{"id":410,"date":"2012-09-19T13:11:16","date_gmt":"2012-09-19T13:11:16","guid":{"rendered":""},"modified":"2013-02-07T12:10:28","modified_gmt":"2013-02-07T04:10:28","slug":"centos-6%e4%b8%8b%ef%bc%8c%e8%bf%9c%e7%a8%8b%e5%ae%89%e8%a3%85kvm%e8%99%9a%e6%8b%9f%e6%9c%ba%ef%bc%8c%e5%b9%b6%e4%bd%bf%e7%94%a8apache-mod_proxy%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e5%bb%ba%e7%ab%8be","status":"publish","type":"post","link":"https:\/\/dingxuan.info\/wp\/?p=410","title":{"rendered":"CentOS 6\u4e0b\uff0c\u8fdc\u7a0b\u5b89\u88c5KVM\u865a\u62df\u673a\uff0c\u5e76\u4f7f\u7528apache mod_proxy\u53cd\u5411\u4ee3\u7406\u5efa\u7acb\u591a\u4e2aweb\u670d\u52a1\u5668"},"content":{"rendered":"

\u76ee\u5f55\uff1a
0. \u914d\u7f6e\u76ee\u7684\u53ca\u65b9\u6848\u7b80\u4ecb
1. \u5b89\u88c5KVM
2. \u5b89\u88c5\u914d\u7f6eVNC\u8fdc\u7a0b\u63a7\u5236
3. \u5728KVM\u865a\u62df\u673a\u5b89\u88c5CentOS 6
4. NAT\u7f51\u7edc\u914d\u7f6e
5. \u4f7f\u7528iptables\u9632\u706b\u5899\u914d\u7f6e\uff0cSSH\uff0cFTP
6. \u4f7f\u7528\u53cd\u5411\u4ee3\u7406\u914d\u7f6eWeb server
7. \u865a\u62df\u673a\u4e2d\u7684Mysql\u914d\u7f6e
8. \u540e\u7eed\uff1aiptables\u89c4\u5219\u4f18\u5316\uff0c\u865a\u62df\u673a\u81ea\u52a8\u5feb\u7167\u5907\u4efd

0. \u914d\u7f6e\u76ee\u7684\u53ca\u65b9\u6848\u7b80\u4ecb<\/span>\n

\u4f7f\u7528\u4e00\u53f0\u5f3a\u52b2\u7684\u670d\u52a1\u5668\uff0c\u5b89\u88c5\u591a\u4e2a\u72ec\u7acb\u7684\u865a\u62df\u673a\u3002\u8fbe\u5230\u589e\u52a0\u5b89\u5168\u6027\uff08\u4e00\u53f0\u865a\u62df\u673a\u8f6f\u6545\u969c\u65f6\uff0c\u5bf9\u5176\u4ed6\u673a\u5668\u6ca1\u6709\u5f71\u54cd\uff09\uff0c\u6bcf\u4e2a\u865a\u62df\u673a\u7075\u6d3b\u7ba1\u7406\uff0c\u5145\u5206\u5229\u7528\u786c\u4ef6\u8d44\u6e90\u7684\u76ee\u7684\u3002
\u4e3b\u673a\u53cc\u7f51\u5361\uff0c\u6709\u4e24\u4e2a\u516c\u7f51IP\u3002\u56e0\u4e3a\u6ca1\u6709\u66f4\u591a\u7684\u516c\u7f51IP\uff0c\u6240\u4ee5\u4f7f\u7528NAT\u65b9\u5f0f\u4e3a\u6bcf\u4e2a\u865a\u62df\u673a\u914d\u7f6e\u5185\u7f51IP\u3002\u7406\u8bba\u4e0a\u4ee5\u4e0b\u8bbe\u7f6e\u5bf9\u5355\u7f51\u5361\u4e3b\u673a\u4e5f\u5b8c\u5168\u9002\u7528\u3002

\u7b80\u5355\u6765\u8bf4\uff0c\u4e3b\u8981\u5206\u4ee5\u4e0b\u6b65\u9aa4\u3002

\u64cd\u4f5c\u7cfb\u7edf\u91c7\u7528CentOS 6.3\uff0c\u52a0\u88c5\u865a\u62df\u5316\u7ec4\u4ef6

\"\"<\/p>\n
\u4f7f\u7528Apache reverse proxy\u53cd\u5411\u4ee3\u7406\uff0c\u5f15\u5bfc\u5206\u914dweb\u8bbf\u95ee

\"\"<\/p>\n
\u4f7f\u7528iptables\u5efa\u7acb\u7aef\u53e3\u8f6c\u53d1\uff0c\u4ece\u800c\u5e2e\u52a9\u5916\u7f51\u8bbf\u95ee\u865a\u62df\u673a\u4e2d\u7684ssh\u3001ftp\u7b49\u670d\u52a1\u3002




1. \u5b89\u88c5KVM<\/span>\n



http:\/\/blog.csdn.net\/samlei\/article\/details\/7576635<\/a>
CentOS6.2 x86\u4e0a\u5b89\u88c5KVM\u529f\u80fd\u6a21\u5757\u6b65\u9aa4<\/span>\n
\u4ee5root\u7528\u6237\u8fdb\u884c\u3002<\/u>\n

1\u3001\u68c0\u67e5CPU\u4fe1\u606f
KVM \u9700\u8981\u6709 CPU \u7684\u652f\u6301\uff08Intel VT \u6216 AMD SVM\uff09\uff0c\u5728\u5b89\u88c5 KVM \u4e4b\u524d\u68c0\u67e5\u4e00\u4e0b CPU \u662f\u5426\u63d0\u4f9b\u4e86\u865a\u62df\u6280\u672f\u7684\u652f\u6301\u3002
\u57fa\u4e8e Intel \u5904\u7406\u5668\u7684\u7cfb\u7edf\uff0c\u8fd0\u884c grep vmx \/proc\/cpuinfo \u67e5\u627e CPU flags \u662f\u5426\u5305\u62ec vmx \u5173\u952e\u8bcd

# grep vmx \/proc\/cpuinfo\nflags : fpu vme de pse tsc msr pae mce\ncx8 apic sep  mtrr pge mca cmov pat\npse36 clflush dts acpi mmx\nfxsr sse sse2 ss ht tm pbe syscall nx lm\nconstant_tsc arch_perfmon pebs bts\nrep_good pni monitor ds_cpl\nvmx est tm2 ssse3 cx16 xtpr lahf_lm ida\nflags : fpu vme de pse tsc msr pae mce\ncx8 apic sep mtrr pge mca cmov pat\npse36 clflush dts acpi mmx fxsr sse sse2\nss ht tm pbe syscall nx lm constant_tsc\narch_perfmon pebs bts rep_good pni\nmonitor  ds_cpl vmx est tm2 ssse3 cx16\n  xtpr lahf_lm ida<\/pre>\n

\u57fa\u4e8e AMD \u5904\u7406\u5668\u7684\u7cfb\u7edf\uff0c\u8fd0\u884c grep svm \/proc\/cpuinfo \u67e5\u627e CPU flags \u662f\u5426\u5305\u62ec svm \u5173\u952e\u8bcd
# grep svm \/proc\/cpuinfo<\/pre>\n

