阅读46 返回首页    go 阿里云

多应用共享公网带宽__最佳实践_用户指南_专有网络 VPC-阿里云

概述

用户的系统中有多个应用要面向互联网提供服务；出于带宽管理、成本节省的角度，希望购买一份带宽给这些应用共享。

本文介绍如何利用NAT网关的DNAT功能和共享带宽功能实现多应用的共享带宽。

关于API与控制台

NAT网关产品，提供了web控制台供用户进行选购和配置；同时也提供了API，供用户通过代码实现资源的选购和配置，从而能够自动化的完成一些系统部署和变更动作。

本文侧重于使用API来完成操作。但是，所有具体步骤均可以在控制台上找到相应的操作。

为了方便用户调用API，本文给出了一个用python语言编写的Commond Line工具。见下面的 前期准备-CLI工具的准备 章节。基于此工具，用户可以用命令行方式进行NAT网关相关资源的购买和配置。具体的使用方法，可以参照本文每一步操作中给出的命令样例。用户可以根据自己的需求和资源的id对命令进行改写，完成操作。

前期准备

部署规划

假设我们的系统中有四个面向互联网的应用，需要使用三个公网IP；另外需要一个ECS和一个IP作为服务器管理的跳板机来使用；另准备一个公网IP暂时闲置，备用。整体资源规划如下：

  1. 带宽需求总量：150Mbps
  2. 公网IP需求总量：4个；另外多购买一个IP，以备使用；总共购买5个公网IP。
  3. ECS需求总量：5个
  4. 公网IP与ECS的映射关系：
  5.     IP1->ECS1
  6.     IP2->ECS2
  7.     IP3->ECS3/ECS4;
  8.         其中，
  9.         80端口映射给ECS3的80端口；
  10.         443端口映射给ECS4的443端口；
  11.     IP4->ECS5（运维跳板机），仅开放22端口；
  12.     IP5：暂不添加DNAT规则；

VPC与ECS的准备

创建VPC与ECS，配置成如下图中所示的状态。注意，这些ECS实例不需要公网IP。

本文侧重于介绍多应用带宽共享部分的实现，因此，VPC和ECS的创建过程不予赘述。

假设现在已经创建好的VPC与ECS资源相关情况如下：

  1.     VPC:
  2.         VpcId: vpc-11af8lp67
  3.     ECS:
  4.         ECS1
  5.             PrivateIP:  192.168.1.1
  6.         ECS2
  7.             PrivateIP:  192.168.1.2
  8.         ECS3
  9.             PrivateIP:  192.168.1.3
  10.         ECS4
  11.             PrivateIP:  192.168.1.4
  12.         ECS5
  13.             PrivateIP:  192.168.1.5

nat-gw-最佳实践-ECS列表截图

CLI工具的准备

CLI工具下载

下载cli工具：api.py

linux环境下可以直接使用wget命令进行下载。命令和运行效果截图如下：

  1. wget https://docs-aliyun.cn-hangzhou.oss.aliyun-inc.com/assets/attach/42691/cn_zh/1468947102311/api.py

