Linux网卡Bond设置方式

DEVICE=eth0 或 eth1
ONBOOT=yes
BOOTPROTO=none
MASTER=bond0
SLAVE=yes
USERCTL=no

TYPE=Ethernet
DEVICE=bond0
ONBOOT=yes
BOOTPROTO=static
IPADDR=192.168.1.100
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
DNS1=8.8.8.8
BONDING_OPTS="miimon=100 mode=0 fail_over_mac=1"

nmcli connection add type bond ifname bond1 mode balance-rr

# 创建bond0
nmcli connection add type bond ifname bond0 mode active-backup
# 创建bond1
nmcli connection add type bond ifname bond1 mode balance-rr
# 创建bond2
nmcli connection add type bond ifname bond2 mode balance-xor
# 创建bond3
nmcli connection add type bond ifname bond3 mode broadcast
# 创建bond4
nmcli connection add type bond ifname bond4 mode 802.3ad
# 创建bond5
nmcli connection add type bond ifname bond5 mode balance-tlb
# 创建bond6
nmcli connection add type bond ifname bond6 mode balance-alb

nmcli connection modify bond-bond1 ipv4.addresses 192.168.10.81/24 ipv4.gateway 192.168.10.251 ipv4.method manual

nmcli connection modify bond-bond1 ipv4.method auto

nmcli connection add type bond-slave ifname ens224 master bond-bond1
nmcli connection add type bond-slave ifname ens256 master bond-bond1

nmcli connection reload
nmcli connection up bond-bond1
reboot

#!/usr/bin/env bash
set -euo pipefail

need_cmd() { command -v "$1" >/dev/null 2>&1 || { echo "缺少命令: $1"; exit 1; }; }
need_cmd nmcli
need_cmd ip

echo "===  Bond 自动化配置脚本 ==="

# 读取可用物理网卡（排除 lo、bond、vlan、bridge、tun、docker 等）
mapfile -t IFACES < <(
  nmcli -t -f DEVICE,TYPE device status |
  awk -F: '
    $2=="ethernet" || $2=="infiniband" {
      dev=$1;
      if (dev!="lo" && dev!~/(^bond|^br|^virbr|^docker|^veth|^tun|^tap|^wg|^sit|^gre|^vlan)/) print dev
    }'
)

if (( ${#IFACES[@]} < 2 )); then
  echo "可用物理网卡少于 2 块，无法创建 bond。"
  nmcli device status
  exit 1
fi

echo
echo "发现可用网卡："
for i in "${!IFACES[@]}"; do
  dev="${IFACES[$i]}"
  state="$(nmcli -t -f DEVICE,STATE device status | awk -F: -v d="$dev" '$1==d{print $2}')"
  mac="$(nmcli -t -f GENERAL.HWADDR device show "$dev" 2>/dev/null | cut -d: -f2- || true)"
  ip4="$(ip -4 -o addr show "$dev" 2>/dev/null | awk '{print $4}' | head -n1 || true)"
  printf "  [%d] %-12s  state=%-12s  ip=%-18s  mac=%s\n" "$i" "$dev" "$state" "${ip4:-none}" "${mac:-unknown}"
done

echo
read -rp "请输入 bond 名称(默认 bond0): " BOND_NAME
BOND_NAME="${BOND_NAME:-bond0}"

echo
echo "请选择 bond mode："
echo "  1) balance-rr   (轮询，需交换机支持/容忍乱序)"
echo "  2) active-backup(主备，最稳，无需交换机特殊配置)"
echo "  3) balance-xor  (基于 hash 分流，部分场景需配合交换机)"
echo "  4) broadcast"
echo "  5) 802.3ad      (LACP，推荐生产；交换机需做链路聚合)"
echo "  6) balance-tlb"
echo "  7) balance-alb"
read -rp "输入序号(默认 2): " MODE_NO
MODE_NO="${MODE_NO:-2}"

case "$MODE_NO" in
  1) BOND_MODE="balance-rr" ;;
  2) BOND_MODE="active-backup" ;;
  3) BOND_MODE="balance-xor" ;;
  4) BOND_MODE="broadcast" ;;
  5) BOND_MODE="802.3ad" ;;
  6) BOND_MODE="balance-tlb" ;;
  7) BOND_MODE="balance-alb" ;;
  *) echo "无效选择"; exit 1 ;;
esac

echo
read -rp "请输入 IPv4 地址(如 192.168.100.1): " IPADDR
read -rp "请输入 CIDR 前缀(如 24): " PREFIX
ADDR_CIDR="${IPADDR}/${PREFIX}"

