Preliminary summary
As we all know, GoEdge is an open source CDN system, including an open source free community version and a paid commercial version. Some time ago it was revealed that it had been transferred to Fang Neng Department (a black production company) by the original author Chao Ge, and that the latest version of its edge node program v1.4.1 was poisoned (all versions including community version and commercial version), that is Introducing third-party (first-party) malicious JS scripts into the acceleration site created by the customer, causing the customer’s website to be redirected to illegal websites under certain circumstances.
It is currently found that there are two releases of GoEdge v1.3.9. According to various indications, v1.3.9 (the first version) may be the last version maintained by the original author Chao Ge and is relatively safe; while the second version and subsequent versions are extremely May no longer be safe and strongly discouraged.
Even though the official has issued a so-called “clarification statement” and claimed that the poisoning problem has been “fixed” in the latest version, once trust collapses, it is difficult to rebuild. It is recommended that all users who have installed GoEdge v1.3.9 or above (or install/update later) Users who have rolled back to the v1.3.9 safe version on May 20, 2024, can refer to the milkshake production rollback plan: https://bbs.naixi.net/thread-110-1-1.html
If you have not installed GoEdge, you can manually deploy the v1.3.9 pure version (archive provided by @DigitalVirt) according to the process of this document, and easily activate the GoEdge Ultimate Lifetime License offline to achieve an enterprise-level CDN for everyone. Really let the idle chick shine. Since it is an official package + registration code for offline activation, and the official domain name communication is blocked, the probability of a backdoor is low.
Management platform installation (required)
installunzip
Available under CentOS (5, 6, 7):
sudo yum -y install unzip
It can be used under RedHa/CentOS 8/CentOS 9/RockyLinux9/Fedora:
dnf -y install unzip
Available under Debian/Ubuntu:
sudo apt install unzip
It can be used under Freebsd:
pkg install unzip
Block official domain names
echo "127.0.0.1 goedge.cloud" | sudo tee -a /etc/hosts > /dev/null echo "127.0.0.1 goedge.cn" | sudo tee -a /etc/hosts > /dev/null echo "127.0.0.1 dl.goedge.cloud" | sudo tee -a /etc/hosts > /dev/null echo "127.0.0.1 dl.goedge.cn" | sudo tee -a /etc/hosts > /dev/null echo "127.0.0.1 global.dl.goedge.cloud" | sudo tee -a /etc/hosts > /dev/null echo "127.0.0.1 global.dl.goedge.cn" | sudo tee -a /etc/hosts > /dev/null cat /etc/hosts
Or manually modify the hosts file
vi /etc/hosts 127.0.0.1 goedge.cn 127.0.0.1 goedge.cloud 127.0.0.1 dl.goedge.cloud 127.0.0.1 dl.goedge.cn 127.0.0.1 global.dl.goedge.cloud 127.0.0.1 global.dl.goedge.cn
Create installation directory
mkdir /usr/local/goedge cd /usr/local/goedge
Get the package and unzip it
International Source (Cloudflare)
# X86_64 wget https://static-file-global.353355.xyz/goedge/edge-admin-linux-amd64-plus-v1.3.9.zip #aarch64 wget https://static-file-global.353355.xyz/goedge/edge-admin-linux-arm64-plus-v1.3.9.zip
Domestic source (Alibaba Cloud CDN)
# X86_64 wget https://fj.ly93.cc/37/1809553326/edge-admin-linux-amd64-plus-v1.3.9.zip #aarch64 wget https://fj.ly93.cc/37/1809551208/edge-admin-linux-arm64-plus-v1.3.9.zip unzip -o ./edge-admin-linux-amd64-plus-v1.3.9.zip
Start management platform
cd edge-admin/ bin/edge-admin start
If there are no accidents, the service will start normally and a message similar to the following will be prompted:
Edge Admin started ok, pid: 109053
You can use the ps command to check whether the process exists:
ps ax|grep edge
You can see process information similar to the following:
31643 ? Sl 0:04 bin/edge-admin
It means that the management platform is started successfully; you can view the startup log in logs/run.log to facilitate us to diagnose the problem;
The default startup port is 7788. To confirm that the process has been started, you can pass:
http://IP address:7788/
Access the management platform; if a firewall has been set up on your server, you need to set the port 7788 in the firewall to pass; if the above URL can be accessed normally, the system will automatically enter the installation process. Just fill in the options according to the interface prompts.