下载CLI工具

创建并查看AccessKey

AccessKey可以在AccessKey管理控制台进行申请和管理。

AccessKey管理页面

为CLI工具配置AccessKey

配置命令如下图所示：

CLI工具配置AccessKey

操作步骤

创建NAT Gateway

在当前VPC中创建一个NAT网关，并在该NAT网关上放置一个共享带宽包，其中包含150Mbps的带宽和5个公网IP；

相应的CLI命令和获取到的返回信息如下：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py CreateNatGateway RegionId=cn-shanghai VpcId=vpc-11af8lp67 BandwidthPackage.1.IpCount=4 BandwidthPackage.1.Bandwidth=150 BandwidthPackage.1.Zone=cn-shanghai-a Name=MyNatGW Description="My first NAT Gateway"
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&VpcId=vpc-11af8lp67&Name=MyNatGW&Format=json&TimeStamp=2016-05-23T03%3A26%3A21Z&BandwidthPackage.1.IpCount=5&RegionId=cn-shanghai&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=I4KKhWgjJdImTqk4rCifAB3LbLw%3D&action=CreateNatGateway&SignatureNonce=1ebae49c-2096-11e6-b781-2cf0ee28adf2&BandwidthPackage.1.Bandwidth=150&BandwidthPackage.1.Zone=cn-shanghai-a&Description=My+first+NAT+Gateway
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "BandwidthPackageIds": {
  9.     "BandwidthPackageId": [
  10.       "bwp-11odxu2k7"
  11.     ]
  12.   },
  13.   "ForwardTableIds": {
  14.     "ForwardTableId": [
  15.       "ftb-11tc6xgmv"
  16.     ]
  17.   },
  18.   "NatGatewayId": "ngw-112za33e4",
  19.   "RequestId": "2315DEB7-5E92-423A-91F7-4C1EC9AD97C3"
  20. }

通过DescribeNatGateways、DescribeBandwidthPackages查看创建出来的NAT网关和共享带宽包的详细信息。

  1. [admin@tester:nat_gw_cli_tool]$ python api.py DescribeNatGateways RegionId=cn-shanghai VpcId=vpc-11af8lp67
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&VpcId=vpc-11af8lp67&Format=json&TimeStamp=2016-05-23T03%3A27%3A14Z&RegionId=cn-shanghai&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=JvXErso9g0fZdRTgBtNLepe%2F1e4%3D&action=DescribeNatGateways&SignatureNonce=3e1424eb-2096-11e6-bc31-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "NatGateways": {
  9.     "NatGateway": [
  10.       {
  11.         "BandwidthPackageIds": {
  12.           "BandwidthPackageId": [
  13.             "bwp-11odxu2k7"
  14.           ]
  15.         },
  16.         "BusinessStatus": "Normal",
  17.         "CreationTime": "2016-05-23T03:26:23Z",
  18.         "Description": "My first NAT Gateway",
  19.         "ForwardTableIds": {
  20.           "ForwardTableId": [
  21.             "ftb-11tc6xgmv"
  22.           ]
  23.         },
  24.         "InstanceChargeType": "PostPaid",
  25.         "Name": "MyNatGW",
