【frontend】前端frontend的安装与配置

编程语言 2019-02-18 13:01:44 阅读次数: 0

一、实验环境


12979420-bfc96f0d2f0ed0e3.png

操作系统：CentOS7.2 Mininal

serverA：192.168.1.104

serverB：192.168.1.109

VIP：       192.168.1.110

test：      192.168.1.120

二、软件安装

在serverA 和 serverB 上

# yum  -y install  nginx bind  ntp  keepalived 

# systemctl  enable  named  ntpd  nginx keepalived

三、特殊配置

在serverA 和 serverB 上

# sysctl -w net.ipv4.ip_nonlocal_bind=1

# echo "net.ipv4.ip_nonlocal_bind=1" >> /etc/sysctl.conf

注：更改Linux系统控制文件，使得端口即使监听在不存在的IP上，也不报错

# setenforce 0

# sed -i 's/^SELINUX=.*/SELINUX=permissive/g'   /etc/selinux/config


# systemctl stop   firewalld

# systemctl diable firewalld


三、serverA服务配置

# vim  /etc/keepalived/keepalived.conf

12979420-07cde7aac0951248

##############################

! Configuration File for keepalived

global_defs {

   router_id LVS_DEVEL

}

vrrp_script check { 

    script "/etc/keepalived/check.sh" 

    interval 5     

}   

vrrp_instance VI_1 {

    state BACKUP

    interface eno16777736

    virtual_router_id 100

    priority 100

    advert_int 1

    nopreempt

    authentication {

        auth_type PASS

        auth_pass 1111

    }

    track_script {   

      check

    }   

    virtual_ipaddress {

        192.168.1.110

    }

}

##############################

注意： vrrp_script{}中的interval时间需大于脚本中的sleep时间！

#  vim /etc/keepalived/check.sh

12979420-b3bebbbc358d6977

##############################

#!/bin/bash

nginx_status1=$(ps -C nginx --no-heading|wc -l)

if [ "${nginx_status1}" = "0" ]; then

  systemctl start nginx.service

  sleep 3

  nginx_status2=$(ps -C nginx --no-heading|wc -l)

  if [ "${nginx_status2}" = "0" ]; then

    systemctl stop keepalived.service

  fi

fi

named_status1=$(ps -C named --no-heading|wc -l)

if [ "${named_status1}" = "0" ]; then

  systemctl start named.service

  sleep 3

  named_status2=$(ps -C named --no-heading|wc -l)

  if [ "${named_status2}" = "0" ]; then

    systemctl stop keepalived.service

  fi

fi

ntpd_status1=$(ps -C ntpd --no-heading|wc -l)

if [ "${ntpd_status1}" = "0" ]; then

  systemctl start ntpd.service

  sleep 3

  ntpd_status2=$(ps -C ntpd --no-heading|wc -l)

  if [ "${ntpd_status2}" = "0" ]; then

    systemctl stop keepalived.service

  fi

fi

#######################################

# chmod +x  /etc/keepalived/check.sh

# vim  /etc/ntp.conf

12979420-220b692b876a09b6

########################################

driftfile /var/lib/ntp/drift

restrict default nomodify notrap nopeer noquery

restrict 127.0.0.1

restrict ::1

restrict 192.168.1.0 mask 255..255.255.0 nomodify notrap

server 192.168.1.110 iburst

server 127.127.1.0

fudge 127.127.1.0 stratum 10

interface ignore  wildcard

interface listen  192.168.1.110

interface listen  127.0.0.1

includefile /etc/ntp/crypto/pw

keys /etc/ntp/keys

disable monitor

##########################################

# vim /etc/named.conf

12979420-31a8049e919d7866

##########################################

options {

        listen-on port 53 { 192.168.1.110; };

        listen-on-v6 port 53 { ::1; };

        directory       "/var/named";

        dump-file       "/var/named/data/cache_dump.db";

        statistics-file "/var/named/data/named_stats.txt";

        memstatistics-file "/var/named/data/named_mem_stats.txt";

        allow-query     { any; };

        recursion yes;

        dnssec-enable yes;

        dnssec-validation yes;

        pid-file "/run/named/named.pid";