read -rp "是否配置网关? (y/N): " GW_YN
GW_YN="${GW_YN:-N}"
GATEWAY=""
if [[ "$GW_YN" =~ ^[Yy]$ ]]; then
  read -rp "请输入网关(如 192.168.100.254): " GATEWAY
fi

read -rp "是否配置 DNS? (y/N): " DNS_YN
DNS_YN="${DNS_YN:-N}"
DNS_SERVERS=""
if [[ "$DNS_YN" =~ ^[Yy]$ ]]; then
  read -rp "请输入 DNS(可多个，用逗号分隔，如 223.5.5.5,8.8.8.8): " DNS_SERVERS
fi

echo
echo "请选择两块(或多块)网卡作为 slave（输入序号，用空格分隔，例如：0 1）："
read -rp "slave 序号: " -a IDX

if (( ${#IDX[@]} < 2 )); then
  echo "至少选择 2 块网卡。"
  exit 1
fi

SLAVES=()
for id in "${IDX[@]}"; do
  [[ "$id" =~ ^[0-9]+$ ]] || { echo "序号非法: $id"; exit 1; }
  (( id < ${#IFACES[@]} )) || { echo "越界序号: $id"; exit 1; }
  SLAVES+=("${IFACES[$id]}")
done

# 检查重复
uniq_count="$(printf "%s\n" "${SLAVES[@]}" | sort -u | wc -l)"
if (( uniq_count != ${#SLAVES[@]} )); then
  echo "检测到重复网卡选择，请重新运行脚本。"
  exit 1
fi

echo
echo "=== 你将创建如下配置 ==="
echo "bond:   $BOND_NAME"
echo "mode:   $BOND_MODE"
echo "addr:   $ADDR_CIDR"
echo "gw:     ${GATEWAY:-<none>}"
echo "dns:    ${DNS_SERVERS:-<none>}"
echo "slaves: ${SLAVES[*]}"
echo

read -rp "确认执行? (y/N): " OK
OK="${OK:-N}"
if [[ ! "$OK" =~ ^[Yy]$ ]]; then
  echo "已取消。"
  exit 0
fi

echo
echo ">>> 开始配置..."

# 如果已有同名连接，先提示并删除（更可控）
if nmcli -t -f NAME connection show | grep -qx "$BOND_NAME"; then
  echo "检测到已存在连接 $BOND_NAME，将删除后重建。"
  nmcli connection delete "$BOND_NAME" || true
fi

# 删除旧的 slave 连接（只删我们脚本命名过的）
for dev in "${SLAVES[@]}"; do
  nmcli -t -f NAME connection show | grep -E "^${BOND_NAME}-slave-${dev}$" | while IFS= read -r con; do
        nmcli connection delete "$con" || true
      done || true
done


# 创建 bond
nmcli connection add con-name "$BOND_NAME" type bond ifname "$BOND_NAME" mode "$BOND_MODE" >/dev/null

# 配置 IPv4
nmcli connection modify "$BOND_NAME" ipv4.method manual ipv4.addresses "$ADDR_CIDR"

if [[ -n "$GATEWAY" ]]; then
  nmcli connection modify "$BOND_NAME" ipv4.gateway "$GATEWAY"
else
  nmcli connection modify "$BOND_NAME" ipv4.gateway ""
fi

if [[ -n "$DNS_SERVERS" ]]; then
  # nmcli 支持用空格或逗号，统一转空格
  DNS_SERVERS="${DNS_SERVERS//,/ }"
  nmcli connection modify "$BOND_NAME" ipv4.dns "$DNS_SERVERS"
fi

# 建议：bond 承载主 IP，物理口不配 IP
for dev in "${SLAVES[@]}"; do
  slave_con="${BOND_NAME}-slave-${dev}"
  nmcli connection add type bond-slave con-name "$slave_con" ifname "$dev" master "$BOND_NAME" >/dev/null
done

# 启用连接（先 bond 再 slave）
nmcli connection up "$BOND_NAME" >/dev/null || true
for dev in "${SLAVES[@]}"; do
  nmcli connection up "${BOND_NAME}-slave-${dev}" >/dev/null || true
done

echo
echo ">>> 完成。当前设备状态："
nmcli device status
echo
echo ">>> Bond 链路概览："
ip -d link show "$BOND_NAME" || true
echo
echo ">>> IPv4 地址："
ip -4 addr show "$BOND_NAME" || true

echo
echo "提示：如果你选的是 802.3ad (LACP)，交换机侧必须配置对应端口的链路聚合（同一聚合组）。"