linux开启iptables端口转发

#开机BBr和端口转发
echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
echo "net.ipv4.ip_forward=1" >>/etc/sysctl.conf
#保存
sysctl -p

#将本机172.17.43.112的443端口转发至172.17.43.113的443端口
iptables -t nat  -A PREROUTING -p tcp -m tcp --dport 443 -j DNAT --to-destination 172.17.43.113:443
iptables -t nat  -A POSTROUTING -d 172.17.43.113 -p tcp -m tcp --dport 443 -j SNAT --to-source 172.17.43.112
#将配置文件保存
iptables-save > /etc/iptables.up.rules

#创建开机脚本，使iptable能够开机恢复
touch /etc/rc.local
echo "#!bin/bash" >> /etc/rc.local
echo "iptables-restore < /etc/iptables.up.rules" >>/etc/rc.local
chmod +x /etc/rc.local

#验证一下
cat /etc/rc.local
如果不对，请自己修改脚本。将下面的添加进去
iptables-restore < /etc/iptables.up.rules