\u672c\u6587\u4e3b\u8981\u4ecb\u7ecdLinux\u4e2d，Centos\u3001Ubuntu\u548cDebian\u5f00\u653e\u9632\u706b\u5899\u7aef\u53e3\u7684\u547d\u4ee4(iptables\u3001firewalld\u548cufw)\u65b9\u6cd5\u3002 1\u3001Centos\u4e2d\u5f00\u653e\u7aef\u53e3 1.systemctl start firewalld.service（\u5f00\u542f\u9632\u706b\u5899）<\/p>\n
2.systemctl stop firewalld.service（\u5173\u95ed\u9632\u706b\u5899）<\/p>\n
1） CentOS\/RHEL 5\/6<\/p>\n
\u5982\u9700\u8981\u5f00\u653e80\u548c443\u7aef\u53e3，\u5982\u4e0b：<\/p>\n
[root@kube-master ~]# iptables -I INPUT -p tcp -m tcp -dport 80 -j ACCEPT
\n[root@kube-master ~]# iptables -I INPUT -p tcp -m tcp -dport 443 -j ACCEPT
\n[root@kube-master ~]# service iptables save<\/p>\n
\u67e5\u770b\u89c4\u5219：<\/p>\n
iptables -L -n <\/p>\n
\u53c2\u8003\u6587\u6863：Linux iptables\u9632\u706b\u5899\u7684\u4f7f\u7528\u914d\u7f6e<\/p>\n
2）CentOS\/RHEL 7<\/p>\n
sudo firewall-cmd –zone=public –permanent –add-port=PORT\/tcp
\nsudo firewall-cmd –reload<\/p>\n
\u5982\u9700\u8981\u5f00\u653e80\u548c443\u7aef\u53e3，\u5982\u4e0b：<\/p>\n
sudo firewall-cmd –zone=public –permanent –add-port=80\/tcp
\nsudo firewall-cmd –zone=public –permanent –add-port=443\/tcp
\nsudo firewall-cmd –reload<\/p>\n
\u53c2\u8003\u6587\u6863：Linux firewalld\u9632\u706b\u5899\u7684\u4f7f\u7528\u914d\u7f6e<\/p>\n
3）\u5e38\u7528\u547d\u4ee4<\/p>\n
\u67e5\u770b\u9632\u706b\u5899\u662f\u5426\u5f00\u542f：<\/p>\n
systemctl status firewalld \u67e5\u770b\u6240\u6709\u5f00\u542f\u7684\u7aef\u53e3：<\/p>\n
firewall-cmd –list-ports \u5e38\u7528\u547d\u4ee4\u4ecb\u7ecd：<\/p>\n
firewall-cmd –state ##\u67e5\u770b\u9632\u706b\u5899\u72b6\u6001，\u662f\u5426\u662frunning
\nfirewall-cmd –reload ##\u91cd\u65b0\u8f7d\u5165\u914d\u7f6e，\u6bd4\u5982\u6dfb\u52a0\u89c4\u5219\u4e4b\u540e，\u9700\u8981\u6267\u884c\u6b64\u547d\u4ee4
\nfirewall-cmd –get-zones ##\u5217\u51fa\u652f\u6301\u7684zone
\nfirewall-cmd –get-services ##\u5217\u51fa\u652f\u6301\u7684\u670d\u52a1，\u5728\u5217\u8868\u4e2d\u7684\u670d\u52a1\u662f\u653e\u884c\u7684
\nfirewall-cmd –query-service ftp ##\u67e5\u770bftp\u670d\u52a1\u662f\u5426\u652f\u6301，\u8fd4\u56deyes\u6216\u8005no
\nfirewall-cmd –add-service=ftp ##\u4e34\u65f6\u5f00\u653eftp\u670d\u52a1
\nfirewall-cmd –add-service=ftp –permanent ##\u6c38\u4e45\u5f00\u653eftp\u670d\u52a1
\nfirewall-cmd –remove-service=ftp –permanent ##\u6c38\u4e45\u79fb\u9664ftp\u670d\u52a1
\nfirewall-cmd –add-port=80\/tcp –permanent ##\u6c38\u4e45\u6dfb\u52a080\u7aef\u53e3
\niptables -L -n ##\u67e5\u770b\u89c4\u5219，\u8fd9\u4e2a\u547d\u4ee4\u662f\u548ciptables\u7684\u76f8\u540c\u7684<\/p>\n
2\u3001Ubuntu & Debian\u4e2d\u5f00\u53d1\u7aef\u53e3 1）\u67e5\u770b\u9632\u706b\u5899\u72b6\u6001<\/p>\n
sudo ufw status verbose<\/p>\n
2）\u5f00\u653e\u6307\u5b9a\u7aef\u53e3<\/p>\n
\u5982\u9700\u8981\u5f00\u653e80\u548c443\u7aef\u53e3，\u5982\u4e0b：<\/p>\n
sudo ufw allow 80\/tcp
\nsudo ufw allow 443\/tcp
\nsudo ufw reload<\/p>\n
3）\u5e38\u7528\u547d\u4ee4<\/p>\n
ufw status \u67e5\u770b\u9632\u706b\u5899\u72b6\u6001<\/p>\n
ufw enable \u5f00\u542f\u9632\u706b\u5899<\/p>\n
ufw disable \u5173\u95ed\u9632\u706b\u5899<\/p>\n
ufw reset \u91cd\u7f6e\u9632\u706b\u5899，\u5c06\u5220\u9664\u4e4b\u524d\u5b9a\u4e49\u7684\u6240\u6709\u8fc7\u6ee4\u89c4\u5219<\/p>\n
ufw allow \u5141\u8bb8\u901a\u8fc7<\/p>\n
ufw deny \u7981\u6b62\u901a\u8fc7<\/p>\n","protected":false},"excerpt":{"rendered":"
\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb658\u6b21\uff0c\u70b9\u8d5e5\u6b21\uff0c\u6536\u85cf2\u6b21\u30021.systemctl start firewalld.service\uff08\u5f00\u542f\u9632\u706b\u5899\uff092.systemctl stop firewalld.service\uff08\u5173\u95ed\u9632\u706b\u5899\uff09ufw reset \u91cd\u7f6e\u9632\u706b\u5899\uff0c\u5c06\u5220\u9664\u4e4b\u524d\u5b9a\u4e49\u7684\u6240\u6709\u8fc7\u6ee4\u89c4\u5219\u3002\u53c2\u8003\u6587\u6863\uff1aLinux firewalld\u9632\u706b\u5899\u7684\u4f7f\u7528\u914d\u7f6e\u3002\u53c2\u8003\u6587\u6863\uff1aLinux iptables\u9632\u706b\u5899\u7684\u4f7f\u7528\u914d\u7f6e\u3002ufw status \u67e5\u770b\u9632\u706b\u5899\u72b6\u6001\u3002ufw disable \u5173\u95ed\u9632\u706b\u5899\u3002ufw enable \u5f00\u542f\u9632\u706b\u5899\u3002ufw allow \u5141\u8bb8\u901a\u8fc7\u30021\u3001Centos\u4e2d\u5f00\u653e\u7aef\u53e3\u3002_debian\u5f00\u653e\u7aef\u53e3\u547d\u4ee4<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[58,43,44],"topic":[],"class_list":["post-32534","post","type-post","status-publish","format-standard","hentry","category-server","tag-linux","tag-43","tag-44"],"yoast_head":"\n