\u6ce8 : \u4e00\u4e9b\u5382\u5546\u7981\u6b62\u4e86\u673a\u5668 BIOS \u4e2d\u7684 VT \u9009\u9879 , \u8fd9\u79cd\u65b9\u5f0f\u4e0b VT \u4e0d\u80fd\u88ab\u91cd\u65b0\u6253\u5f00\u3002
\u6ce8\u610f\uff1a\/proc\/cpuinfo \u4ec5\u4ece Linux 2.6.15(Intel) \u548c Linux 2.6.16(AMD) \u5f00\u59cb\u663e\u793a\u865a\u62df\u5316\u65b9\u9762\u7684\u4fe1\u606f\u3002\u8bf7\u4f7f\u7528 uname -r \u547d\u4ee4\u67e5\u8be2\u60a8\u7684\u5185\u6838\u7248\u672c\u3002\u5982\u6709\u7591\u95ee\uff0c\u8bf7\u8054\u7cfb\u786c\u4ef6\u5382\u5546\u3002
2\u3001\u68c0\u67e5BIOS\uff0c\u786e\u4fddBIOS\u91cc\u5f00\u542fVT\u9009\u9879:
Intel(R) Virtualization Tech [Enabled]
\u5982\u6709\u5fc5\u8981\uff0c\u8fd8\u9700\u5728BIOS\u4e2d\u5f00\u542fVT\u5e76\u91cd\u542f\u673a\u5668\u3002
3\u3001\u4ece\u672c\u5730\u5149\u76d8\uff08\u628advd\u5149\u76d8\u914d\u7f6e\u4e3ayum\u672c\u5730\u5e93\u7684\u65b9\u6cd5\uff09\u67e5\u8be2\u3001\u5b89\u88c5\u8f6f\u4ef6\u5305
\n\u67e5\u8be2\uff1a\nyum --disablerepo=\ --enablerepo=c6-media groupinfo Virtualization\nyum --disablerepo=\<\/em> --enablerepo=c6-media groupinfo 'Virtualization Client'\n\u5b89\u88c5\uff1a\nyum --disablerepo=\ --enablerepo=c6-media groupinstall Virtualization\nyum --disablerepo=\<\/em> --enablerepo=c6-media groupinstall 'Virtualization Client'\n<\/pre>\n
group\u7684\u540d\u5b57\u4e0d\u5206\u5927\u5c0f\u5199\u3002

Virtualization\u5404\u5de5\u5177\u5305\u5185\u5bb9\u5982\u4e0b\u8868\u6240\u793a\uff1a

\"\"<\/p>\n

\u4e3b\u673a\u80fd\u8054\u4e92\u8054\u7f51\u7684\uff0c\u76f4\u63a5\u7528\u6307\u4ee4\uff1a

yum groupinstall Virtualization 'Virtualization  Client'<\/pre>\n
\u6765\u5b8c\u6210\u5b89\u88c5\u3002

\u8f83\u4f4e\u7248\u672c\u7684\u7cfb\u7edf\uff0c\u5982Redhat\/CentOS5.6\u7684\uff0c\u4f7f\u7528\u6307\u4ee4\uff1a
yum –disablerepo=\ –enablerepo=c5-media groupinstall kvm

3\u3001\u5b89\u88c5api\u652f\u6301

yum –disablerepo=\<\/em> –enablerepo=c6-media install libvirt
service libvirtd start

4\u3001\u9a8c\u8bc1\u662f\u5426\u5df2\u7ecf\u8f7d\u5165KVM\u6a21\u5757
# lsmod | grep kvm\nkvm_intel              50380  3\nkvm                   305081  1 kvm_intel\n#ll \/dev\/kvm\ncrw-rw-rw-+ 1 root kvm 10, 232 May  4 16:06 \/dev\/kvm<\/pre>\n
\u81f3\u6b64\uff0c\u4e3b\u673a\u7684KVM\u529f\u80fd\u5df2\u7ecf\u5177\u5907\uff0c\u53ef\u4ee5\u5b89\u88c5\u5ba2\u6237\u64cd\u4f5c\u7cfb\u7edf\u4e86\u3002


\u5b89\u88c5\u5ba2\u6237\u673a\u64cd\u4f5c\u7cfb\u7edf<\/span>\n

\u5b89\u88c5\u5ba2\u6237\u673a\u64cd\u4f5c\u7cfb\u7edf\u4e24\u79cd\u65b9\u5f0f\uff0c\u4e00\u79cd\u901a\u8fc7\u6bcd\u673aGUI\u7684\u865a\u62df\u673a\u7ba1\u7406\u7a0b\u5e8fvirt-manager\uff0c\u4e00\u79cd\u901a\u8fc7\u6bcd\u673a\u547d\u4ee4\u884cvirt-install\u5de5\u5177\u3002

\u547d\u4ee4\u884c\u65b9\u5f0f\uff1a
#virt-install \\n    --name=v1\n    --ram=512\n    --vcpus=1\n    --cdrom=\/media\/CentOS_6.2_final.iso\n    --os-type=rhel6  \n    --disk \/var\/lib\/libvirt\/imgages\/v1.img,size=8,bus=virtio,cache=writeback  \n    --network bridge=br0,model=virtio<\/pre>\n

\u4e0b\u9762\u5bf9\u4e0a\u9762\u7684\u547d\u4ee4\u8fdb\u884c\u89e3\u8bfb

–name    \u7ed9\u865a\u62df\u673a\u8d77\u4e2a\u540d\u5b57
–ram     \u5206\u914d\u7ed9\u865a\u62df\u673a\u7684\u5185\u5b58\uff0c\u5355\u4f4dMB
–vcpus   \u5206\u914d\u7ed9\u865a\u62df\u673a\u7684cpu\u4e2a\u6570
–cdrom   \u6307\u5b9a\u5b89\u88c5\u6587\u4ef6\u7684\u5168\u8def\u5f84
–disk    \u6307\u5b9a\u865a\u62df\u673aimg\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u865a\u62df\u673a\u4f7f\u7528lvm\u5206\u533a\uff0c\u8fd9\u91cc\u5c31\u6307\u5411\u5230lvm\u7684\u5206\u533a\u5c31\u884c
    size      \u865a\u62df\u673a\u6587\u4ef6\u5927\u5c0f\uff0c\u5355\u4f4dGB
    bus       \u865a\u62df\u673a\u78c1\u76d8\u4f7f\u7528\u7684\u603b\u7ebf\u7c7b\u578b\uff0c\u4e3a\u4e86\u4f7f\u865a\u62df\u673a\u8fbe\u5230\u597d\u7684\u6027\u80fd\uff0c\u8fd9\u91cc\u4f7f\u7528virtio
    cache     \u865a\u62df\u673a\u78c1\u76d8\u7684cache\u7c7b\u578b
–network bridge    \u6307\u5b9a\u6865\u63a5\u7f51\u5361
    model  \u7f51\u5361\u6a21\u5f0f\uff0c\u8fd9\u91cc\u4e5f\u662f\u4f7f\u7528\u6027\u80fd\u66f4\u597d\u7684virtio
–graphics         \u56fe\u5f62\u53c2\u6570 

\u53ef\u4ee5\u7528man virt-install \u6307\u4ee4\u67e5\u770b\u5e2e\u52a9\uff0c\u6700\u540e\u6709\u5f88\u591a\u793a\u4f8b\u3002

GUI\u65b9\u5f0f\uff1a\u8fdc\u7a0b\u64cd\u4f5c\u9700\u8981VNC\u652f\u6301\uff0c\u89c1\u4e0b\u6587\u3002
\u6253\u5f00\u83dc\u5355Applications->System Tools->Virtual Machine Management
\u70b9\u51fb\u56fe\u6807Create a new virtual machine
\u6309\u7167\u987a\u5e8f\u8bbe\u7f6e\u865a\u62df\u673a\u540d\u79f0\u3001CPU\uff0c\u5185\u5b58\uff0c\u78c1\u76d8\uff0c\u7f51\u7edc\u7b49\u3002
\u4e94\u4e2a\u8bbe\u7f6e\u6b65\u9aa4\u5b8c\u6210\u540e\uff0c\u4ecd\u7136\u53ef\u4ee5\u4fee\u6539\u865a\u62df\u673a\u7684\u914d\u7f6e\u4fe1\u606f\u3002
\u81f3\u6b64\uff0c\u6574\u4e2a\u865a\u62df\u673a\u5b89\u88c5\u8fc7\u7a0b\u5b8c\u6210\u3002

