linux雙線服務(wù)器配置
linux 雙線服務(wù)器配置網(wǎng)通使用第一塊網(wǎng)卡(eth0): IP :210.82.37.149 掩碼:255.255.255.224 網(wǎng)關(guān):210.82.37.158 鐵通使用第二塊網(wǎng)卡(eth1):
linux 雙線服務(wù)器配置
網(wǎng)通使用第一塊網(wǎng)卡(eth0): IP :210.82.37.149 掩碼:255.255.255.224 網(wǎng)關(guān):210.82.37.158 鐵通使用第二塊網(wǎng)卡(eth1): IP :222.35.92.242 掩碼:255.255.255.252 網(wǎng)關(guān):222.35.92.241 二、配置網(wǎng)卡: #vi/etc/sysconfig/networking/profiles/default/ifcfg-eth0 DEVICE=eth0 ONBOOT=yes IPADDR=210.82.37.149 NETMASK=255.255.255.224 GATEWAY=210.82.37.158 TYPE=Ethernet #vi/etc/sysconfig/networking/profiles/default/ifcfg-eth1 DEVICE=eth1 ONBOOT=yes IPADDR=222.35.92.242 NETMASK=255.255.255.252 GATEWAY=222.35.92.241 TYPE=Ethernet #vi/etc/sysconfig/networking/profiles/default/route-eth1 GATEWAY0=218.57.200.1 NETMASK0=255.255.255.0 ADDRESS0=218.57.200.242 #vi/etc/sysconfig/networking/profiles/default/resolv.conf nameserver202.102.152.3 nameserver202.102.128.68 三、配置路由表 #vi/etc/iproute2/rt_tables,增加網(wǎng)通和鐵通兩個(gè)路由表 252cnc 251crtc 設(shè)置網(wǎng)通的路由表 iprouteadd210.82.37.128/27via210.82.37.149deveth0tablecnc
iprouteadd127.0.0.0/8devlotablecnc iprouteadddefaultvia210.82.37.158deveth0tablecnc 設(shè)置鐵通的路由表 iprouteadd222.35.92.240/30via222.35.92.242deveth1tablecrtc iprouteadd127.0.0.0/8devlotablecrtc iprouteadddefaultvia222.35.92.241deveth1tablecrtc 制定策略,讓222.35.92.242的回應(yīng)數(shù)據(jù)包走鐵通的路由表路由,210.82.37.149的回應(yīng)數(shù)據(jù)包走網(wǎng)通的路由表路由 ipruleaddfrom210.82.37.149tablecnc ipruleaddfrom222.35.92.242tablecrtc 修改IP 轉(zhuǎn)發(fā)文件 #vi/etc/sysctl.conf net.ipv4.ip_forward=1 net.ipv4.conf.default.rp_filter=1 kernel.sysrq=0 設(shè)置靜態(tài)路由表文件 #vi/etc/sysconfig/static-routes eth0net210.82.37.149netmask255.255.255.224gw210.82.37.158
eth1net222.35.92.242netmask255.255.255.252gw222.35.92.241 將從兩個(gè)WAN 口出去的數(shù)據(jù)包進(jìn)行IP 偽裝masquerade #/sbin/modprobeip_conntrack_ftp #/sbin/modprobeip_nat_ftp #/sbin/iptables-tnat-Apostrouting-oeth0-jmasquerade #/sbin/iptables-tnat-Apostrouting-oeth1-jmasquerade 設(shè)置默認(rèn)網(wǎng)關(guān)為網(wǎng)通 #routeadddefaultgw210.82.37.158 增加出口路由策略,客戶端是鐵通的走鐵通線路,其余走網(wǎng)通線路。 CODE :ipruleaddto121.16.0.0/13tablecncipruleaddto121.24.0.0/14tablecncipruleaddto121.28.0.0/15tablecncipruleaddto121.30.0.0/16tablecncipruleaddto121.31.0.0/16tablecnc
其余省略...
刷新路由表
iprouteflushcache
四、配置DNS
在服務(wù)器上配置自己的DNS 解析,將域名服務(wù)器商處的域名解析指向服務(wù)器。
這樣,來(lái)自網(wǎng)通的查詢,將反饋網(wǎng)站網(wǎng)通的IP ,其余反饋電信的IP 。
配置named.conf
CODE:
view ”cnc ”{match-clients{121.16.0.0/13;121.24.0.0/14;121.28.0.0/15;121.30.0.0/16;121.31.0.0/16;121.47其余省略...;}recursionyes;zone”zhyh.org ”{typemaster;file”/var/named/zhyh.org.cnc”;};};view”other ”{match-clients{any;};recursionno;zone”zhyh.org ”{typemaster;file”/var/named/zhyh.org”;};};
,配置zhyh.org.cnc ,對(duì)應(yīng)網(wǎng)通IP
CODE:$TTL86400@INSOAzhyh.org.root(2006111800;Serial28800;Refresh14400;Retry3600000;Expire86400);MinimumINNSzhyh.org.INA218.57.200.242INMX10mailwwwINA218.57.200.242ns1I NA218.57.200.242nsINA222.173.254.21mailINA218.57.200.2421INPTRlocalhost.
配置zhyh.org ,對(duì)應(yīng)電信IP
CODE$TTL86400@INSOAzhyh.org.root(2006111800;Serial28800;Refresh14400;Retry3600000;Expire86400);MinimumINNSzhyh.org.INA222.173.254.21INMX10mailwwwINA222.173.254.21nsIN A222.173.254.21ns1INA218.57.200.242mailINA222.173.254.211INPTRlocalhost.
配置222.173.254.zone 、218.57.200.zone 做反向解析;
CODE:$TTL86400@INSOAzhyh.org.root.zhyh.org.(200611181336007200360000086400)INNSlocalhost.242INPTRwww.zhyh.org.242INPTRns1.zhyh.org.242INPTRmail.zhyh.org.
五、配置apache ,做好虛擬主機(jī)設(shè)置
CODE
#vi/etc/httpd/conf/httpd.confNameVirtualHost218.57.200.242:80NameVirtualHost222.173.254.21:80