perf: 六项性能优化

- DNS 解析缓存：sync.Map 缓存避免重复系统调用
- 凭据测试 TCP 预检：不可达目标直接跳过全部凭据
- Web 探测 HTTP Client 复用：全局共享连接池
- 端口扫描 Bloom Filter 去重：替代 map 降低内存
- 进度条 atomic 累加 + 50ms 节流渲染：消除锁竞争
- 服务探针预解码：Init 时预编译，运行时零解码开销

plugins/services/activemq.go

@@ -50,7 +50,7 @@ func (p *ActiveMQPlugin) Scan(ctx context.Context, info *common.HostInfo, sessio
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "activemq", testConfig)
 

plugins/services/cassandra.go

@@ -49,7 +49,7 @@ func (p *CassandraPlugin) Scan(ctx context.Context, info *common.HostInfo, sessi
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "cassandra", testConfig)
 

plugins/services/credential_tester.go

@@ -5,6 +5,7 @@ import (
 	"database/sql"
 	"fmt"
 	"io"
+	"net"
 	"sync"
 	"time"
 
@@ -109,6 +110,7 @@ type ConcurrentTestConfig struct {
 	MaxRetries             int           // 最大重试次数，默认 3
 	RetryDelay             time.Duration // 重试延迟，默认 1s
 	MaxConsecutiveNetErrors int          // 连续网络错误阈值，超过则认为目标不可达，默认 5
+	TargetAddr             string        // 目标地址 host:port，用于 TCP 预检（可选）
 }
 
 // DefaultConcurrentTestConfig 默认配置
@@ -125,6 +127,13 @@ func DefaultConcurrentTestConfig(config *common.Config) ConcurrentTestConfig {
 	}
 }
 
+// DefaultConcurrentTestConfigWithTarget 带目标预检的默认配置
+func DefaultConcurrentTestConfigWithTarget(config *common.Config, info *common.HostInfo) ConcurrentTestConfig {
+	cfg := DefaultConcurrentTestConfig(config)
+	cfg.TargetAddr = fmt.Sprintf("%s:%d", info.Host, info.Port)
+	return cfg
+}
+
 // TestCredentialsConcurrently 并发测试多个凭据
 // 找到成功凭据后立即通知其他 worker 停止
 func TestCredentialsConcurrently(
@@ -142,6 +151,19 @@ func TestCredentialsConcurrently(
 		}
 	}
 
+	// TCP 预检：快速验证目标可达，避免对不可达目标浪费全部凭据尝试
+	if testConfig.TargetAddr != "" {
+		preConn, err := net.DialTimeout("tcp", testConfig.TargetAddr, 3*time.Second)
+		if err != nil {
+			return &ScanResult{
+				Success: false,
+				Service: serviceName,
+				Error:   fmt.Errorf("目标不可达: %w", err),
+			}
+		}
+		_ = preConn.Close()
+	}
+
 	// 调整并发数
 	concurrency := testConfig.Concurrency
 	if concurrency > len(credentials) {

plugins/services/ftp.go

@@ -49,7 +49,7 @@ func (p *FTPPlugin) Scan(ctx context.Context, info *common.HostInfo, session *co
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "ftp", testConfig)
 

plugins/services/kafka.go

@@ -44,7 +44,7 @@ func (p *KafkaPlugin) Scan(ctx context.Context, info *common.HostInfo, session *
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "kafka", testConfig)
 

plugins/services/ldap.go

@@ -50,7 +50,7 @@ func (p *LDAPPlugin) Scan(ctx context.Context, info *common.HostInfo, session *c
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "ldap", testConfig)
 

plugins/services/mongodb.go

@@ -69,7 +69,7 @@ func (p *MongoDBPlugin) Scan(ctx context.Context, info *common.HostInfo, session
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "mongodb", testConfig)
 

plugins/services/mssql.go

@@ -45,7 +45,7 @@ func (p *MSSQLPlugin) Scan(ctx context.Context, info *common.HostInfo, session *
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "mssql", testConfig)
 

plugins/services/mysql.go

@@ -56,7 +56,7 @@ func (p *MySQLPlugin) Scan(ctx context.Context, info *common.HostInfo, session *
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "mysql", testConfig)
 

plugins/services/neo4j.go

@@ -51,7 +51,7 @@ func (p *Neo4jPlugin) Scan(ctx context.Context, info *common.HostInfo, session *
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "neo4j", testConfig)
 

plugins/services/oracle.go

@@ -50,7 +50,7 @@ func (p *OraclePlugin) Scan(ctx context.Context, info *common.HostInfo, session
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "oracle", testConfig)
 

plugins/services/postgresql.go

@@ -51,7 +51,7 @@ func (p *PostgreSQLPlugin) Scan(ctx context.Context, info *common.HostInfo, sess
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "postgresql", testConfig)
 

plugins/services/rabbitmq.go

@@ -52,7 +52,7 @@ func (p *RabbitMQPlugin) Scan(ctx context.Context, info *common.HostInfo, sessio
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, config, state)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "rabbitmq", testConfig)
 

plugins/services/redis.go

@@ -56,7 +56,7 @@ func (p *RedisPlugin) Scan(ctx context.Context, info *common.HostInfo, session *
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 	testConfig.Concurrency = 20 // Redis 默认并发度更高
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "redis", testConfig)

plugins/services/rsync.go

@@ -70,7 +70,7 @@ func (p *RsyncPlugin) Scan(ctx context.Context, info *common.HostInfo, session *
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, creds, authFn, "rsync", testConfig)
 

plugins/services/smb.go

@@ -91,7 +91,7 @@ func (p *SmbPlugin) Scan(ctx context.Context, info *common.HostInfo, session *co
 	}
 
 	authFn := p.createAuthFunc(info, auth, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, creds, authFn, "smb", testConfig)
 

plugins/services/smtp.go

@@ -57,7 +57,7 @@ func (p *SMTPPlugin) Scan(ctx context.Context, info *common.HostInfo, session *c
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, creds, authFn, "smtp", testConfig)
 

plugins/services/ssh.go

@@ -65,7 +65,7 @@ func (p *SSHPlugin) Scan(ctx context.Context, info *common.HostInfo, session *co
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "ssh", testConfig)
 

plugins/services/telnet.go

@@ -92,7 +92,7 @@ func (p *TelnetPlugin) Scan(ctx context.Context, info *common.HostInfo, session
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, creds, authFn, "telnet", testConfig)
 

plugins/services/vnc.go

@@ -49,7 +49,7 @@ func (p *VNCPlugin) Scan(ctx context.Context, info *common.HostInfo, session *co
 
 	// 使用公共框架进行并发凭据测试
 	authFn := p.createAuthFunc(info, session)
-	testConfig := DefaultConcurrentTestConfig(config)
+	testConfig := DefaultConcurrentTestConfigWithTarget(config, info)
 
 	result := TestCredentialsConcurrently(ctx, credentials, authFn, "vnc", testConfig)