\u57fa\u4e8eKVM\u5efa\u7acb\u7684\u865a\u62df\u673a\u76f8\u5173\u6587\u4ef6\u9ed8\u8ba4\u5b58\u653e\u4f4d\u7f6e
kvm\u865a\u62df\u673a\u914d\u7f6e\u6587\u4ef6\u4f4d\u7f6e\uff1a\/etc\/libvirt\/qemu\/      
kvm\u865a\u62df\u673a\u6587\u4ef6\u4f4d\u7f6e\uff1avar\/lib\/libvirt\/images\/   



2. \u5b89\u88c5\u914d\u7f6eVNC\u8fdc\u7a0b\u63a7\u5236<\/span>\n



\u4ee5\u4e0b\u4fe1\u606f\u53c2\u8003 http:\/\/blog.haohtml.com\/archives\/12281<\/a> \u6839\u636e\u5b9e\u9645\u60c5\u51b5\u7565\u505a\u6539\u52a8\u3002

\u9996\u5148\u5fc5\u987b\u6709X-Window\u548c\u684c\u9762\u73af\u5883\u3002\u5982\u679c\u6ca1\u6709\u7684\u8bdd\uff0c\u5148\u5b89\u88c5\u3002

yum groupinstall \"X Window System\" \"GNOME Desktop Environment\"\nyum -y install fonts-chinese firefox<\/pre>\n

\u5fc5\u987b\u660e\u767d\uff1avncserver\u5728\u8c03\u7528\u7684\u65f6\u5019\uff0c\u4f1a\u6839\u636e\u4f60\u7684\u914d\u7f6e\u6765\u542f\u7528server\u7aef\u7684\u76d1\u542c\u7aef\u53e3\uff0c
\u7aef\u53e3\u9ed8\u8ba4\u662f\u4ece5900\u5f00\u59cb\uff0c\u518d\u52a0\u4e0a\u4f60\u7684\u684c\u9762\u53f7\u3002
\u6bd4\u5982\u4f60\u7684\u684c\u9762\u53f7\u4e3a1\uff0c\u5219vnc\u7684\u8fde\u63a5\u7aef\u53e3\u53f7\u4e3a5900+1=5901
\u6bd4\u5982\u4f60\u7684\u684c\u9762\u53f7\u4e3a10000\uff0c\u5219vnc\u7684\u8fde\u63a5\u7aef\u53e3\u53f7\u4e3a5900+10000=15900
======================================================================
\u4e0b\u9762\u914d\u7f6eVNC\u670d\u52a1\u5668\uff0c\u4f7f\u7528\u6237\uff08root\uff09\u80fd\u591f\u901a\u8fc7vnc\u5ba2\u6237\u7aef\u8fdc\u7a0b\u8fde\u63a5\u5230linux\u7cfb\u7edf\u7684\u56fe\u5f62\u754c\u9762(\u524d\u63d0\u662f\u4f60\u7684\u670d\u52a1\u5668\u8981\u5b89\u88c5\u684c\u9762)

1\u3001\u68c0\u67e5linux\u7cfb\u7edf\u662f\u5426\u5b89\u88c5VNC
\u5728\u7ec8\u7aef\u7a97\u53e3\u8f93\u5165\u547d\u4ee4\uff1a

rpm -q vnc-server<\/pre>\n

\u8fd4\u56de\u4fe1\u606f\u5982\u4e0bpackage vnc-server is not installed \u8bf4\u660evnc\u670d\u52a1\u5668\u6ca1\u6709\u5b89\u88c5

2\u3001\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\u8fdb\u884c\u5b89\u88c5\uff1a
[\/code]yum install vnc vnc-server[\/code]

3\u3001\u542f\u52a8VNC\u670d\u52a1
vncserver\nYou will require a password to access your desktops.\nPassword:\nVerify:<\/pre>\n

\u4f1a\u63d0\u793a\u8f93\u5165\u5bc6\u7801\uff0c\u8fd9\u4e2a\u5bc6\u7801\u662f\u8fdc\u7a0b\u767b\u5f55\u65f6\u6240\u9700\u8981\u8f93\u5165\u7684\u5bc6\u7801\uff0c\u8f93\u5165\u5bc6\u7801\uff0c\u56de\u8f66
4\u3001\u5207\u6362\u5230root\u8d26\u53f7:su root\u7136\u540e\u8f93\u5165root\u8d26\u53f7\u7684\u5bc6\u7801
\nvi \/etc\/sysconfig\/vncservers  #vnc\u914d\u7f6e\u6587\u4ef6\nVNCSERVERS=\"10000:root\"  # \u628a\u524d\u9762\u7684#\u53d6\u6d88\u4e86   10000:root \uff08\u684c\u9762\u53f7:\u7528\u6237\uff09<\/p>\n
VNCSERVERARGS[2]=\"-geometry 800x600 -nolisten tcp -localhost\"<\/pre><\/h1>\n


\u6700\u540e\u4fdd\u5b58\u9000\u51fa
5\u3001\u914d\u7f6e\u9632\u706b\u5899\uff0c\u5141\u8bb810000+5900=15900\u7aef\u53e3\u901a\u8fc7\u9632\u706b\u5899\uff08\u5426\u5219\u8fdc\u7a0b\u8fde\u4e0d\u4e0aVNC\u670d\u52a1\u5668\uff09
\nvi \/etc\/sysconfig\/iptables\n-A INPUT -m state --state NEW -m tcp -p tcp --dport 15900 -j ACCEPT\uff08\u5141\u8bb815900\u7aef\u53e3\u901a\u8fc7\u9632\u706b\u5899\uff09\n<\/pre>\n
\u4fdd\u5b58\u9000\u51fa
6\u3001\u91cd\u542fvnc\u670d\u52a1\u5668
service vncserver restart<\/pre>\n

7\u3001\u91cd\u542f\u9632\u706b\u5899\uff0c\u4f7f\u521a\u624d\u7684\u7aef\u53e3\u914d\u7f6e\u751f\u6548
\n\/etc\/init.d\/iptables restart\n\u6216 service iptables restart\n<\/pre>\n
8\u3001 \u8bbe\u7f6evnc\u670d\u52a1\u5668\u5f00\u673a\u81ea\u52a8\u542f\u52a8
hkconfig vncserver on\nchkconfig --list vncserver\nvncserver       0:off   1:off   2:on    3:on    4:on    5:on    6:off\n<\/pre>\n
9\u3001\u66f4\u6539vnc\u8fde\u63a5\u5bc6\u7801
vncpasswd
\u5230\u6b64\uff0cVNC\u670d\u52a1\u7aef\u8bbe\u7f6e\u5b8c\u6210\uff0c\u7528VNC\u5ba2\u6237\u7aef\u53ef\u4ee5\u8fde\u63a5\u4e86
vnc\u670d\u52a1\u5668\uff1a\u4f60\u7684ip:15900

\u6ce8\u610f\uff1a\u5982\u679c\u5728\u8fde\u63a5\u4e0a\u4e4b\u540e\uff0c\u51fa\u73b0\u7070\u5c4f\uff0c\u53ef\u4ee5\u6309\u7167\u4e0b\u9762\u7684\u65b9\u6cd5\u8bbe\u7f6e
\u8fdb\u5165\u7528\u6237\u7684home\u76ee\u5f55, cd \/home\/user
\u5982\u679c\u662f\u7528root\u8d26\u53f7\u767b\u5f55\u7684\uff0c\u90a3\u4e48\u5f53\u524d\u76ee\u5f55\u5c31\u662f\u7528\u6237\u6839\u76ee\u5f55
\ncd ~\/.vnc\nvi xstartup  #\u7f16\u8f91\n#twm &    #\u6ce8\u91ca\u6389\u8fd9\u4e00\u884c\ngnome-session &   #\u6dfb\u52a0\u8fd9\u4e00\u884c\n<\/pre>\n
\u4fdd\u5b58\u9000\u51fa\u5373\u53ef\u6b63\u5e38\u8fde\u63a5\uff01

