Home Operation and Maintenance Linux Operation and Maintenance How to configure highly available port forwarding on Linux

How to configure highly available port forwarding on Linux

Jul 06, 2023 am 08:57 AM
linux High availability port forwarding

How to configure high-availability port forwarding on Linux

1. Background overview
In the architecture of distributed systems, port forwarding is a very common network technology. Through port forwarding, connection requests from the external network can be forwarded to internal nodes, thereby achieving high availability and load balancing of external services. On the Linux operating system, we can use some tools and configurations to achieve high-availability port forwarding. This article will introduce in detail how to configure and manage high-availability port forwarding using the Linux operating system.

2. Use iptables to implement port forwarding
iptables is a commonly used firewall software on Linux systems and can also be used to implement port forwarding functions. The following is an example of using iptables to implement port forwarding:

  1. First, you need to confirm that the iptables software has been installed on the system. Execute the following command on the terminal:
sudo apt-get install iptables
Copy after login
  1. Set port forwarding rules. Assume that we need to forward the access request from the public network IP to a node on the intranet. You can use the following command to configure port forwarding:
sudo iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j DNAT --to 192.168.0.10:80
sudo iptables -A FORWARD -p tcp -d 192.168.0.10 --dport 80 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
Copy after login

where eth0 is External network interface, 192.168.0.10 is the IP address of the internal network node, 80 is the port number that needs to be forwarded.

  1. Save configuration. When the above configuration is completed, we need to save the configuration to the iptables configuration file so that the configuration can be automatically loaded after the system restarts. Execute the following command to save the configuration:
sudo sh -c "iptables-save > /etc/iptables.rules"
Copy after login
  1. Add a self-starting script. In order to make the configuration automatically loaded when the system starts, we can create a self-starting script and add it to the system's startup service. Create a script named iptables.sh with the following content:
#!/bin/sh
/sbin/iptables-restore < /etc/iptables.rules
Copy after login

Save the script to the /etc/init.d directory and set it as the script Add execution permissions:

sudo chmod +x /etc/init.d/iptables.sh
Copy after login

Then, add the script to the startup service:

sudo update-rc.d iptables.sh defaults 99
Copy after login

At this point, we have completed the configuration of using iptables to implement port forwarding.

3. Use HAProxy to achieve high-availability port forwarding
In addition to using iptables, we can also use HAProxy to achieve high-availability port forwarding. HAProxy is a reliable, high-performance load balancing software suitable for port forwarding needs in distributed systems. The following is an example of using HAProxy to configure high-availability port forwarding:

  1. First, you need to confirm that the HAProxy software has been installed on the system. Execute the following command on the terminal:
sudo apt-get install haproxy
Copy after login
  1. Edit the HAProxy configuration file. Open the configuration file /etc/haproxy/haproxy.cfg and add the following content:
frontend http-in
     bind *:80
     default_backend backend_servers

backend backend_servers
     balance roundrobin
     server server1 192.168.0.10:80 check
     server server2 192.168.0.11:80 check
Copy after login

Among them, 192.168.0.10 and 192.168.0.11 is the IP address of the internal node, 80 is the port number that needs to be forwarded.

  1. Restart the HAProxy service. Execute the following command to restart the HAProxy service:
sudo service haproxy restart
Copy after login

At this time, HAProxy will forward the access request to the internal node according to the rules in the configuration file to achieve high-availability port forwarding.

4. Summary
This article introduces the method of configuring high-availability port forwarding on the Linux operating system, using iptables and HAProxy as examples. In actual applications, we can choose the appropriate method for configuration and deployment according to specific needs. By rationally using port forwarding, the reliability and load capacity of the system can be improved, and more stable and efficient services can be provided.

The above is the detailed content of How to configure highly available port forwarding on Linux. For more information, please follow other related articles on the PHP Chinese website!

