如何在Linux上以普通用户身份在端口80上运行服务器？

#1 楼

# iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080

# iptables -t nat -I OUTPUT -p tcp -d 127.0.0.1 --dport 80 -j REDIRECT --to-ports 8080

# iptables -t nat --line-numbers -n -L

Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination         
1    REDIRECT   tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 redir ports 8088
2    REDIRECT   tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80 redir ports 8080

#2 楼

authbind --deep $JAVA_HOME/bin/java -Djava.net.preferIPv4Stack=true …

#3 楼

sudo apt-get install libcap2-bin 
sudo setcap 'cap_net_bind_service=+ep' /path/to/program

#4 楼

chown root ./myapp
chmod +S ./myapp

setcap 'cap_net_bind_service=+ep' /path/to/program

#5 楼

server {
        listen  80;
        server_name some.domain.org;
        location / {
            proxy_set_header    Host $host;
            proxy_set_header    X-Real-IP   $remote_addr;
            proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass  http://127.0.0.1:8081;
        }
}

#6 楼

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080

80  ---> 8080
443 ---> 8181

#7 楼

#8 楼

#9 楼

#10 楼

sudo redir --lport=80 --laddr=192.168.0.101 --cport 9990 --caddr=127.0.0.1

#11 楼

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
iptables -t nat -I OUTPUT -p tcp -d 127.0.0.1 --dport 80 -j REDIRECT --to-ports 8080

#12 楼

/etc/init.d/httpd start

apachectl stop

/usr/local/apache2/apachectl restart

/myapp/myappbin start

#13 楼

#14 楼

#15 楼

#16 楼

ProxyPass /webapp http://localhost:8080/webapp
ProxyPassReverse /webapp http://localhost:8080/webapp

#17 楼

#18 楼

# apt-get install xinetd
# touch /etc/xinetd.d/my_redirect
# vim /etc/xinetd.d/my_redirect

service my_redirector_80
{
 disable = no
 socket_type = stream
 protocol = tcp
 user = root
 wait = no
 port = 80
 redirect = localhost 8080
 type = UNLISTED
}

# service xinetd restart

#19 楼

#20 楼

sudo /sbin/setcap 'cap_net_bind_service=ep' /usr/lib/jvm/java-8-openjdk/jre/bin/java

/usr/src/linux-<version_number>/include/net/sock.h:

/* Sockets 0-1023 can't be bound to unless you are superuser */
#define PROT_SOCK       1024

#define PROT_SOCK 0

# You can get the kernel-source via package linux-source, no manual download required
apt-get install linux-source fakeroot

mkdir ~/src
cd ~/src
tar xjvf /usr/src/linux-source-<version>.tar.bz2
cd linux-source-<version>

# Apply the changes to PROT_SOCK define in /include/net/sock.h

# Copy the kernel config file you are currently using
cp -vi /boot/config-`uname -r` .config

# Install ncurses libary, if you want to run menuconfig
apt-get install libncurses5 libncurses5-dev

# Run menuconfig (optional)
make menuconfig

# Define the number of threads you wanna use when compiling (should be <number CPU cores> - 1), e.g. for quad-core
export CONCURRENCY_LEVEL=3
# Now compile the custom kernel
fakeroot make-kpkg --initrd --append-to-version=custom kernel-image kernel-headers

# And wait a long long time

cd ..