\u505a\u5230\u8fd9\u91ccVNC Server\uff0c\u63a5\u4e0b\u6765\u4f60\u53ef\u4ee5\u7528http:\/\/IP:port\u7684\u65b9\u5f0f\u6765WEB\u767b\u5f55\u6bd4\u5982\u8bf4
http:\/\/IP:5801,\u4e5f\u53ef\u4ee5\u5728vncviewer\u91cc\u7528IP:1\u8fd9\u79cd\u6765\u767b\u5f55<\/a>\u3002
\u4f46\u6211\u9009\u62e9\u7684\u65b9\u5f0f\u662f\u4e0b\u8f7dvnc viewer\u5ba2\u6237\u7aef\u3002\u4e0b\u8f7d\u5730\u5341\uff1a http:\/\/www.realvnc.com\/download\/viewer\/<\/a>


3. \u5728KVM\u865a\u62df\u673a\u5b89\u88c5CentOS 6 <\/span>\n


\u6709\u4e86VNC\u8fdc\u7a0b\u684c\u9762\uff0c\u5c31\u53ef\u4ee5\u6bd4\u8f83\u65b9\u4fbf\u7684\u5728\u56fe\u578b\u754c\u9762\u4e2d\uff0c\u4e3a\u865a\u62df\u673a\u5b89\u88c5\u64cd\u4f5c\u7cfb\u7edf\u4e86\u3002
\u8fc7\u7a0b\u4e0d\u518d\u8be6\u8ff0\uff0c\u4e0e\u666e\u901a\u5b89\u88c5\u6ca1\u4ec0\u4e48\u5dee\u5f02\u3002
\"\"<\/p>\n

4. NAT\u7f51\u7edc\u914d\u7f6e<\/span>\n
\u865a\u62df\u673a\u4e2d\u8bbe\u7f6e\uff1a
\"\"<\/p>\n

\u56de\u5230\u4e3b\u673assh\uff0c\u770b\u5230\u6709virbr0\u63a5\u53e3\u3002\u9ed8\u8ba4ip 192.168.1.1\/24\u3002\u8fd9\u4e3b\u673a\u865a\u62df\u673a\u652f\u6301\u6a21\u5757\u5b89\u88c5\u65f6\u4ea7\u751f\u7684\u865a\u62df\u7f51\u7edc\u63a5\u53e3\uff0c\u4e5f\u662f\u4e00\u4e2aswitch\u548cbridge\uff0c\u8d1f\u8d23\u628a\u5185\u5bb9\u5206\u53d1\u5230\u5404\u865a\u62df\u673a\u3002\u4ee5\u6b64\u4f5c\u4e3aNAT\u865a\u62df\u63a5\u53e3\u3002

\n#virsh net-list --all\nName State Autostart<\/h2>\n
default active yes #default\u662f\u5bbf\u4e3b\u673a\u5b89\u88c5\u865a\u62df\u673a\u652f\u6301\u6a21\u5757\u7684\u65f6\u5019\u81ea\u52a8\u5b89\u88c5\u7684\u3002<\/p>\n
#ifconfig\nvirbr0    Link encap:Ethernet  HWaddr 52:54:00:2A:C3:56\n          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0\n          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1\n          RX packets:360864 errors:0 dropped:0 overruns:0 frame:0\n          TX packets:429799 errors:0 dropped:0 overruns:0 carrier:0\n          collisions:0 txqueuelen:0\n          RX bytes:45356208 (43.2 MiB)  TX bytes:250577187 (238.9 MiB)\n<\/pre>\n

NAT\u539f\u7406\u3002
\"\"<\/p>\n

virbr0\u662f\u4e00\u4e2a\u6865\u63a5\u5668\uff0c\u63a5\u6536\u6240\u6709\u5230\u7f51\u7edc192.168.1.*\u7684\u5185\u5bb9\u3002\u4ece\u4e0b\u9762\u547d\u4ee4\u53ef\u4ee5\u9a8c\u8bc1\uff1a
<\/p>\n
brctl show<\/h1>\n
bridge name     bridge id               STP enabled     interfaces\nvirbr0          8000.525400b9b096       yes             virbr0-nic<\/p>\n
route<\/h1>\n
Kernel IP routing table\nDestination     Gateway         Genmask         Flags Metric Ref    Use Iface\n192.168.1.0                  255.255.255.0   U     0      0        0 virbr0\n<\/pre>\n

\u540c\u65f6\uff0c\u865a\u62df\u673a\u652f\u6301\u6a21\u5757\u4f1a\u4fee\u6539iptables\u89c4\u5219\uff0c\u901a\u8fc7\u547d\u4ee4\u53ef\u4ee5\u67e5\u770b\uff1a
# iptables -t nat -L -nv\nChain PREROUTING (policy ACCEPT 16924 packets, 2759K bytes)\npkts bytes target     prot opt in     out     source               destination\nChain POSTROUTING (policy ACCEPT 2009 packets, 125K bytes)\npkts bytes target     prot opt in     out     source               destination        \n421 31847 MASQUERADE  all  --  <\/em>      *       192.168.1.0\/24    !192.168.1.0\/24   ----------->\u8fd9\u6761\u662f\u5173\u952e\uff0c\u5b83\u914d\u7f6e\u4e86NAT\u529f\u80fd\u3002\nChain OUTPUT (policy ACCEPT 2011 packets, 125K bytes)\npkts bytes target     prot opt in     out     source               destination        \n    <\/p>\n
iptables -t filter -L -nv<\/h1>\n
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)\npkts bytes target     prot opt in     out     source               destination        \n1    74 ACCEPT     udp  --  virbr0        0.0.0.0\/0            0.0.0.0\/0           udp dpt:53    ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n0     0 ACCEPT     tcp  --  virbr0 <\/em>       0.0.0.0\/0            0.0.0.0\/0           tcp dpt:53    ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n3   984 ACCEPT     udp  --  virbr0        0.0.0.0\/0            0.0.0.0\/0           udp dpt:67    ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n0     0 ACCEPT     tcp  --  virbr0 <\/em>       0.0.0.0\/0            0.0.0.0\/0           tcp dpt:67    ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n178K  195M ACCEPT     all  --        <\/em>       0.0.0.0\/0            0.0.0.0\/0           state RELATED,ESTABLISHED    ---->iptables\u7684\u7cfb\u7edf\u9884\u8bbe\n2   168 ACCEPT     icmp --        <\/em>       0.0.0.0\/0            0.0.0.0\/0                ---->iptables\u7684\u7cfb\u7edf\u9884\u8bbe\n1148  216K ACCEPT     all  --  lo            0.0.0.0\/0            0.0.0.0\/0                ---->iptables\u7684\u7cfb\u7edf\u9884\u8bbe\n1    60 ACCEPT     tcp  --  <\/em>             0.0.0.0\/0            0.0.0.0\/0           state NEW tcp dpt:22  ---->iptables\u7684\u7cfb\u7edf\u9884\u8bbe\n16564 2721K REJECT     all  --  <\/em>             0.0.0.0\/0            0.0.0.0\/0           reject-with icmp-host-prohibited ---->iptables\u7684\u7cfb\u7edf\u9884\u8bbe\nChain FORWARD (policy ACCEPT 0 packets, 0 bytes)\npkts bytes target     prot opt in     out     source               destination        \n3726 3485K ACCEPT     all  --  <\/em>      virbr0  0.0.0.0\/0            192.168.1.0\/24    state RELATED,ESTABLISHED  ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n3491  399K ACCEPT     all  --  virbr0        192.168.1.0\/24     0.0.0.0\/0                ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n0     0 ACCEPT     all  --  virbr0 virbr0  0.0.0.0\/0            0.0.0.0\/0                ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n0     0 REJECT     all  --  <\/em>      virbr0  0.0.0.0\/0            0.0.0.0\/0           reject-with icmp-port-unreachable  ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n0     0 REJECT     all  --  virbr0        0.0.0.0\/0            0.0.0.0\/0           reject-with icmp-port-unreachable  ---->\u7531libvirt\u811a\u672c\u81ea\u52a8\u5199\u5165\n0     0 REJECT     all  --  <\/em>      *       0.0.0.0\/0            0.0.0.0\/0           reject-with icmp-host-prohibited  ---->iptables\u7684\u7cfb\u7edf\u9884\u8bbe\nChain OUTPUT (policy ACCEPT 181K packets, 138M bytes)\npkts bytes target     prot opt in     out     source               destination<\/pre>\n

