https://ec.haxx.se/ 英文在线文档
Everything-curl github地址
curl的用法
1.1 URL通配
| 通配类型 | 通配举例 |
|---|---|
| 数字 | curl -O http://example.com/[1-100].png |
| curl -O http://example.com/[001-100].png | |
| curl -O http://example.com[0-100:2].png | |
| 字母 | curl -O http://example.com/section[a-z].html |
| 列表 | curl -O http://example.com/{one,two,three,alpah,beta}.html |
| 组合 | curl -O http://example.com/chess-[0-1]x[0-7].jpg |
| curl -O http://example.com/{web,email}-log[0-6].txt |
1.2 配置文件
当你的命令行比较长的时候，你可以将参数写在文件中，然后curl的时候调用。
curl -K cmdline.txt http://example.com
cmdline.txt 中可以包含你想要指定的参数：
# 还可以添加注释
--location
# 使用长短格式均可
head
# 但命令行选项和其参数需要在同一行
user-agent "Everythis-is-an-agent"
# 也可以添加=符号
user-agent = "Everythin-is-an-agent"
# 没有空格的时候，引号可以省去
user-agent = Everything-is-an-agent
curl 会检查是否存在默认配置文件（除非使用了-q)，如果存在，则使用这个配置文件。
在类Unix系统中，会查找 .curlrc 文件，在windows系统中，会查找 _curlrc 文件
1.3 认证和进度指示器
# 简单认证
curl -u alice:12345 http://example.com
# 关闭进度指示器
-s 或 --silent
# 简单进度指示器
-# 或 -progress-bar
1.4 其它常用参数
| 参数 | 长格式 | 作用 | 说明 | 示例 |
|---|---|---|---|---|
| -v | --verbose | 详细模式 | 显示更多信息 | |
| --trace [filename] | 将信息保存到文件中 | --trace-ascii可显示字符 | curl --trace dump http://example.com | |
| --trace-time | 输出信息加时间戳 | |||
| -w | --write-out | 结束输出信息 | 可指定字符串，@文件读取，@-从stdin读取，还可使用%{name}访问变量 | curl -w "Type: %{content_type} Code: %{response_code} " http://example.com |
| -s | --silent | 静默模式 | 可加 --show-error 来显示错误信息 | |
| -o [filename] | --output [filename] | 将下载内容保存到filename | 如多个url文件需使用多个-O 或 --remote-name-all | curl -o -o url1 url2 |
| -O | --remote-name | 使用原资源名保存文件 | 注：重定向后名字不会变 | |
| -J | --remote-header-name | 使用header中指定的文件名 | ||
| --compressed | 使用压缩算法加快传输速度 | |||
| > [filename] | shell重定向 | curl http://example.com > files.html | ||
| --max-filesize [size] | 指定最大文件大小 | |||
| --raw | 传输原始数据 | 适用于自行解码的场景 | ||
| --retry [num] | 失败重试 | --retry-delay指定间隔，否则指数上升，--retry-max-time指定最大重试时间 | ||
| --max-time | 指定单个传输最长时间 | |||
| -C | --continue-at [num] | 指定从num字节偏移处下载 | 指定 num 为 - 则继续之前的下载，--range num1-num2 下载部分 | |
| --connect-timeout [n秒] | 最大连接时间 | |||
| --interface [接口] | 指定本地接口 | curl --interface eth0 http://example.com curl --interface 192.168.0.2 http://example.com |
||
| --local-port [port] | 指定本地端口 | curl --local-port 4000-4200 http://example.com | ||
| --keepalive-time [num秒] | 指定keepalive时间 | |||
| --no-keeyalive | 禁用keepalive | |||
| -x | --proxy | 使用代理 | curl -x 192.168.0.1:8080 http://example.com | |
| --path-as-is | 不对url进行压缩 | ok/../会压缩为/ | ||
| -d | --data | 以post方式发送数据 | 使用@filename从文件读取,使用--data-binary读取二进制数据 | curl -d name=admin -d show=yes http://example.com |
| Content-Type | 指定发送的数据类型 | curl -d '{json}' -H 'Content-Type: application/json' http://example.com | ||
| -L -b | 使用cookie | curl -L -b cookies.txt http://example.com |
参数大全
2.1 所有长短参数
Usage: curl [options...] <url>
--abstract-unix-socket <path> Connect via abstract Unix domain socket
--anyauth Pick any authentication method
-a, --append Append to target file when uploading
--basic Use HTTP Basic Authentication
--cacert <file> CA certificate to verify peer against
--capath <dir> CA directory to verify peer against
-E, --cert <certificate[:password]> Client certificate file and password
--cert-status Verify the status of the server certificate
--cert-type <type> Certificate file type (DER/PEM/ENG)
--ciphers <list of ciphers> SSL ciphers to use
--compressed Request compressed response
--compressed-ssh Enable SSH compression
-K, --config <file> Read config from a file
--connect-timeout <seconds> Maximum time allowed for connection
--connect-to <HOST1:PORT1:HOST2:PORT2> Connect to host
-C, --continue-at <offset> Resumed transfer offset
-b, --cookie <data> Send cookies from string/file
-c, --cookie-jar <filename> Write cookies to <filename> after operation
--create-dirs Create necessary local directory hierarchy
--crlf Convert LF to CRLF in upload
--crlfile <file> Get a CRL list in PEM format from the given file
-d, --data <data> HTTP POST data
--data-ascii <data> HTTP POST ASCII data
--data-binary <data> HTTP POST binary data
--data-raw <data> HTTP POST data, '@' allowed
--data-urlencode <data> HTTP POST data url encoded
--delegation <LEVEL> GSS-API delegation permission
--digest Use HTTP Digest Authentication
-q, --disable Disable .curlrc
--disable-eprt Inhibit using EPRT or LPRT
--disable-epsv Inhibit using EPSV
--dns-interface <interface> Interface to use for DNS requests
