主页 > 人工智能  > 

深入理解IP地址与端口:网络通信的基石

深入理解IP地址与端口:网络通信的基石
深入理解IP地址与端口:网络通信的基石 文章大纲

网络通信基础概念

1.1 什么是网络通信1.2 OSI模型与TCP/IP模型1.3 数据包传输原理

IP地址深度解析

2.1 IP地址定义与作用2.2 IPv4与IPv6对比2.3 子网划分与CIDR表示法2.4 公网IP与私网IP2.5 特殊IP地址详解

端口机制全面剖析

3.1 端口的概念与必要性3.2 端口号分类标准3.3 常见服务与端口映射3.4 端口扫描与安全防护

IP与端口协同工作

4.1 Socket通信原理4.2 NAT网络地址转换4.3 防火墙规则配置4.4 典型通信案例解析

实践应用与排错指南

5.1 常用网络命令详解5.2 网络诊断思路与方法5.3 典型故障案例分析

进阶知识扩展

6.1 域名解析系统DNS6.2 负载均衡与反向代理6.3 未来网络发展趋势
1. 网络通信基础概念 1.1 什么是网络通信

网络通信本质上是设备间的数据交换过程,其核心要素可概括为:

#mermaid-svg-unE23N26QF1GWiAD {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-unE23N26QF1GWiAD .error-icon{fill:#552222;}#mermaid-svg-unE23N26QF1GWiAD .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-unE23N26QF1GWiAD .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-unE23N26QF1GWiAD .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-unE23N26QF1GWiAD .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-unE23N26QF1GWiAD .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-unE23N26QF1GWiAD .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-unE23N26QF1GWiAD .marker{fill:#333333;stroke:#333333;}#mermaid-svg-unE23N26QF1GWiAD .marker.cross{stroke:#333333;}#mermaid-svg-unE23N26QF1GWiAD svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-unE23N26QF1GWiAD .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-unE23N26QF1GWiAD .cluster-label text{fill:#333;}#mermaid-svg-unE23N26QF1GWiAD .cluster-label span{color:#333;}#mermaid-svg-unE23N26QF1GWiAD .label text,#mermaid-svg-unE23N26QF1GWiAD span{fill:#333;color:#333;}#mermaid-svg-unE23N26QF1GWiAD .node rect,#mermaid-svg-unE23N26QF1GWiAD .node circle,#mermaid-svg-unE23N26QF1GWiAD .node ellipse,#mermaid-svg-unE23N26QF1GWiAD .node polygon,#mermaid-svg-unE23N26QF1GWiAD .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-unE23N26QF1GWiAD .node .label{text-align:center;}#mermaid-svg-unE23N26QF1GWiAD .node.clickable{cursor:pointer;}#mermaid-svg-unE23N26QF1GWiAD .arrowheadPath{fill:#333333;}#mermaid-svg-unE23N26QF1GWiAD .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-unE23N26QF1GWiAD .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-unE23N26QF1GWiAD .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-unE23N26QF1GWiAD .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-unE23N26QF1GWiAD .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-unE23N26QF1GWiAD .cluster text{fill:#333;}#mermaid-svg-unE23N26QF1GWiAD .cluster span{color:#333;}#mermaid-svg-unE23N26QF1GWiAD div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-unE23N26QF1GWiAD :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 封装数据 路由传输 解封装 发送方 数据包 接收方 原始数据

关键特征:

端点标识:IP地址定位网络设备通道选择:端口指定具体服务协议规范:TCP/UDP等定义通信规则 1.2 OSI模型与TCP/IP模型

网络体系结构对比:

#mermaid-svg-eFCRwiIe4JDu1Yis {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-eFCRwiIe4JDu1Yis .error-icon{fill:#552222;}#mermaid-svg-eFCRwiIe4JDu1Yis .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-eFCRwiIe4JDu1Yis .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-eFCRwiIe4JDu1Yis .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-eFCRwiIe4JDu1Yis .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-eFCRwiIe4JDu1Yis .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-eFCRwiIe4JDu1Yis .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-eFCRwiIe4JDu1Yis .marker{fill:#333333;stroke:#333333;}#mermaid-svg-eFCRwiIe4JDu1Yis .marker.cross{stroke:#333333;}#mermaid-svg-eFCRwiIe4JDu1Yis svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-eFCRwiIe4JDu1Yis .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-eFCRwiIe4JDu1Yis .cluster-label text{fill:#333;}#mermaid-svg-eFCRwiIe4JDu1Yis .cluster-label span{color:#333;}#mermaid-svg-eFCRwiIe4JDu1Yis .label text,#mermaid-svg-eFCRwiIe4JDu1Yis span{fill:#333;color:#333;}#mermaid-svg-eFCRwiIe4JDu1Yis .node rect,#mermaid-svg-eFCRwiIe4JDu1Yis .node circle,#mermaid-svg-eFCRwiIe4JDu1Yis .node ellipse,#mermaid-svg-eFCRwiIe4JDu1Yis .node polygon,#mermaid-svg-eFCRwiIe4JDu1Yis .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-eFCRwiIe4JDu1Yis .node .label{text-align:center;}#mermaid-svg-eFCRwiIe4JDu1Yis .node.clickable{cursor:pointer;}#mermaid-svg-eFCRwiIe4JDu1Yis .arrowheadPath{fill:#333333;}#mermaid-svg-eFCRwiIe4JDu1Yis .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-eFCRwiIe4JDu1Yis .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-eFCRwiIe4JDu1Yis .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-eFCRwiIe4JDu1Yis .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-eFCRwiIe4JDu1Yis .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-eFCRwiIe4JDu1Yis .cluster text{fill:#333;}#mermaid-svg-eFCRwiIe4JDu1Yis .cluster span{color:#333;}#mermaid-svg-eFCRwiIe4JDu1Yis div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-eFCRwiIe4JDu1Yis :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} TCP/IP四层模型 OSI七层模型 传输层 应用层 网络层 网络接口层 表示层 应用层 会话层 传输层 网络层 数据链路层 物理层

对应关系:

应用层:HTTP/FTP/DNS传输层:TCP/UDP(端口操作层)网络层:IP/ICMP(IP地址操作层)网络接口层:MAC地址 1.3 数据包传输原理

典型数据传输过程:

#mermaid-svg-ae42nTU1jl12p0lz {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-ae42nTU1jl12p0lz .error-icon{fill:#552222;}#mermaid-svg-ae42nTU1jl12p0lz .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-ae42nTU1jl12p0lz .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-ae42nTU1jl12p0lz .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-ae42nTU1jl12p0lz .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-ae42nTU1jl12p0lz .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-ae42nTU1jl12p0lz .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-ae42nTU1jl12p0lz .marker{fill:#333333;stroke:#333333;}#mermaid-svg-ae42nTU1jl12p0lz .marker.cross{stroke:#333333;}#mermaid-svg-ae42nTU1jl12p0lz svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-ae42nTU1jl12p0lz .actor{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-ae42nTU1jl12p0lz text.actor>tspan{fill:black;stroke:none;}#mermaid-svg-ae42nTU1jl12p0lz .actor-line{stroke:grey;}#mermaid-svg-ae42nTU1jl12p0lz .messageLine0{stroke-width:1.5;stroke-dasharray:none;stroke:#333;}#mermaid-svg-ae42nTU1jl12p0lz .messageLine1{stroke-width:1.5;stroke-dasharray:2,2;stroke:#333;}#mermaid-svg-ae42nTU1jl12p0lz #arrowhead path{fill:#333;stroke:#333;}#mermaid-svg-ae42nTU1jl12p0lz .sequenceNumber{fill:white;}#mermaid-svg-ae42nTU1jl12p0lz #sequencenumber{fill:#333;}#mermaid-svg-ae42nTU1jl12p0lz #crosshead path{fill:#333;stroke:#333;}#mermaid-svg-ae42nTU1jl12p0lz .messageText{fill:#333;stroke:#333;}#mermaid-svg-ae42nTU1jl12p0lz .labelBox{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-ae42nTU1jl12p0lz .labelText,#mermaid-svg-ae42nTU1jl12p0lz .labelText>tspan{fill:black;stroke:none;}#mermaid-svg-ae42nTU1jl12p0lz .loopText,#mermaid-svg-ae42nTU1jl12p0lz .loopText>tspan{fill:black;stroke:none;}#mermaid-svg-ae42nTU1jl12p0lz .loopLine{stroke-width:2px;stroke-dasharray:2,2;stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-ae42nTU1jl12p0lz .note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-ae42nTU1jl12p0lz .noteText,#mermaid-svg-ae42nTU1jl12p0lz .noteText>tspan{fill:black;stroke:none;}#mermaid-svg-ae42nTU1jl12p0lz .activation0{fill:#f4f4f4;stroke:#666;}#mermaid-svg-ae42nTU1jl12p0lz .activation1{fill:#f4f4f4;stroke:#666;}#mermaid-svg-ae42nTU1jl12p0lz .activation2{fill:#f4f4f4;stroke:#666;}#mermaid-svg-ae42nTU1jl12p0lz .actorPopupMenu{position:absolute;}#mermaid-svg-ae42nTU1jl12p0lz .actorPopupMenuPanel{position:absolute;fill:#ECECFF;box-shadow:0px 8px 16px 0px rgba(0,0,0,0.2);filter:drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));}#mermaid-svg-ae42nTU1jl12p0lz .actor-man line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-ae42nTU1jl12p0lz .actor-man circle,#mermaid-svg-ae42nTU1jl12p0lz line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;stroke-width:2px;}#mermaid-svg-ae42nTU1jl12p0lz :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 客户端 服务器 SYN(源IP:Port → 目标IP:Port) SYN-ACK ACK 三次握手完成 HTTP Request HTTP Response FIN FIN-ACK 客户端 服务器