\u5982\u679c\u6ca1\u6709default\u7684\u8bdd\uff0c\u6216\u8005\u9700\u8981\u6269\u5c55\u81ea\u5df1\u7684\u865a\u62df\u7f51\u7edc\uff0c\u53ef\u4ee5\u4f7f\u7528\u547d\u4ee4\u91cd\u65b0\u5b89\u88c5NAT\u3002

\u4fee\u6539\/etc\/sysctl.conf\u4e2d\u53c2\u6570\uff0c\u5141\u8bb8ip\u8f6c\u53d1\uff1a

[root@VM2CentOS www.esojourn.org]# vim \/etc\/sysctl.conf\nnet.ipv4.ip_forward=1<\/pre>\n

\u8fdb\u5165\u865a\u62df\u673a\uff0c\u8bbe\u7f6e\u9759\u6001IP\uff0chostname
\n[root@VM2CentOS www.esojourn.org]# vim \/etc\/sysconfig\/network-scripts\/ifcfg-eth0<\/p>\n
DEVICE=\"eth0\"\nBOOTPROTO=\"static\"\nHWADDR=\"52:54:00::<\/strong>:**\"\nNM_CONTROLLED=\"yes\"\nONBOOT=\"yes\"\nTYPE=\"Ethernet\"\nUUID=\"426b9729-0d2c-41aa-a29c-....\"\nIPADDR=192.168.1.3\nNETMASK=255.255.255.0\nGATEWAY=192.168.1.1<\/p>\n
[root@VM2CentOS www.esojourn.org]# vim \/etc\/sysconfig\/network<\/p>\n
NETWORKING=yes\nHOSTNAME=VM2CentOS<\/p>\n
\n
[root@VM2CentOS www.esojourn.org]# ping 8.8.8.8<\/dt>\n
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.<\/dt>\n
64 bytes from 8.8.8.8: icmp_seq=1 ttl=45 time=34.6 ms<\/dt>\n
64 bytes from 8.8.8.8: icmp_seq=2 ttl=45 time=40.1 ms<\/dt>\n
64 bytes from 8.8.8.8: icmp_seq=3 ttl=45 time=36.7 ms<\/dt>\n
64 bytes from 8.8.8.8: icmp_seq=4 ttl=45 time=38.0 ms<\/dt>\n
<\/pre><\/dt>\n

\u7f51\u7edc\u5df2\u7ecf\u914d\u901a\u3002

\u66f4\u8be6\u7ec6\u7684\u53c2\u8003
NAT\uff1ahttp:\/\/blog.csdn.net\/samlei\/article\/details\/7598700<\/a>
Bridge:http:\/\/blog.csdn.net\/samlei\/article\/details\/7598541<\/a>


5. \u4f7f\u7528iptables\u9632\u706b\u5899\u914d\u7f6e\uff0cSSH\uff0cFTP<\/span><\/dt>\n

FTP\u7684\u8bbe\u7f6e\u3001\u5b89\u88c5\u89c1\u672c\u6587<\/a><\/dt>\n


\u91c7\u7528NAT\u65b9\u5f0f\uff0c\u5404\u865a\u62df\u673a\u5206\u914d\u5730\u5740\u4e3a192.168.1.2\uff0c192.168.1.3\u7b49\u3002\u4e0a\u6587libvirt\u81ea\u52a8\u52a0\u5165\u811a\u672c\u89c4\u5219\u540e\uff0c\u4ece\u865a\u62df\u673a\u5df2\u7ecf\u53ef\u4ee5\u8bbf\u95ee\u516c\u7f51\u3002\u4f46\u56e0\u4e3a\u672c\u673a\u6ca1\u6709\u516c\u7f51IP\uff0c\u6240\u4ee5\u4ece\u516c\u7f51\u8fd8\u65e0\u6cd5\u8bbf\u95ee\u865a\u62df\u673a\u3002\u9700\u8981\u4f7f\u7528IP\u8f6c\u53d1\uff0c\u8bbf\u95ee\u865a\u62df\u5185\u7f51\u4e3b\u673a\u3002

iptables\u7684\u8bbe\u7f6e<\/strong><\/dt>\n

\u8fd9\u662f\u6bd4\u8f83\u8d39\u52b2\u7684\u4e00\u6b65\u3002\u9700\u8981\u4e00\u4e9biptables\u548croute\u57fa\u7840\u77e5\u8bc6\u3002\u4e0d\u591a\u89e3\u91ca\u4e86\u3002
\u628a\u6211\u7684\u6848\u4f8b\u8d34\u51fa\u6765\u3002\u8fd9\u4e1c\u897f\u4e0d\u80fd\u7167\u6284\u3002\u4e5f\u5343\u4e07\u522b\u56fe\u7701\u4e8b\u7528setup\u4e4b\u7c7b\u7684\u56fe\u5f62\u754c\u9762\u6765\u914d\u7f6eiptables\u3002
GUI\u91cc\u505a\u914d\u7f6e\uff0c\u4f1a\u628a\u539f\u6765\u624b\u5de5\u5199\u7684\u89c4\u5219\u90fd\u8986\u76d6\u6389\u3002
\u6211\u5c31\u5e72\u8fc7\u51e0\u6b21\u8fd9\u79cd\u50bb\u4e8b\u3002\u5e72\u5b8c\u4e86\u8fd8\u4e0d\u77e5\u9053\u4e3a\u5565\u5168\u4e71\u4e86\u3002

