报告

今晚在查阅站点记录和流量图时,发现CDN流量异常大(尤其是国内CDN方向)

仔细研究发现:

在ADHrule项目中:https://www.blueskyxn.com/202012/2940.html

AdGuardHomeRules-由BlueSkyXN原创的ADH广告过滤拦截规则大全

部分用户将本站提供的加速CDN长时间挂载并定时刷新『同时刷新时间设定的很短』

原先是为了方便国内机器下载RAW库的规则文件,但是部分用户一天刷个好几次,简直令人无语

同时该规则文件较大(30M+),同时基本不需要定期维护(目前没有维护的计划)

不知道这些用户咋想的

因此为了防止滥用进一步发生,调整了本站CDN和随机图服务

同时移除了原项目的3个小包,以防止JSD滥用

调整方案

服务器代号

DE1:德国Contab 4H8G
KR1:韩国Oracle 2H1G
KR2:韩国Oracle 2H1G【IP=US】
SG1:新加坡Tencent 1H1G
US1:美国BWGHost 2H1G

图片API

非大陆地区

原先:分流由RAW【Sky-public-cloud1】+CFCDN【Sky-public-cloud1】组成
改为:仅RAW【Sky-public-cloud1】
其他:后端KR2【港台日新韩】+DE1【其他地区】不变

大陆地区均不变

分流由2Gitee【SKYCloud1/2】+2百度云加速【Sky-public-cloud1】+DogeCloud【Sky-public-cloud1】组成
后端KR1【电信联通】+SG1【除了联通】

主CDN

反代支持账户

原先:支持BlueSkyXN,Skyimg,Sky-public-cloud1,Sky-public-cloud4
改为:支持BlueSkyXN,Skyimg,Sky-public-cloud1【仅大陆】

支持格式

原先:任意格式
改为:仅支持jpg,png,jpeg,gif和sh,py【仅BlueSkyXN】

反代演示

旧版

#PROXY-START/BlueSkyXN
location ~* \.(php|jsp|cgi|asp|aspx)$
{
    proxy_pass https://raw.githubusercontent.com;
    proxy_set_header Host raw.githubusercontent.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
}
location ~* /(BlueSkyXN|Skyimg|Sky-public-cloud1|Sky-public-cloud4)
{     valid_referers none blocked *.000714.xyz *.20000714.xyz *.baidu.com *.google.com *.githubusercontent.com *.github.com *.blueskyxn.com *.qq.com *.weixin.qq.com mp.weixin.qq.com 000714.xyz 20000714.xyz blueskyxn.xyz blueskyxn.com *.tencent.com;
       if ($invalid_referer){
       rewrite ^/ https://ae01.alicdn.com/kf/U0034b5bc30a04a36aaf69cb0babe7595y.jpg;
          #return 404;
       }
    proxy_pass https://raw.githubusercontent.com;
    proxy_set_header Host raw.githubusercontent.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
    add_header X-Cache $upstream_cache_status;
    #Set Nginx Cache
    proxy_ignore_headers Set-Cookie Cache-Control expires;
    proxy_cache cache_one;
    proxy_cache_key $host$uri$is_args$args;
    proxy_cache_valid 101 200 1440m;
    proxy_cache_valid 304 301 302 1m;
    proxy_cache_valid 404 10s;
    expires 4h;
}
#PROXY-END/BlueSkyXN