};

zone "test.com" IN {

        type master;

        file "test.com.zone";

};

###############################################

# cp  -p  /var/named/named.localhost    /var/named/test.com.zone

# vim  /var/named/test.com.zone

12979420-5147e5f7ccc186e3



# vim /etc/nginx/nginx.conf

12979420-6ff6e6bc06d4e093

#########################################

#    For more information on configuration, see:

#   * Official English Documentation:http://nginx.org/en/docs/

#   * Official Russian Documentation:http://nginx.org/ru/docs/

user nginx;

worker_processes auto;

error_log /var/log/nginx/error.log;

pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/nginx/README.dynamic.

include /usr/share/nginx/modules/*.conf;

events {

    worker_connections  1024;

}

# stream转发

stream {

#    hash $remote_addr consistent;

    proxy_connect_timeout 3s;

    include /etc/nginx/conf.d/stream_proxy.conf;

}

# http转发

http {

    client_max_body_size     500M;

    include                             mime.types;

    default_type                     application/octet-stream;

    server_tokens                   off;

    sendfile                            on;

    keepalive_timeout           65;

    include /etc/nginx/conf.d/http_proxy.conf;

}

############################################

#  vim  /etc/nginx/conf.d/stream_proxy.conf

#############################################

upstream stream_service {

    hash $remote_addr consistent;

    server192.168.1.103:12345        max_fails=1 fail_timeout=180s;

    server 192.168.1.104:12345       max_fails=1 fail_timeout=180s;


}

server {

    listen 192.168.1.110:54321;

    proxy_pass stream_service;

}

#####################################################

#  vim /etc/nginx/conf.d/http_proxy.conf

#####################################################

upstream http_service {

    server 192.168.1.107:443      max_fails=1 fail_timeout=180s;

    server 192.168.1.108:443       max_fails=1 fail_timeout=180s;


  }

server {

    listen 192.168.1.110:443 ssl;

    ssl_certificate          /etc/nginx/ssl/nginx-selfsigned.crt;

    ssl_certificate_key  /etc/nginx/ssl/nginx-selfsigned.key;

    location / {

        proxy_connect_timeout     3;

        proxy_send_timeout         600;

        proxy_read_timeout          600;

        send_timeout                    600;

        proxy_set_header            X-Real-IP $remote_addr;

        proxy_set_header            X-Forwarded-For $proxy_add_x_forwarded_for;

         proxy_pass  https://http_service;

    }

}

#################################################################

# mkdir  /etc/nginx/ssl

# openssl req  -x509  -nodes \

    -newkey rsa:2048 \

    -days 365 \

    -subj "/C=CN/ST=Gunagdong/L=Shenzhen/O=TEST/OU=TEST/CN=www.test.com" \

    -keyout /etc/nginx/ssl/nginx-selfsigned.key \

    -out /etc/nginx/ssl/nginx-selfsigned.crt

四、serverB服务配置

# vim  /etc/keepalived/keepalived.conf

12979420-81ead0ce070a2433

##########################

! Configuration File for keepalived

global_defs {

   router_id LVS_DEVEL

}

vrrp_script check { 

    script "/etc/keepalived/check.sh" 

    interval 5     

}   

vrrp_instance VI_1 {

    state BACKUP

    interface eno16777736

    virtual_router_id 100

    priority 90

    advert_int 1

    authentication {

        auth_type PASS

        auth_pass 1111

    }

    track_script {   

      check

    }   

    virtual_ipaddress {

        192.168.1.110

    }

}

##############################

注意： vrrp_script{}中的interval时间需大于脚本中的sleep时间！

#  vim /etc/keepalived/check.sh


12979420-2282a6fe536710f1.png

##############################

#!/bin/bash

nginx_status1=$(ps -C nginx --no-heading|wc -l)

if [ "${nginx_status1}" = "0" ]; then

  systemctl start nginx.service

  sleep 3

  nginx_status2=$(ps -C nginx --no-heading|wc -l)

  if [ "${nginx_status2}" = "0" ]; then

    systemctl stop keepalived.service

  fi

fi

named_status1=$(ps -C named --no-heading|wc -l)