  26.         "NatGatewayId": "ngw-112za33e4",
  27.         "RegionId": "cn-shanghai",
  28.         "Spec": "Small",
  29.         "Status": "Available",
  30.         "VpcId": "vpc-11af8lp67"
  31.       }
  32.     ]
  33.   },
  34.   "PageNumber": 1,
  35.   "PageSize": 10,
  36.   "RequestId": "FE4C442C-9778-449A-BF7F-7F36C3AF5611",
  37.   "TotalCount": 1
  38. }
  1. [admin@tester:nat_gw_cli_tool]$ python api.py DescribeBandwidthPackages RegionId=cn-shanghai NatGatewayId=ngw-112za33e4
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A33%3A30Z&RegionId=cn-shanghai&NatGatewayId=ngw-112za33e4&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=KN0C2Q4TUZtfECBn1c2lOdBzrb8%3D&action=DescribeBandwidthPackages&SignatureNonce=1e8941ae-2097-11e6-acbb-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "BandwidthPackages": {
  9.     "BandwidthPackage": [
  10.       {
  11.         "Bandwidth": "150",
  12.         "BandwidthPackageId": "bwp-11odxu2k7",
  13.         "BusinessStatus": "Normal",
  14.         "CreationTime": "2016-05-23T03:26:24Z",
  15.         "Description": "",
  16.         "InstanceChargeType": "PostPaid",
  17.         "InternetChargeType": "PayByBandwidth",
  18.         "IpCount": "5",
  19.         "Name": "",
  20.         "NatGatewayId": "ngw-112za33e4",
  21.         "PublicIpAddresses": {
  22.           "PublicIpAddresse": [
  23.             {
  24.               "AllocationId": "nateip-11iopy3sl",
  25.               "IpAddress": "139.224.22.107"
  26.             },
  27.             {
  28.               "AllocationId": "nateip-11pt1f9ph",
  29.               "IpAddress": "139.224.22.55"
  30.             },
  31.             {
  32.               "AllocationId": "nateip-111ul670c",
  33.               "IpAddress": "139.224.22.79"
  34.             },
  35.             {
  36.               "AllocationId": "nateip-11ogfjj85",
  37.               "IpAddress": "139.224.22.59"
  38.             },
  39.             {
  40.               "AllocationId": "nateip-11s2jempe",
  41.               "IpAddress": "139.224.22.99"
  42.             }
  43.           ]
  44.         },
  45.         "RegionId": "cn-shanghai",
  46.         "Status": "Available",
  47.         "ZoneId": "cn-shanghai-a"
  48.       }
  49.     ]
  50.   },
  51.   "PageNumber": 1,
  52.   "PageSize": 10,
  53.   "RequestId": "14406B86-7CA1-4907-9755-86096F476A4F",
  54.   "TotalCount": 1
  55. }