数据封装流程:

应用数据 → TCP头+端口 → IP头+地址 → 帧头+MAC → 比特流
2. IP地址深度解析 2.1 IP地址定义与作用

技术定义:互联网协议地址(Internet Protocol Address),用于唯一标识网络中的设备

核心功能:

设备定位(逻辑地址)路由寻址(网络导航)网络划分(子网管理)

地址结构对比:

#mermaid-svg-tpCEdsDVkeNLYY2E {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-tpCEdsDVkeNLYY2E .error-icon{fill:#552222;}#mermaid-svg-tpCEdsDVkeNLYY2E .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-tpCEdsDVkeNLYY2E .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-tpCEdsDVkeNLYY2E .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-tpCEdsDVkeNLYY2E .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-tpCEdsDVkeNLYY2E .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-tpCEdsDVkeNLYY2E .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-tpCEdsDVkeNLYY2E .marker{fill:#333333;stroke:#333333;}#mermaid-svg-tpCEdsDVkeNLYY2E .marker.cross{stroke:#333333;}#mermaid-svg-tpCEdsDVkeNLYY2E svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-tpCEdsDVkeNLYY2E .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-tpCEdsDVkeNLYY2E .cluster-label text{fill:#333;}#mermaid-svg-tpCEdsDVkeNLYY2E .cluster-label span{color:#333;}#mermaid-svg-tpCEdsDVkeNLYY2E .label text,#mermaid-svg-tpCEdsDVkeNLYY2E span{fill:#333;color:#333;}#mermaid-svg-tpCEdsDVkeNLYY2E .node rect,#mermaid-svg-tpCEdsDVkeNLYY2E .node circle,#mermaid-svg-tpCEdsDVkeNLYY2E .node ellipse,#mermaid-svg-tpCEdsDVkeNLYY2E .node polygon,#mermaid-svg-tpCEdsDVkeNLYY2E .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-tpCEdsDVkeNLYY2E .node .label{text-align:center;}#mermaid-svg-tpCEdsDVkeNLYY2E .node.clickable{cursor:pointer;}#mermaid-svg-tpCEdsDVkeNLYY2E .arrowheadPath{fill:#333333;}#mermaid-svg-tpCEdsDVkeNLYY2E .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-tpCEdsDVkeNLYY2E .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-tpCEdsDVkeNLYY2E .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-tpCEdsDVkeNLYY2E .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-tpCEdsDVkeNLYY2E .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-tpCEdsDVkeNLYY2E .cluster text{fill:#333;}#mermaid-svg-tpCEdsDVkeNLYY2E .cluster span{color:#333;}#mermaid-svg-tpCEdsDVkeNLYY2E div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-tpCEdsDVkeNLYY2E :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} IPv4 32位/4字节 点分十进制 示例:192.168.1.1 IPv6 128位/16字节 冒号分隔十六进制 示例:2001:0db8::ff00:0042 2.2 IPv4与IPv6对比 特征项IPv4IPv6地址长度32位(约43亿)128位(3.4×10^38个)表示方法点分十进制冒号分隔十六进制头部复杂度可变长度(20-60字节)固定长度(40字节)QoS支持需要额外扩展内置流标签字段安全性依赖IPsec扩展原生支持IPsec典型地址示例192.168.0.12001:db8:85a3::8a2e:370:7334

现状分析:

IPv4地址已于2019年11月25日完全耗尽全球IPv6采用率已达40%(2023年数据)中国IPv6活跃用户达7.63亿 2.3 子网划分与CIDR表示法

子网划分示例:

原始网络:192.168.0.0/24 子网划分: - 192.168.0.0/26(62主机) - 192.168.0.64/26 - 192.168.0.128/26 - 192.168.0.192/26

CIDR表示法图解:

graph LR A[192.168.1.0] --> B[/24 掩码] B --> C[255.255.255.0] C --> D[可用地址1-254]

地址计算工具:

def calculate_subnet(ip, prefix): # 实现子网计算的示例代码 import ipaddress network = ipaddress.IPv4Network(f"{ip}/{prefix}", strict=False) print(f"网络地址: {network.network_address}") print(f"可用主机数: {network.num_addresses - 2}") 3. 端口机制全面剖析 3.1 端口的概念与必要性 技术定义与核心作用

端口是传输层协议(TCP/UDP)的逻辑通信端点,本质是16位无符号整数(0-65535),其核心作用体现在:

#mermaid-svg-cdx3bjDn20IGS546 {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-cdx3bjDn20IGS546 .error-icon{fill:#552222;}#mermaid-svg-cdx3bjDn20IGS546 .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-cdx3bjDn20IGS546 .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-cdx3bjDn20IGS546 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-cdx3bjDn20IGS546 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-cdx3bjDn20IGS546 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-cdx3bjDn20IGS546 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-cdx3bjDn20IGS546 .marker{fill:#333333;stroke:#333333;}#mermaid-svg-cdx3bjDn20IGS546 .marker.cross{stroke:#333333;}#mermaid-svg-cdx3bjDn20IGS546 svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-cdx3bjDn20IGS546 .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-cdx3bjDn20IGS546 .cluster-label text{fill:#333;}#mermaid-svg-cdx3bjDn20IGS546 .cluster-label span{color:#333;}#mermaid-svg-cdx3bjDn20IGS546 .label text,#mermaid-svg-cdx3bjDn20IGS546 span{fill:#333;color:#333;}#mermaid-svg-cdx3bjDn20IGS546 .node rect,#mermaid-svg-cdx3bjDn20IGS546 .node circle,#mermaid-svg-cdx3bjDn20IGS546 .node ellipse,#mermaid-svg-cdx3bjDn20IGS546 .node polygon,#mermaid-svg-cdx3bjDn20IGS546 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-cdx3bjDn20IGS546 .node .label{text-align:center;}#mermaid-svg-cdx3bjDn20IGS546 .node.clickable{cursor:pointer;}#mermaid-svg-cdx3bjDn20IGS546 .arrowheadPath{fill:#333333;}#mermaid-svg-cdx3bjDn20IGS546 .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-cdx3bjDn20IGS546 .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-cdx3bjDn20IGS546 .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-cdx3bjDn20IGS546 .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-cdx3bjDn20IGS546 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-cdx3bjDn20IGS546 .cluster text{fill:#333;}#mermaid-svg-cdx3bjDn20IGS546 .cluster span{color:#333;}#mermaid-svg-cdx3bjDn20IGS546 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-cdx3bjDn20IGS546 :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 单台服务器 多服务并发 Web服务 数据库服务 邮件服务 通信定位 IP地址定位设备 端口定位服务

必要性体现:

