freebsd基本技能..docVIP

FreeBSD双线负载均衡NAT服务器配置方法 # vi /etc/rc.conf defaultrouter=54 ifconfig_fxp0=inet netmask ifconfig_rl0=inet netmask ifconfig_rl1=inet netmask pf_enable=YES # vi /etc/pf.conf ##anchors lan_net = /24 int_if = fxp0 ext_if1 = rl0 ext_if2 = rl1 ext_gw1 = 54 ext_gw2 = 54 ##nat outgoing connections on each internet interface nat on $ext_if1 from $lan_net to any - ($ext_if1) nat on $ext_if2 from $lan_net to any - ($ext_if2) ##default deny block in from any to any block out from any to any ##pass all outgoing packets on internal interface pass out on $int_if from any to $lan_net ##pass in quick any packets destined for the gateway itself pass in quick on $int_if from $lan_net to $int_if ##load balance outgoing tcp traffic from internal network. pass in on $int_if route-to \ { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2) } round-robin \ proto tcp from $lan_net to any flags S/SA modulate state ##load balance outgoing udp and icmp traffic from internal network pass in on $int_if route-to \ { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2) } round-robin \ proto { udp, icmp } from $lan_net to any keep state ##general pass out rules for external interfaces pass out on $ext_if1 proto tcp from any to any flags S/SA modulate state pass out on $ext_if1 proto { udp, icmp } from any to any keep state pass out on $ext_if2 proto tcp from any to any flags S/SA modulate state pass out on $ext_if2 proto { udp, icmp } from any to any keep state ##route packets from any IPs on $ext_if1 to $ext_gw1 and the same for ##$ext_if2 and $ext_gw2 pass out on $ext_if1 route-to ($ext_if2 $ext_gw2) from $ext_if2 to any pass out on $ext_if2 route-to ($ext_if1 $ext_gw1) from $ext_if1 to any # vi /etc/sysctl.conf net.inet.ip.forwarding=1 FreeBSD利用PF实现策略路由1．说明：此方案适用于可以使用PF做为防火墙的操作系统，包括FREEBSD/OPENBSD/NETBSD。所谓的策略路由就是在服务器同时连接了两个ISP线路，实现从那个网卡进来的数据包请求，返回给CLIENT时还从那个网卡出去。2．试验拓扑：图中的『3接口路由器』可以用WIN2K或LINUX系统启动IP转发替代。3．OPENBSD网络设置：Fxp0:? ?? ?? ?? ?? ? 00Ne3:? ?? ?? ?? ?? ?? ?00Gateway:? ?? ???4．PF规则：# vi /etc/p