如果开放WEB,但是不是80，也要备案吗

linode 除了高可用性要自己搞定，什么API CLI都有

iptables -m owner 可以指定哪个程序

@sldaniel Disable Youtube™ HTML5 Player 插件 然后chrome内置的PPAPI不支持硬件加速。换FF版本的 NPAPI FLASH

@loading 车后面放三脚架可以免，否则还是违停。

我想准确的告诉楼主，按照中国现在的法律，在道路上，不管有没有禁停标识，只要没有停在指定停车线内，都算违停。。我中招过。

@sophymax A站的CEO现在被关在北京。。。失联中

@anouser chrome的DNS异步解析，默认没有开吧

强制改成Flash，NAPPI，原生的，搞定

可以折腾一下，要你老板陪你钱再走人。

烧钱太厉害

@ryd994 geoip准确吗？ 和ipset的性能比较呢？ 下面的文档说ipset用的是Jenkins3，但是搜不到这个



geoip vs ipset
xt_geoip uses the (probably) most efficient format, a (non-compressed) packed blob. Loading one country into the kernel costs as much as the file on disk.

Since ipset does not support arbitrary IPaddr–IPaddr ranges, one would need to approximate that using, for example, multiple Network/Prefixlength entries. Furthermore, if a hash set type is used, you can assume that, by the nature of hashes and/or trees, some buckets remain empty and/or additional metadata is required. The memory footprint with an ipset-based geoip thus is naturally larger. User reports[1] indicate it can become two orders of magnitude higher in certain cases (iptreemap).

xt_geoip's lookup time is O(log2(ranges)), so to lookup an address within 20,000 ranges, at most 15 iterations each with address comparisons (at most 3) are required. ipset uses Jenkins3 for hashing, which has a certain time cost of its own.

来个高手解答下吧