服务隔离:实现单设备多服务并行(如80端口运行Web,3306运行MySQL)会话管理:区分同一服务的多个客户端连接协议绑定:标准化服务访问入口(如HTTP=80,HTTPS=443) 端口工作流程 #mermaid-svg-ot6nkAbC04Z2wfmx {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-ot6nkAbC04Z2wfmx .error-icon{fill:#552222;}#mermaid-svg-ot6nkAbC04Z2wfmx .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-ot6nkAbC04Z2wfmx .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-ot6nkAbC04Z2wfmx .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-ot6nkAbC04Z2wfmx .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-ot6nkAbC04Z2wfmx .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-ot6nkAbC04Z2wfmx .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-ot6nkAbC04Z2wfmx .marker{fill:#333333;stroke:#333333;}#mermaid-svg-ot6nkAbC04Z2wfmx .marker.cross{stroke:#333333;}#mermaid-svg-ot6nkAbC04Z2wfmx svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-ot6nkAbC04Z2wfmx .actor{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-ot6nkAbC04Z2wfmx text.actor>tspan{fill:black;stroke:none;}#mermaid-svg-ot6nkAbC04Z2wfmx .actor-line{stroke:grey;}#mermaid-svg-ot6nkAbC04Z2wfmx .messageLine0{stroke-width:1.5;stroke-dasharray:none;stroke:#333;}#mermaid-svg-ot6nkAbC04Z2wfmx .messageLine1{stroke-width:1.5;stroke-dasharray:2,2;stroke:#333;}#mermaid-svg-ot6nkAbC04Z2wfmx #arrowhead path{fill:#333;stroke:#333;}#mermaid-svg-ot6nkAbC04Z2wfmx .sequenceNumber{fill:white;}#mermaid-svg-ot6nkAbC04Z2wfmx #sequencenumber{fill:#333;}#mermaid-svg-ot6nkAbC04Z2wfmx #crosshead path{fill:#333;stroke:#333;}#mermaid-svg-ot6nkAbC04Z2wfmx .messageText{fill:#333;stroke:#333;}#mermaid-svg-ot6nkAbC04Z2wfmx .labelBox{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-ot6nkAbC04Z2wfmx .labelText,#mermaid-svg-ot6nkAbC04Z2wfmx .labelText>tspan{fill:black;stroke:none;}#mermaid-svg-ot6nkAbC04Z2wfmx .loopText,#mermaid-svg-ot6nkAbC04Z2wfmx .loopText>tspan{fill:black;stroke:none;}#mermaid-svg-ot6nkAbC04Z2wfmx .loopLine{stroke-width:2px;stroke-dasharray:2,2;stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-ot6nkAbC04Z2wfmx .note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-ot6nkAbC04Z2wfmx .noteText,#mermaid-svg-ot6nkAbC04Z2wfmx .noteText>tspan{fill:black;stroke:none;}#mermaid-svg-ot6nkAbC04Z2wfmx .activation0{fill:#f4f4f4;stroke:#666;}#mermaid-svg-ot6nkAbC04Z2wfmx .activation1{fill:#f4f4f4;stroke:#666;}#mermaid-svg-ot6nkAbC04Z2wfmx .activation2{fill:#f4f4f4;stroke:#666;}#mermaid-svg-ot6nkAbC04Z2wfmx .actorPopupMenu{position:absolute;}#mermaid-svg-ot6nkAbC04Z2wfmx .actorPopupMenuPanel{position:absolute;fill:#ECECFF;box-shadow:0px 8px 16px 0px rgba(0,0,0,0.2);filter:drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));}#mermaid-svg-ot6nkAbC04Z2wfmx .actor-man line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-ot6nkAbC04Z2wfmx .actor-man circle,#mermaid-svg-ot6nkAbC04Z2wfmx line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;stroke-width:2px;}#mermaid-svg-ot6nkAbC04Z2wfmx :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 客户端 操作系统 应用服务 访问192.168.1.100:8080 检查端口监听状态 确认服务存在 建立TCP连接 客户端 操作系统 应用服务 3.2 端口号分类标准 IANA官方分类体系 #mermaid-svg-KiTI1GlIPwfBlzlc {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-KiTI1GlIPwfBlzlc .error-icon{fill:#552222;}#mermaid-svg-KiTI1GlIPwfBlzlc .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-KiTI1GlIPwfBlzlc .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-KiTI1GlIPwfBlzlc .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-KiTI1GlIPwfBlzlc .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-KiTI1GlIPwfBlzlc .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-KiTI1GlIPwfBlzlc .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-KiTI1GlIPwfBlzlc .marker{fill:#333333;stroke:#333333;}#mermaid-svg-KiTI1GlIPwfBlzlc .marker.cross{stroke:#333333;}#mermaid-svg-KiTI1GlIPwfBlzlc svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-KiTI1GlIPwfBlzlc .pieCircle{stroke:black;stroke-width:2px;opacity:0.7;}#mermaid-svg-KiTI1GlIPwfBlzlc .pieTitleText{text-anchor:middle;font-size:25px;fill:black;font-family:"trebuchet ms",verdana,arial,sans-serif;}#mermaid-svg-KiTI1GlIPwfBlzlc .slice{font-family:"trebuchet ms",verdana,arial,sans-serif;fill:#333;font-size:17px;}#mermaid-svg-KiTI1GlIPwfBlzlc .legend text{fill:black;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:17px;}#mermaid-svg-KiTI1GlIPwfBlzlc :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 20% 50% 30% 端口号分类占比 公认端口 (0-1023) 注册端口 (1024-49151) 动态端口 (49152-65535)

详细分类说明:

类别范围管理方式典型示例公认端口0-1023IANA严格管控80(HTTP),443(HTTPS)注册端口1024-49151IANA备案登记3306(MySQL),8080(备用HTTP)动态/私有端口49152-65535操作系统动态分配浏览器临时端口 特殊端口说明 0端口:特殊作用,表示自动分配端口1-1023:需要root/管理员权限才能监听保留端口:部分范围被系统服务占用(如22=SSH) 3.3 常见服务与端口映射 经典服务端口对照表 #mermaid-svg-NQwvn879hRxGbnU6 {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-NQwvn879hRxGbnU6 .error-icon{fill:#552222;}#mermaid-svg-NQwvn879hRxGbnU6 .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-NQwvn879hRxGbnU6 .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-NQwvn879hRxGbnU6 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-NQwvn879hRxGbnU6 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-NQwvn879hRxGbnU6 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-NQwvn879hRxGbnU6 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-NQwvn879hRxGbnU6 .marker{fill:#333333;stroke:#333333;}#mermaid-svg-NQwvn879hRxGbnU6 .marker.cross{stroke:#333333;}#mermaid-svg-NQwvn879hRxGbnU6 svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-NQwvn879hRxGbnU6 .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-NQwvn879hRxGbnU6 .cluster-label text{fill:#333;}#mermaid-svg-NQwvn879hRxGbnU6 .cluster-label span{color:#333;}#mermaid-svg-NQwvn879hRxGbnU6 .label text,#mermaid-svg-NQwvn879hRxGbnU6 span{fill:#333;color:#333;}#mermaid-svg-NQwvn879hRxGbnU6 .node rect,#mermaid-svg-NQwvn879hRxGbnU6 .node circle,#mermaid-svg-NQwvn879hRxGbnU6 .node ellipse,#mermaid-svg-NQwvn879hRxGbnU6 .node polygon,#mermaid-svg-NQwvn879hRxGbnU6 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-NQwvn879hRxGbnU6 .node .label{text-align:center;}#mermaid-svg-NQwvn879hRxGbnU6 .node.clickable{cursor:pointer;}#mermaid-svg-NQwvn879hRxGbnU6 .arrowheadPath{fill:#333333;}#mermaid-svg-NQwvn879hRxGbnU6 .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-NQwvn879hRxGbnU6 .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-NQwvn879hRxGbnU6 .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-NQwvn879hRxGbnU6 .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-NQwvn879hRxGbnU6 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-NQwvn879hRxGbnU6 .cluster text{fill:#333;}#mermaid-svg-NQwvn879hRxGbnU6 .cluster span{color:#333;}#mermaid-svg-NQwvn879hRxGbnU6 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-NQwvn879hRxGbnU6 :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} UDP协议 域名解析 地址分配 网络管理 53 161 DNS DHCP 67/68 SNMP TCP协议 默认 强制 安全连接 数据库 远程桌面 22 80 443 3306 3389 HTTP HTTPS SSH MySQL RDP 应用层协议 传输层 端口号 端口查看命令 # Windows查看监听端口 netstat -ano | findstr "LISTENING" # Linux查看端口占用 ss -tulnp | grep ':80' # MacOS端口检测 lsof -i :8080 3.4 端口扫描与安全防护 扫描原理示意图 #mermaid-svg-wXnGK9CNoR9EIPtW {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-wXnGK9CNoR9EIPtW .error-icon{fill:#552222;}#mermaid-svg-wXnGK9CNoR9EIPtW .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-wXnGK9CNoR9EIPtW .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-wXnGK9CNoR9EIPtW .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-wXnGK9CNoR9EIPtW .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-wXnGK9CNoR9EIPtW .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-wXnGK9CNoR9EIPtW .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-wXnGK9CNoR9EIPtW .marker{fill:#333333;stroke:#333333;}#mermaid-svg-wXnGK9CNoR9EIPtW .marker.cross{stroke:#333333;}#mermaid-svg-wXnGK9CNoR9EIPtW svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-wXnGK9CNoR9EIPtW .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-wXnGK9CNoR9EIPtW .cluster-label text{fill:#333;}#mermaid-svg-wXnGK9CNoR9EIPtW .cluster-label span{color:#333;}#mermaid-svg-wXnGK9CNoR9EIPtW .label text,#mermaid-svg-wXnGK9CNoR9EIPtW span{fill:#333;color:#333;}#mermaid-svg-wXnGK9CNoR9EIPtW .node rect,#mermaid-svg-wXnGK9CNoR9EIPtW .node circle,#mermaid-svg-wXnGK9CNoR9EIPtW .node ellipse,#mermaid-svg-wXnGK9CNoR9EIPtW .node polygon,#mermaid-svg-wXnGK9CNoR9EIPtW .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-wXnGK9CNoR9EIPtW .node .label{text-align:center;}#mermaid-svg-wXnGK9CNoR9EIPtW .node.clickable{cursor:pointer;}#mermaid-svg-wXnGK9CNoR9EIPtW .arrowheadPath{fill:#333333;}#mermaid-svg-wXnGK9CNoR9EIPtW .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-wXnGK9CNoR9EIPtW .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-wXnGK9CNoR9EIPtW .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-wXnGK9CNoR9EIPtW .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-wXnGK9CNoR9EIPtW .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-wXnGK9CNoR9EIPtW .cluster text{fill:#333;}#mermaid-svg-wXnGK9CNoR9EIPtW .cluster span{color:#333;}#mermaid-svg-wXnGK9CNoR9EIPtW div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-wXnGK9CNoR9EIPtW :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 扫描器 扫描类型 全端口扫描 快速扫描 隐蔽扫描 1-65535依次探测 只检查常用端口 SYN半开扫描 典型扫描工具对比 工具名称扫描方式特点示例命令NmapSYN扫描快速隐蔽nmap -sS 192.168.1.1Telnet手动探测简单直接telnet 10.0.0.2 80Masscan异步扫描全网段极速扫描masscan -p1-65535 10.0.0.0/8 安全防护策略