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

AI Hentai Generator

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
2 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
Repo: How To Revive Teammates
4 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
Hello Kitty Island Adventure: How To Get Giant Seeds
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

Android TV Box gets unofficial Ubuntu 24.04 upgrade Android TV Box gets unofficial Ubuntu 24.04 upgrade Sep 05, 2024 am 06:33 AM

For many users, hacking an Android TV box sounds daunting. However, developer Murray R. Van Luyn faced the challenge of looking for suitable alternatives to the Raspberry Pi during the Broadcom chip shortage. His collaborative efforts with the Armbia

deepseek web version entrance deepseek official website entrance deepseek web version entrance deepseek official website entrance Feb 19, 2025 pm 04:54 PM

DeepSeek is a powerful intelligent search and analysis tool that provides two access methods: web version and official website. The web version is convenient and efficient, and can be used without installation; the official website provides comprehensive product information, download resources and support services. Whether individuals or corporate users, they can easily obtain and analyze massive data through DeepSeek to improve work efficiency, assist decision-making and promote innovation.

How to install deepseek How to install deepseek Feb 19, 2025 pm 05:48 PM

There are many ways to install DeepSeek, including: compile from source (for experienced developers) using precompiled packages (for Windows users) using Docker containers (for most convenient, no need to worry about compatibility) No matter which method you choose, Please read the official documents carefully and prepare them fully to avoid unnecessary trouble.

BitPie Bitpie wallet app download address BitPie Bitpie wallet app download address Sep 10, 2024 pm 12:10 PM

How to download BitPie Bitpie Wallet App? The steps are as follows: Search for "BitPie Bitpie Wallet" in the AppStore (Apple devices) or Google Play Store (Android devices). Click the "Get" or "Install" button to download the app. For the computer version, visit the official BitPie wallet website and download the corresponding software package.

BITGet official website installation (2025 beginner's guide) BITGet official website installation (2025 beginner's guide) Feb 21, 2025 pm 08:42 PM

BITGet is a cryptocurrency exchange that provides a variety of trading services including spot trading, contract trading and derivatives. Founded in 2018, the exchange is headquartered in Singapore and is committed to providing users with a safe and reliable trading platform. BITGet offers a variety of trading pairs, including BTC/USDT, ETH/USDT and XRP/USDT. Additionally, the exchange has a reputation for security and liquidity and offers a variety of features such as premium order types, leveraged trading and 24/7 customer support.

Zabbix 3.4 Source code compilation installation Zabbix 3.4 Source code compilation installation Sep 04, 2024 am 07:32 AM

1. Installation environment (Hyper-V virtual machine): $hostnamectlStatichostname:localhost.localdomainIconname:computer-vmChassis:vmMachineID:renwoles1d8743989a40cb81db696400BootID:renwoles272f4aa59935dcdd0d456501Virtualization:microsoftOperatingSystem:CentOS Linux7(Core)CPEOSName:cpe:

Ouyi okx installation package is directly included Ouyi okx installation package is directly included Feb 21, 2025 pm 08:00 PM

Ouyi OKX, the world's leading digital asset exchange, has now launched an official installation package to provide a safe and convenient trading experience. The OKX installation package of Ouyi does not need to be accessed through a browser. It can directly install independent applications on the device, creating a stable and efficient trading platform for users. The installation process is simple and easy to understand. Users only need to download the latest version of the installation package and follow the prompts to complete the installation step by step.

Get the gate.io installation package for free Get the gate.io installation package for free Feb 21, 2025 pm 08:21 PM

Gate.io is a popular cryptocurrency exchange that users can use by downloading its installation package and installing it on their devices. The steps to obtain the installation package are as follows: Visit the official website of Gate.io, click "Download", select the corresponding operating system (Windows, Mac or Linux), and download the installation package to your computer. It is recommended to temporarily disable antivirus software or firewall during installation to ensure smooth installation. After completion, the user needs to create a Gate.io account to start using it.

See all articles