CentOS Networking Configuration: Mastering Firewalld and NetworkManager

Configuring the network and managing Firewalld and NetworkManager on CentOS can be achieved through the following steps: 1. Use NetworkManager to manage network connections, such as viewing the connection status (nmcli connection show) or configuring VPN (nmcli connection add type vpn). 2. Use Firewalld to manage firewall rules, such as adding HTTP services (firewall-cmd --zone=public --add-service=http --permanent) and viewing rules (firewall-cmd --list-all).

introduction

Do you want to know how to configure the network on CentOS and control Firewalld and NetworkManager? Then you have come to the right place. This article will take you into the deep understanding of how to effectively manage networks and firewalls in CentOS systems. I will share some personal experiences and tips, hoping to help you avoid some common pitfalls and also give you more confidence in the configuration process.

After reading this article, you will learn how to use NetworkManager to manage network connections, how to configure Firewalld to protect your system, and how to find the best balance between them.

Review of basic knowledge

Before we go deeper, let's review some basic concepts first. As a Linux distribution based on Red Hat, CentOS uses NetworkManager to manage network connections by default, while Firewalld is a dynamic firewall management tool for managing firewall rules.

NetworkManager not only manages wired and wireless connections, but also handles VPNs and other complex network configurations. Firewalld provides an easy-to-use interface to manage firewall rules, supporting dynamic updates without requiring a service restart.

Core concept or function analysis

Definition and function of NetworkManager

NetworkManager is the default network management tool in CentOS system. It provides a unified interface to manage various network connections. Its function is not only to start and stop the network interface, but also to automatically connect, disconnect, and manage network configuration files.

For example, suppose you want to configure a new WiFi connection on the CentOS system, you can use NetworkManager to complete this task. Here is a simple command example:

 nmcli dev wifi connect "SSID" password "PASSWORD"

This command uses NetworkManager to connect to the specified WiFi network.

The definition and function of Firewalld

Firewalld is a dynamic firewall management tool that allows you to define firewall rules based on different network areas (zones). Its main purpose is to protect your system from unauthorized access while providing a flexible interface to manage these rules.

For example, if you want to allow HTTP traffic through a firewall, you can use the following command:

 firewall-cmd --zone=public --add-service=http --permanent
firewall-cmd --reload

This adds the HTTP service to the public area and reloads the firewall rules.

How it works

NetworkManager works by monitoring the status of a network interface and managing connections based on configuration files. It automatically detects and configures network devices so that users can maintain network connection stability without manual intervention.

Firewalld works more complexly, using D-Bus to implement dynamic rule updates. This means you can add, delete, or modify rules without restarting the firewall service. This is very useful for scenarios where firewall rules need to be adjusted frequently.

Example of usage

Basic usage

Let's start with the basic usage of NetworkManager. If you want to view the current network connection status, you can use the following command:

 nmcli connection show

This lists all configured network connections and their status.

For the basic usage of Firewalld, if you want to view the current firewall rules, you can use the following command:

 firewall-cmd --list-all

This displays all firewall rules, including allowed services and ports.

Advanced Usage

Now let's look at some more advanced usages. Suppose you want to use NetworkManager to configure a VPN connection, you can use the following command:

 nmcli connection add type vpn vpn-type openvpn ifname tun0 con-name "MyVPN" \
  vpn.service-type org.freedesktop.NetworkManager.openvpn \
  vpn.username "your_username" vpn.password "your_password" \
  vpn.remote "vpn.example.com" vpn.port "1194"

This command will create a new VPN connection and configure relevant parameters.

For advanced usage of Firewalld, if you want to create a custom firewall rule to allow specific IP addresses to access your system, you can use the following command:

 firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" source address="192.168.1.100" accept' --permanent
firewall-cmd --reload

This adds a rule that allows IPv4 traffic from 192.168.1.100 to pass through the firewall.

Common Errors and Debugging Tips

There are some common problems you may encounter when using NetworkManager and Firewalld. For example, NetworkManager may not be able to connect to a WiFi network automatically, or Firewalld may block certain necessary traffic.

For NetworkManager, if you have connection problems, you can try to reset the network connection using the following command:

 nmcli networking off
nmcli networking on

This closes and restarts the NetworkManager service, which usually solves some connection issues.

For Firewalld, if you find that some traffic is blocked, you can use the following command to view the detailed log:

 journalctl -u firewalld

This will display the log of the Firewalld service, helping you find out what the problem is.

Performance optimization and best practices

In practical applications, how to optimize the performance of NetworkManager and Firewalld? First, for NetworkManager, you can consider disabling unnecessary network interfaces to reduce the consumption of system resources. For example, if you don't need to use Bluetooth connection, you can disable it using the following command:

 nmcli radio bluetooth off

For Firewalld, one key to optimizing performance is to minimize the number of rules. Each rule increases the processing time of the firewall, so you should only add the necessary rules. For example, if you only need to allow HTTP and HTTPS traffic, you can use the following command:

 firewall-cmd --zone=public --add-service=http --permanent
firewall-cmd --zone=public --add-service=https --permanent
firewall-cmd --reload

This will only allow HTTP and HTTPS traffic to pass through the firewall, reducing unnecessary rules.

In terms of programming habits and best practices, it is recommended that you keep the code readable and maintained. For example, add comments in the configuration file to explain the role of each rule, which will be easier to understand when you need to modify it in the future.

In short, mastering NetworkManager and Firewalld on CentOS will not only help you better manage your network and firewalls, but will also give you more confidence to solve them when you encounter problems. Hope this article will bring you some useful insights and tips.

The above is the detailed content of CentOS Networking Configuration: Mastering Firewalld and NetworkManager. For more information, please follow other related articles on the PHP Chinese website!