进行DNAT配置

在NAT网关的端口转发表中，添加五条端口映射规则；

  1.     Ip1:Any -> ecs-ip1:Any, protocal=Any
  2.     Ip2:Any -> ecs-ip2:Any, protocal=Any
  3.     Ip3:80  -> ecs-ip3:80 , protocal=TCP
  4.     Ip3:443 -> ecs-ip3:443, protocal=TCP
  5.     IP4:22  -> ecs-ip4:22 , protocal=TCP

CLI命令和获得的返回信息如下：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.107 ExternalPort=Any InternalIp=192.168.1.1 InternalPort=Any IpProtocol=Any
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.107&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A53%3A18Z&RegionId=cn-shanghai&ExternalPort=Any&InternalIp=192.168.1.1&Signature=iR4GSzhJQtowMJOj%2FRth3ABP4FA%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=Any&action=CreateForwardEntry&SignatureNonce=e2ceae11-2099-11e6-b548-2cf0ee28adf2&InternalPort=Any
  4. =====Request URL end======
  6. ====== Got Response ======
  7. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.107 ExternalPort=Any InternalIp=192.168.1.1 InternalPort=Any IpProtocol=Any
  8. =====Request URL======
  9. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.107&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A53%3A18Z&RegionId=cn-shanghai&ExternalPort=Any&InternalIp=192.168.1.1&Signature=iR4GSzhJQtowMJOj%2FRth3ABP4FA%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=Any&action=CreateForwardEntry&SignatureNonce=e2ceae11-2099-11e6-b548-2cf0ee28adf2&InternalPort=Any
  10. =====Request URL end======
  12. ====== Got Response ======
  13. {
  14.   "ForwardEntryId": "fwd-119smw5tk",
  15.   "RequestId": "A4AEE536-A97A-40EB-9EBE-53A6948A6928"
  16. }
  17. [admin@tester:nat_gw_cli_tool]$
  18. [admin@tester:nat_gw_cli_tool]$
  19. [admin@tester:nat_gw_cli_tool]$
  20. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.55 ExternalPort=Any InternalIp=192.168.1.2 InternalPort=Any IpProtocol=Any
  21. =====Request URL======
  22. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.55&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A53%3A42Z&RegionId=cn-shanghai&ExternalPort=Any&InternalIp=192.168.1.2&Signature=mFBn%2BCd4LfHkKj53MwmWyMhzyfs%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=Any&action=CreateForwardEntry&SignatureNonce=f09c1b38-2099-11e6-aa80-2cf0ee28adf2&InternalPort=Any
  23. =====Request URL end======
  25. ====== Got Response ======
  26. {
  27.   "ForwardEntryId": "fwd-11dz3ly9l",
  28.   "RequestId": "5DBC8F86-2D76-4BF4-B839-7FF31B61D516"
  29. }
  30. [admin@tester:nat_gw_cli_tool]$
  31. [admin@tester:nat_gw_cli_tool]$
  32. [admin@tester:nat_gw_cli_tool]$
  33. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.79 ExternalPort=80 InternalIp=192.168.1.3 InternalPort=80 IpProtocol=TCP
  34. =====Request URL======
  35. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.79&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A54%3A10Z&RegionId=cn-shanghai&ExternalPort=80&InternalIp=192.168.1.3&Signature=OpTui3SKbAjKXy6gKRoJb%2B9Lazg%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=TCP&action=CreateForwardEntry&SignatureNonce=01c41d5c-209a-11e6-905e-2cf0ee28adf2&InternalPort=80
  36. =====Request URL end======
  38. ====== Got Response ======
  39. {
  40.   "ForwardEntryId": "fwd-11r23r7p5",
  41.   "RequestId": "67B7AAFD-E7AB-4EB8-AA5C-AA38CFFB4A95"
  42. }
  43. [admin@tester:nat_gw_cli_tool]$
  44. [admin@tester:nat_gw_cli_tool]$
  45. [admin@tester:nat_gw_cli_tool]$
  46. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.79 ExternalPort=443 InternalIp=192.168.1.4 InternalPort=443 IpProtocol=TCP
  47. =====Request URL======
  48. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.79&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A55%3A22Z&RegionId=cn-shanghai&ExternalPort=443&InternalIp=192.168.1.4&Signature=X%2BZtHbTeKYf8xU%2FvWhPAmg%2B5scc%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=TCP&action=CreateForwardEntry&SignatureNonce=2c3f2573-209a-11e6-be0f-2cf0ee28adf2&InternalPort=443
  49. =====Request URL end======
  51. ====== Got Response ======
  52. {
  53.   "ForwardEntryId": "fwd-11cdhpjlk",
  54.   "RequestId": "260A9673-5522-4F66-844A-1F1AB47CD21C"
  55. }
  56. [admin@tester:nat_gw_cli_tool]$
  57. [admin@tester:nat_gw_cli_tool]$
  58. [admin@tester:nat_gw_cli_tool]$
  59. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.59 ExternalPort=22 InternalIp=192.168.1.5 InternalPort=22 IpProtocol=TCP
  60. =====Request URL======
  61. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.59&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A55%3A44Z&RegionId=cn-shanghai&ExternalPort=22&InternalIp=192.168.1.5&Signature=%2FZWf5%2ForHr%2BUR446eEBLC4LNYe8%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=TCP&action=CreateForwardEntry&SignatureNonce=39863cf3-209a-11e6-8f6d-2cf0ee28adf2&InternalPort=22
  62. =====Request URL end======
  64. ====== Got Response ======
  65. {
  66.   "ForwardEntryId": "fwd-11iv34uj7",
  67.   "RequestId": "0884BC12-8EAD-4AAA-826E-30E5435D7C27"
  68. }

