我有端口转发设置为流氓
- Vagrant.configure("2") do |config|
- config.vm.Box = "centOS"
- config.vm.network :forwarded_port,guest: 80,host: 80
- config.vm.network :forwarded_port,guest: 8443,host: 8443
- config.vm.network :forwarded_port,host: 9443
- config.vm.network :forwarded_port,guest: 8445,host: 8445
- config.vm.network :forwarded_port,guest: 8000,host: 8000
- config.vm.hostname = "www.vagrant.com"
- end
80号港口从我的流氓虚拟箱子开放
- [vagrant@www ~]$nmap -sT 0.0.0.0 -p 80
- Starting Nmap 5.51 ( http://nmap.org ) at 2013-07-02 22:25 UTC
- Nmap scan report for 0.0.0.0
- Host is up (0.000063s latency).
- PORT STATE SERVICE
- 80/tcp open http
但是从我的主机关闭
- Ben-Fischer:~ bfischer$nmap -sT 0.0.0.0 -p 80
- Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-02 17:38 CDT
- Nmap scan report for 0.0.0.0
- Host is up (0.000086s latency).
- PORT STATE SERVICE
- 80/tcp closed http
没有其他的东西在我的主机上的端口80上侦听
- Ben-Fischer:~ bfischer$sudo lsof -n -i4TCP:80 | grep LISTEN
- [no output]
Iptables已关闭,我的mac防火墙也是这样
- [vagrant@www ~]$sudo service iptables stop
所有其他转发端口工作正常(8443,9443,8445,8000)
盒子是来自流浪者,centos 6.3与厨师的形象.
那么为什么我无法从本地机器连接到80端口？
我不认为你可以转发到主机端口1024,除非您在主机上以root身份运行VirtualBox.
作为NAT模式的限制,VirtualBox Manual证明了这一点：
Forwarding host ports < 1024 impossible:
On Unix-based hosts (e.g. Linux,Solaris,Mac OS X) it is not possible to bind to ports below 1024 from applications that are not run by root. As a result,if you try to configure such a port forwarding,the VM will refuse to start.
这些限制通常不会影响标准网络的使用.但NAT的存在也有可能干扰正常工作的协议的微妙效果.一个例子是NFS,其中服务器通常被配置为拒绝来自非特权端口的连接(即端口不低于1024).
