linux双线服务器配置

linux 双线服务器配置网通使用第一块网卡(eth0): IP :210.82.37.149 掩码:255.255.255.224 网关:210.82.37.158 铁通使用第二块网卡(eth1):

linux 双线服务器配置

网通使用第一块网卡(eth0): IP :210.82.37.149 掩码:255.255.255.224 网关:210.82.37.158 铁通使用第二块网卡(eth1): IP :222.35.92.242 掩码:255.255.255.252 网关:222.35.92.241 二、配置网卡: #vi/etc/sysconfig/networking/profiles/default/ifcfg-eth0 DEVICE=eth0 ONBOOT=yes IPADDR=210.82.37.149 NETMASK=255.255.255.224 GATEWAY=210.82.37.158 TYPE=Ethernet #vi/etc/sysconfig/networking/profiles/default/ifcfg-eth1 DEVICE=eth1 ONBOOT=yes IPADDR=222.35.92.242 NETMASK=255.255.255.252 GATEWAY=222.35.92.241 TYPE=Ethernet #vi/etc/sysconfig/networking/profiles/default/route-eth1 GATEWAY0=218.57.200.1 NETMASK0=255.255.255.0 ADDRESS0=218.57.200.242 #vi/etc/sysconfig/networking/profiles/default/resolv.conf nameserver202.102.152.3 nameserver202.102.128.68 三、配置路由表 #vi/etc/iproute2/rt_tables,增加网通和铁通两个路由表 252cnc 251crtc 设置网通的路由表 iprouteadd210.82.37.128/27via210.82.37.149deveth0tablecnc

iprouteadd127.0.0.0/8devlotablecnc iprouteadddefaultvia210.82.37.158deveth0tablecnc 设置铁通的路由表 iprouteadd222.35.92.240/30via222.35.92.242deveth1tablecrtc iprouteadd127.0.0.0/8devlotablecrtc iprouteadddefaultvia222.35.92.241deveth1tablecrtc 制定策略,让222.35.92.242的回应数据包走铁通的路由表路由,210.82.37.149的回应数据包走网通的路由表路由 ipruleaddfrom210.82.37.149tablecnc ipruleaddfrom222.35.92.242tablecrtc 修改IP 转发文件 #vi/etc/sysctl.conf net.ipv4.ip_forward=1 net.ipv4.conf.default.rp_filter=1 kernel.sysrq=0 设置静态路由表文件 #vi/etc/sysconfig/static-routes eth0net210.82.37.149netmask255.255.255.224gw210.82.37.158

eth1net222.35.92.242netmask255.255.255.252gw222.35.92.241 将从两个WAN 口出去的数据包进行IP 伪装masquerade #/sbin/modprobeip_conntrack_ftp #/sbin/modprobeip_nat_ftp #/sbin/iptables-tnat-Apostrouting-oeth0-jmasquerade #/sbin/iptables-tnat-Apostrouting-oeth1-jmasquerade 设置默认网关为网通 #routeadddefaultgw210.82.37.158 增加出口路由策略,客户端是铁通的走铁通线路,其余走网通线路。 CODE :ipruleaddto121.16.0.0/13tablecncipruleaddto121.24.0.0/14tablecncipruleaddto121.28.0.0/15tablecncipruleaddto121.30.0.0/16tablecncipruleaddto121.31.0.0/16tablecnc

其余省略...

刷新路由表

iprouteflushcache

四、配置DNS

在服务器上配置自己的DNS 解析,将域名服务器商处的域名解析指向服务器。

这样,来自网通的查询,将反馈网站网通的IP ,其余反馈电信的IP 。

配置named.conf

CODE:

view ”cnc ”{match-clients{121.16.0.0/13;121.24.0.0/14;121.28.0.0/15;121.30.0.0/16;121.31.0.0/16;121.47其余省略...;}recursionyes;zone”zhyh.org ”{typemaster;file”/var/named/zhyh.org.cnc”;};};view”other ”{match-clients{any;};recursionno;zone”zhyh.org ”{typemaster;file”/var/named/zhyh.org”;};};

,

配置zhyh.org.cnc ,对应网通IP

CODE:$TTL86400@INSOAzhyh.org.root(2006111800;Serial28800;Refresh14400;Retry3600000;Expire86400);MinimumINNSzhyh.org.INA218.57.200.242INMX10mailwwwINA218.57.200.242ns1I NA218.57.200.242nsINA222.173.254.21mailINA218.57.200.2421INPTRlocalhost.

配置zhyh.org ,对应电信IP

CODE$TTL86400@INSOAzhyh.org.root(2006111800;Serial28800;Refresh14400;Retry3600000;Expire86400);MinimumINNSzhyh.org.INA222.173.254.21INMX10mailwwwINA222.173.254.21nsIN A222.173.254.21ns1INA218.57.200.242mailINA222.173.254.211INPTRlocalhost.

配置222.173.254.zone 、218.57.200.zone 做反向解析;

CODE:$TTL86400@INSOAzhyh.org.root.zhyh.org.(200611181336007200360000086400)INNSlocalhost.242INPTRwww.zhyh.org.242INPTRns1.zhyh.org.242INPTRmail.zhyh.org.

五、配置apache ,做好虚拟主机设置

CODE

#vi/etc/httpd/conf/httpd.confNameVirtualHost218.57.200.242:80NameVirtualHost222.173.254.21:80ServerNamezhyh.orgDocumentRoot/var/www/html/ServerAdminwebmaster@zhyh.orgErrorLoglogs/zhyh.org-error_logCustomLog”|/usr/local/sbin/cronolog/var/log/httpd/zhyh.org-access_log.Ymd”combined&usr/local/sbin/cronolog/var/log/httpd/zhyh.org-access_log.Ymd”combined

标签: