Centos7下Rinetd安装与应用

功能

Linux下做地址NAT有很多种方法。比如haproxy、nginx的4层代理，linux自带的iptables等都能实现。haproxy、nginx就不说了，配置相对简单；iptables配置复杂，概念也比较多DNAT、SNAT、PREROUTING、POSTROUTING等等。其实，Linux下有一个叫rinetd的工具，安装简单，配置也不复杂。

方案

购买一台阿里云服务器，开通外网IP地址。

安装 rinetd

[root@izj5eh8c7rfv50sfupusmaz ~]# wget http://www.boutell.com/rinetd/http/rinetd.tar.gz&&tar -xvf rinetd.tar.gz&&cd rinetd
[root@izj5eh8c7rfv50sfupusmaz rinetd]# sed -i 's/65536/65535/g' rinetd.c
[root@izj5eh8c7rfv50sfupusmaz rinetd]# mkdir /usr/man&&make&&make install
[root@izj5eh8c7rfv50sfupusmaz rinetd]# vi /etc/rinetd.conf
 0.0.0.0 3306 rm-j5e2xewm3n22637yk.mysql.rds.aliyuncs.com 3306
 [root@izj5eh8c7rfv50sfupusmaz rinetd]# cat /etc/rinetd.conf
0.0.0.0 3306 rm-j5e2xewm3n22637yk.mysql.rds.aliyuncs.com 3306
[root@izj5eh8c7rfv50sfupusmaz rinetd]# rinetd
[root@izj5eh8c7rfv50sfupusmaz rinetd]# cat /etc/rinetd.conf
0.0.0.0 6666 rm-j5e2xewm3n22637yk.mysql.rds.aliyuncs.com 3306
[root@izj5eh8c7rfv50sfupusmaz rinetd]# ps -ef | grep rinetd
root 2557 1 0 15:52 pts/0 00:00:00 rinetd
root 2564 1 0 15:52 pts/0 00:00:00 rinetd
root 2571 1 0 15:53 pts/0 00:00:00 rinetd
root 2576 1 0 15:53 pts/0 00:00:00 rinetd
root 2610 1 0 15:59 pts/0 00:00:00 rinetd
root 2672 1 0 16:05 pts/0 00:00:00 rinetd -c /etc/rinetd.conf
root 2678 1 0 16:06 pts/0 00:00:00 rinetd
root 2694 1 0 16:09 pts/0 00:00:00 rinetd
root 27291 1 0 16:39 pts/0 00:00:00 rinetd
root 27304 2315 0 16:40 pts/0 00:00:00 grep --color=auto rinetd
[root@izj5eh8c7rfv50sfupusmaz rinetd]# ss -tnlp
State Recv-Q Send-Q Local Address:Port Peer Address:Port 
LISTEN 0 5 *:6666 *:* users:(("rinetd",pid=27291,fd=4))
LISTEN 0 128 *:22 *:* users:(("sshd",pid=2259,fd=3))
LISTEN 0 1 127.0.0.1:32000 *:* users:(("java",pid=1494,fd=4))

mysql授权

指定库指定名指定权限

CREATE USER 'lucky'@'%' IDENTIFIED BY 'lucky2758';
grant all privileges on lucky.* to 'lucky'@'%';