测试代码

四、安装 iptables 持久化工具

apt update
apt install iptables-persistent -y

安装时如询问是否保存当前规则，可以选择：Yes

五、配置内网 NAT 上网
添加 MASQUERADE
先检查规则是否存在，避免重复添加：

iptables -t nat -C POSTROUTING \
  -s 192.168.100.0/24 \
  -o vmbr0 \
  -j MASQUERADE 2>/dev/null || \
iptables -t nat -A POSTROUTING \
  -s 192.168.100.0/24 \
  -o vmbr0 \
  -j MASQUERADE

允许内网访问公网

iptables -C FORWARD \
  -i vmbr1 -o vmbr0 \
  -s 192.168.100.0/24 \
  -m conntrack --ctstate NEW,ESTABLISHED,RELATED \
  -j ACCEPT 2>/dev/null || \
iptables -A FORWARD \
  -i vmbr1 -o vmbr0 \
  -s 192.168.100.0/24 \
  -m conntrack --ctstate NEW,ESTABLISHED,RELATED \

允许公网返回数据：

grep -E 'MASQUERADE|192\.168\.100' /etc/iptables/rules.v4

保存规则

Tue Jul  7 08:31:54 AM PDT 2026

Basic System Information:
---------------------------------
Uptime     : 0 days, 1 hours, 12 minutes
Processor  : Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz
CPU cores  : 8 @ 800.000 MHz
AES-NI     : ✔ Enabled
VM-x/AMD-V : ✔ Enabled
RAM        : 31.1 GiB
Swap       : 977.0 MiB
Disk       : 1.8 TiB
Distro     : Debian GNU/Linux 12 (bookworm)
Kernel     : 6.1.0-50-amd64
VM Type    : NONE
IPv4/IPv6  : ✔ Online / ❌ Offline

IPv4 Network Information:
---------------------------------
ISP        : HostPapa
ASN        : AS36352 HostPapa
Host       : HostPapa
Location   : Los Angeles, California (CA)
Country    : United States

fio Disk Speed Tests (Mixed R/W 50/50) (Partition /dev/sda2):
---------------------------------
Block Size | 4k            (IOPS) | 64k           (IOPS)
  ------   | ---            ----  | ----           ---- 
Read       | 188.57 MB/s  (46.0k) | 267.53 MB/s   (4.0k)
Write      | 189.07 MB/s  (46.1k) | 268.93 MB/s   (4.1k)
Total      | 377.64 MB/s  (92.1k) | 536.46 MB/s   (8.1k)
           |                      |                     
Block Size | 512k          (IOPS) | 1m            (IOPS)
  ------   | ---            ----  | ----           ---- 
Read       | 260.44 MB/s    (496) | 262.21 MB/s    (250)
Write      | 274.28 MB/s    (523) | 279.67 MB/s    (266)
Total      | 534.73 MB/s   (1.0k) | 541.88 MB/s    (516)

iperf3 Network Speed Tests (IPv4):
---------------------------------
Provider        | Location (Link)           | Send Speed      | Recv Speed      | Ping           
-----           | -----                     | ----            | ----            | ----           
Clouvider       | London, UK (10G)          | 831 Mbits/sec   | busy            | 147 ms         
Eranium         | Amsterdam, NL (100G)      | 831 Mbits/sec   | 584 Mbits/sec   | 146 ms         
Uztelecom       | Tashkent, UZ (10G)        | 580 Mbits/sec   | 242 Mbits/sec   | 238 ms         
Leaseweb        | Singapore, SG (10G)       | 802 Mbits/sec   | 599 Mbits/sec   | --             
Clouvider       | Los Angeles, CA, US (10G) | 940 Mbits/sec   | 941 Mbits/sec   | 0.364 ms       
Leaseweb        | NYC, NY, US (10G)         | 898 Mbits/sec   | 637 Mbits/sec   | 70.6 ms        
Edgoo           | Sao Paulo, BR (1G)        | 793 Mbits/sec   | busy            | 172 ms         

Geekbench 6 Benchmark Test:
---------------------------------
Test            | Value                         
                |                               
Single Core     |                               
Multi Core      |                               
Full Test       | https://browser.geekbench.com/v6/cpu/18621196

YABS completed in 11 min 1 sec

评论 1