最小开放原则:

#mermaid-svg-Rh8gWUKhw0RlajVy {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-Rh8gWUKhw0RlajVy .error-icon{fill:#552222;}#mermaid-svg-Rh8gWUKhw0RlajVy .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-Rh8gWUKhw0RlajVy .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-Rh8gWUKhw0RlajVy .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-Rh8gWUKhw0RlajVy .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-Rh8gWUKhw0RlajVy .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-Rh8gWUKhw0RlajVy .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-Rh8gWUKhw0RlajVy .marker{fill:#333333;stroke:#333333;}#mermaid-svg-Rh8gWUKhw0RlajVy .marker.cross{stroke:#333333;}#mermaid-svg-Rh8gWUKhw0RlajVy svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-Rh8gWUKhw0RlajVy .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-Rh8gWUKhw0RlajVy .cluster-label text{fill:#333;}#mermaid-svg-Rh8gWUKhw0RlajVy .cluster-label span{color:#333;}#mermaid-svg-Rh8gWUKhw0RlajVy .label text,#mermaid-svg-Rh8gWUKhw0RlajVy span{fill:#333;color:#333;}#mermaid-svg-Rh8gWUKhw0RlajVy .node rect,#mermaid-svg-Rh8gWUKhw0RlajVy .node circle,#mermaid-svg-Rh8gWUKhw0RlajVy .node ellipse,#mermaid-svg-Rh8gWUKhw0RlajVy .node polygon,#mermaid-svg-Rh8gWUKhw0RlajVy .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-Rh8gWUKhw0RlajVy .node .label{text-align:center;}#mermaid-svg-Rh8gWUKhw0RlajVy .node.clickable{cursor:pointer;}#mermaid-svg-Rh8gWUKhw0RlajVy .arrowheadPath{fill:#333333;}#mermaid-svg-Rh8gWUKhw0RlajVy .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-Rh8gWUKhw0RlajVy .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-Rh8gWUKhw0RlajVy .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-Rh8gWUKhw0RlajVy .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-Rh8gWUKhw0RlajVy .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-Rh8gWUKhw0RlajVy .cluster text{fill:#333;}#mermaid-svg-Rh8gWUKhw0RlajVy .cluster span{color:#333;}#mermaid-svg-Rh8gWUKhw0RlajVy div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-Rh8gWUKhw0RlajVy :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 是 否 业务需求 必须开放 精确配置 立即关闭

防火墙配置示例:

# 只允许指定IP访问SSH iptables -A INPUT -p tcp --dport 22 -s 192.168.1.0/24 -j ACCEPT # 禁止外网访问数据库端口 iptables -A INPUT -p tcp --dport 3306 -j DROP

入侵检测方案:

部署IDS系统(如Snort)监控非常规端口活动设置端口访问频率阈值 4. IP与端口协同工作 4.1 Socket通信原理 核心概念图解 graph TB Client[客户端] -->|1.创建Socket| SOCKET[socket()] SOCKET -->|2.连接服务器| CONNECT[connect(IP:Port)] CONNECT -->|3.数据交换| SEND_RECV[send()/recv()] SEND_RECV -->|4.关闭连接| CLOSE[close()] 技术细节解析

Socket双要素:

IP地址定位目标主机端口号指定具体服务示例:202.108.22.5:80 表示百度Web服务

TCP vs UDP差异:

#mermaid-svg-Wmi3PZiEek9VBNOi {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-Wmi3PZiEek9VBNOi .error-icon{fill:#552222;}#mermaid-svg-Wmi3PZiEek9VBNOi .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-Wmi3PZiEek9VBNOi .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-Wmi3PZiEek9VBNOi .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-Wmi3PZiEek9VBNOi .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-Wmi3PZiEek9VBNOi .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-Wmi3PZiEek9VBNOi .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-Wmi3PZiEek9VBNOi .marker{fill:#333333;stroke:#333333;}#mermaid-svg-Wmi3PZiEek9VBNOi .marker.cross{stroke:#333333;}#mermaid-svg-Wmi3PZiEek9VBNOi svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-Wmi3PZiEek9VBNOi .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-Wmi3PZiEek9VBNOi .cluster-label text{fill:#333;}#mermaid-svg-Wmi3PZiEek9VBNOi .cluster-label span{color:#333;}#mermaid-svg-Wmi3PZiEek9VBNOi .label text,#mermaid-svg-Wmi3PZiEek9VBNOi span{fill:#333;color:#333;}#mermaid-svg-Wmi3PZiEek9VBNOi .node rect,#mermaid-svg-Wmi3PZiEek9VBNOi .node circle,#mermaid-svg-Wmi3PZiEek9VBNOi .node ellipse,#mermaid-svg-Wmi3PZiEek9VBNOi .node polygon,#mermaid-svg-Wmi3PZiEek9VBNOi .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-Wmi3PZiEek9VBNOi .node .label{text-align:center;}#mermaid-svg-Wmi3PZiEek9VBNOi .node.clickable{cursor:pointer;}#mermaid-svg-Wmi3PZiEek9VBNOi .arrowheadPath{fill:#333333;}#mermaid-svg-Wmi3PZiEek9VBNOi .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-Wmi3PZiEek9VBNOi .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-Wmi3PZiEek9VBNOi .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-Wmi3PZiEek9VBNOi .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-Wmi3PZiEek9VBNOi .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-Wmi3PZiEek9VBNOi .cluster text{fill:#333;}#mermaid-svg-Wmi3PZiEek9VBNOi .cluster span{color:#333;}#mermaid-svg-Wmi3PZiEek9VBNOi div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-Wmi3PZiEek9VBNOi :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} TCP 可靠传输 流量控制 三次握手 UDP 无连接 尽最大努力交付 低延迟

编程实践示例(Python):

