我一直在到处寻找解决这个问题的方法,但却一无所获。我想知道是否可以通过OpenVPN连接转发诸如80之类的端口?我使用的是带有预装OpenVPN Debian 8发行版的OVH。客户端端口到服务器或类似的东西。任何帮助都将不胜感激。
编辑:这是一个糟糕的图表,但它总比没有好!单击以查看图表在关系图上,webserver在server1上,我的坏。
把这个改成了GRE隧道。我在两头架设隧道,但我不能用它。在服务器1上执行的命令:
ip tunnel add gre1 mode gre remote 66.xxx.xx.xx local 158.xx.xxx.xxx ttl 255
ip link set gre1 up
ip addr add 10.0.0.1/24 dev gre1
在服务器2上执行的命令:
ip tunnel add gre1 mode gre remote 158.xx.xxx.xxx local 66.xxx.xx.xx ttl 255
ip link set gre1 up
ip addr add 10.0.0.2/24 dev gre1
我不能从服务器1中选择10.0.0.2,但我显然可以从服务器2。
服务器1 ip addr输出:
root@server1:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group defaul t qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP gr oup default qlen 1000
link/ether fa:16:3e:17:34:30 brd ff:ff:ff:ff:ff:ff
inet 158.xx.xxx.xxx/32 brd 158.69.202.194 scope global ens3
valid_lft forever preferred_lft forever
inet6 fe80::f816:3eff:fe17:3430/64 scope link
valid_lft forever preferred_lft forever
3: gre0@NONE: <NOARP> mtu 1476 qdisc noop state DOWN group default qlen 1
link/gre 0.0.0.0 brd 0.0.0.0
4: gretap0@NONE: <BROADCAST,MULTICAST> mtu 1462 qdisc noop state DOWN group defa ult qlen 1000
link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
7: gre1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1476 qdisc noqueue state UNKNO WN group default qlen 1
link/gre 158.xx.xxx.xxx peer 66.xxx.xx.xx
inet 10.0.0.1/24 scope global gre1
valid_lft forever preferred_lft forever
inet6 fe80::200:5efe:9e45:cac2/64 scope link
valid_lft forever preferred_lft forever
ip路由服务器1:
root@server1:~# ip route
default via 158.xx.xxx.1 dev ens3
10.0.0.0/24 dev gre1 proto kernel scope link src 10.0.0.1
158.xx.xxx.1 dev ens3 scope link
ip addr服务器2:
root@server2:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp0s25: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether d8:9d:67:d3:71:09 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.30/24 brd 192.168.1.255 scope global dynamic enp0s25
valid_lft 73469sec preferred_lft 73469sec
inet6 fe80::3062:291f:ccf6:26aa/64 scope link
valid_lft forever preferred_lft forever
3: wlo1: <BROADCAST,MULTICAST> mtu 1500 qdisc mq state DOWN group default qlen 1000
link/ether 00:24:d7:e8:73:30 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.36/24 brd 192.168.1.255 scope global dynamic wlo1
valid_lft 73461sec preferred_lft 73461sec
4: gre0@NONE: <NOARP> mtu 1476 qdisc noop state DOWN group default qlen 1
link/gre 0.0.0.0 brd 0.0.0.0
5: gretap0@NONE: <BROADCAST,MULTICAST> mtu 1462 qdisc noop state DOWN group default qlen 1000
link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
11: gre1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1476 qdisc noqueue state UNKNOWN group default qlen 1
link/gre 66.xxx.xx.xx peer 158.xx.xxx.xxx
inet 10.0.0.2/24 scope global gre1
valid_lft forever preferred_lft forever
inet6 fe80::200:5efe:42d3:132c/64 scope link
valid_lft forever preferred_lft forever
ip路由服务器2:
root@server2:~# ip route
default via 192.168.1.1 dev enp0s25 proto static metric 100
10.0.0.0/24 dev gre1 proto kernel scope link src 10.0.0.2
169.254.0.0/16 dev gre1 scope link metric 1000
192.168.1.0/24 dev enp0s25 proto kernel scope link src 192.168.1.30 metric 100
发布于 2017-10-25 16:24:01
听起来,您需要在服务器1和2之间建立VPN连接/隧道。然后是反向代理(nginx/apache/ proxy /varnish/…)在server1上,将隧道中的所有请求转发给server2。
https://serverfault.com/questions/880259
复制相似问题