# Generated by iptables-save v1.4.7 on Fri Sep 14 17:42:48 2012<\/dt>\n
#<\/dt>\n
*mangle<\/dt>\n
PREROUTING ACCEPT [1663:135619]<\/dd>\n
INPUT ACCEPT [1649:135083]<\/dd>\n
FORWARD ACCEPT [3:152]<\/dd>\n
OUTPUT ACCEPT [1243:91918]<\/dd>\n
POSTROUTING ACCEPT [1262:96750]\n-A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill\nCOMMIT<\/dd>\n
*filter<\/dt>\n
INPUT ACCEPT [0:0]<\/dd>\n
FORWARD ACCEPT [0:0]<\/dd>\n
OUTPUT ACCEPT [81:6315]\n-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT\n-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT\n-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT\n-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT<\/dd>\n<\/dl>\n
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A INPUT -p icmp -j ACCEPT\n-A INPUT -i lo -j ACCEPT\n-A INPUT -p tcp -m state --state NEW -m tcp --dport 53 -j ACCEPT\n-A INPUT -p udp -m state --state NEW -m udp --dport 53 -j ACCEPT\n-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT\n-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT\n-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT\n-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT\n#vnc server\n-A INPUT -p tcp -m state --state NEW -m tcp --dport 33900 -j ACCEPT<\/p>\n
-A INPUT -j REJECT --reject-with icmp-host-prohibited<\/p>\n
-A FORWARD -d 192.168.1.0\/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A FORWARD -s 192.168.1.0\/24 -i virbr0 -j ACCEPT\n#-A FORWARD -i virbr0 -o virbr0 -j ACCEPT\n#-A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable\n#-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable<\/p>\n
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A FORWARD -p icmp -j ACCEPT\n-A FORWARD -i lo -j ACCEPT\n-A FORWARD -d 192.168.1.2\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT\n-A FORWARD -d 192.168.1.3\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT\n-A FORWARD -d 192.168.1.2\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT\n-A FORWARD -d 192.168.1.3\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT<\/p>\n
-A FORWARD -d 192.168.1.2\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 20 -j ACCEPT\n-A FORWARD -d 192.168.1.3\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 20 -j ACCEPT<\/p>\n
-A FORWARD -d 192.168.1.3\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT<\/p>\n
ftp passive port<\/h1>\n
-A FORWARD -d 192.168.1.2\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 60200:60299 -j ACCEPT\n-A FORWARD -d 192.168.1.3\/32 -i eth+ -p tcp -m state --state NEW -m tcp --dport 60300:60399 -j ACCEPT\n-A FORWARD -j REJECT --reject-with icmp-host-prohibited\nCOMMIT<\/p>\n
Completed on Fri Sep 14 17:42:48 2012<\/h1>\n
Generated by iptables-save v1.4.7 on Fri Sep 14 17:42:48 2012<\/h1>\n
\n
*nat<\/dt>\n
PREROUTING ACCEPT [11:808]<\/dd>\n
POSTROUTING ACCEPT [8:566]<\/dd>\n
OUTPUT ACCEPT [6:466]\n-A PREROUTING -i eth+ -p tcp -m tcp --dport 11256 -j DNAT --to-destination 192.168.1.2:22\n-A PREROUTING -i eth+ -p tcp -m tcp --dport 11356 -j DNAT --to-destination 192.168.1.3:22\n-A PREROUTING -i eth+ -p tcp -m tcp --dport 11221 -j DNAT --to-destination 192.168.1.2:21\n-A PREROUTING -i eth+ -p tcp -m tcp --dport 11321 -j DNAT --to-destination 192.168.1.3:21\n-A PREROUTING -i eth+ -p tcp -m tcp --dport 11220 -j DNAT --to-destination 192.168.1.2\n-A PREROUTING -i eth+ -p tcp -m tcp --dport 11320 -j DNAT --to-destination 192.168.1.3<\/dd>\n<\/dl>\n
#MySQL\n#-A PREROUTING -i eth+ -p tcp -m tcp --dport 13306 -j DNAT --to-destination 192.168.1.3:3306<\/p>\n
-A PREROUTING -i eth+ -p tcp -m tcp --dport 60200:60299 -j DNAT --to-destination 192.168.1.2\n-A PREROUTING -i eth+ -p tcp -m tcp --dport 60300:60399 -j DNAT --to-destination 192.168.1.3<\/p>\n
-A POSTROUTING -s 192.168.1.0\/24 ! -d 192.168.1.0\/24 -p tcp -j MASQUERADE --to-ports 1024-65535\n-A POSTROUTING -s 192.168.1.0\/24 ! -d 192.168.1.0\/24 -p udp -j MASQUERADE --to-ports 1024-65535\n-A POSTROUTING -s 192.168.1.0\/24 ! -d 192.168.1.0\/24 -j MASQUERADE<\/p>\n
COMMIT<\/p>\n
Completed on Fri Sep 14 17:42:48 2012<\/h1>\n
<\/pre>\n

FTP\u8bbe\u7f6e<\/strong>\n
vi \/etc\/vsftpd\/vsftpd.conf \u8bbe\u7f6e\u56fa\u5b9a\u7684\u88ab\u52a8\u94fe\u63a5\u7aef\u53e3\u3002\u8fd9\u6837\u6bd4\u8f83\u5bb9\u6613\u914d\u5408\u9632\u706b\u5899\u6253\u5f00\u7aef\u53e3\u3002
\u89c1\u4e0a\u6587# ftp passive port
-A FORWARD -d 192.168.1.2\/32 -i eth+ -p tcp -m state –state NEW -m tcp –dport 60200:60299 -j ACCEPT
-A FORWARD -d 192.168.1.3\/32 -i eth+ -p tcp -m state –state NEW -m tcp –dport 60300:60399 -j ACCEPT

pasv_enable=YES\npasv_min_port=60000\npasv_max_port=60100\npasv_address=0.0.0.0<\/pre>\n


6. \u4f7f\u7528\u53cd\u5411\u4ee3\u7406(reverse proxy)\u914d\u7f6eWeb server<\/span>\n
\u56e0\u4e3a\u6ca1\u6709\u8db3\u591f\u7684IP\u5730\u5740\u5206\u7ed9\u6bcf\u4e2a\u865a\u62df\u673a\uff0c\u6211\u4eec\u53ea\u80fd\u6240\u6709\u57df\u540d\u90fd\u8bbe\u6210\u4e3b\u673a\u7684IP\u5730\u5740\u3002\u518d\u7531\u53cd\u5411\u4ee3\u7406\u6765\u9009\u62e9\uff0c\u6bcf\u4e2a\u57df\u540d\u8bbf\u95ee\uff0c\u5e94\u8be5\u5bf9\u5e94\u54ea\u4e2a\u865a\u62df\u673a\u3002\u539f\u6765\u8003\u8651\u76f4\u63a5\u7528iptables\u60f3\u529e\u6cd5\u68c0\u67e5\u57df\u540d\uff0c\u7136\u540e\u518d\u8f6c\u53d1\u5230VM\u7684\u5185\u7f51\u5730\u5740\u3002\u4f46\u56e0\u4e3aiptables\u76f4\u63a5\u68c0\u67e5\u6570\u636e\u5305\uff0c\u83b7\u5f97\u57df\u540d\u4f3c\u4e4e\u6709\u56f0\u96be\u3002\u540e\u6765\u6539\u4e3a\u53cd\u5411\u4ee3\u7406\u7684\u529e\u6cd5\u3002\u53cd\u5411\u4ee3\u7406\u5e38\u88ab\u7528\u4e8e\u5efa\u7acbweb server\u7f13\u5b58\uff0c\u6216\u8005\u591a\u670d\u52a1\u5668\u8d1f\u8f7d\u5747\u8861\u3002

\u6bd4\u8f83\u6d41\u884c\u7684\u53cd\u5411\u4ee3\u7406\u8f6f\u4ef6\u6709squid, ngix, apache\u3002\u56e0\u4e3a\u8fd9\u91cc\u5e76\u4e0d\u9700\u8981\u5efa\u7acb\u7f13\u5b58\uff0c\u6240\u4ee5\u6211\u6392\u9664\u4e86squid\uff0c\u6700\u7ec8\u9009\u62e9\u4e86\u6bd4\u8f83\u719f\u6089\u7684apache\u3002

<\/div><\/p>\n
http:\/\/man.chinaunix.net\/newsoft\/Apache2.2_chinese_manual\/mod\/mod_proxy.html
Apache\u53ef\u4ee5\u88ab\u914d\u7f6e\u4e3a\u6b63\u5411(forward)\u548c\u53cd\u5411(reverse)\u4ee3\u7406\u3002

\u6b63\u5411\u4ee3\u7406\u662f\u4e00\u4e2a\u4f4d\u4e8e\u5ba2\u6237\u7aef\u548c\u539f\u59cb\u670d\u52a1\u5668(origin server)\u4e4b\u95f4\u7684\u670d\u52a1\u5668\uff0c\u4e3a\u4e86\u4ece\u539f\u59cb\u670d\u52a1\u5668\u53d6\u5f97\u5185\u5bb9\uff0c\u5ba2\u6237\u7aef\u5411\u4ee3\u7406\u53d1\u9001\u4e00\u4e2a\u8bf7\u6c42\u5e76\u6307\u5b9a\u76ee\u6807(\u539f\u59cb\u670d\u52a1\u5668)\uff0c\u7136\u540e\u4ee3\u7406\u5411\u539f\u59cb\u670d\u52a1\u5668\u8f6c\u4ea4\u8bf7\u6c42\u5e76\u5c06\u83b7\u5f97\u7684\u5185\u5bb9\u8fd4\u56de\u7ed9\u5ba2\u6237\u7aef\u3002\u5ba2\u6237\u7aef\u5fc5\u987b\u8981\u8fdb\u884c\u4e00\u4e9b\u7279\u522b\u7684\u8bbe\u7f6e\u624d\u80fd\u4f7f\u7528\u6b63\u5411\u4ee3\u7406\u3002