if [ "${named_status1}" = "0" ]; then

  systemctl start named.service

  sleep 3

  named_status2=$(ps -C named --no-heading|wc -l)

  if [ "${named_status2}" = "0" ]; then

    systemctl stop keepalived.service

  fi

fi

ntpd_status1=$(ps -C ntpd --no-heading|wc -l)

if [ "${ntpd_status1}" = "0" ]; then

  systemctl start ntpd.service

  sleep 3

  ntpd_status2=$(ps -C ntpd --no-heading|wc -l)

  if [ "${ntpd_status2}" = "0" ]; then

    systemctl stop keepalived.service

  fi

fi

#######################################

# chmod +x  /etc/keepalived/check.sh

# vim  /etc/ntp.conf

12979420-e24fde1f992dcc2d

########################################

driftfile /var/lib/ntp/drift

restrict default nomodify notrap nopeer noquery

restrict 127.0.0.1

restrict ::1

restrict 192.168.1.0 mask 255..255.255.0 nomodify notrap

server 192.168.1.110 iburst

server 127.127.1.0

fudge 127.127.1.0 stratum 10

interface ignore  wildcard

interface listen  192.168.1.110

interface listen  127.0.0.1

includefile /etc/ntp/crypto/pw

keys /etc/ntp/keys

disable monitor

##########################################

# vim /etc/named.conf

12979420-d7356cd28a1ca27f

##########################################

options {

        listen-on port 53 { 192.168.1.110; };

        listen-on-v6 port 53 { ::1; };

        directory       "/var/named";

        dump-file       "/var/named/data/cache_dump.db";

        statistics-file "/var/named/data/named_stats.txt";

        memstatistics-file "/var/named/data/named_mem_stats.txt";

        allow-query     { any; };

        recursion yes;

        dnssec-enable yes;

        dnssec-validation yes;

        pid-file "/run/named/named.pid";

};

zone "test.com" IN {

        type master;

        file "test.com.zone";

};

###############################################

# cp  -p  /var/named/named.localhost    /var/named/test.com.zone

# vim  /var/named/test.com.zone

12979420-d8acf1d734922928


# vim /etc/nginx/nginx.conf

12979420-ee6c655a5e2552ba

#########################################

#    For more information on configuration, see:

#   * Official English Documentation:http://nginx.org/en/docs/

#   * Official Russian Documentation:http://nginx.org/ru/docs/

user nginx;

worker_processes auto;

error_log /var/log/nginx/error.log;

pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/nginx/README.dynamic.

include /usr/share/nginx/modules/*.conf;

events {

    worker_connections  1024;

}

# stream转发

stream {

#    hash $remote_addr consistent;

    proxy_connect_timeout 3s;

    include /etc/nginx/conf.d/stream_proxy.conf;

}

# http转发

http {

    client_max_body_size     500M;

    include                             mime.types;

    default_type                     application/octet-stream;

    server_tokens                   off;

    sendfile                            on;

    keepalive_timeout           65;

    include /etc/nginx/conf.d/http_proxy.conf;

}

############################################

#  vim  /etc/nginx/conf.d/stream_proxy.conf

#############################################

upstream stream_service {

    hash $remote_addr consistent;

    server192.168.1.103:12345        max_fails=1 fail_timeout=180s;

    server 192.168.1.104:12345       max_fails=1 fail_timeout=180s;

}

server {

    listen 192.168.1.110:54321;

    proxy_pass stream_service;

}

#####################################################

#  vim /etc/nginx/conf.d/http_proxy.conf

#####################################################

upstream http_service {

    server 192.168.1.107:443      max_fails=1 fail_timeout=180s;

    server 192.168.1.108:443       max_fails=1 fail_timeout=180s;

  }

server {

    listen 192.168.1.110:443 ssl;

    ssl_certificate          /etc/nginx/ssl/nginx-selfsigned.crt;

    ssl_certificate_key  /etc/nginx/ssl/nginx-selfsigned.key;

    location / {

        proxy_connect_timeout     3;

        proxy_send_timeout         600;

        proxy_read_timeout          600;

        send_timeout                    600;

        proxy_set_header            X-Real-IP $remote_addr;

        proxy_set_header            X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_pass  https://http_service;

