閱讀46 返回首頁    go 阿裏雲

多應用共享公網帶寬__最佳實踐_用戶指南_專有網絡 VPC-阿裏雲

概述

用戶的係統中有多個應用要麵向互聯網提供服務；出於帶寬管理、成本節省的角度，希望購買一份帶寬給這些應用共享。

本文介紹如何利用NAT網關的DNAT功能和共享帶寬功能實現多應用的共享帶寬。

關於API與控製台

NAT網關產品，提供了web控製台供用戶進行選購和配置；同時也提供了API，供用戶通過代碼實現資源的選購和配置，從而能夠自動化的完成一些係統部署和變更動作。

本文側重於使用API來完成操作。但是，所有具體步驟均可以在控製台上找到相應的操作。

為了方便用戶調用API，本文給出了一個用python語言編寫的Commond Line工具。見下麵的 前期準備-CLI工具的準備 章節。基於此工具，用戶可以用命令行方式進行NAT網關相關資源的購買和配置。具體的使用方法，可以參照本文每一步操作中給出的命令樣例。用戶可以根據自己的需求和資源的id對命令進行改寫，完成操作。

前期準備

部署規劃

假設我們的係統中有四個麵向互聯網的應用，需要使用三個公網IP；另外需要一個ECS和一個IP作為服務器管理的跳板機來使用；另準備一個公網IP暫時閑置，備用。整體資源規劃如下：

  1. 帶寬需求總量：150Mbps
  2. 公網IP需求總量：4個；另外多購買一個IP，以備使用；總共購買5個公網IP。
  3. ECS需求總量：5個
  4. 公網IP與ECS的映射關係：
  5.     IP1->ECS1
  6.     IP2->ECS2
  7.     IP3->ECS3/ECS4;
  8.         其中，
  9.         80端口映射給ECS3的80端口；
  10.         443端口映射給ECS4的443端口；
  11.     IP4->ECS5（運維跳板機），僅開放22端口；
  12.     IP5：暫不添加DNAT規則；

VPC與ECS的準備

創建VPC與ECS，配置成如下圖中所示的狀態。注意，這些ECS實例不需要公網IP。

本文側重於介紹多應用帶寬共享部分的實現，因此，VPC和ECS的創建過程不予贅述。

假設現在已經創建好的VPC與ECS資源相關情況如下：

  1.     VPC:
  2.         VpcId: vpc-11af8lp67
  3.     ECS:
  4.         ECS1
  5.             PrivateIP:  192.168.1.1
  6.         ECS2
  7.             PrivateIP:  192.168.1.2
  8.         ECS3
  9.             PrivateIP:  192.168.1.3
  10.         ECS4
  11.             PrivateIP:  192.168.1.4
  12.         ECS5
  13.             PrivateIP:  192.168.1.5

nat-gw-最佳實踐-ECS列表截圖

CLI工具的準備

CLI工具下載

下載cli工具：api.py

linux環境下可以直接使用wget命令進行下載。命令和運行效果截圖如下：

  1. wget https://docs-aliyun.cn-hangzhou.oss.aliyun-inc.com/assets/attach/42691/cn_zh/1468947102311/api.py

