@mengdodo #47 你号没了

@flamhaze5946 #43 订阅他们的邮件和 Blog。开发者日找个方便的城市过去吃吃点心听听演讲，结束后基本上参加的都会送 50%off 的折扣券和几张贴纸。
https://info.jetbrains.com/user-mailing-preferences.html
https://blog.jetbrains.com/cn/

@fmumu #25 一个是去年年中的感恩活动 50%off，然后还有日常送 50%off 优惠的票子，基本上参加他们的活动都会送的

@CHYK #18 全家桶一年也就 129 刀啊。。。

JB 全家桶也不贵啊。。。

我 mi6 的每个礼拜更新最新版本 LOS 没问题啊

@crystone #64 有啥不会用的，所有软件源里有的就装源里面的，别自己乱编译就行了。实在要用的绕不开的 Docker 里面用 Fedora coreos 作为容器就好

GRE Keepalive does not work
SOLUTION 已验证 - 已更新 2013 年七月 17 日 18:56 - English
环境
Red Hat Enterprise Linux
GRE Tunnel to remote device, such as Cisco router
GRE Keepalives configured on remote device
问题
Configuring GRE Keepalives between a network device (such as a Cisco router) and RHEL system result in the keepalives being dropped by the Linux machine, and the networking device considering the tunnel down.
决议
Linux does not support GRE Keepalives.

You may disable GRE Keepalives on the remote device, or use a workaround such as an IP SLA ping down the GRE tunnel.

根源
A GRE Keepalive is a "host to router" GRE packet encapsulated inside a "router to host" GRE packet. The idea being the host (in this case Linux) receives the packet, sees the packet is actually a GRE packet for the router, and sends it back out. The router receives this packet and knows the remote end is still responding.

The Linux FIB code is such that if it receives traffic where the source is a local unicast address, the traffic is considered invalid.

Observe the following code:

Raw
net/ipv4/fib_frontend.c

if (res.type != RTN_UNICAST) {
if (res.type != RTN_LOCAL || !accept_local)
goto e_inval_res;
}
A GRE tunnel is not "stateful", there is no handshake or negotiation, just one side sending encapsulated packets and one side accepting encapsulated packets. As long as the network between the two sides stays up, the tunnel is up. Lack of Keepalives doesn't mean the tunnel is "down", just that you have no knowledge of the network state of the remote system. You could monitor this on the router with IP SLA, or monitor the remote end separately outside the tunnel.

诊断步骤
Cisco GRE Keepalive documentation:
http://www.cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a008048cffc.shtml#t5

Linux GRE documentation:
http://lartc.org/lartc.html#LARTC.TUNNEL.GRE

RHEL 8 从发布用到现在，感觉很舒服

@RYAN0UP #22 可是流行的发行版自带 JRE

SELinux 日常开着的表示。。。上次我自己找了个放进去都跑不起来

@BinRelay #8 你把所有规则都删掉然后 deny 所有出入站再看看？

只是默认规则没有针对环回地址而已啊，你不能保证用户不自定义防火墙规则

DataGrid 买 JB 全家桶送的，还挺好用的

告辞诉还不如直接用 vmware

我 24 岁，到手 1.6 万月供去掉公积金 1.1 万。。。

嘛，我同事孩子小学一年级就学 Python 了