Konfigurasi NAT Forwarding di Linux

Aktifkan parameter kernel

echo 'net.ipv4.ip_forward = 1' > /etc/sysctl.d/99-forwarding.conf
sysctl --system

Konfigurasi firewalld

nmcli connection migrate
nmcli connection modify eth0 connection.zone public
nmcli device modify eth0 connection.zone public
nmcli connection modify eth1 connection.zone internal
nmcli device modify eth1 connection.zone internal

firewall-cmd --permanent --zone=public --add-masquerade
firewall-cmd --permanent --new-policy NAT-int-to-ext
firewall-cmd --permanent --policy NAT-int-to-ext --add-ingress-zone internal
firewall-cmd --permanent --policy NAT-int-to-ext --add-egress-zone public
firewall-cmd --permanent --policy NAT-int-to-ext --set-target ACCEPT
firewall-cmd --reload

Khusus untuk Proxmox Virtual Environment

auto vmbr0
iface vmbr0 inet manual
        bridge-ports eth0
        bridge-stp off
        bridge-fd 0
        post-up echo 1 > /proc/sys/net/ipv4/conf/vmbr0/forwarding
        post-down echo 0 > /proc/sys/net/ipv4/conf/vmbr0/forwarding
#Jaringan Publik

Konfigurasi DNS Server Sederhana di Linux untuk Keperluan Lab

Instalasi paket dependensi

dnf install -y dnsmasq

Konfigurasi server upstream dnsmasq

cat <<EOF | tee -a /etc/dnsmasq.conf
server=1.1.1.1
server=1.0.0.1
EOF

Konfigurasi dnsmasq untuk menulis ulang permintaan DNS

cat <<EOF | tee /etc/dnsmasq.d/lab.homelab.is-a.dev.conf
address=/homelab.is-a.dev/10.79.80.3
cname=blog.homelab.is-a.dev,homelab.is-a.dev
EOF

Referensi