下載CLI工具

創建並查看AccessKey

AccessKey可以在AccessKey管理控製台進行申請和管理。

AccessKey管理頁麵

為CLI工具配置AccessKey

配置命令如下圖所示：

CLI工具配置AccessKey

操作步驟

創建NAT Gateway

在當前VPC中創建一個NAT網關，並在該NAT網關上放置一個共享帶寬包，其中包含150Mbps的帶寬和5個公網IP；

相應的CLI命令和獲取到的返回信息如下：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py CreateNatGateway RegionId=cn-shanghai VpcId=vpc-11af8lp67 BandwidthPackage.1.IpCount=4 BandwidthPackage.1.Bandwidth=150 BandwidthPackage.1.Zone=cn-shanghai-a Name=MyNatGW Description="My first NAT Gateway"
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&VpcId=vpc-11af8lp67&Name=MyNatGW&Format=json&TimeStamp=2016-05-23T03%3A26%3A21Z&BandwidthPackage.1.IpCount=5&RegionId=cn-shanghai&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=I4KKhWgjJdImTqk4rCifAB3LbLw%3D&action=CreateNatGateway&SignatureNonce=1ebae49c-2096-11e6-b781-2cf0ee28adf2&BandwidthPackage.1.Bandwidth=150&BandwidthPackage.1.Zone=cn-shanghai-a&Description=My+first+NAT+Gateway
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "BandwidthPackageIds": {
  9.     "BandwidthPackageId": [
  10.       "bwp-11odxu2k7"
  11.     ]
  12.   },
  13.   "ForwardTableIds": {
  14.     "ForwardTableId": [
  15.       "ftb-11tc6xgmv"
  16.     ]
  17.   },
  18.   "NatGatewayId": "ngw-112za33e4",
  19.   "RequestId": "2315DEB7-5E92-423A-91F7-4C1EC9AD97C3"
  20. }

通過DescribeNatGateways、DescribeBandwidthPackages查看創建出來的NAT網關和共享帶寬包的詳細信息。

  1. [admin@tester:nat_gw_cli_tool]$ python api.py DescribeNatGateways RegionId=cn-shanghai VpcId=vpc-11af8lp67
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&VpcId=vpc-11af8lp67&Format=json&TimeStamp=2016-05-23T03%3A27%3A14Z&RegionId=cn-shanghai&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=JvXErso9g0fZdRTgBtNLepe%2F1e4%3D&action=DescribeNatGateways&SignatureNonce=3e1424eb-2096-11e6-bc31-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "NatGateways": {
  9.     "NatGateway": [
  10.       {
  11.         "BandwidthPackageIds": {
  12.           "BandwidthPackageId": [
  13.             "bwp-11odxu2k7"
  14.           ]
  15.         },
  16.         "BusinessStatus": "Normal",
  17.         "CreationTime": "2016-05-23T03:26:23Z",
  18.         "Description": "My first NAT Gateway",
  19.         "ForwardTableIds": {
  20.           "ForwardTableId": [
  21.             "ftb-11tc6xgmv"
  22.           ]
  23.         },
  24.         "InstanceChargeType": "PostPaid",
  25.         "Name": "MyNatGW",
  26.         "NatGatewayId": "ngw-112za33e4",
  27.         "RegionId": "cn-shanghai",
  28.         "Spec": "Small",
  29.         "Status": "Available",
  30.         "VpcId": "vpc-11af8lp67"
  31.       }
  32.     ]
  33.   },
  34.   "PageNumber": 1,
  35.   "PageSize": 10,
  36.   "RequestId": "FE4C442C-9778-449A-BF7F-7F36C3AF5611",
  37.   "TotalCount": 1
  38. }
  1. [admin@tester:nat_gw_cli_tool]$ python api.py DescribeBandwidthPackages RegionId=cn-shanghai NatGatewayId=ngw-112za33e4
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A33%3A30Z&RegionId=cn-shanghai&NatGatewayId=ngw-112za33e4&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=KN0C2Q4TUZtfECBn1c2lOdBzrb8%3D&action=DescribeBandwidthPackages&SignatureNonce=1e8941ae-2097-11e6-acbb-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "BandwidthPackages": {
  9.     "BandwidthPackage": [
  10.       {
  11.         "Bandwidth": "150",
  12.         "BandwidthPackageId": "bwp-11odxu2k7",
  13.         "BusinessStatus": "Normal",
  14.         "CreationTime": "2016-05-23T03:26:24Z",
  15.         "Description": "",
  16.         "InstanceChargeType": "PostPaid",
  17.         "InternetChargeType": "PayByBandwidth",
  18.         "IpCount": "5",
  19.         "Name": "",
  20.         "NatGatewayId": "ngw-112za33e4",
  21.         "PublicIpAddresses": {
  22.           "PublicIpAddresse": [
  23.             {
  24.               "AllocationId": "nateip-11iopy3sl",
  25.               "IpAddress": "139.224.22.107"
  26.             },
  27.             {
  28.               "AllocationId": "nateip-11pt1f9ph",
  29.               "IpAddress": "139.224.22.55"
  30.             },
  31.             {
  32.               "AllocationId": "nateip-111ul670c",
  33.               "IpAddress": "139.224.22.79"
  34.             },
  35.             {
  36.               "AllocationId": "nateip-11ogfjj85",
  37.               "IpAddress": "139.224.22.59"
  38.             },
  39.             {
  40.               "AllocationId": "nateip-11s2jempe",
  41.               "IpAddress": "139.224.22.99"
  42.             }
  43.           ]
  44.         },
  45.         "RegionId": "cn-shanghai",
  46.         "Status": "Available",
  47.         "ZoneId": "cn-shanghai-a"
  48.       }
  49.     ]
  50.   },
  51.   "PageNumber": 1,
  52.   "PageSize": 10,
  53.   "RequestId": "14406B86-7CA1-4907-9755-86096F476A4F",
  54.   "TotalCount": 1
  55. }

