第二節：Private Networks（私有網絡） · Vagrant學習文檔

Private Networks (私有網絡） 1、什么是私有網絡就是不能路由到公網，通過私有網絡獲取的IP地址，不能上網，只能在這個私有網絡中的機器可以互相通信 2、應用場景 1）當我們搭建一個集群架構（反向代理）的時候，我們需要隱藏后面的web服務器，那么此時就可以讓這個web服務器獲取一個私有網絡的IP 2）讓一些服務，不讓其監聽到公網，只監聽到內網IP，避免一些攻擊 3、私有網段包含哪些 (這里的*表示可以設置1-255中的任意值） A類地址： 10.*.*.*/8 (10.*.*.*/255.0.0.0) B類地址： 172.16.*.*/16-----172.32.*.*/16 (172.16.*.*/255.255.0.0---172.31.*.*/255.255.0.0) C類地址：192.168.*.*/255.255.255.0 (注意：配置vagrant里面的虛擬機的私有網段的時候，切記不能和企業（公司）內部的DHCP分配的IP地址在同一網段，否則會發生沖突 4、配置 1）通過dhcp獲取案例： [root@vagrant ubuntu]# vagrant suspend ==> default: Saving VM state and suspending execution... [root@vagrant ubuntu]# vim Vagrantfile 添加如下 config.vm.network "private_network", type: "dhcp" 重新reload [root@vagrant ubuntu]# vagrant reload 查看： [root@vagrant ubuntu]# vagrant ssh Welcome to Ubuntu 16.04.3 LTS (GNU/Linux 4.4.0-112-generic x86_64) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/advantage Get cloud support with Ubuntu Advantage Cloud Guest: http://www.ubuntu.com/business/services/cloud 0 packages can be updated. 0 updates are security updates. Last login: Tue Jan 30 08:08:03 2018 from 10.0.2.2 vagrant@ubuntu-xenial:~$ ifconfig enp0s3 Link encap:Ethernet HWaddr 02:1f:2a:60:99:e3 inet addr:10.0.2.15 Bcast:10.0.2.255 Mask:255.255.255.0 inet6 addr: fe80::1f:2aff:fe60:99e3/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:688 errors:0 dropped:0 overruns:0 frame:0 TX packets:414 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:262440 (262.4 KB) TX bytes:54424 (54.4 KB) enp0s8 Link encap:Ethernet HWaddr 08:00:27:db:ae:a8 inet addr:172.28.128.3 Bcast:172.28.128.255 Mask:255.255.255.0 inet6 addr: fe80::a00:27ff:fedb:aea8/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:2 errors:0 dropped:0 overruns:0 frame:0 TX packets:10 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1180 (1.1 KB) TX bytes:1332 (1.3 KB) (這里的172.28.128.3就是私有網絡的地址） lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) （由于通過動態DHCP分配，IP地址我們沒法預計，因此一般通過配置static IP地址） 2）Static IP （虛擬機A） [root@vagrant ubuntu]# vim Vagrantfile config.vm.network "private_network", ip: "192.168.50.10" （虛擬機B） [root@vagrant ubuntu16.04_xionghaihua]# vim Vagrantfile config.vm.network "private_network", ip: "192.168.55.20" 然后分別啟動虛擬機A，虛擬機B 虛擬機A的如下： [root@vagrant ubuntu]# vagrant ssh Welcome to Ubuntu 16.04.3 LTS (GNU/Linux 4.4.0-112-generic x86_64) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/advantage Get cloud support with Ubuntu Advantage Cloud Guest: http://www.ubuntu.com/business/services/cloud 0 packages can be updated. 0 updates are security updates. vagrant@ubuntu-xenial:~$ ifconfig enp0s3 Link encap:Ethernet HWaddr 02:1f:2a:60:99:e3 inet addr:10.0.2.15 Bcast:10.0.2.255 Mask:255.255.255.0 inet6 addr: fe80::1f:2aff:fe60:99e3/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:839 errors:0 dropped:0 overruns:0 frame:0 TX packets:508 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:283219 (283.2 KB) TX bytes:68401 (68.4 KB) enp0s8 Link encap:Ethernet HWaddr 08:00:27:63:d4:ca inet addr:192.168.50.10 Bcast:192.168.50.255 Mask:255.255.255.0 inet6 addr: fe80::a00:27ff:fe63:d4ca/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:8 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:648 (648.0 B) 虛擬機B的如下 [root@vagrant ubuntu16.04_xionghaihua]# vagrant ssh Welcome to Ubuntu 16.04.3 LTS (GNU/Linux 4.4.0-112-generic x86_64) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/advantage Get cloud support with Ubuntu Advantage Cloud Guest: http://www.ubuntu.com/business/services/cloud 0 packages can be updated. 0 updates are security updates. vagrant@ubuntu-xenial:~$ ifconfig enp0s8 Link encap:Ethernet HWaddr 08:00:27:5b:dd:df inet addr:192.168.50.20 Bcast:192.168.55.255 Mask:255.255.255.0 inet6 addr: fe80::a00:27ff:fe5b:dddf/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:8 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:648 (648.0 B) 最后測試，虛擬機之間是否可以互通 ![](https://box.kancloud.cn/8241e2a28d5abd39124820c620009caf_1249x478.png) 注意：如果你想通過手工靜態指定IP地址，切記 1）不能和公司內部的DHCP分配的地址沖突 2）可以添加auto_config: false （關閉自動配置的功能）案例如下 Vagrant.configure("2") do |config| config.vm.network "private_network", ip: "192.168.50.10", auto_config: false end