查看已添加的DNAT规则

  1. [admin@tester:nat_gw_cli_tool]$ python api.py DescribeForwardTableEntries RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A56%3A18Z&RegionId=cn-shanghai&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=x4%2B6oNYxIRBmND8rcIbJM9EJ8ts%3D&action=DescribeForwardTableEntries&SignatureNonce=4db93223-209a-11e6-81eb-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "ForwardTableEntries": {
  9.     "ForwardTableEntry": [
  10.       {
  11.         "ExternalIp": "139.224.22.107",
  12.         "ExternalPort": "any",
  13.         "ForwardEntryId": "fwd-119smw5tk",
  14.         "ForwardTableId": "ftb-11tc6xgmv",
  15.         "InternalIp": "192.168.1.1",
  16.         "InternalPort": "any",
  17.         "IpProtocol": "any",
  18.         "Status": "Available"
  19.       },
  20.       {
  21.         "ExternalIp": "139.224.22.79",
  22.         "ExternalPort": "443",
  23.         "ForwardEntryId": "fwd-11cdhpjlk",
  24.         "ForwardTableId": "ftb-11tc6xgmv",
  25.         "InternalIp": "192.168.1.4",
  26.         "InternalPort": "443",
  27.         "IpProtocol": "tcp",
  28.         "Status": "Available"
  29.       },
  30.       {
  31.         "ExternalIp": "139.224.22.55",
  32.         "ExternalPort": "any",
  33.         "ForwardEntryId": "fwd-11dz3ly9l",
  34.         "ForwardTableId": "ftb-11tc6xgmv",
  35.         "InternalIp": "192.168.1.2",
  36.         "InternalPort": "any",
  37.         "IpProtocol": "any",
  38.         "Status": "Available"
  39.       },
  40.       {
  41.         "ExternalIp": "139.224.22.59",
  42.         "ExternalPort": "22",
  43.         "ForwardEntryId": "fwd-11iv34uj7",
  44.         "ForwardTableId": "ftb-11tc6xgmv",
  45.         "InternalIp": "192.168.1.5",
  46.         "InternalPort": "22",
  47.         "IpProtocol": "tcp",
  48.         "Status": "Available"
  49.       },
  50.       {
  51.         "ExternalIp": "139.224.22.79",
  52.         "ExternalPort": "80",
  53.         "ForwardEntryId": "fwd-11r23r7p5",
  54.         "ForwardTableId": "ftb-11tc6xgmv",
  55.         "InternalIp": "192.168.1.3",
  56.         "InternalPort": "80",
  57.         "IpProtocol": "tcp",
  58.         "Status": "Available"
  59.       }
  60.     ]
  61.   },
  62.   "PageNumber": 1,
  63.   "PageSize": 10,
  64.   "RequestId": "C84FDDCF-8550-4024-B89C-01E7459D7CF9",
  65.   "TotalCount": 5
  66. }

增加公网IP个数

当用户需要更多公网IP时，可以在共享带宽包中增加公网IP个数，并为这些新增加的公网IP添加DNAT规则。

假设用户现在需要的公网IP个数从5个变成了6个，则使用下面的CLI命令：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py AddBandwidthPackageIps RegionId=cn-shanghai BandwidthPackageId=bwp-11odxu2k7 IpCount=6
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&BandwidthPackageId=bwp-11odxu2k7&Format=json&TimeStamp=2016-05-23T03%3A58%3A18Z&RegionId=cn-shanghai&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=pSjC98nbDGgMl1tdjcXARIfW6t0%3D&action=AddBandwidthPackageIps&SignatureNonce=955c7d70-209a-11e6-907e-2cf0ee28adf2&IpCount=6
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "RequestId": "EC0B5C51-7F40-44D6-A642-1DE764B547EC"
  9. }