# TCP客户端示例 import socket # 创建IPv4 TCP Socket s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) # 连接服务器(IP,端口) s.connect(('192.168.1.100', 8080)) # 发送数据 s.send(b'Hello Server!') # 接收响应 print(s.recv(1024)) # 关闭连接 s.close() 4.2 NAT网络地址转换 转换过程可视化 #mermaid-svg-NstLo4MlkhdLPSb7 {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-NstLo4MlkhdLPSb7 .error-icon{fill:#552222;}#mermaid-svg-NstLo4MlkhdLPSb7 .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-NstLo4MlkhdLPSb7 .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-NstLo4MlkhdLPSb7 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-NstLo4MlkhdLPSb7 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-NstLo4MlkhdLPSb7 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-NstLo4MlkhdLPSb7 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-NstLo4MlkhdLPSb7 .marker{fill:#333333;stroke:#333333;}#mermaid-svg-NstLo4MlkhdLPSb7 .marker.cross{stroke:#333333;}#mermaid-svg-NstLo4MlkhdLPSb7 svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-NstLo4MlkhdLPSb7 .actor{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-NstLo4MlkhdLPSb7 text.actor>tspan{fill:black;stroke:none;}#mermaid-svg-NstLo4MlkhdLPSb7 .actor-line{stroke:grey;}#mermaid-svg-NstLo4MlkhdLPSb7 .messageLine0{stroke-width:1.5;stroke-dasharray:none;stroke:#333;}#mermaid-svg-NstLo4MlkhdLPSb7 .messageLine1{stroke-width:1.5;stroke-dasharray:2,2;stroke:#333;}#mermaid-svg-NstLo4MlkhdLPSb7 #arrowhead path{fill:#333;stroke:#333;}#mermaid-svg-NstLo4MlkhdLPSb7 .sequenceNumber{fill:white;}#mermaid-svg-NstLo4MlkhdLPSb7 #sequencenumber{fill:#333;}#mermaid-svg-NstLo4MlkhdLPSb7 #crosshead path{fill:#333;stroke:#333;}#mermaid-svg-NstLo4MlkhdLPSb7 .messageText{fill:#333;stroke:#333;}#mermaid-svg-NstLo4MlkhdLPSb7 .labelBox{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-NstLo4MlkhdLPSb7 .labelText,#mermaid-svg-NstLo4MlkhdLPSb7 .labelText>tspan{fill:black;stroke:none;}#mermaid-svg-NstLo4MlkhdLPSb7 .loopText,#mermaid-svg-NstLo4MlkhdLPSb7 .loopText>tspan{fill:black;stroke:none;}#mermaid-svg-NstLo4MlkhdLPSb7 .loopLine{stroke-width:2px;stroke-dasharray:2,2;stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-NstLo4MlkhdLPSb7 .note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-NstLo4MlkhdLPSb7 .noteText,#mermaid-svg-NstLo4MlkhdLPSb7 .noteText>tspan{fill:black;stroke:none;}#mermaid-svg-NstLo4MlkhdLPSb7 .activation0{fill:#f4f4f4;stroke:#666;}#mermaid-svg-NstLo4MlkhdLPSb7 .activation1{fill:#f4f4f4;stroke:#666;}#mermaid-svg-NstLo4MlkhdLPSb7 .activation2{fill:#f4f4f4;stroke:#666;}#mermaid-svg-NstLo4MlkhdLPSb7 .actorPopupMenu{position:absolute;}#mermaid-svg-NstLo4MlkhdLPSb7 .actorPopupMenuPanel{position:absolute;fill:#ECECFF;box-shadow:0px 8px 16px 0px rgba(0,0,0,0.2);filter:drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));}#mermaid-svg-NstLo4MlkhdLPSb7 .actor-man line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-NstLo4MlkhdLPSb7 .actor-man circle,#mermaid-svg-NstLo4MlkhdLPSb7 line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;stroke-width:2px;}#mermaid-svg-NstLo4MlkhdLPSb7 :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 内网客户端(192.168.1.10:5000) 路由器(NAT) 公网服务器(202.96.128.86:80) 发送请求 src=192.168.1.10:5000 dst=202.96.128.86:80 转换后 src=218.17.39.22:6000 dst=202.96.128.86:80 返回响应 src=202.96.128.86:80 dst=218.17.39.22:6000 转换后 src=202.96.128.86:80 dst=192.168.1.10:5000 内网客户端(192.168.1.10:5000) 路由器(NAT) 公网服务器(202.96.128.86:80) NAT类型对比表 类型特点应用场景静态NAT一对一固定映射服务器对外暴露动态NAT多对多地址池映射企业内网访问互联网PAT多对一+端口转换家庭宽带双向NAT同时转换源/目标地址复杂网络环境 典型家庭网络示例 #mermaid-svg-RYSwkt5CbvSCXjkx {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-RYSwkt5CbvSCXjkx .error-icon{fill:#552222;}#mermaid-svg-RYSwkt5CbvSCXjkx .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-RYSwkt5CbvSCXjkx .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-RYSwkt5CbvSCXjkx .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-RYSwkt5CbvSCXjkx .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-RYSwkt5CbvSCXjkx .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-RYSwkt5CbvSCXjkx .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-RYSwkt5CbvSCXjkx .marker{fill:#333333;stroke:#333333;}#mermaid-svg-RYSwkt5CbvSCXjkx .marker.cross{stroke:#333333;}#mermaid-svg-RYSwkt5CbvSCXjkx svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-RYSwkt5CbvSCXjkx .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-RYSwkt5CbvSCXjkx .cluster-label text{fill:#333;}#mermaid-svg-RYSwkt5CbvSCXjkx .cluster-label span{color:#333;}#mermaid-svg-RYSwkt5CbvSCXjkx .label text,#mermaid-svg-RYSwkt5CbvSCXjkx span{fill:#333;color:#333;}#mermaid-svg-RYSwkt5CbvSCXjkx .node rect,#mermaid-svg-RYSwkt5CbvSCXjkx .node circle,#mermaid-svg-RYSwkt5CbvSCXjkx .node ellipse,#mermaid-svg-RYSwkt5CbvSCXjkx .node polygon,#mermaid-svg-RYSwkt5CbvSCXjkx .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-RYSwkt5CbvSCXjkx .node .label{text-align:center;}#mermaid-svg-RYSwkt5CbvSCXjkx .node.clickable{cursor:pointer;}#mermaid-svg-RYSwkt5CbvSCXjkx .arrowheadPath{fill:#333333;}#mermaid-svg-RYSwkt5CbvSCXjkx .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-RYSwkt5CbvSCXjkx .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-RYSwkt5CbvSCXjkx .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-RYSwkt5CbvSCXjkx .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-RYSwkt5CbvSCXjkx .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-RYSwkt5CbvSCXjkx .cluster text{fill:#333;}#mermaid-svg-RYSwkt5CbvSCXjkx .cluster span{color:#333;}#mermaid-svg-RYSwkt5CbvSCXjkx div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-RYSwkt5CbvSCXjkx :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 电脑 192.168.1.2 路由器 公网IP:218.17.39.22 手机 192.168.1.3 Internet

转换表示例:

内网地址外网映射协议状态192.168.1.2:5500218.17.39.22:6000TCPESTABLISHED192.168.1.3:4400218.17.39.22:6001UDPTIMEWAIT 4.3 防火墙规则配置 安全策略矩阵 #mermaid-svg-0oUivj4K5zxcxmRS {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-0oUivj4K5zxcxmRS .error-icon{fill:#552222;}#mermaid-svg-0oUivj4K5zxcxmRS .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-0oUivj4K5zxcxmRS .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-0oUivj4K5zxcxmRS .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-0oUivj4K5zxcxmRS .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-0oUivj4K5zxcxmRS .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-0oUivj4K5zxcxmRS .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-0oUivj4K5zxcxmRS .marker{fill:#333333;stroke:#333333;}#mermaid-svg-0oUivj4K5zxcxmRS .marker.cross{stroke:#333333;}#mermaid-svg-0oUivj4K5zxcxmRS svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-0oUivj4K5zxcxmRS .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-0oUivj4K5zxcxmRS .cluster-label text{fill:#333;}#mermaid-svg-0oUivj4K5zxcxmRS .cluster-label span{color:#333;}#mermaid-svg-0oUivj4K5zxcxmRS .label text,#mermaid-svg-0oUivj4K5zxcxmRS span{fill:#333;color:#333;}#mermaid-svg-0oUivj4K5zxcxmRS .node rect,#mermaid-svg-0oUivj4K5zxcxmRS .node circle,#mermaid-svg-0oUivj4K5zxcxmRS .node ellipse,#mermaid-svg-0oUivj4K5zxcxmRS .node polygon,#mermaid-svg-0oUivj4K5zxcxmRS .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-0oUivj4K5zxcxmRS .node .label{text-align:center;}#mermaid-svg-0oUivj4K5zxcxmRS .node.clickable{cursor:pointer;}#mermaid-svg-0oUivj4K5zxcxmRS .arrowheadPath{fill:#333333;}#mermaid-svg-0oUivj4K5zxcxmRS .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-0oUivj4K5zxcxmRS .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-0oUivj4K5zxcxmRS .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-0oUivj4K5zxcxmRS .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-0oUivj4K5zxcxmRS .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-0oUivj4K5zxcxmRS .cluster text{fill:#333;}#mermaid-svg-0oUivj4K5zxcxmRS .cluster span{color:#333;}#mermaid-svg-0oUivj4K5zxcxmRS div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-0oUivj4K5zxcxmRS :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 80/tcp 22/tcp 其他端口 恶意IP列表 正常地址 入站流量 端口检查 允许Web访问 禁止SSH连接 默认拒绝 出站流量 目标IP检查 拦截 放行 iptables配置示例 # 允许已建立的连接 iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # 开放SSH端口(限制源IP) iptables -A INPUT -p tcp --dport 22 -s 192.168.1.0/24 -j ACCEPT # 允许HTTP/HTTPS访问 iptables -A INPUT -p tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp --dport 443 -j ACCEPT # 禁止Ping探测 iptables -A INPUT -p icmp --icmp-type 8 -j DROP # 设置默认策略 iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT 4.4 典型通信案例解析 网页访问全过程 #mermaid-svg-VgK4yMoGOziA8EPF {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-VgK4yMoGOziA8EPF .error-icon{fill:#552222;}#mermaid-svg-VgK4yMoGOziA8EPF .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-VgK4yMoGOziA8EPF .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-VgK4yMoGOziA8EPF .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-VgK4yMoGOziA8EPF .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-VgK4yMoGOziA8EPF .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-VgK4yMoGOziA8EPF .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-VgK4yMoGOziA8EPF .marker{fill:#333333;stroke:#333333;}#mermaid-svg-VgK4yMoGOziA8EPF .marker.cross{stroke:#333333;}#mermaid-svg-VgK4yMoGOziA8EPF svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-VgK4yMoGOziA8EPF .actor{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-VgK4yMoGOziA8EPF text.actor>tspan{fill:black;stroke:none;}#mermaid-svg-VgK4yMoGOziA8EPF .actor-line{stroke:grey;}#mermaid-svg-VgK4yMoGOziA8EPF .messageLine0{stroke-width:1.5;stroke-dasharray:none;stroke:#333;}#mermaid-svg-VgK4yMoGOziA8EPF .messageLine1{stroke-width:1.5;stroke-dasharray:2,2;stroke:#333;}#mermaid-svg-VgK4yMoGOziA8EPF #arrowhead path{fill:#333;stroke:#333;}#mermaid-svg-VgK4yMoGOziA8EPF .sequenceNumber{fill:white;}#mermaid-svg-VgK4yMoGOziA8EPF #sequencenumber{fill:#333;}#mermaid-svg-VgK4yMoGOziA8EPF #crosshead path{fill:#333;stroke:#333;}#mermaid-svg-VgK4yMoGOziA8EPF .messageText{fill:#333;stroke:#333;}#mermaid-svg-VgK4yMoGOziA8EPF .labelBox{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-VgK4yMoGOziA8EPF .labelText,#mermaid-svg-VgK4yMoGOziA8EPF .labelText>tspan{fill:black;stroke:none;}#mermaid-svg-VgK4yMoGOziA8EPF .loopText,#mermaid-svg-VgK4yMoGOziA8EPF .loopText>tspan{fill:black;stroke:none;}#mermaid-svg-VgK4yMoGOziA8EPF .loopLine{stroke-width:2px;stroke-dasharray:2,2;stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-VgK4yMoGOziA8EPF .note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-VgK4yMoGOziA8EPF .noteText,#mermaid-svg-VgK4yMoGOziA8EPF .noteText>tspan{fill:black;stroke:none;}#mermaid-svg-VgK4yMoGOziA8EPF .activation0{fill:#f4f4f4;stroke:#666;}#mermaid-svg-VgK4yMoGOziA8EPF .activation1{fill:#f4f4f4;stroke:#666;}#mermaid-svg-VgK4yMoGOziA8EPF .activation2{fill:#f4f4f4;stroke:#666;}#mermaid-svg-VgK4yMoGOziA8EPF .actorPopupMenu{position:absolute;}#mermaid-svg-VgK4yMoGOziA8EPF .actorPopupMenuPanel{position:absolute;fill:#ECECFF;box-shadow:0px 8px 16px 0px rgba(0,0,0,0.2);filter:drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));}#mermaid-svg-VgK4yMoGOziA8EPF .actor-man line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-VgK4yMoGOziA8EPF .actor-man circle,#mermaid-svg-VgK4yMoGOziA8EPF line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;stroke-width:2px;}#mermaid-svg-VgK4yMoGOziA8EPF :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 用户浏览器 DNS服务器 家庭路由器 云服务器防火墙 Web服务器 查询 .example 返回 203.0.113.76 请求 203.0.113.76:80 src=192.168.1.10:5000 转换源为 218.17.39.22:6000 检查通过后转发请求 响应数据 返回数据 转换目标地址 用户浏览器 DNS服务器 家庭路由器 云服务器防火墙 Web服务器 关键节点分析

