Docker下CentOS7配置IPV6并支持Nginx访问

Docker下CentOS7配置IPV6并支持Nginx访问

---

配置docker

##需要修改docker配置文件，配置支持IPV6,下面的配置仅供参考
{
  "experimental": true,
  "fixed-cidr-v6": "2607:f0d0:1002:51::/66", ## 必填，指定IPV6网段
  "ip6tables": false, ## false 或者不写
  "ipv6": true, ## 必填
  "registry-mirrors": [ ## 推荐配置为国内地址，这里使用的是阿里云地址
    "https://z4j0vmao.mirror.aliyuncs.com"
  ]
}

创建容器

docker run -d --name centos7-port  --privileged=true  -p 80:80 -p 8080:8080 -p 8088:8088  -v D:/docker/centos/home:/home centos:centos7.9.2009 /usr/sbin/init

命令	含义
–name centos7-port	容器名字叫 centos7-port
–privileged=true	获取特权
-p 80:80 -p 8080:8080 -p 8088:8088	映射80 8080 8088 三个端口
-v D:/docker/centos/home:/home	将本机 D:/docker/centos/home 映射到容器的 /home
centos:centos7.9.2009	指定使用的镜像，没有的先下载
/usr/sbin/init	初始化容器

更新依赖

yum update -y

测试 IPV6地址

查看IPV6地址

sh-4.2# yum install net-tools
sh-4.2# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.17.0.2  netmask 255.255.0.0  broadcast 172.17.255.255
        ## 下面就是IPV6地址，但是注意，这是容器的地址，并是不主机的地址，要访问的也不是这个地址
        inet6 2607:f0d0:1002:51:0:242:ac11:2  prefixlen 66  scopeid 0x0<global>
        inet6 fe80::42:acff:fe11:2  prefixlen 64  scopeid 0x20<link>
        ether 02:42:ac:11:00:02  txqueuelen 0  (Ethernet)
        RX packets 111287  bytes 162126536 (154.6 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 29610  bytes 1984231 (1.8 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

sh-4.2# 

使用 ping 命令测试

sh-4.2# ping6 2607:f0d0:1002:51:0:242:ac11:2
PING 2607:f0d0:1002:51:0:242:ac11:2(2607:f0d0:1002:51:0:242:ac11:2) 56 data bytes
64 bytes from 2607:f0d0:1002:51:0:242:ac11:2: icmp_seq=1 ttl=64 time=0.023 ms
64 bytes from 2607:f0d0:1002:51:0:242:ac11:2: icmp_seq=2 ttl=64 time=0.025 ms
64 bytes from 2607:f0d0:1002:51:0:242:ac11:2: icmp_seq=3 ttl=64 time=0.023 ms
64 bytes from 2607:f0d0:1002:51:0:242:ac11:2: icmp_seq=4 ttl=64 time=0.071 ms
64 bytes from 2607:f0d0:1002:51:0:242:ac11:2: icmp_seq=5 ttl=64 time=0.092 ms
64 bytes from 2607:f0d0:1002:51:0:242:ac11:2: icmp_seq=6 ttl=64 time=0.083 ms
^C
--- 2607:f0d0:1002:51:0:242:ac11:2 ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 5210ms
rtt min/avg/max/mdev = 0.023/0.052/0.092/0.031 ms

Linux 防火墙开放ipv6的80端口

我测试不需要这样，根据具体以情况选择是否执行

[root@localhost ~]# ip6tables -I INPUT -p tcp --dport 80 -j ACCEPT
[root@localhost ~]# Service ip6tables save

下载Nginx

安装下载工具

yum install wget -y

创建Nginx文件夹

sh-4.2# cd /home/  
sh-4.2# mkdir nginx
sh-4.2# cd ./nginx

下载Nginx安装包

wget https://nginx.org/download/nginx-1.4.6.tar.gz

安装Nginx需要的依赖

yum install -y pcre pcre-devel  gcc gcc-c++  zlib zlib-devel  openssl openssl-devel iptables-ipv6

安装Nginx

解压安装包

tar -xzvf nginx-1.4.6.tar.gz 

创建安装文件夹

sh-4.2# mkdir nginxInstall
sh-4.2# cd ./nginxInstall/
sh-4.2# pwd
/home/nginx/nginxInstall
sh-4.2# 

配置安装位置和模块

sh-4.2# cd ./nginx-1.4.6
sh-4.2# pwd
/home/nginx/nginx-1.4.6
sh-4.2#./configure --prefix=/home/nginx/nginxInstall --with-http_stub_status_module --without-http-cache --with-http_ssl_module --with-http_gzip_static_module --with-ipv6  

编译并安装

make && make install

配置环境变量

sh-4.2# pwd                  
/home/nginx/nginx-1.4.6
sh-4.2# ls
CHANGES  CHANGES.ru  LICENSE  Makefile  README  auto  conf  configure  contrib  html  man  objs  src
## 安装编辑器
sh-4.2# yum install vim -y
sh-4.2# vim /etc/profile
## 演示环境是新创建的容器，没有多余的环境变量，增加如下两行
export NGINX_HOME=/home/nginx/nginxInstall
export PATH=$NGINX_HOME/sbin:$PATH
## 刷新环境变量
sh-4.2# source /etc/profile

启动Nginx

sh-4.2# pwd
/home/nginx/nginx-1.4.6
sh-4.2# nginx 
sh-4.2# ps -ef|grep nginx
root      2723     1  0 06:47 ?        00:00:00 nginx: master process nginx
nobody    2724  2723  0 06:47 ?        00:00:00 nginx: worker process
root      2726    63  0 06:47 pts/0    00:00:00 grep --color=auto nginx
sh-4.2# 

访问测试

由于使用的是虚拟机，并将端口与主机共享，所有使用主机地址测试

使用主机浏览器访问 http://127.0.0.1/ 出现Nginx 环境页面说明安装正常

配置IPV6

sh-4.2# cd /home/nginx/nginxInstall/conf/
sh-4.2# cp nginx.conf nginx.conf.backup
sh-4.2# vim nginx.conf
## 在 nginx.conf 中增加  listen     [::]:80; 如下：
    server {
        listen       80;
        listen     [::]:80;
## 测试Nginx 是否正常
sh-4.2# nginx  -t  
nginx: the configuration file /home/nginx/nginxInstall/conf/nginx.conf syntax is ok
nginx: configuration file /home/nginx/nginxInstall/conf/nginx.conf test is successful
## 重新加载Nginx
sh-4.2# nginx -s reload 

测试IPV6

使用 curl 测试

sh-4.2# curl -6 -g 'http://[2607:f0d0:1002:51:0:242:ac11:2]:80'
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

使用wget 测试

sh-4.2# wget -6 'http://[2607:f0d0:1002:51:0:242:ac11:2]:80'
--2023-06-12 02:15:23--  http://[2607:f0d0:1002:51:0:242:ac11:2]/
Connecting to [2607:f0d0:1002:51:0:242:ac11:2]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 612 [text/html]
Saving to: 'index.html'

100%[=====================================================================================================>] 612         --.-K/s   in 0s      

2023-06-12 02:15:23 (146 MB/s) - 'index.html' saved [612/612]

sh-4.2# 

使用 telnet 测试

sh-4.2# yum install telnet-server           
sh-4.2# yum install telnet.*            
sh-4.2# telnet -6 2607:f0d0:1002:51:0:242:ac11:2 80
Trying 2607:f0d0:1002:51:0:242:ac11:2...
Connected to 2607:f0d0:1002:51:0:242:ac11:2.
Escape character is '^]'.
^CConnection closed by foreign host.
sh-4.2#