\u6b63\u5411\u4ee3\u7406\u7684\u5178\u578b\u7528\u9014\u662f\u4e3a\u5728\u9632\u706b\u5899\u5185\u7684\u5c40\u57df\u7f51\u5ba2\u6237\u7aef\u63d0\u4f9b\u8bbf\u95eeInternet\u7684\u9014\u5f84\u3002\u6b63\u5411\u4ee3\u7406\u8fd8\u53ef\u4ee5\u4f7f\u7528\u7f13\u51b2\u7279\u6027(\u7531mod_cache\u63d0\u4f9b)\u51cf\u5c11\u7f51\u7edc\u4f7f\u7528\u7387\u3002

\u4f7f\u7528ProxyRequests\u6307\u4ee4\u5373\u53ef\u6fc0\u6d3b\u6b63\u5411\u4ee3\u7406\u3002\u56e0\u4e3a\u6b63\u5411\u4ee3\u7406\u5141\u8bb8\u5ba2\u6237\u7aef\u901a\u8fc7\u5b83\u8bbf\u95ee\u4efb\u610f\u7f51\u7ad9\u5e76\u4e14\u9690\u85cf\u5ba2\u6237\u7aef\u81ea\u8eab\uff0c\u56e0\u6b64\u4f60\u5fc5\u987b\u91c7\u53d6\u5b89\u5168\u63aa\u65bd\u4ee5\u786e\u4fdd\u4ec5\u4e3a\u7ecf\u8fc7\u6388\u6743\u7684\u5ba2\u6237\u7aef\u63d0\u4f9b\u670d\u52a1\u3002

\u53cd\u5411\u4ee3\u7406\u6b63\u597d\u76f8\u53cd\uff0c\u5bf9\u4e8e\u5ba2\u6237\u7aef\u800c\u8a00\u5b83\u5c31\u50cf\u662f\u539f\u59cb\u670d\u52a1\u5668\uff0c\u5e76\u4e14\u5ba2\u6237\u7aef\u4e0d\u9700\u8981\u8fdb\u884c\u4efb\u4f55\u7279\u522b\u7684\u8bbe\u7f6e\u3002\u5ba2\u6237\u7aef\u5411\u53cd\u5411\u4ee3\u7406\u7684\u540d\u5b57\u7a7a\u95f4(name-space)\u4e2d\u7684\u5185\u5bb9\u53d1\u9001\u666e\u901a\u8bf7\u6c42\uff0c\u63a5\u7740\u53cd\u5411\u4ee3\u7406\u5c06\u5224\u65ad\u5411\u4f55\u5904(\u539f\u59cb\u670d\u52a1\u5668)\u8f6c\u4ea4\u8bf7\u6c42\uff0c\u5e76\u5c06\u83b7\u5f97\u7684\u5185\u5bb9\u8fd4\u56de\u7ed9\u5ba2\u6237\u7aef\uff0c\u5c31\u50cf\u8fd9\u4e9b\u5185\u5bb9\u539f\u672c\u5c31\u662f\u5b83\u81ea\u5df1\u7684\u4e00\u6837\u3002

\u53cd\u5411\u4ee3\u7406\u7684\u5178\u578b\u7528\u9014\u662f\u5c06\u9632\u706b\u5899\u540e\u9762\u7684\u670d\u52a1\u5668\u63d0\u4f9b\u7ed9Internet\u7528\u6237\u8bbf\u95ee\u3002\u53cd\u5411\u4ee3\u7406\u8fd8\u53ef\u4ee5\u4e3a\u540e\u7aef\u7684\u591a\u53f0\u670d\u52a1\u5668\u63d0\u4f9b\u8d1f\u8f7d\u5e73\u8861\uff0c\u6216\u4e3a\u540e\u7aef\u8f83\u6162\u7684\u670d\u52a1\u5668\u63d0\u4f9b\u7f13\u51b2\u670d\u52a1\u3002\u53e6\u5916\uff0c\u8fd8\u53ef\u4ee5\u542f\u7528\u9ad8\u7ea7URL\u7b56\u7565\u548c\u7ba1\u7406\u6280\u672f\uff0c\u4ece\u800c\u4f7f\u5904\u4e8e\u4e0d\u540cweb\u670d\u52a1\u5668\u7cfb\u7edf\u7684web\u9875\u9762\u540c\u65f6\u5b58\u5728\u4e8e\u540c\u4e00\u4e2aURL\u7a7a\u95f4\u4e0b\u3002

\u53ef\u4ee5\u4f7f\u7528ProxyPass\u6307\u4ee4\u6fc0\u6d3b\u53cd\u5411\u4ee3\u7406(\u5728RewriteRule\u6307\u4ee4\u4e2d\u4f7f\u7528[P]\u6807\u8bb0\u4e5f\u53ef\u4ee5)\u3002\u914d\u7f6e\u53cd\u5411\u4ee3\u7406\u5e76\u4e0d\u9700\u8981\u6253\u5f00ProxyRequests\u6307\u4ee4\u3002<\/div>\n


\u5b89\u88c5\uff1a
\nyum install libxml2-devel.x86_64\nyum install httpd-devel.x86_64<\/p>\n
wget http:\/\/apache.webthing.com\/mod_proxy_html\/mod_proxy_html.tar.bz2<\/a>\nbunzip2 mod_proxy_html.tar.bz2\ntar -xf mod_proxy_html.tar\ncd mod_proxy_html<\/p>\n
ln -s \/usr\/include\/libxml2\/libxml \/usr\/include\/libxml<\/p>\n
apxs -I \/usr\/include\/libxml -I . -i -c mod_proxy_html.c\nchmod 755 \/usr\/lib64\/httpd\/modules\/mod_proxy_html.so<\/p>\n
apxs -I \/usr\/include\/libxml -I . -i -c mod_xml2enc.c\nchmod 755 \/usr\/lib64\/httpd\/modules\/mod_xml2enc.so\n<\/pre>\n
\u539f\u6587\uff1ahttp:\/\/blog.lordfragger.com\/?p=12<\/a>

reverse proxy\u4e3b\u673a\u914d\u7f6e\u3002\u628awww.esojourn.org\u6307\u5411http:\/\/192.168.1.3\/
\n    ServerAdmin office@esojourn.org\n    ServerName www.esojourn.org\n    ErrorLog logs\/error_log\n    CustomLog logs\/access_log common<\/p>\n
        ProxyRequests Off\n        \n        Order deny,allow\n        Allow from all\n        ProxyPass http:\/\/192.168.1.3\/<\/a>\n        ProxyPassReverse http:\/\/192.168.1.3\/<\/a>\n        ProxyPassReverseCookieDomain 192.168.1.3 www.esojourn.org\n        \nProxyHTMLDoctype XHTML  #!!!\u91cd\u8981 \u8bbe\u7f6eDocType\u3002<\/p>\n
\n<\/pre>\n
\u5173\u4e8eProxyHTMLDoctype\u8bbe\u7f6e\uff0c\u89c1\uff1ahttp:\/\/apache.webthing.com\/mod_proxy_html\/config.html<\/a>

**<\/strong><\/strong>\u8fd9\u91cc\u6709\u4e2a\u5f88\u91cd\u8981\u7684\u95ee\u9898\uff0c\u9700\u8981\u5728\u865a\u62df\u673a\u7684apache\u4e2d\uff0c\u542f\u7528mod_rpaf\u6a21\u5757\u3002

\u5982\u679c\u4e0d\u5b89\u88c5mod_rpaf\u6a21\u5757\uff0c\u4f1a\u6709\u4e00\u7cfb\u5217\u5f88\u9ebb\u70e6\u7684\u95ee\u9898\u3002\u867d\u7136\u4f60\u662f\u7528domain.com\u8bbf\u95ee\u670d\u52a1\u5668\uff0c\u4f46\u662f\u4ecephpinfo();\u53ef\u4ee5\u770b\u5230\uff0c
Apache Environment\u91cc\uff1a
HTTP_HOST  192.168.1.2 #\u5185\u7f51\u5730\u5740\nSERVER_NAME  192.168.1.2 #\u5185\u7f51\u5730\u5740\nREMOTE_ADDR  192.168.1.1 #\u5185\u7f51\u53cd\u5411\u4ee3\u7406\u5730\u5740\nSERVER_SIGNATURE  
Apache\/2.2.15 (CentOS) Server at 192.168.1.2 Port 80<\/address>\n<\/pre>\n

