\u63a7<\/p>\n","protected":false},"author":2,"featured_media":81765,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[43,44],"topic":[],"class_list":["post-81766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-43","tag-44"],"yoast_head":"\n