新版-非大陆地区反代

#PROXY-START/BlueSkyXN
location ~* \.(php|jsp|cgi|asp|aspx)$
{
    proxy_pass https://raw.githubusercontent.com;
    proxy_set_header Host raw.githubusercontent.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
}
location ~* ^/(BlueSkyXN)\S*\.(jpg|png|jpeg|gif|sh|py)$
{     valid_referers none blocked *.000714.xyz *.20000714.xyz *.baidu.com *.google.com *.blueskyxn.xyz *.githubusercontent.com *.github.com *.blueskyxn.com *.qq.com *.weixin.qq.com mp.weixin.qq.com 000714.xyz 20000714.xyz blueskyxn.xyz blueskyxn.com *.tencent.com;
       if ($invalid_referer){
       rewrite ^/ https://ae01.alicdn.com/kf/U0034b5bc30a04a36aaf69cb0babe7595y.jpg redirect;
       }
    proxy_pass https://raw.githubusercontent.com;
    proxy_set_header Host raw.githubusercontent.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
    add_header X-Cache $upstream_cache_status;
    #Set Nginx Cache
    proxy_ignore_headers Set-Cookie Cache-Control expires;
    proxy_cache cache_one;
    proxy_cache_key $host$uri$is_args$args;
    proxy_cache_valid 101 200 1440m;
    proxy_cache_valid 304 301 302 1m;
    proxy_cache_valid 404 10s;
    expires 4h;
}
location ~* ^/(Skyimg)\S*\.(jpg|png|jpeg|gif)$
{     valid_referers none blocked *.000714.xyz *.20000714.xyz *.baidu.com *.google.com *.blueskyxn.xyz *.githubusercontent.com *.github.com *.blueskyxn.com *.qq.com *.weixin.qq.com mp.weixin.qq.com 000714.xyz 20000714.xyz blueskyxn.xyz blueskyxn.com *.tencent.com;
       if ($invalid_referer){
       rewrite ^/ https://ae01.alicdn.com/kf/U0034b5bc30a04a36aaf69cb0babe7595y.jpg redirect;
       }
    proxy_pass https://raw.githubusercontent.com;
    proxy_set_header Host raw.githubusercontent.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
    add_header X-Cache $upstream_cache_status;
    #Set Nginx Cache
    proxy_ignore_headers Set-Cookie Cache-Control expires;
    proxy_cache cache_one;
    proxy_cache_key $host$uri$is_args$args;
    proxy_cache_valid 101 200 1440m;
    proxy_cache_valid 304 301 302 1m;
    proxy_cache_valid 404 10s;
    expires 4h;
}
location ~* ^/(BlueSkyXN|Skyimg|Sky-public-cloud1|Sky-public-cloud4)
{
rewrite ^/(.*) https://raw.githubusercontent.com/$1 redirect;
}
#PROXY-END/BlueSkyXN

新版-大陆地区反代

#PROXY-START/BlueSkyXN
location ~* \.(php|jsp|cgi|asp|aspx)$
{
    proxy_pass https://raw.githubusercontent.com;
    proxy_set_header Host raw.githubusercontent.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
}
location ~* ^/(BlueSkyXN)\S*\.(jpg|png|jpeg|gif|sh|py)$
{     valid_referers none blocked *.000714.xyz *.20000714.xyz *.baidu.com *.google.com *.blueskyxn.xyz *.githubusercontent.com *.github.com *.blueskyxn.com *.qq.com *.weixin.qq.com mp.weixin.qq.com 000714.xyz 20000714.xyz blueskyxn.xyz blueskyxn.com *.tencent.com;
       if ($invalid_referer){
       rewrite ^/ https://ae01.alicdn.com/kf/U0034b5bc30a04a36aaf69cb0babe7595y.jpg redirect;
       }
    proxy_pass https://raw.githubusercontent.com;
    proxy_set_header Host raw.githubusercontent.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
    add_header X-Cache $upstream_cache_status;
    #Set Nginx Cache
    proxy_ignore_headers Set-Cookie Cache-Control expires;
    proxy_cache cache_one;
    proxy_cache_key $host$uri$is_args$args;
    proxy_cache_valid 101 200 1440m;
    proxy_cache_valid 304 301 302 1m;
    proxy_cache_valid 404 10s;
    expires 4h;
}
location ~* ^/(Sky-public-cloud1|Skyimg)\S*\.(jpg|png|jpeg|gif)$
{     valid_referers none blocked *.000714.xyz *.20000714.xyz *.baidu.com *.google.com *.blueskyxn.xyz *.githubusercontent.com *.github.com *.blueskyxn.com *.qq.com *.weixin.qq.com mp.weixin.qq.com 000714.xyz 20000714.xyz blueskyxn.xyz blueskyxn.com *.tencent.com;
       if ($invalid_referer){
       rewrite ^/ https://ae01.alicdn.com/kf/U0034b5bc30a04a36aaf69cb0babe7595y.jpg redirect;
       }
    proxy_pass https://raw.githubusercontent.com;
    proxy_set_header Host raw.githubusercontent.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
    add_header X-Cache $upstream_cache_status;
    #Set Nginx Cache
    proxy_ignore_headers Set-Cookie Cache-Control expires;
    proxy_cache cache_one;
    proxy_cache_key $host$uri$is_args$args;
    proxy_cache_valid 101 200 1440m;
    proxy_cache_valid 304 301 302 1m;
    proxy_cache_valid 404 10s;
    expires 4h;
}
location ~* ^/(BlueSkyXN|Skyimg|Sky-public-cloud1|Sky-public-cloud4)
{
rewrite ^/(.*) https://raw.githubusercontent.com/$1 redirect;
}
#PROXY-END/BlueSkyXN

点击数:238