進行DNAT配置

在NAT網關的端口轉發表中，添加五條端口映射規則；

  1.     Ip1:Any -> ecs-ip1:Any, protocal=Any
  2.     Ip2:Any -> ecs-ip2:Any, protocal=Any
  3.     Ip3:80  -> ecs-ip3:80 , protocal=TCP
  4.     Ip3:443 -> ecs-ip3:443, protocal=TCP
  5.     IP4:22  -> ecs-ip4:22 , protocal=TCP

CLI命令和獲得的返回信息如下：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.107 ExternalPort=Any InternalIp=192.168.1.1 InternalPort=Any IpProtocol=Any
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.107&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A53%3A18Z&RegionId=cn-shanghai&ExternalPort=Any&InternalIp=192.168.1.1&Signature=iR4GSzhJQtowMJOj%2FRth3ABP4FA%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=Any&action=CreateForwardEntry&SignatureNonce=e2ceae11-2099-11e6-b548-2cf0ee28adf2&InternalPort=Any
  4. =====Request URL end======
  6. ====== Got Response ======
  7. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.107 ExternalPort=Any InternalIp=192.168.1.1 InternalPort=Any IpProtocol=Any
  8. =====Request URL======
  9. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.107&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A53%3A18Z&RegionId=cn-shanghai&ExternalPort=Any&InternalIp=192.168.1.1&Signature=iR4GSzhJQtowMJOj%2FRth3ABP4FA%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=Any&action=CreateForwardEntry&SignatureNonce=e2ceae11-2099-11e6-b548-2cf0ee28adf2&InternalPort=Any
  10. =====Request URL end======
  12. ====== Got Response ======
  13. {
  14.   "ForwardEntryId": "fwd-119smw5tk",
  15.   "RequestId": "A4AEE536-A97A-40EB-9EBE-53A6948A6928"
  16. }
  17. [admin@tester:nat_gw_cli_tool]$
  18. [admin@tester:nat_gw_cli_tool]$
  19. [admin@tester:nat_gw_cli_tool]$
  20. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.55 ExternalPort=Any InternalIp=192.168.1.2 InternalPort=Any IpProtocol=Any
  21. =====Request URL======
  22. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.55&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A53%3A42Z&RegionId=cn-shanghai&ExternalPort=Any&InternalIp=192.168.1.2&Signature=mFBn%2BCd4LfHkKj53MwmWyMhzyfs%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=Any&action=CreateForwardEntry&SignatureNonce=f09c1b38-2099-11e6-aa80-2cf0ee28adf2&InternalPort=Any
  23. =====Request URL end======
  25. ====== Got Response ======
  26. {
  27.   "ForwardEntryId": "fwd-11dz3ly9l",
  28.   "RequestId": "5DBC8F86-2D76-4BF4-B839-7FF31B61D516"
  29. }
  30. [admin@tester:nat_gw_cli_tool]$
  31. [admin@tester:nat_gw_cli_tool]$
  32. [admin@tester:nat_gw_cli_tool]$
  33. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.79 ExternalPort=80 InternalIp=192.168.1.3 InternalPort=80 IpProtocol=TCP
  34. =====Request URL======
  35. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.79&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A54%3A10Z&RegionId=cn-shanghai&ExternalPort=80&InternalIp=192.168.1.3&Signature=OpTui3SKbAjKXy6gKRoJb%2B9Lazg%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=TCP&action=CreateForwardEntry&SignatureNonce=01c41d5c-209a-11e6-905e-2cf0ee28adf2&InternalPort=80
  36. =====Request URL end======
  38. ====== Got Response ======
  39. {
  40.   "ForwardEntryId": "fwd-11r23r7p5",
  41.   "RequestId": "67B7AAFD-E7AB-4EB8-AA5C-AA38CFFB4A95"
  42. }
  43. [admin@tester:nat_gw_cli_tool]$
  44. [admin@tester:nat_gw_cli_tool]$
  45. [admin@tester:nat_gw_cli_tool]$
  46. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.79 ExternalPort=443 InternalIp=192.168.1.4 InternalPort=443 IpProtocol=TCP
  47. =====Request URL======
  48. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.79&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A55%3A22Z&RegionId=cn-shanghai&ExternalPort=443&InternalIp=192.168.1.4&Signature=X%2BZtHbTeKYf8xU%2FvWhPAmg%2B5scc%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=TCP&action=CreateForwardEntry&SignatureNonce=2c3f2573-209a-11e6-be0f-2cf0ee28adf2&InternalPort=443
  49. =====Request URL end======
  51. ====== Got Response ======
  52. {
  53.   "ForwardEntryId": "fwd-11cdhpjlk",
  54.   "RequestId": "260A9673-5522-4F66-844A-1F1AB47CD21C"
  55. }
  56. [admin@tester:nat_gw_cli_tool]$
  57. [admin@tester:nat_gw_cli_tool]$
  58. [admin@tester:nat_gw_cli_tool]$
  59. [admin@tester:nat_gw_cli_tool]$ python api.py CreateForwardEntry RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv ExternalIp=139.224.22.59 ExternalPort=22 InternalIp=192.168.1.5 InternalPort=22 IpProtocol=TCP
  60. =====Request URL======
  61. https://ecs.aliyuncs.com/?ExternalIp=139.224.22.59&SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A55%3A44Z&RegionId=cn-shanghai&ExternalPort=22&InternalIp=192.168.1.5&Signature=%2FZWf5%2ForHr%2BUR446eEBLC4LNYe8%3D&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&IpProtocol=TCP&action=CreateForwardEntry&SignatureNonce=39863cf3-209a-11e6-8f6d-2cf0ee28adf2&InternalPort=22
  62. =====Request URL end======
  64. ====== Got Response ======
  65. {
  66.   "ForwardEntryId": "fwd-11iv34uj7",
  67.   "RequestId": "0884BC12-8EAD-4AAA-826E-30E5435D7C27"
  68. }