DNS解析阶段:

使用UDP 53端口进行查询递归查询过程(浏览器→本地DNS→根DNS)

连接建立阶段:

TCP三次握手过程客户端随机端口(5000)与服务器80端口建立连接

数据传输阶段:

HTTP协议层:请求头/响应头格式数据分片传输(MSS协商)

安全校验过程:

防火墙状态检测WAF(Web应用防火墙)内容过滤SSL/TLS握手(443端口) 5. 实践应用与排错指南 5.1 常用网络命令详解 核心工具全景图 #mermaid-svg-Z5feuqPRE2d2iZJ2 {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .error-icon{fill:#552222;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .marker{fill:#333333;stroke:#333333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .marker.cross{stroke:#333333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .cluster-label text{fill:#333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .cluster-label span{color:#333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .label text,#mermaid-svg-Z5feuqPRE2d2iZJ2 span{fill:#333;color:#333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .node rect,#mermaid-svg-Z5feuqPRE2d2iZJ2 .node circle,#mermaid-svg-Z5feuqPRE2d2iZJ2 .node ellipse,#mermaid-svg-Z5feuqPRE2d2iZJ2 .node polygon,#mermaid-svg-Z5feuqPRE2d2iZJ2 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .node .label{text-align:center;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .node.clickable{cursor:pointer;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .arrowheadPath{fill:#333333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .cluster text{fill:#333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 .cluster span{color:#333;}#mermaid-svg-Z5feuqPRE2d2iZJ2 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-Z5feuqPRE2d2iZJ2 :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 网络命令 连通性测试 连接分析 协议调试 ping traceroute netstat ss tcpdump Wireshark 重点命令解析 ping命令(ICMP协议测试) # 基础用法 ping .baidu # 高级参数 ping -c 4 -i 0.5 -s 1024 192.168.1.1 输出解析: 64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.23 ms traceroute路径追踪 #mermaid-svg-es5NzqTswk86eKNC {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-es5NzqTswk86eKNC .error-icon{fill:#552222;}#mermaid-svg-es5NzqTswk86eKNC .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-es5NzqTswk86eKNC .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-es5NzqTswk86eKNC .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-es5NzqTswk86eKNC .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-es5NzqTswk86eKNC .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-es5NzqTswk86eKNC .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-es5NzqTswk86eKNC .marker{fill:#333333;stroke:#333333;}#mermaid-svg-es5NzqTswk86eKNC .marker.cross{stroke:#333333;}#mermaid-svg-es5NzqTswk86eKNC svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-es5NzqTswk86eKNC .actor{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-es5NzqTswk86eKNC text.actor>tspan{fill:black;stroke:none;}#mermaid-svg-es5NzqTswk86eKNC .actor-line{stroke:grey;}#mermaid-svg-es5NzqTswk86eKNC .messageLine0{stroke-width:1.5;stroke-dasharray:none;stroke:#333;}#mermaid-svg-es5NzqTswk86eKNC .messageLine1{stroke-width:1.5;stroke-dasharray:2,2;stroke:#333;}#mermaid-svg-es5NzqTswk86eKNC #arrowhead path{fill:#333;stroke:#333;}#mermaid-svg-es5NzqTswk86eKNC .sequenceNumber{fill:white;}#mermaid-svg-es5NzqTswk86eKNC #sequencenumber{fill:#333;}#mermaid-svg-es5NzqTswk86eKNC #crosshead path{fill:#333;stroke:#333;}#mermaid-svg-es5NzqTswk86eKNC .messageText{fill:#333;stroke:#333;}#mermaid-svg-es5NzqTswk86eKNC .labelBox{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-es5NzqTswk86eKNC .labelText,#mermaid-svg-es5NzqTswk86eKNC .labelText>tspan{fill:black;stroke:none;}#mermaid-svg-es5NzqTswk86eKNC .loopText,#mermaid-svg-es5NzqTswk86eKNC .loopText>tspan{fill:black;stroke:none;}#mermaid-svg-es5NzqTswk86eKNC .loopLine{stroke-width:2px;stroke-dasharray:2,2;stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-es5NzqTswk86eKNC .note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-es5NzqTswk86eKNC .noteText,#mermaid-svg-es5NzqTswk86eKNC .noteText>tspan{fill:black;stroke:none;}#mermaid-svg-es5NzqTswk86eKNC .activation0{fill:#f4f4f4;stroke:#666;}#mermaid-svg-es5NzqTswk86eKNC .activation1{fill:#f4f4f4;stroke:#666;}#mermaid-svg-es5NzqTswk86eKNC .activation2{fill:#f4f4f4;stroke:#666;}#mermaid-svg-es5NzqTswk86eKNC .actorPopupMenu{position:absolute;}#mermaid-svg-es5NzqTswk86eKNC .actorPopupMenuPanel{position:absolute;fill:#ECECFF;box-shadow:0px 8px 16px 0px rgba(0,0,0,0.2);filter:drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));}#mermaid-svg-es5NzqTswk86eKNC .actor-man line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-es5NzqTswk86eKNC .actor-man circle,#mermaid-svg-es5NzqTswk86eKNC line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;stroke-width:2px;}#mermaid-svg-es5NzqTswk86eKNC :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 本机 路由1 路由2 发送TTL=1的包 返回超时消息 发送TTL=2的包 返回超时消息 持续增加TTL直到目标 本机 路由1 路由2 netstat端口分析 # 查看所有TCP连接 netstat -ant # 查看进程占用端口 netstat -tulnp 典型输出: Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1234/sshd 5.2 网络诊断思路与方法 分层排查模型 #mermaid-svg-KBtwdKLgZwYOFc0z {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-KBtwdKLgZwYOFc0z .error-icon{fill:#552222;}#mermaid-svg-KBtwdKLgZwYOFc0z .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-KBtwdKLgZwYOFc0z .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-KBtwdKLgZwYOFc0z .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-KBtwdKLgZwYOFc0z .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-KBtwdKLgZwYOFc0z .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-KBtwdKLgZwYOFc0z .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-KBtwdKLgZwYOFc0z .marker{fill:#333333;stroke:#333333;}#mermaid-svg-KBtwdKLgZwYOFc0z .marker.cross{stroke:#333333;}#mermaid-svg-KBtwdKLgZwYOFc0z svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-KBtwdKLgZwYOFc0z .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-KBtwdKLgZwYOFc0z .cluster-label text{fill:#333;}#mermaid-svg-KBtwdKLgZwYOFc0z .cluster-label span{color:#333;}#mermaid-svg-KBtwdKLgZwYOFc0z .label text,#mermaid-svg-KBtwdKLgZwYOFc0z span{fill:#333;color:#333;}#mermaid-svg-KBtwdKLgZwYOFc0z .node rect,#mermaid-svg-KBtwdKLgZwYOFc0z .node circle,#mermaid-svg-KBtwdKLgZwYOFc0z .node ellipse,#mermaid-svg-KBtwdKLgZwYOFc0z .node polygon,#mermaid-svg-KBtwdKLgZwYOFc0z .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-KBtwdKLgZwYOFc0z .node .label{text-align:center;}#mermaid-svg-KBtwdKLgZwYOFc0z .node.clickable{cursor:pointer;}#mermaid-svg-KBtwdKLgZwYOFc0z .arrowheadPath{fill:#333333;}#mermaid-svg-KBtwdKLgZwYOFc0z .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-KBtwdKLgZwYOFc0z .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-KBtwdKLgZwYOFc0z .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-KBtwdKLgZwYOFc0z .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-KBtwdKLgZwYOFc0z .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-KBtwdKLgZwYOFc0z .cluster text{fill:#333;}#mermaid-svg-KBtwdKLgZwYOFc0z .cluster span{color:#333;}#mermaid-svg-KBtwdKLgZwYOFc0z div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-KBtwdKLgZwYOFc0z :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 500 404 SYN_SENT TIME_WAIT 超时 目标不可达 熄灭 闪烁 应用层 HTTP状态码 检查服务日志 验证URL路径 传输层 TCP连接状态 检查防火墙 查看连接池配置 网络层 ICMP响应 检查路由配置 验证子网掩码 物理层 链路指示灯 检查网线连接 检测网络流量 典型故障排查流程 现象收集:记录错误代码、发生频率、影响范围范围界定: #mermaid-svg-nZRMQ8LXgWCv4x5x {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-nZRMQ8LXgWCv4x5x .error-icon{fill:#552222;}#mermaid-svg-nZRMQ8LXgWCv4x5x .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-nZRMQ8LXgWCv4x5x .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-nZRMQ8LXgWCv4x5x .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-nZRMQ8LXgWCv4x5x .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-nZRMQ8LXgWCv4x5x .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-nZRMQ8LXgWCv4x5x .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-nZRMQ8LXgWCv4x5x .marker{fill:#333333;stroke:#333333;}#mermaid-svg-nZRMQ8LXgWCv4x5x .marker.cross{stroke:#333333;}#mermaid-svg-nZRMQ8LXgWCv4x5x svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-nZRMQ8LXgWCv4x5x .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-nZRMQ8LXgWCv4x5x .cluster-label text{fill:#333;}#mermaid-svg-nZRMQ8LXgWCv4x5x .cluster-label span{color:#333;}#mermaid-svg-nZRMQ8LXgWCv4x5x .label text,#mermaid-svg-nZRMQ8LXgWCv4x5x span{fill:#333;color:#333;}#mermaid-svg-nZRMQ8LXgWCv4x5x .node rect,#mermaid-svg-nZRMQ8LXgWCv4x5x .node circle,#mermaid-svg-nZRMQ8LXgWCv4x5x .node ellipse,#mermaid-svg-nZRMQ8LXgWCv4x5x .node polygon,#mermaid-svg-nZRMQ8LXgWCv4x5x .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-nZRMQ8LXgWCv4x5x .node .label{text-align:center;}#mermaid-svg-nZRMQ8LXgWCv4x5x .node.clickable{cursor:pointer;}#mermaid-svg-nZRMQ8LXgWCv4x5x .arrowheadPath{fill:#333333;}#mermaid-svg-nZRMQ8LXgWCv4x5x .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-nZRMQ8LXgWCv4x5x .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-nZRMQ8LXgWCv4x5x .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-nZRMQ8LXgWCv4x5x .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-nZRMQ8LXgWCv4x5x .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-nZRMQ8LXgWCv4x5x .cluster text{fill:#333;}#mermaid-svg-nZRMQ8LXgWCv4x5x .cluster span{color:#333;}#mermaid-svg-nZRMQ8LXgWCv4x5x div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-nZRMQ8LXgWCv4x5x :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 多用户问题 客户端排查 服务端排查 全部服务异常 应用层检查 网络层检查 工具使用:按OSI模型自下而上逐层检测日志分析:结合系统日志(/var/log/messages)、应用日志、防火墙日志 5.3 典型故障案例分析 案例1:端口冲突故障