Install system services
bin/edge-admin service
InstallMySQL
sudo curl -s https://static-file-global.353355.xyz/goedge/mysql/install-mysql.sh | bash
Replace edge node package
International Source (Cloudflare)
cd /usr/local/goedge/edge-admin/edge-api/deploy rm -rf *.zip wget -O edge-node-linux-amd64-v1.3.9.zip https://static-file-global.353355.xyz/goedge/edge-node-linux-amd64-plus-v1.3.9.zip wget -O edge-node-linux-arm64-v1.3.9.zip https://static-file-global.353355.xyz/goedge/edge-node-linux-arm64-plus-v1.3.9.zip
Domestic source (Alibaba Cloud CDN)
cd /usr/local/goedge/edge-admin/edge-api/deploy rm -rf *.zip wget -O edge-node-linux-amd64-v1.3.9.zip https://fj.ly93.cc/37/1809540483/edge-node-linux-amd64-plus-v1.3.9.zip wget -O edge-node-linux-arm64-v1.3.9.zip https://fj.ly93.cc/37/1809540478/edge-node-linux-arm64-plus-v1.3.9.zip
Cracked version activation
Access the management platform with a browser, click “System Settings”, “Commercial Version”, “Activation”, and directly paste the Ultimate Edition registration code provided below to complete offline activation, which is valid for life; or refer to the five methods provided in this article to obtain registration Code method: https://www.nodeseek.com/post-138160-1
F4BuVYEKSDWV+I13ISd5NUyBcWOlH0af4/ow9obzYBS3XvYC9IsK86k5UDyyBv9vqJWN2/FQTDbPyuAO0zxYlkLDC0c8rrShs+7PAkqM0O8wBIGknzForgidDZahky5Lo/ZWaPZ1dVFUxmV29ykb0I0b 4tv7Q3OtnTylOuzf//MYrlvyw6VJQMGnsttmeHzsNL/r0yDONOEXZoGoLZsuBKnkfXt+qt6bZF+kM1ncbh+sY42BrPTWQ12sXqJS3qHlzU0FFl9lTNzLGYYhq5vi/4sJuPVE50/uLCtslTJdb9z OGR915hnM+jHYsR+jUk0QxOqtreaHpsvNuLkexXbkmA==
Edge node installation (installed on your CDN node)
Access the management platform with a browser, click “Edge Node”, “Create Node”, fill in the node name, node public IP address, SSH port number as required, add SSH login information, click “Remote Installation”, and you can complete it with one click Complete the installation and deployment of edge nodes.
Since the above process has replaced the edge node package in the /deploy directory, the edge node program versions installed with one click here are all safe versions, so there is no need to worry.
After the installation is successful, it is recommended to refer to the operation when installing the management platform and go to the installed node to manually modify the hosts to block communication with the official domain name!
Go to the installation directory
cd /usr/local/goedge
Get the package and unzip it
International Source (Cloudflare)
# X86_64 wget https://static-file-global.353355.xyz/goedge/edge-user-linux-amd64-v1.3.9.zip #aarch64 wget https://static-file-global.353355.xyz/goedge/edge-user-linux-arm64-v1.3.9.zip
Domestic source (Alibaba Cloud CDN)
# X86_64 wget https://fj.ly93.cc/37/1809540410/edge-user-linux-amd64-v1.3.9.zip #aarch64 wget https://fj.ly93.cc/37/1809540413/edge-user-linux-arm64-v1.3.9.zip
unzip -o ./edge-user-linux-amd64-v1.3.9.zip
Add user node to management platform
Access the management platform with a browser, click “System Settings”, “Advanced Settings”, “User Node”, “Add Node”, fill in the node name arbitrarily, the process listening port and the external access address port are recommended to be consistent, the official document recommends filling in 80/443.
After creation, click “Install Node” to see the configuration file content information. Copy the entire content for the next step.
Create configuration file
vi /usr/local/goedge/edge-user/configs/api_user.yaml
Paste the configuration file content information obtained in the previous step, save and exit.
Start user platform
cd edge-user/ bin/edge-user start
Install system services
bin/edge-user service
If your user platform is not installed on the same server as the management platform, after the installation is successful, it is recommended to refer to the operation when installing the management platform and go to the installed node to manually modify the hosts to block communication with the official domain name!
Smart DNS module installation (not necessary)
Go to the installation directory
cd /usr/local/goedge
Get the package and unzip it
International Source (Cloudflare)
# X86_64 wget https://static-file-global.353355.xyz/goedge/edge-dns-linux-amd64-v1.3.9.zip #aarch64 wget https://static-file-global.353355.xyz/goedge/edge-dns-linux-arm64-v1.3.9.zip
Domestic source (Alibaba Cloud CDN)
# X86_64 wget https://fj.ly93.cc/37/1809540514/edge-dns-linux-amd64-v1.3.9.zip #aarch64 wget https://fj.ly93.cc/37/1809540511/edge-dns-linux-arm64-v1.3.9.zip
unzip -o ./edge-dns-linux-amd64-v1.3.9.zip
Add DNS nodes to the management platform
Access the management platform with a browser, click “Smart DNS”, “Cluster Management” (you need to create a cluster for the first time, with a random name), then click “Create Node” and fill in the node name and node public IP address as required.
After creation, click on the created node name and click “Install Node” to see the configuration file content information. Copy the entire content for the next step.
Create configuration file
vi /usr/local/goedge/edge-dns/configs/api_dns.yaml
Paste the configuration file content information obtained in the previous step, save and exit.
Start user platform
cd edge-dns/ bin/edge-dns start
Install system services
bin/edge-dns service
If your smart DNS module is not installed on the same server as the management platform, after successful installation, it is recommended to refer to the operation when installing the management platform and go to the installed node to manually modify the hosts to block communication with the official domain name!
Common commands
Port occupancy query
sudo netstat -tuln | grep :53
Unblock port 53
sudo systemctl stop systemd-resolved sudo systemctl disable systemd-resolved
sudo rm /etc/resolv.conf sudo touch /etc/resolv.conf
vi /etc/resolv.conf
nameserver 8.8.8.8 nameserver 8.8.4.4
GoEdge archive image used in this document
https://drive.google.com/drive/folders/1-2JbKiNy-MWF7RLnIUIRXiT-AE37rUDx
Thanks to @DigitalVirt for providing the archive. The MD5 verification results are consistent with the packages provided by dl.naixi.net and other sources. There should be no major problems.
Official documentation
If any questions arise, please refer to the official documentation: https://goedge.cloud/docs
Comments (0)