使用iptables实现端口转发（中转加速）

admin 发表于 2020-11-22 15:24:36

使用iptables实现端口转发（中转加速）

<p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">说明：玩vps的经常要用到端口转发用以实现更快的速度，比如手上有个xx商家的vps，本地访问速度很慢，这时候就可以用一个香港或者日本的线路做桥梁，达到更快的速度，这里使用<code style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 12.6px; padding: 2px 4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px;">iptables</code>来进行中转的教程包含一键管理脚本和手动配置两种办法。<h2 style="font-weight: 700; color: rgb(102, 102, 102); margin-top: 30px; margin-bottom: 10px; font-size: 24px; background-image: linear-gradient(transparent 60%, rgba(189, 202, 219, 0.3) 0px); background-position: initial; background-size: initial; background-repeat: no-repeat; background-attachment: initial; background-origin: initial; background-clip: initial; width: auto; font-family: PingFang-SC-Bold, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace !important; line-height: 2 !important; display: inline !important;">通过一键脚本安装</h2><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">通过脚本的方法来安装也是最好上手的。步骤如下：<p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">1、开启系统的转发功能<p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">请在需要被转发的机器上运行：<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs properties" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">vi /etc/sysctl.conf</code></pre><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">将<code style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 12.6px; padding: 2px 4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px;">net.ipv4.ip_forward=0</code>修改成<code style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 12.6px; padding: 2px 4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px;">net.ipv4.ip_forward=1</code> 编辑后使用命令让配置马上生效<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs properties" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">sysctl -p</code></pre><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">2、执行脚本安装命令<p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">请在中转的机器上运行：<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs nginx" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">wget -N --no-check-certificate https://raw.githubusercontent.com/hugoyue/doubi/master/iptables-pf.sh && chmod +x iptables-pf.sh && bash iptables-pf.sh</code></pre><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">将会在终端中显示管理菜单<p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;"><a class="light-link" data-fancybox="gallery" no-pjax="" data-type="image" data-caption="iptables-scripts.png" href="https://www.moewah.com/usr/uploads/2019/03/2407486124.png" style="background-color: transparent; cursor: pointer; word-break: break-all; overflow-wrap: break-word; color: rgba(18, 153, 230, 0.91) !important; border-top: none !important; border-right: none !important; border-bottom: 1px dashed rgba(18, 153, 230, 0.91) !important; border-left: none !important; border-image: initial !important;"><img src="https://www.moewah.com/usr/uploads/2019/03/2407486124.png" alt="iptables-scripts.png" title="iptables-scripts.png" class="block" style="border: 0px; vertical-align: middle; display: block; cursor: pointer; margin: 0px auto; border-radius: 5px; transition: all 0.5s ease 0s;"></a><figcaption class="post-img-figcaption" style="font-size: 14px; line-height: 14px; text-align: center; color: rgb(142, 135, 135); margin-top: 13px;"><a class="light-link" data-fancybox="gallery" no-pjax="" data-type="image" data-caption="iptables-scripts.png" href="https://www.moewah.com/usr/uploads/2019/03/2407486124.png" style="background-color: transparent; cursor: pointer; word-break: break-all; overflow-wrap: break-word; color: rgba(18, 153, 230, 0.91) !important; border-top: none !important; border-right: none !important; border-bottom: 1px dashed rgba(18, 153, 230, 0.91) !important; border-left: none !important; border-image: initial !important;">iptables-scripts.png</a></figcaption><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">初次使用前请请务必执行1. 安装 iptables(不仅仅是安装)。然后再选择4. 添加 iptables 端口转发后，会提示你依次输入：欲转发IP、欲转发端口、本地监听端口、本地IP、转发类型。