--dns-ipv4-addr <address> IPv4 address to use for DNS requests
--dns-ipv6-addr <address> IPv6 address to use for DNS requests
--dns-servers <addresses> DNS server addrs to use
-D, --dump-header <filename> Write the received headers to <filename>
--egd-file <file> EGD socket path for random data
--engine <name> Crypto engine to use
--expect100-timeout <seconds> How long to wait for 100-continue
-f, --fail Fail silently (no output at all) on HTTP errors
--fail-early Fail on first transfer error, do not continue
--false-start Enable TLS False Start
-F, --form <name=content> Specify multipart MIME data
--form-string <name=string> Specify multipart MIME data
--ftp-account <data> Account data string
--ftp-alternative-to-user <command> String to replace USER [name]
--ftp-create-dirs Create the remote dirs if not present
--ftp-method <method> Control CWD usage
--ftp-pasv Use PASV/EPSV instead of PORT
-P, --ftp-port <address> Use PORT instead of PASV
--ftp-pret Send PRET before PASV
--ftp-skip-pasv-ip Skip the IP address for PASV
--ftp-ssl-ccc Send CCC after authenticating
--ftp-ssl-ccc-mode <active/passive> Set CCC mode
--ftp-ssl-control Require SSL/TLS for FTP login, clear for transfer
-G, --get Put the post data in the URL and use GET
-g, --globoff Disable URL sequences and ranges using {} and []
-I, --head Show document info only
-H, --header <header/@file> Pass custom header(s) to server
-h, --help This help text
--hostpubmd5 <md5> Acceptable MD5 hash of the host public key
-0, --http1.0 Use HTTP 1.0
--http1.1 Use HTTP 1.1
--http2 Use HTTP 2
--http2-prior-knowledge Use HTTP 2 without HTTP/1.1 Upgrade
--ignore-content-length Ignore the size of the remote resource
-i, --include Include protocol response headers in the output
-k, --insecure Allow insecure server connections when using SSL
--interface <name> Use network INTERFACE (or address)
-4, --ipv4 Resolve names to IPv4 addresses
-6, --ipv6 Resolve names to IPv6 addresses
-j, --junk-session-cookies Ignore session cookies read from file
--keepalive-time <seconds> Interval time for keepalive probes
--key <key> Private key file name
--key-type <type> Private key file type (DER/PEM/ENG)
--krb <level> Enable Kerberos with security <level>
--libcurl <file> Dump libcurl equivalent code of this command line
--limit-rate <speed> Limit transfer speed to RATE
-l, --list-only List only mode
--local-port <num/range> Force use of RANGE for local port numbers
-L, --location Follow redirects
--location-trusted Like --location, and send auth to other hosts
--login-options <options> Server login options
--mail-auth <address> Originator address of the original email
--mail-from <address> Mail from this address
--mail-rcpt <address> Mail to this address
-M, --manual Display the full manual
--max-filesize <bytes> Maximum file size to download
--max-redirs <num> Maximum number of redirects allowed
-m, --max-time <time> Maximum time allowed for the transfer
--metalink Process given URLs as metalink XML file
--negotiate Use HTTP Negotiate (SPNEGO) authentication
-n, --netrc Must read .netrc for user name and password
--netrc-file <filename> Specify FILE for netrc
--netrc-optional Use either .netrc or URL
-:, --next Make next URL use its separate set of options
--no-alpn Disable the ALPN TLS extension
-N, --no-buffer Disable buffering of the output stream
--no-keepalive Disable TCP keepalive on the connection
--no-npn Disable the NPN TLS extension
--no-sessionid Disable SSL session-ID reusing
--noproxy <no-proxy-list> List of hosts which do not use proxy
--ntlm Use HTTP NTLM authentication
--ntlm-wb Use HTTP NTLM authentication with winbind
--oauth2-bearer <token> OAuth 2 Bearer Token
-o, --output <file> Write to file instead of stdout
--pass <phrase> Pass phrase for the private key
--path-as-is Do not squash .. sequences in URL path
--pinnedpubkey <hashes> FILE/HASHES Public key to verify peer against
--post301 Do not switch to GET after following a 301
--post302 Do not switch to GET after following a 302
--post303 Do not switch to GET after following a 303
--preproxy [protocol://]host[:port] Use this proxy first
-#, --progress-bar Display transfer progress as a bar
--proto <protocols> Enable/disable PROTOCOLS
--proto-default <protocol> Use PROTOCOL for any URL missing a scheme
--proto-redir <protocols> Enable/disable PROTOCOLS on redirect
-x, --proxy [protocol://]host[:port] Use this proxy
--proxy-anyauth Pick any proxy authentication method