查看已添加的DNAT規則

  1. [admin@tester:nat_gw_cli_tool]$ python api.py DescribeForwardTableEntries RegionId=cn-shanghai ForwardTableId=ftb-11tc6xgmv
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A56%3A18Z&RegionId=cn-shanghai&AccessKeyId=jZgi0oyrQ6ihgKp9&ForwardTableId=ftb-11tc6xgmv&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=x4%2B6oNYxIRBmND8rcIbJM9EJ8ts%3D&action=DescribeForwardTableEntries&SignatureNonce=4db93223-209a-11e6-81eb-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "ForwardTableEntries": {
  9.     "ForwardTableEntry": [
  10.       {
  11.         "ExternalIp": "139.224.22.107",
  12.         "ExternalPort": "any",
  13.         "ForwardEntryId": "fwd-119smw5tk",
  14.         "ForwardTableId": "ftb-11tc6xgmv",
  15.         "InternalIp": "192.168.1.1",
  16.         "InternalPort": "any",
  17.         "IpProtocol": "any",
  18.         "Status": "Available"
  19.       },
  20.       {
  21.         "ExternalIp": "139.224.22.79",
  22.         "ExternalPort": "443",
  23.         "ForwardEntryId": "fwd-11cdhpjlk",
  24.         "ForwardTableId": "ftb-11tc6xgmv",
  25.         "InternalIp": "192.168.1.4",
  26.         "InternalPort": "443",
  27.         "IpProtocol": "tcp",
  28.         "Status": "Available"
  29.       },
  30.       {
  31.         "ExternalIp": "139.224.22.55",
  32.         "ExternalPort": "any",
  33.         "ForwardEntryId": "fwd-11dz3ly9l",
  34.         "ForwardTableId": "ftb-11tc6xgmv",
  35.         "InternalIp": "192.168.1.2",
  36.         "InternalPort": "any",
  37.         "IpProtocol": "any",
  38.         "Status": "Available"
  39.       },
  40.       {
  41.         "ExternalIp": "139.224.22.59",
  42.         "ExternalPort": "22",
  43.         "ForwardEntryId": "fwd-11iv34uj7",
  44.         "ForwardTableId": "ftb-11tc6xgmv",
  45.         "InternalIp": "192.168.1.5",
  46.         "InternalPort": "22",
  47.         "IpProtocol": "tcp",
  48.         "Status": "Available"
  49.       },
  50.       {
  51.         "ExternalIp": "139.224.22.79",
  52.         "ExternalPort": "80",
  53.         "ForwardEntryId": "fwd-11r23r7p5",
  54.         "ForwardTableId": "ftb-11tc6xgmv",
  55.         "InternalIp": "192.168.1.3",
  56.         "InternalPort": "80",
  57.         "IpProtocol": "tcp",
  58.         "Status": "Available"
  59.       }
  60.     ]
  61.   },
  62.   "PageNumber": 1,
  63.   "PageSize": 10,
  64.   "RequestId": "C84FDDCF-8550-4024-B89C-01E7459D7CF9",
  65.   "TotalCount": 5
  66. }

增加公網IP個數

當用戶需要更多公網IP時，可以在共享帶寬包中增加公網IP個數，並為這些新增加的公網IP添加DNAT規則。

假設用戶現在需要的公網IP個數從5個變成了6個，則使用下麵的CLI命令：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py AddBandwidthPackageIps RegionId=cn-shanghai BandwidthPackageId=bwp-11odxu2k7 IpCount=6