\u5f53\u7136HTTP Headers\u91cc\u4e5f\u662f\u5185\u7f51\u5730\u5740\uff1a
Host  192.168.1.2<\/pre>\n

\u8fd9\u4f1a\u6709\u4ec0\u4e48\u95ee\u9898\u5462\uff1f\u9996\u5148\u4f60\u4f1a\u53d1\u73b0phpMyAdmin\u5b89\u88c5\u4e0d\u4e86\u3002\u7136\u540e\u7a0d\u5fae\u590d\u6742\u4e00\u70b9\u7684\u6846\u67b6\u4e5f\u4f1a\u51fa\u9519\uff0c\u6bd4\u5982drupal\u3002\u7ecf\u5e38\u8fd0\u884c\u5230\u67d0\u4e2a\u9875\u9762\u5c31\u8df3\u5230\u5185\u7f51IP\u4e0a\u4e86\u3002\u8fd9\u4e2a\u95ee\u9898\u6298\u78e8\u4e86\u6211\u597d\u4e00\u9635\u3002\u867d\u7136phpMyAdmin\u548cdrupal\u90fd\u9488\u5bf9\u53cd\u5411\u4ee3\u7406\u7684\u95ee\u9898\uff0c\u7ed9\u51fa\u4e86\u76f8\u5e94\u7684\u4fee\u6539\u3002\u4f46\u662f\u76f8\u4fe1\u6211\uff0c\u522b\u8d39\u65f6\u95f4\u8ddf\u7740\u90a3\u4e9b\u4fe1\u606f\u5f80\u4e0b\u8fdb\u884c\uff0c\u90fd\u4e0d\u662f\u4ec0\u4e48\u597d\u529e\u6cd5\u3002\u6bd4\u5982drupal\uff0c\u6838\u5fc3\u4fee\u6539\u4e86\uff0c\u4e0a\u5343\u4e2a\u7b2c\u4e09\u65b9\u6a21\u5757\u600e\u4e48\u529e\uff1f

\u95ee\u9898\u6b63\u89e3\u6765\u81eaThomas Eibner<\/a>\u3002\u4ed6\u5199\u7684mod_rpaf\u4eceapache\u8fd9\u4e00\u5c42\uff0c\u89e3\u51b3\u4e86\u8fd9\u4e9b\u9ebb\u70e6\u4e8b\u3002\u4e0d\u5fc5\u518d\u9ebb\u70e6\u4e00\u884c\u884c\u4fee\u6539php\u4ee3\u7801\u4e86\u3002\u5b89\u88c5\u6b65\u9aa4\u5982\u4e0b\uff1a

mod_rpaf , \u4ee4\u53cd\u5411\u4ee3\u7406\u540e\u7aef\u7684 Apache \u83b7\u53d6\u5230\u4e92\u8054\u7f51 IP<\/strong>\n
 wget http:\/\/stderr.net\/apache\/rpaf\/download\/mod_rpaf-0.6.tar.gz<\/a>\ncd mod_rpaf-0.6\nyum install httpd-devel  #\u6ca1\u6709apxs\u7684\uff0c\u5148\u5b89\u88c5httpd-devel\napxs -i -a -c mod_rpaf.c    Apache 1.3.x \u7684\u5b89\u88c5\u65b9\u5f0f\napxs -i -c -n mod_rpaf-2.0.so mod_rpaf-2.0.c   Apache 2.x \u7684\u5b89\u88c5\u65b9\u5f0f\n<\/pre>\n

\u7136\u540evi \/etc\/httpd\/conf\/httpd.conf\u3002
\u5728LoadModule \u533a\u57df\u52a0\u4e86\u4e00\u884c\uff1a
LoadModule rpaf_module        modules\/mod_rpaf-2.0.so<\/pre>\n
\u5e76\u5728\u4e0b\u65b9\u6dfb\u52a0
\nRPAFenable On\nRPAFsethostname On\nRPAFproxy_ips 127.0.0.1 192.168.1.1    # \u586b\u5199\u53cd\u5411\u4ee3\u7406\u670d\u52a1\u5668\u5185\u7f51IP\u3002\nRPAFheader X-Forwarded-For<\/pre>\n
\u4fdd\u5b58\u9000\u51fa\u540e\u91cd\u542fapache

rpaf\u5b98\u7f51\uff1ahttp:\/\/stderr.net\/apache\/rpaf\/<\/a>
\u4e00\u7bc7\u4e2d\u6587\u5b89\u88c5\u8bf4\u660e\uff1ahttp:\/\/blog.csdn.net\/songerzhou\/article\/details\/5142863<\/a>



7. \u865a\u62df\u673a\u4e2d\u7684Mysql\u914d\u7f6e<\/span>\n

http:\/\/space.itpub.net\/9240380\/viewspace-665719<\/a>
\u5728\u547d\u4ee4\u884c\u4e0b\uff0c\u53ef\u4ee5\u6709\u4e24\u79cd\u5927\u540c\u5c0f\u5f02\u7684\u65b9\u6cd5\u6765\u4f5c\u6b64\u8bbe\u7f6e\uff1a
(1)mysql>GRANT ALL PRIVILEGES ON .<\/em> TO root@localhost IDENTIFIED BY ‘something’ WITH GRANT OPTION;
mysql>GRANT ALL PRIVILEGES ON .<\/em> TO root@”%” IDENTIFIED BY ‘something’ WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON .<\/em> TOroot@”%” IDENTIFIED BY ‘123456’  WITH GRANT OPTION;



How Do I Enable Remote Access To MySQL Database Server?
http:\/\/www.cyberciti.biz\/tips\/how-do-i-enable-remote-access-to-mysql-database-server.html<\/a>


MYSQL PHPMYADMIN\u65e0\u6cd5\u94fe\u63a5
setsebool -P httpd_can_network_connect 1


8. \u540e\u7eed\uff1aiptables\u89c4\u5219\u4f18\u5316\uff0c\u865a\u62df\u673a\u81ea\u52a8\u5feb\u7167\u5907\u4efd<\/span>\n
\u592a\u957f\u4e86\uff0c\u5206\u5f00\u51e0\u7bc7\u6587\u7ae0\u5427\u3002
\u865a\u62df\u673a\u81ea\u52a8\u5feb\u7167\u5907\u4efd\uff1ahttp:\/\/dingxuan.info\/blog\/post\/snapshot-to-kvm-qcow2-image.php<\/a>

[ 2012-11-09 ] \u66f4\u65b0\uff0c\u52a0\u5165mod_proxy\u4e2dProxyHTMLDoctype\u8bbe\u7f6e\u3002<\/p>","protected":false},"excerpt":{"rendered":"
\u76ee\u5f55\uff1a0. \u914d\u7f6e\u76ee\u7684\u53ca\u65b9\u6848\u7b80\u4ecb1. \u5b89\u88c5KVM2. \u5b89\u88c5\u914d\u7f6eVNC\u8fdc\u7a0b\u63a7\u52363. \u5728KVM\u865a\u62df\u673a\u5b89\u88c5CentOS … \u7ee7\u7eed\u9605\u8bfbCentOS 6\u4e0b\uff0c\u8fdc\u7a0b\u5b89\u88c5KVM\u865a\u62df\u673a\uff0c\u5e76\u4f7f\u7528apache mod_proxy\u53cd\u5411\u4ee3\u7406\u5efa\u7acb\u591a\u4e2aweb\u670d\u52a1\u5668<\/span><\/a><\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117],"tags":[79,78,112],"class_list":["post-410","post","type-post","status-publish","format-standard","hentry","category-network","tag-centos","tag-linux","tag-vm"],"_links":{"self":[{"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=\/wp\/v2\/posts\/410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=410"}],"version-history":[{"count":0,"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=\/wp\/v2\/posts\/410\/revisions"}],"wp:attachment":[{"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dingxuan.info\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}