西维蜀黍

【VPN】Dynamic Split Tunneling

Split Tunneling

Split tunneling is a computer networking concept which allows a user to access dissimilar security domains like a public network (e.g., the Internet) and a local LAN or WAN at the same time, using the same or different network connections. This connection state is usually facilitated through the simultaneous use of a Local Area Network (LAN) Network Interface Card (NIC), radio NIC, Wireless Local Area Network (WLAN) NIC, and VPN client software application without the benefit of access control.

For example, suppose a user utilizes a remote access VPN software client connecting to a corporate network using a hotel wireless network. The user with split tunneling enabled is able to connect to file servers, database servers, mail servers and other servers on the corporate network through the VPN connection. When the user connects to Internet resources (Web sites, FTP sites, etc.), the connection request goes directly out the gateway provided by the hotel network. However, not every VPN allows split tunneling. Some VPNs with split tunneling include Private Internet Access (PIA), ExpressVPN, and Surfshark.

Context

In mycompany.com we have a lot of internal networks that are available only via VPN.

These are on the same domain mycompany.com, but in different networks:

10.165.248.252 - git.mycompany.com
10.236.142.18 - jira.mycompany.com
152.68.167.141 - test.mycompany.com

Is there any possibility to provide the top level domain (mycompany.com) instead of single links in domain for vpn tunneling? e.g. instead of providing single subdomains

  • git.mycompany.com
  • jira.mycompany.com
  • test.mycompany.com
  ...

Posted by Wei on 2022-03-06, Last Modified on 2025-08-11

【Network】暴力穷举 Subdomains

Websites

   ...

Posted by Wei on 2022-03-06, Last Modified on 2025-08-11

【Network】软路由

硬件选择

Intel NUC 11 NUC11PAHi7

CPU

  • Intel Core i7-1165G7:
  • 4 cores, 8 threads
  • Base clock: 2.8 GHz
  • Max Turbo Frequency: 4.7 GHz
  • 12MB Intel Smart Cache
  • 10nm SuperFin technology

Memory:

  • Dual-channel DDR4-3200 SO-DIMM slots
  • ‎16 GB DDR4
  • Supports up to 64GB of RAM (2 x 32GB)

Storage:

  • M.2 22x80 key M slot** for NVMe or SATA SSD
    • Cur: ‎512 GB SSD
  • 2.5-inch SATA3 drive bay for additional SSD or HDD (up to 9.5mm thickness)

Networking:

  • Intel Wi-Fi 6 AX201 (802.11ax)

  • Bluetooth 5.2

  • 2.5 Gigabit Ethernet (RJ-45 port)

CPU选择

不考虑

  • J1900
  • 3865U
  • 4205U 2C/2T
    • 2G内存，16G SSD -> 1090
  • 5205U 2C/2T

考虑的

大CPU

  • i3-8130U（双核四线程，8代CPU，2.2GHz）
    • 8G内存，64G SSD，千兆 1750
    • 16G内存，126G SSD硬盘 -> 2050
  • i5-8250U（四核八线程）

小CPU

   ...

Posted by Wei on 2022-03-06, Last Modified on 2025-08-11

【VPN】OpenConnect

Install

# macOS
$ brew install openconnect
# Ubuntu
$ sudo apt-get install openconnect
  ...

Posted by Wei on 2022-03-04, Last Modified on 2025-08-11

【macOS】Keychain 破解

Keychain

A keychain is a locked, encrypted container used in Keychain Access to store account names and passwords for apps, servers, AirPort base stations, and websites. You can also use keychains to store confidential information such as credit card numbers or personal identification numbers (PINs) for bank accounts.

The keychain files are stored in ~/Library/Keychains, /Library/Keychains/ and /Network/Library/Keychains/. These files are viewed and edited through an application called Keychain Access, found in the Utilities folder in the Applications folder.

  • Your keychain (for your personal account) is stored in the Library: /Users/<accountname>/Library/Keychains/login.keychain
  ...

Posted by Wei on 2022-03-01, Last Modified on 2025-08-11

【macOS】维护

重置SMC

https://support.apple.com/zh-cn/HT201295

  ...

Posted by Wei on 2022-02-27, Last Modified on 2025-08-11

【Docker】Docker Machine

What’s the difference between Docker Engine and Docker Machine?

When people say “Docker” they typically mean Docker Engine, the client-server application made up of the Docker daemon, a REST API that specifies interfaces for interacting with the daemon, and a command line interface (CLI) client that talks to the daemon (through the REST API wrapper). Docker Engine accepts docker commands from the CLI, such as docker run <image>, docker ps to list running containers, docker image ls to list images, and so on.

  ...

Posted by Wei on 2022-02-27, Last Modified on 2025-08-11

【VM】VirtualBox

Observing Existing Virtual Machines

$ VBoxManage list vms
"default" {48f22168-64fb-4ebd-85c4-d6e2a753ca5a}
"mymachine" {1e49ad7e-1c9f-4ae2-bcf3-236dc94c258a}

To view the VMs that are running at the moment,

$ VBoxManage list runningvms
"default" {48f22168-64fb-4ebd-85c4-d6e2a753ca5a}
  ...

Posted by Wei on 2022-02-26, Last Modified on 2025-08-11

【macOS】删除默认输入法

For macOS 10.8 and later:

  1. Change the current input source to your custom keyboard layout.
  2. Open ~/Library/Preferences/com.apple.HIToolbox.plist (in 10.9) or ~/Library/Preferences/ByHost/com.apple.HIToolbox.*.plist (in 10.8 and earlier). You can convert the plist to XML with plutil -convert xml1.
  3. Remove the input source or input sources you want to disable from the AppleEnabledInputSources dictionary. If there is an AppleDefaultAsciiInputSource key, remove it.
  4. Restart.
  ...

Posted by Wei on 2022-02-26, Last Modified on 2025-08-11

【macOS】开机启动项

Folder Usage
/System/Library/LaunchDaemons Apple-supplied system daemons
/System/Library/LaunchAgents Apple-supplied agents that apply to all users on a per-user basis
/Library/LaunchDaemons Third-party system daemons
/Library/LaunchAgents Third-party agents that apply to all users on a per-user basis
~/Library/LaunchAgents Third-party agents that apply only to the logged-in user
  ...

Posted by Wei on 2022-02-26, Last Modified on 2025-08-11

FEATURED TAGS
algorithm algorithmproblem architecturalpattern architecture aws blockchain c# cachesystem codis compile concurrentcontrol database dataformat datastructure debug design designpattern distributedsystem django docker domain engineering freebsd git golang grafana hackintosh hadoop hardware hexo http hugo ios iot java javaee javascript kafka kubernetes linux linuxcommand linuxio lock macos markdown microservices mysql nas network networkprogramming nginx node.js npm oop openwrt operatingsystem padavan performance programming prometheus protobuf python redis router security shell software testing spring sql systemdesign truenas ubuntu vmware vpn windows wmware wordpress xml zookeeper
ABOUT ME
avatar

🐒 Software engineer | 📷 Photographer | 👹 Urban explorer

FRIENDS