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&BandwidthPackageId=bwp-11odxu2k7&Format=json&TimeStamp=2016-05-23T03%3A58%3A18Z&RegionId=cn-shanghai&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=pSjC98nbDGgMl1tdjcXARIfW6t0%3D&action=AddBandwidthPackageIps&SignatureNonce=955c7d70-209a-11e6-907e-2cf0ee28adf2&IpCount=6
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "RequestId": "EC0B5C51-7F40-44D6-A642-1DE764B547EC"
  9. }

執行成功後，可以通過DescribeBandwidthPackages來查看當前帶寬包中的IP信息：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py DescribeBandwidthPackages RegionId=cn-shanghai NatGatewayId=ngw-112za33e4
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&Format=json&TimeStamp=2016-05-23T03%3A58%3A53Z&RegionId=cn-shanghai&NatGatewayId=ngw-112za33e4&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=OnVBAnWbJKF7G5JAQrD44QhMJMo%3D&action=DescribeBandwidthPackages&SignatureNonce=aa42a599-209a-11e6-92cc-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "BandwidthPackages": {
  9.     "BandwidthPackage": [
  10.       {
  11.         "Bandwidth": "150",
  12.         "BandwidthPackageId": "bwp-11odxu2k7",
  13.         "BusinessStatus": "Normal",
  14.         "CreationTime": "2016-05-23T03:26:24Z",
  15.         "Description": "",
  16.         "InstanceChargeType": "PostPaid",
  17.         "InternetChargeType": "PayByBandwidth",
  18.         "IpCount": "6",
  19.         "Name": "",
  20.         "NatGatewayId": "ngw-112za33e4",
  21.         "PublicIpAddresses": {
  22.           "PublicIpAddresse": [
  23.             {
  24.               "AllocationId": "nateip-1110a2l48",
  25.               "IpAddress": "139.224.22.118"
  26.             },
  27.             {
  28.               "AllocationId": "nateip-11iopy3sl",
  29.               "IpAddress": "139.224.22.107"
  30.             },
  31.             {
  32.               "AllocationId": "nateip-11pt1f9ph",
  33.               "IpAddress": "139.224.22.55"
  34.             },
  35.             {
  36.               "AllocationId": "nateip-111ul670c",
  37.               "IpAddress": "139.224.22.79"
  38.             },
  39.             {
  40.               "AllocationId": "nateip-11ogfjj85",
  41.               "IpAddress": "139.224.22.59"
  42.             },
  43.             {
  44.               "AllocationId": "nateip-11s2jempe",
  45.               "IpAddress": "139.224.22.99"
  46.             }
  47.           ]
  48.         },
  49.         "RegionId": "cn-shanghai",
  50.         "Status": "Available",
  51.         "ZoneId": "cn-shanghai-a"
  52.       }
  53.     ]
  54.   },
  55.   "PageNumber": 1,
  56.   "PageSize": 10,
  57.   "RequestId": "EBF26EA4-15E9-44B6-B3EB-8111507321E9",
  58.   "TotalCount": 1
  59. }

