1.修改服务器内核参数,服务器配置文件/etc/sysctl.conf修改或者添加内容如下* J+ R1 z% w1 K6 j, {- d, f- z
- net.ipv4.ip_forward = 19 b3 ?" P* I" c
- net.ipv4.conf.default.rp_filter = 0
, N2 t* _" `, T6 [2 s - net.ipv4.conf.all.rp_filter = 0# a( C1 Z8 T8 @' A( @ P% P' ^
- net.ipv4.conf.all.send_redirects = 0
2 N z+ n- g) q3 h% W) v! r7 x - net.ipv4.conf.default.send_redirects = 01 R. i) e0 }8 e9 N' u3 _
- net.ipv4.conf.all.accept_redirects = 0
' ~/ I# J5 D; X: Y/ w( I6 \' u - net.ipv4.conf.default.accept_redirects = 0
, f" J% @5 S" q+ ? - net.core.xfrm_larval_drop = 1
复制代码 ' ~8 R. [3 j7 C1 s, M
2.防火墙添加规则
. }/ n- C/ \0 I0 B5 _0 b% l1 O8 H- iptables -t nat -A POSTROUTING ! -s 127.0.0.1/8 -j MASQUERADE
0 P$ m; C1 d) B7 B K" q - iptables -I FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
复制代码 |