现象:

Web服务启动报错"Address already in use"netstat显示80端口被未知进程占用

排查过程:

graph TD A[服务启动失败] --> B[netstat -tulnp | grep :80] B --> C[发现占用进程PID] C --> D[ps aux | grep PID] D --> E[确认僵尸进程] E --> F[kill -9 PID] 案例2:DNS解析异常

现象:

能ping通IP但无法访问域名浏览器报错"DNS_PROBE_FINISHED_NXDOMAIN"

解决方案:

刷新DNS缓存# Windows ipconfig /flushdns # Linux systemctl restart nscd 修改DNS服务器graph LR A[网络设置] --> B[手动DNS] B --> C[8.8.8.8(Google)] B --> D[114.114.114.114(电信)]
6. 进阶知识扩展 6.1 域名解析系统DNS 解析过程全貌 #mermaid-svg-Ta46s4hpKeokZemj {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-Ta46s4hpKeokZemj .error-icon{fill:#552222;}#mermaid-svg-Ta46s4hpKeokZemj .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-Ta46s4hpKeokZemj .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-Ta46s4hpKeokZemj .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-Ta46s4hpKeokZemj .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-Ta46s4hpKeokZemj .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-Ta46s4hpKeokZemj .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-Ta46s4hpKeokZemj .marker{fill:#333333;stroke:#333333;}#mermaid-svg-Ta46s4hpKeokZemj .marker.cross{stroke:#333333;}#mermaid-svg-Ta46s4hpKeokZemj svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-Ta46s4hpKeokZemj .actor{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-Ta46s4hpKeokZemj text.actor>tspan{fill:black;stroke:none;}#mermaid-svg-Ta46s4hpKeokZemj .actor-line{stroke:grey;}#mermaid-svg-Ta46s4hpKeokZemj .messageLine0{stroke-width:1.5;stroke-dasharray:none;stroke:#333;}#mermaid-svg-Ta46s4hpKeokZemj .messageLine1{stroke-width:1.5;stroke-dasharray:2,2;stroke:#333;}#mermaid-svg-Ta46s4hpKeokZemj #arrowhead path{fill:#333;stroke:#333;}#mermaid-svg-Ta46s4hpKeokZemj .sequenceNumber{fill:white;}#mermaid-svg-Ta46s4hpKeokZemj #sequencenumber{fill:#333;}#mermaid-svg-Ta46s4hpKeokZemj #crosshead path{fill:#333;stroke:#333;}#mermaid-svg-Ta46s4hpKeokZemj .messageText{fill:#333;stroke:#333;}#mermaid-svg-Ta46s4hpKeokZemj .labelBox{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-Ta46s4hpKeokZemj .labelText,#mermaid-svg-Ta46s4hpKeokZemj .labelText>tspan{fill:black;stroke:none;}#mermaid-svg-Ta46s4hpKeokZemj .loopText,#mermaid-svg-Ta46s4hpKeokZemj .loopText>tspan{fill:black;stroke:none;}#mermaid-svg-Ta46s4hpKeokZemj .loopLine{stroke-width:2px;stroke-dasharray:2,2;stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-Ta46s4hpKeokZemj .note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-Ta46s4hpKeokZemj .noteText,#mermaid-svg-Ta46s4hpKeokZemj .noteText>tspan{fill:black;stroke:none;}#mermaid-svg-Ta46s4hpKeokZemj .activation0{fill:#f4f4f4;stroke:#666;}#mermaid-svg-Ta46s4hpKeokZemj .activation1{fill:#f4f4f4;stroke:#666;}#mermaid-svg-Ta46s4hpKeokZemj .activation2{fill:#f4f4f4;stroke:#666;}#mermaid-svg-Ta46s4hpKeokZemj .actorPopupMenu{position:absolute;}#mermaid-svg-Ta46s4hpKeokZemj .actorPopupMenuPanel{position:absolute;fill:#ECECFF;box-shadow:0px 8px 16px 0px rgba(0,0,0,0.2);filter:drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));}#mermaid-svg-Ta46s4hpKeokZemj .actor-man line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-Ta46s4hpKeokZemj .actor-man circle,#mermaid-svg-Ta46s4hpKeokZemj line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;stroke-width:2px;}#mermaid-svg-Ta46s4hpKeokZemj :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 浏览器 本地DNS 根DNS 顶级DNS 权威DNS 查询 .example 请求 NS 返回 顶级DNS 请求example NS 返回权威DNS 请求A记录 返回IP地址 返回解析结果 浏览器 本地DNS 根DNS 顶级DNS 权威DNS DNS记录类型详解 记录类型功能描述示例AIPv4地址记录example → 93.184.216.34AAAAIPv6地址记录example → 2606:2800:220:1::248CNAME别名记录 → example MX邮件交换记录@ → mail.example TXT文本验证记录“v=spf1 include:_spf.google ~all” 6.2 负载均衡与反向代理 四层 vs 七层负载均衡 #mermaid-svg-hLq668TwEoPHZ9In {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-hLq668TwEoPHZ9In .error-icon{fill:#552222;}#mermaid-svg-hLq668TwEoPHZ9In .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-hLq668TwEoPHZ9In .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-hLq668TwEoPHZ9In .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-hLq668TwEoPHZ9In .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-hLq668TwEoPHZ9In .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-hLq668TwEoPHZ9In .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-hLq668TwEoPHZ9In .marker{fill:#333333;stroke:#333333;}#mermaid-svg-hLq668TwEoPHZ9In .marker.cross{stroke:#333333;}#mermaid-svg-hLq668TwEoPHZ9In svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-hLq668TwEoPHZ9In .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-hLq668TwEoPHZ9In .cluster-label text{fill:#333;}#mermaid-svg-hLq668TwEoPHZ9In .cluster-label span{color:#333;}#mermaid-svg-hLq668TwEoPHZ9In .label text,#mermaid-svg-hLq668TwEoPHZ9In span{fill:#333;color:#333;}#mermaid-svg-hLq668TwEoPHZ9In .node rect,#mermaid-svg-hLq668TwEoPHZ9In .node circle,#mermaid-svg-hLq668TwEoPHZ9In .node ellipse,#mermaid-svg-hLq668TwEoPHZ9In .node polygon,#mermaid-svg-hLq668TwEoPHZ9In .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-hLq668TwEoPHZ9In .node .label{text-align:center;}#mermaid-svg-hLq668TwEoPHZ9In .node.clickable{cursor:pointer;}#mermaid-svg-hLq668TwEoPHZ9In .arrowheadPath{fill:#333333;}#mermaid-svg-hLq668TwEoPHZ9In .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-hLq668TwEoPHZ9In .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-hLq668TwEoPHZ9In .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-hLq668TwEoPHZ9In .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-hLq668TwEoPHZ9In .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-hLq668TwEoPHZ9In .cluster text{fill:#333;}#mermaid-svg-hLq668TwEoPHZ9In .cluster span{color:#333;}#mermaid-svg-hLq668TwEoPHZ9In div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-hLq668TwEoPHZ9In :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 七层负载 四层负载 基于IP+端口 TCP/UDP转发 解析HTTP头 内容识别 根据URL分发 动态调度 服务器1 负载均衡器 服务器2 客户端 Nginx配置示例 http { upstream backend { least_conn; # 最少连接算法 server 192.168.1.101:8080 weight=3; server 192.168.1.102:8080; server backup.example :8080 backup; } server { listen 80; location / { proxy_pass http://backend; proxy_set_header Host $host; } } } 6.3 未来网络发展趋势 技术演进路线 timeline title 网络技术发展路线 2020年 : IPv6普及加速 2023年 : Wi-Fi 7标准发布 2025年 : 量子加密实用化 2030年 : 6G网络商用 关键技术解析

SRv6(Segment Routing IPv6):

原生支持网络编程简化SDN部署 #mermaid-svg-m4aajFkpwRmCPYau {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-m4aajFkpwRmCPYau .error-icon{fill:#552222;}#mermaid-svg-m4aajFkpwRmCPYau .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-m4aajFkpwRmCPYau .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-m4aajFkpwRmCPYau .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-m4aajFkpwRmCPYau .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-m4aajFkpwRmCPYau .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-m4aajFkpwRmCPYau .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-m4aajFkpwRmCPYau .marker{fill:#333333;stroke:#333333;}#mermaid-svg-m4aajFkpwRmCPYau .marker.cross{stroke:#333333;}#mermaid-svg-m4aajFkpwRmCPYau svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-m4aajFkpwRmCPYau .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-m4aajFkpwRmCPYau .cluster-label text{fill:#333;}#mermaid-svg-m4aajFkpwRmCPYau .cluster-label span{color:#333;}#mermaid-svg-m4aajFkpwRmCPYau .label text,#mermaid-svg-m4aajFkpwRmCPYau span{fill:#333;color:#333;}#mermaid-svg-m4aajFkpwRmCPYau .node rect,#mermaid-svg-m4aajFkpwRmCPYau .node circle,#mermaid-svg-m4aajFkpwRmCPYau .node ellipse,#mermaid-svg-m4aajFkpwRmCPYau .node polygon,#mermaid-svg-m4aajFkpwRmCPYau .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-m4aajFkpwRmCPYau .node .label{text-align:center;}#mermaid-svg-m4aajFkpwRmCPYau .node.clickable{cursor:pointer;}#mermaid-svg-m4aajFkpwRmCPYau .arrowheadPath{fill:#333333;}#mermaid-svg-m4aajFkpwRmCPYau .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-m4aajFkpwRmCPYau .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-m4aajFkpwRmCPYau .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-m4aajFkpwRmCPYau .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-m4aajFkpwRmCPYau .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-m4aajFkpwRmCPYau .cluster text{fill:#333;}#mermaid-svg-m4aajFkpwRmCPYau .cluster span{color:#333;}#mermaid-svg-m4aajFkpwRmCPYau div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-m4aajFkpwRmCPYau :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 源节点 路径分段1 路径分段2 目标节点

网络智能化:

AI驱动的流量预测故障自愈系统架构 #mermaid-svg-rMixGc4m85UrqQ15 {font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#mermaid-svg-rMixGc4m85UrqQ15 .error-icon{fill:#552222;}#mermaid-svg-rMixGc4m85UrqQ15 .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-rMixGc4m85UrqQ15 .edge-thickness-normal{stroke-width:2px;}#mermaid-svg-rMixGc4m85UrqQ15 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-rMixGc4m85UrqQ15 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-rMixGc4m85UrqQ15 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-rMixGc4m85UrqQ15 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-rMixGc4m85UrqQ15 .marker{fill:#333333;stroke:#333333;}#mermaid-svg-rMixGc4m85UrqQ15 .marker.cross{stroke:#333333;}#mermaid-svg-rMixGc4m85UrqQ15 svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-rMixGc4m85UrqQ15 .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#mermaid-svg-rMixGc4m85UrqQ15 .cluster-label text{fill:#333;}#mermaid-svg-rMixGc4m85UrqQ15 .cluster-label span{color:#333;}#mermaid-svg-rMixGc4m85UrqQ15 .label text,#mermaid-svg-rMixGc4m85UrqQ15 span{fill:#333;color:#333;}#mermaid-svg-rMixGc4m85UrqQ15 .node rect,#mermaid-svg-rMixGc4m85UrqQ15 .node circle,#mermaid-svg-rMixGc4m85UrqQ15 .node ellipse,#mermaid-svg-rMixGc4m85UrqQ15 .node polygon,#mermaid-svg-rMixGc4m85UrqQ15 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-rMixGc4m85UrqQ15 .node .label{text-align:center;}#mermaid-svg-rMixGc4m85UrqQ15 .node.clickable{cursor:pointer;}#mermaid-svg-rMixGc4m85UrqQ15 .arrowheadPath{fill:#333333;}#mermaid-svg-rMixGc4m85UrqQ15 .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-rMixGc4m85UrqQ15 .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-rMixGc4m85UrqQ15 .edgeLabel{background-color:#e8e8e8;text-align:center;}#mermaid-svg-rMixGc4m85UrqQ15 .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#mermaid-svg-rMixGc4m85UrqQ15 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-rMixGc4m85UrqQ15 .cluster text{fill:#333;}#mermaid-svg-rMixGc4m85UrqQ15 .cluster span{color:#333;}#mermaid-svg-rMixGc4m85UrqQ15 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-rMixGc4m85UrqQ15 :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;} 是 否 实时监控 AI分析引擎 异常判断 自动修复 生成报告

希望本文能对您有所帮助!

标签:

深入理解IP地址与端口:网络通信的基石由讯客互联人工智能栏目发布,感谢您对讯客互联的认可,以及对我们原创作品以及文章的青睐,非常欢迎各位朋友分享到个人网站或者朋友圈,但转载请说明文章出处“深入理解IP地址与端口:网络通信的基石