1.修改服务器内核参数,服务器配置文件/etc/sysctl.conf修改或者添加内容如下
3 n3 ^/ }: g0 G" I: v/ ~- net.ipv4.ip_forward = 1
8 ~8 f' U, n- @! A9 H# q - net.ipv4.conf.default.rp_filter = 02 u- g8 L+ ^; K( \
- net.ipv4.conf.all.rp_filter = 0
3 I& L: k+ j B' v& C8 G - net.ipv4.conf.all.send_redirects = 0
$ l4 Q" K+ t, B" U$ K - net.ipv4.conf.default.send_redirects = 0
: @- J* C) I% w$ J - net.ipv4.conf.all.accept_redirects = 0
) q8 f, c6 h, @1 H; Q" M9 y - net.ipv4.conf.default.accept_redirects = 0% N, @3 u' G, F9 D
- net.core.xfrm_larval_drop = 1
复制代码
6 N9 F/ C" l* {2.防火墙添加规则
. H# p2 G0 G% H5 e) `8 T- iptables -t nat -A POSTROUTING ! -s 127.0.0.1/8 -j MASQUERADE/ B" C2 {- A* {' Q0 n
- iptables -I FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
复制代码 |