減少公網IP個數

當用戶需要減少一些公網IP時，可以在共享帶寬包中去除指定的公網IP。去除公網IP前，需要確保該IP沒有被DNAT規則引用。如果有引用，需要先刪除相應的DNAT規則，再去除公網IP。

假設用戶現在要去掉兩個指定的公網IP，CLI命令和回複信息如下：

  1. [admin@tester:nat_gw_cli_tool]$ python api.py RemoveBandwidthPackageIps RegionId=cn-shanghai BandwidthPackageId=bwp-11odxu2k7 RemovedIpAddresses.1=nateip-1110a2l48 RemovedIpAddresses.2=nateip-11s2jempe
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?RemovedIpAddresses.2=nateip-11s2jempe&SignatureVersion=1.0&BandwidthPackageId=bwp-11odxu2k7&Format=json&TimeStamp=2016-05-23T04%3A01%3A34Z&RegionId=cn-shanghai&RemovedIpAddresses.1=nateip-1110a2l48&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=l4NbMQD5X1xkLrgBZm34Aj4uwiI%3D&action=RemoveBandwidthPackageIps&SignatureNonce=0a34f3f3-209b-11e6-b183-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "RequestId": "7D275A59-1EB0-4775-8A20-2A47055EAC5C"
  9. }

臨時增減帶寬

隨著業務壓力的變化，用戶在某些時候需要增減自己購買的帶寬。

下麵的CLI命令，將共享帶寬包上的帶寬從150Mbps升級到200Mbps。

  1. [admin@tester:nat_gw_cli_tool]$ python api.py ModifyBandwidthPackageSpec RegionId=cn-shanghai BandwidthPackageId=bwp-11odxu2k7 Bandwidth=200
  2. =====Request URL======
  3. https://ecs.aliyuncs.com/?SignatureVersion=1.0&BandwidthPackageId=bwp-11odxu2k7&Format=json&TimeStamp=2016-05-23T04%3A03%3A08Z&RegionId=cn-shanghai&Bandwidth=200&AccessKeyId=jZgi0oyrQ6ihgKp9&SignatureMethod=HMAC-SHA1&Version=2014-05-26&Signature=tozPphaDTYvhOI%2Bw%2FJjw7WaPn70%3D&action=ModifyBandwidthPackageSpec&SignatureNonce=42429561-209b-11e6-b869-2cf0ee28adf2
  4. =====Request URL end======
  6. ====== Got Response ======
  7. {
  8.   "RequestId": "079874CD-AEC1-43E6-AC03-ADD96B6E4907"
  9. }

最後更新：2016-11-23 17:16:08

  上一篇：go 搭建VPN網關__最佳實踐_用戶指南_專有網絡 VPC-阿裏雲
  下一篇：go 高可用的SNAT網關__最佳實踐_用戶指南_專有網絡 VPC-阿裏雲