    }

}

#################################################################

# mkdir  /etc/nginx/ssl

# openssl req  -x509  -nodes \

    -newkey rsa:2048 \

    -days 365 \

    -subj "/C=CN/ST=Gunagdong/L=Shenzhen/O=TEST/OU=TEST/CN=www.test.com" \

    -keyout /etc/nginx/ssl/nginx-selfsigned.key \

    -out /etc/nginx/ssl/nginx-selfsigned.crt

五、启动服务

在serverA 和 serveB上

# systemctl  start named  ntpd  nginx keepalived

六、查看服务状态

在serverA

12979420-57a484f9fb930ffb
12979420-5e25b2c2f50e80a4
12979420-0f80ec2ad2710ae8
12979420-0b04684b977188b3

在serverB


12979420-eda18db18dffdea0.png
12979420-85a47b3149a7e204
12979420-5c63c905c4d3ba5f
12979420-9c8dc92e06456ceb

七、在test服务器上测试

反向代理测试：

https://192.168.1.110:443

DNS测试：

# vim   /etc/resolv.conf

12979420-5be6d487fe12f9de

######################

nameserver 192.168.1.110

# Generated by NetworkManager

nameserver 202.96.128.166

nameserver 202.96.134.133

#####################

# ping www.test.com

# ping mysql.test.com

12979420-0bc17b281f7fc631

NTP测试：

# ntpdate 192.168.1.110

12979420-9cdcb3717c404187

# vim  /etc/ntp.conf


12979420-ab1baee2024a8ccd.png

#########################

driftfile /var/lib/ntp/drift

restrict default nomodify notrap nopeer noquery

restrict 127.0.0.1

restrict ::1

server 192.168.1.110 iburst

restrict 192.168.1.110 nomodify notrap noquery

server 127.127.1.0

fudge 127.127.1.0 stratum 10

includefile /etc/ntp/crypto/pw

keys /etc/ntp/keys

disable monitor

#########################

# systemctl start   ntpd

# systemctl enable ntpd

八、前端的高可用性测试

在 serverA

# systemctl  restart keepalived

# systemctl  status keepalived

# ip addr list

12979420-c816d6d51aced6d4

在 serverB

# systemctl  status keepalived

# ip addr list

12979420-4deb90c5e41343a3

可以看到，重启serverA的keepalived,VIP成功漂移了，实际上，VIP所在的服务器上的 nginx、named 、ntpd任何一个服务出问题，keepalived的检测脚本就会停其keepalived服务，使得VIP漂移，服务基本不受影响，实现高可用！

猜你喜欢

转载自blog.csdn.net/weixin_33991418/article/details/87230920
今日推荐
Arc Browser for Windows 1.0 正式 GA
90后程序员开发视频搬运软件、不到一年获利超 700 万，结局很刑！
《美国对全球网络空间安全与发展的威胁和破坏》报告发布
火速冲上 GitHub 热榜 —— 开源编程语言、框架哪有这么可爱？
北京人形机器人创新中心发布全球首个纯电驱拟人奔跑的全尺寸人形机器人“天工”
周排行
rbac——界面、权限
Apache CXF + SpringMVC 整合发布WebService
so插件化
Vue.js实战系列---图标字体制作（svg格式）
PAT乙级 1007 素数对猜想(孪生素数对) (20分) ---（C语言 + 详细注释）
被IRM保护的文档，打开失败
Calendar和Date计算日期差的小问题
win10子系统ubuntu18.4安装docker
利用Wrap Shell Script定位Android Native内存泄漏
MySQL: Transaction (Part I - Basic Concept)
每日归档
更多
2024-05-03(19)
2024-05-02(0)
2024-05-01(4)
2024-04-30(1)
2024-04-29(40)
2024-04-28(0)
2024-04-27(56)
2024-04-26(39)
2024-04-25(22)
2024-04-24(36)

代码天地 © 2018 codetd.com

境外服务器   最新电视剧2022