--proxy-basic Use Basic authentication on the proxy
--proxy-cacert <file> CA certificate to verify peer against for proxy
--proxy-capath <dir> CA directory to verify peer against for proxy
--proxy-cert <cert[:passwd]> Set client certificate for proxy
--proxy-cert-type <type> Client certificate type for HTTS proxy
--proxy-ciphers <list> SSL ciphers to use for proxy
--proxy-crlfile <file> Set a CRL list for proxy
--proxy-digest Use Digest authentication on the proxy
--proxy-header <header/@file> Pass custom header(s) to proxy
--proxy-insecure Do HTTPS proxy connections without verifying the proxy
--proxy-key <key> Private key for HTTPS proxy
--proxy-key-type <type> Private key file type for proxy
--proxy-negotiate Use HTTP Negotiate (SPNEGO) authentication on the proxy
--proxy-ntlm Use NTLM authentication on the proxy
--proxy-pass <phrase> Pass phrase for the private key for HTTPS proxy
--proxy-service-name <name> SPNEGO proxy service name
--proxy-ssl-allow-beast Allow security flaw for interop for HTTPS proxy
--proxy-tlsauthtype <type> TLS authentication type for HTTPS proxy
--proxy-tlspassword <string> TLS password for HTTPS proxy
--proxy-tlsuser <name> TLS username for HTTPS proxy
--proxy-tlsv1 Use TLSv1 for HTTPS proxy
-U, --proxy-user <user:password> Proxy user and password
--proxy1.0 <host[:port]> Use HTTP/1.0 proxy on given port
-p, --proxytunnel Operate through a HTTP proxy tunnel (using CONNECT)
--pubkey <key> SSH Public key file name
-Q, --quote Send command(s) to server before transfer
--random-file <file> File for reading random data from
-r, --range <range> Retrieve only the bytes within RANGE
--raw Do HTTP "raw"; no transfer decoding
-e, --referer <URL> Referrer URL
-J, --remote-header-name Use the header-provided filename
-O, --remote-name Write output to a file named as the remote file
--remote-name-all Use the remote file name for all URLs
-R, --remote-time Set the remote file's time on the local output
-X, --request <command> Specify request command to use
--request-target Specify the target for this request
--resolve <host:port:address> Resolve the host+port to this address
--retry <num> Retry request if transient problems occur
--retry-connrefused Retry on connection refused (use with --retry)
--retry-delay <seconds> Wait time between retries
--retry-max-time <seconds> Retry only within this period
--sasl-ir Enable initial response in SASL authentication
--service-name <name> SPNEGO service name
-S, --show-error Show error even when -s is used
-s, --silent Silent mode
--socks4 <host[:port]> SOCKS4 proxy on given host + port
--socks4a <host[:port]> SOCKS4a proxy on given host + port
--socks5 <host[:port]> SOCKS5 proxy on given host + port
--socks5-basic Enable username/password auth for SOCKS5 proxies
--socks5-gssapi Enable GSS-API auth for SOCKS5 proxies
--socks5-gssapi-nec Compatibility with NEC SOCKS5 server
--socks5-gssapi-service <name> SOCKS5 proxy service name for GSS-API
--socks5-hostname <host[:port]> SOCKS5 proxy, pass host name to proxy
-Y, --speed-limit <speed> Stop transfers slower than this
-y, --speed-time <seconds> Trigger 'speed-limit' abort after this time
--ssl Try SSL/TLS
--ssl-allow-beast Allow security flaw to improve interop
--ssl-no-revoke Disable cert revocation checks (WinSSL)
--ssl-reqd Require SSL/TLS
-2, --sslv2 Use SSLv2
-3, --sslv3 Use SSLv3
--stderr Where to redirect stderr
--suppress-connect-headers Suppress proxy CONNECT response headers
--tcp-fastopen Use TCP Fast Open
--tcp-nodelay Use the TCP_NODELAY option
-t, --telnet-option <opt=val> Set telnet option
--tftp-blksize <value> Set TFTP BLKSIZE option
--tftp-no-options Do not send any TFTP options
-z, --time-cond <time> Transfer based on a time condition
--tls-max <VERSION> Use TLSv1.0 or greater
--tlsauthtype <type> TLS authentication type
--tlspassword TLS password
--tlsuser <name> TLS user name
-1, --tlsv1 Use TLSv1.0 or greater
--tlsv1.0 Use TLSv1.0
--tlsv1.1 Use TLSv1.1
--tlsv1.2 Use TLSv1.2
--tlsv1.3 Use TLSv1.3
--tr-encoding Request compressed transfer encoding
--trace <file> Write a debug trace to FILE
--trace-ascii <file> Like --trace, but without hex output
--trace-time Add time stamps to trace/verbose output
--unix-socket <path> Connect through this Unix domain socket
-T, --upload-file <file> Transfer local FILE to destination
--url <url> URL to work with
-B, --use-ascii Use ASCII/text transfer
-u, --user <user:password> Server user and password