<h2 style="font-weight: 700; color: rgb(102, 102, 102); margin-top: 30px; margin-bottom: 10px; font-size: 24px; background-image: linear-gradient(transparent 60%, rgba(189, 202, 219, 0.3) 0px); background-position: initial; background-size: initial; background-repeat: no-repeat; background-attachment: initial; background-origin: initial; background-clip: initial; width: auto; font-family: PingFang-SC-Bold, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace !important; line-height: 2 !important; display: inline !important;">通过手动配置使用</h2><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">1、开启系统的转发功能<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs properties" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">vi /etc/sysctl.conf</code></pre><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">将<code style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 12.6px; padding: 2px 4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px;">net.ipv4.ip_forward=0</code>修改成<code style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 12.6px; padding: 2px 4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px;">net.ipv4.ip_forward=1</code> 编辑后使用命令让配置马上生效<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs properties" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">sysctl -p</code></pre><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">2、iptables的命令<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs less" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">iptables -t nat -A PREROUTING -p tcp --dport [端口号] -j DNAT --to-destination [目标IP]
iptables -t nat -A PREROUTING -p udp --dport [端口号] -j DNAT --to-destination [目标IP]
iptables -t nat -A POSTROUTING -p tcp -d [目标IP] --dport [端口号] -j SNAT --to-source [本地服务器IP]
iptables -t nat -A POSTROUTING -p udp -d [目标IP] --dport [端口号] -j SNAT --to-source [本地服务器IP]</code></pre><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">3、重启iptables使配置生效<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs properties" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">service iptables save
service iptables restart</code></pre><h2 style="font-weight: 700; color: rgb(102, 102, 102); margin-top: 30px; margin-bottom: 10px; font-size: 24px; background-image: linear-gradient(transparent 60%, rgba(189, 202, 219, 0.3) 0px); background-position: initial; background-size: initial; background-repeat: no-repeat; background-attachment: initial; background-origin: initial; background-clip: initial; width: auto; font-family: PingFang-SC-Bold, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace !important; line-height: 2 !important; display: inline !important;">扩展需求</h2><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">1、多端口转发修改方案：(将本地服务器的50000~65535转发至目标IP为1.1.1.1的50000~65535端口)<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs yaml" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">-A PREROUTING -p tcp -m tcp --dport 50000:65535 -j DNAT --to-destination 1.1.1.1
-A PREROUTING -p udp -m udp --dport 50000:65535 -j DNAT --to-destination 1.1.1.1
-A POSTROUTING -d 1.1.1.1/32 -p tcp -m tcp --dport 50000:65535 -j SNAT --to-source [本地服务器IP]
-A POSTROUTING -d 1.1.1.1/32 -p udp -m udp --dport 50000:65535 -j SNAT --to-source [本地服务器IP]</code></pre><p style="margin-bottom: 20px; word-break: break-all; font-family: PingFang-SC-Regular, "Source Sans Pro", "Hiragino Sans GB", "Microsoft Yahei", SimSun, Helvetica, Arial, sans-serif, monospace; color: rgb(109, 109, 109); font-size: 14px;">2、非同端口号修改方案：（使用本地服务器的60000端口来转发目标IP为1.1.1.1的50000端口）<pre style="overflow: hidden; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 0px; margin-top: 1.5em; margin-bottom: 1.5em; line-height: 1.42857; color: rgb(51, 51, 51); word-break: break-all; background-color: rgb(245, 245, 245); border: none rgb(222, 229, 231); border-radius: 0px; background-size: 30px, 30px; position: relative;"><code class="hljs yaml" style="font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: inherit; padding: 0.5em; background: rgb(248, 248, 248); border-radius: 0px; white-space: pre; overflow-wrap: normal; display: block; overflow-x: auto; position: relative;">-A PREROUTING -p tcp -m tcp --dport 60000 -j DNAT --to-destination 1.1.1.1:50000
-A PREROUTING -p udp -m udp --dport 60000 -j DNAT --to-destination 1.1.1.1:50000
-A POSTROUTING -d 1.1.1.1/32 -p tcp -m tcp --dport 50000 -j SNAT --to-source [本地服务器IP]
-A POSTROUTING -d 1.1.1.1/32 -p udp -m udp --dport 50000 -j SNAT --to-source [本地服务器IP]</code></pre>

页: [1]

一元网络论坛's Archiver

使用iptables实现端口转发（中转加速）