执行成功后，可以通过DescribeBandwidthPackages来查看当前带宽包中的IP信息：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py DescribeBandwidthPackages RegionId=cn-shanghai NatGatewayId=ngw-112za33e4
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A58%3A53Z&RegionId=cn-shanghai&NatGatewayId=ngw-112za33e4&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=OnVBAnWbJKF7G5JAQrD44QhMJMo%3D&action=DescribeBandwidthPackages&SignatureNonce=aa42a599-209a-11e6-92cc-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "BandwidthPackages": {
  9.     "BandwidthPackage": [
  10.       {
  11.         "Bandwidth": "150",
  12.         "BandwidthPackageId": "bwp-11odxu2k7",
  13.         "BusinessStatus": "Normal",
  14.         "CreationTime": "2016-05-23T03:26:24Z",
  15.         "Description": "",
  16.         "InstanceChargeType": "PostPaid",
  17.         "InternetChargeType": "PayByBandwidth",
  18.         "IpCount": "6",
  19.         "Name": "",
  20.         "NatGatewayId": "ngw-112za33e4",
  21.         "PublicIpAddresses": {
  22.           "PublicIpAddresse": [
  23.             {
  24.               "AllocationId": "nateip-1110a2l48",
  25.               "IpAddress": "139.224.22.118"
  26.             },
  27.             {
  28.               "AllocationId": "nateip-11iopy3sl",
  29.               "IpAddress": "139.224.22.107"
  30.             },
  31.             {
  32.               "AllocationId": "nateip-11pt1f9ph",
  33.               "IpAddress": "139.224.22.55"
  34.             },
  35.             {
  36.               "AllocationId": "nateip-111ul670c",
  37.               "IpAddress": "139.224.22.79"
  38.             },
  39.             {
  40.               "AllocationId": "nateip-11ogfjj85",
  41.               "IpAddress": "139.224.22.59"
  42.             },
  43.             {
  44.               "AllocationId": "nateip-11s2jempe",
  45.               "IpAddress": "139.224.22.99"
  46.             }
  47.           ]
  48.         },
  49.         "RegionId": "cn-shanghai",
  50.         "Status": "Available",
  51.         "ZoneId": "cn-shanghai-a"
  52.       }
  53.     ]
  54.   },
  55.   "PageNumber": 1,
  56.   "PageSize": 10,
  57.   "RequestId": "EBF26EA4-15E9-44B6-B3EB-8111507321E9",
  58.   "TotalCount": 1
  59. }

减少公网IP个数

当用户需要减少一些公网IP时，可以在共享带宽包中去除指定的公网IP。去除公网IP前，需要确保该IP没有被DNAT规则引用。如果有引用，需要先删除相应的DNAT规则，再去除公网IP。

假设用户现在要去掉两个指定的公网IP，CLI命令和回复信息如下：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py RemoveBandwidthPackageIps RegionId=cn-shanghai BandwidthPackageId=bwp-11odxu2k7 RemovedIpAddresses.1=nateip-1110a2l48 RemovedIpAddresses.2=nateip-11s2jempe
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?RemovedIpAddresses.2=nateip-11s2jempe&SignatureVersion=1.0&BandwidthPackageId=bwp-11odxu2k7&Format=json&TimeStamp=2016-05-23T04%3A01%3A34Z&RegionId=cn-shanghai&RemovedIpAddresses.1=nateip-1110a2l48&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=l4NbMQD5X1xkLrgBZm34Aj4uwiI%3D&action=RemoveBandwidthPackageIps&SignatureNonce=0a34f3f3-209b-11e6-b183-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "RequestId": "7D275A59-1EB0-4775-8A20-2A47055EAC5C"
  9. }

临时增减带宽

随着业务压力的变化，用户在某些时候需要增减自己购买的带宽。

下面的CLI命令，将共享带宽包上的带宽从150Mbps升级到200Mbps。

  1. [admin@tester:nat_gw_cli_tool]$ python api.py ModifyBandwidthPackageSpec RegionId=cn-shanghai BandwidthPackageId=bwp-11odxu2k7 Bandwidth=200
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&BandwidthPackageId=bwp-11odxu2k7&Format=json&TimeStamp=2016-05-23T04%3A03%3A08Z&RegionId=cn-shanghai&Bandwidth=200&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=tozPphaDTYvhOI%2Bw%2FJjw7WaPn70%3D&action=ModifyBandwidthPackageSpec&SignatureNonce=42429561-209b-11e6-b869-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "RequestId": "079874CD-AEC1-43E6-AC03-ADD96B6E4907"
  9. }

最后更新：2016-11-23 17:16:08

  上一篇：go 搭建VPN网关__最佳实践_用户指南_专有网络 VPC-阿里云
  下一篇：go 高可用的SNAT网关__最佳实践_用户指南_专有网络 VPC-阿里云