-A, --user-agent <name> Send User-Agent <name> to server
-v, --verbose Make the operation more talkative
-V, --version Show version number and quit
-w, --write-out <format> Use output FORMAT after completion
--xattr Store metadata in extended file attributes
2.2 可用的--wirte-out变量
| 变量 | 说明 |
|---|---|
| - %{content_type} | the Content-Type of the requested document, if there was any. |
| - %{filename_effective} | the ultimate filename that curl writes out to. This is only meaningful if curl is told to write to a file with the --remote-name or --output option. It's most useful in combination with the --remote-header-name option. |
| - %{ftp_entry_path} | the initial path curl ended up in when logging on to the remote FTP server. |
| - %{http_code} | the old variable name for what is now known as response_code. |
| - %{http_connect} | the numerical code that was found in the last response (from a proxy) to a curl CONNECT request. |
| - %{http_version} | The http version that was used. |
| - %{json} | all write-out variables as a single JSON object. |
| - %{local_ip} | the IP address of the local end of the most recently done connection—can be either IPv4 or IPv6 |
| - %{local_port} | the local port number of the most recently made connection |
| - %{method} | HTTP method the most recent request used |
| - %{num_connects} | the number of new connects made in the recent transfer. |
| - %{num_headers} | number of response headers in the last responsea |
| - %{num_redirects} | number of redirects that were followed in the request. |
| - %{proxy_ssl_verify_result} | the result of the SSL peer certificate verification that was requested when communicating with a proxy. 0 means the verification was successful. |
| - %{redirect_url} | the actual URL a redirect would take you to when an HTTP request was made without -L to follow redirects. |
| - %{remote_ip} | the remote IP address of the most recently made connection—can be either IPv4 or IPv6. |
| - %{remote_port} | the remote port number of the most recently made connection. |
| - %{response_code} | the numerical response code that was found in the last transfer. |
| - %{scheme} | scheme used in the previous URL |
| - %{size_download} | the total number of bytes that were downloaded. |
| - %{size_header} | the total number of bytes of the downloaded headers. |
| - %{size_request} | the total number of bytes that were sent in the HTTP request. |
| - %{size_upload} | the total number of bytes that were uploaded. |
| - %{speed_download} | the average download speed that curl measured for the complete download in bytes per second. |
| - %{speed_upload} | the average upload speed that curl measured for the complete upload in bytes per second. |
| - %{ssl_verify_result} | the result of the SSL peer certificate verification that was requested. 0 means the verification was successful. |
| - %{stderr} | - makes the rest of the output get written to stderr. |
| - %{stdout} | - makes the rest of the output get written to stdout. |
| - %{time_appconnect} | the time, in seconds, it took from the start until the SSL/SSH/etc connect/handshake to the remote host was completed. |
| - %{time_connect} | the time, in seconds, it took from the start until the TCP connect to the remote host (or proxy) was completed. |
| - %{time_namelookup} | the time, in seconds, it took from the start until the name resolving was completed. |
| - %{time_pretransfer} | the time, in seconds, it took from the start until the file transfer was just about to begin. This includes all pre-transfer commands and negotiations that are specific to the particular protocol(s) involved. |
| - %{time_redirect} | the time, in seconds, it took for all redirection steps including name lookup, connect, pre-transfer and transfer before the final transaction was started. time_redirect the complete execution time for multiple redirections. |
| - %{time_starttransfer} | the time, in seconds, it took from the start until the first byte was just about to be transferred. This includes time_pretransfer and also the time the server needed to calculate the result. |
| - %{time_total} | the total time, in seconds, that the full operation lasted. The time will be displayed with millisecond resolution. |
| - %{url_effective} | the URL that was fetched last. This is particularly meaningful if you have told curl to follow Location: headers (with -L). |