修改部署文件；

deploy/bird/docker-compose.yml

@@ -32,3 +32,4 @@ services:
       SHOW_ROA6: "1"
     volumes:
       - ./bird.conf:/config/bird.conf:ro
+      - ../../logs/bird:/app/logs

deploy/bird/entrypoint.sh

@@ -27,6 +27,14 @@ SHOW_ROA6="${SHOW_ROA6:-1}"
 SSH_HOST_PUBKEY_PATH="${SSH_HOST_PUBKEY_PATH:-/config/ssh/ssh_host_rsa_key.pub}"
 SSH_KNOWN_HOSTS_PATH="${SSH_KNOWN_HOSTS_PATH:-/run/bird/known_hosts}"
 
+LOG_DIR="${LOG_DIR:-/app/logs}"
+LOG_NAME="${LOG_NAME:-${HOSTNAME:-bird-rpki-client}}"
+STDOUT_LOG="${LOG_DIR}/${LOG_NAME}.stdout.log"
+STDERR_LOG="${LOG_DIR}/${LOG_NAME}.stderr.log"
+
+mkdir -p "$LOG_DIR"
+exec >>"$STDOUT_LOG" 2>>"$STDERR_LOG"
+
 ensure_ssh_known_hosts() {
   if [ -s "$SSH_KNOWN_HOSTS_PATH" ]; then
     return

deploy/server/docker-compose.ssh.yml

@@ -27,6 +27,7 @@ services:
       RPKI_RTR_SLURM_DIR: "/app/slurm"
       RPKI_RTR_STRICT_CCR_VALIDATION: "false"
       RPKI_RTR_SOURCE_REFRESH_INTERVAL_SECS: "300"
+      RPKI_RTR_MAX_CONCURRENT_HANDSHAKES: "128"
       RUST_LOG: "info"
     volumes:
       - ../../data:/app/data:ro

deploy/server/docker-compose.tcp.yml

@@ -18,8 +18,9 @@ services:
       RPKI_RTR_CCR_DIR: "/app/data"
       RPKI_RTR_SLURM_DIR: "/app/slurm"
       RPKI_RTR_STRICT_CCR_VALIDATION: "false"
-      RPKI_RTR_SOURCE_REFRESH_INTERVAL_SECS: "300"
+      RPKI_RTR_SOURCE_REFRESH_INTERVAL_SECS: "60"
       RPKI_RTR_MAX_CONNECTIONS: "100000"
+      RPKI_RTR_MAX_CONCURRENT_HANDSHAKES: "128"
       RUST_LOG: "info"
     volumes:
       - ../../data:/app/data:ro

deploy/server/docker-compose.tls.yml

@@ -19,11 +19,13 @@ services:
       RPKI_RTR_TLS_CERT_PATH: "/app/certs/server-dns.crt"
       RPKI_RTR_TLS_KEY_PATH: "/app/certs/server-dns.key"
       RPKI_RTR_TLS_CLIENT_CA_PATH: "/app/certs/client-ca.crt"
+      RPKI_RTR_ENFORCE_TLS_CLIENT_SAN_IP_MATCH: "false"
       RPKI_RTR_DB_PATH: "/app/rtr-db"
       RPKI_RTR_CCR_DIR: "/app/data"
       RPKI_RTR_SLURM_DIR: "/app/slurm"
       RPKI_RTR_STRICT_CCR_VALIDATION: "false"
       RPKI_RTR_SOURCE_REFRESH_INTERVAL_SECS: "300"
+      RPKI_RTR_MAX_CONCURRENT_HANDSHAKES: "128"
       RUST_LOG: "info"
     volumes:
       - ../../data:/app/data:ro

deploy/server/docker-compose.yml

@@ -22,6 +22,7 @@ services:
       RPKI_RTR_SLURM_DIR: "/app/slurm"
       RPKI_RTR_STRICT_CCR_VALIDATION: "false"
       RPKI_RTR_SOURCE_REFRESH_INTERVAL_SECS: "300"
+      RPKI_RTR_MAX_CONCURRENT_HANDSHAKES: "128"
       RUST_LOG: "info"
       # SSH mode example:
       # RPKI_RTR_ENABLE_SSH: "true"