1.修改服务器内核参数，服务器配置文件/etc/sysctl.conf修改或者添加内容如下
) q5 N/ N: N* p7 L! |# F- net.ipv4.ip_forward = 14 s1 `: P% K2 C, I
- net.ipv4.conf.default.rp_filter = 0
# j+ e- R" R, O - net.ipv4.conf.all.rp_filter = 0
# i4 d6 [" C( [ - net.ipv4.conf.all.send_redirects = 0! z1 y; u: y1 h0 o
- net.ipv4.conf.default.send_redirects = 0 ~6 _3 H5 @: z6 I5 w
- net.ipv4.conf.all.accept_redirects = 05 ^8 z3 O+ H: g' L: {4 {6 L, T
- net.ipv4.conf.default.accept_redirects = 0
+ p3 y% d2 E1 P - net.core.xfrm_larval_drop = 1
8 `8 ~; p: O0 W2.防火墙添加规则
+ c) h4 W0 v! P2 x) I8 N- iptables -t nat -A POSTROUTING ! -s 127.0.0.1/8 -j MASQUERADE, K7 E9 U) P; |" \3 m) x7 t; A
- iptables -I FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
|
发表于 2019-3-29 00:20:11