keepalived+varnish+haproxy+LNAMP

ruopu1989 • • Linux干货

Third test

 

nfs: 192.168.1.40

rp1: 192.168.1.41

rp2: 192.168.1.42

mariadb: 192.168.1.43

web1: 192.168.1.110

web2: 192.168.1.111

app1: 192.168.1.112

app2: 192.168.1.113

实验效果：用keepalived高可用反向代理服务器haproxy，将静态页面反代到varnish缓存服务器，动态页面反代到后端的app服务器，访问内容如果在缓存服务器上有缓存，就直接返回，如果没有就到后端web服务器取

NFS:192.168.1.40
  1. yum install nfs-utils rpcbind
  2. vim /etc/exports 
    /mnt/share      192.168.1.0/24(rw,async,all_squash)

    mkdir /mnt/share

    systemctl start nfs rpcbind

    showmount -e 192.168.1.40

  3. chmod o+w /mnt/share

//给目录一个写权限，因为之后要将此目录挂载到web和app服务上，以备上传图片

app1:192.168.1.41
  1. yum install -y epel-releaseyum install -y haproxy varnish keepalived

    ntpdate 192.168.1.64

haproxy配置
  1. cd /etc/haproxy
  2. vim haproxy.cfg

global

log 127.0.0.1 local2

chroot /var/lib/haproxy

pidfile /var/run/haproxy.pid

maxconn 4000

user haproxy

group haproxy

daemon

stats socket /var/lib/haproxy/stats

defaults

mode http

log global

option httplog

option dontlognull

option http-server-close

option forwardfor except 127.0.0.0/8

option redispatch

retries 3

timeout http-request 10s

timeout queue 1m

timeout connect 10s

timeout client 1m

timeout server 1m

timeout http-keep-alive 10s

timeout check 10s

maxconn 3000`

frontend myweb *:80

compression algo gzip

compression type text/html text/plain application/xml application/javascript

reqadd X-Proxy-By:\ HAProxy

default_backend websrvs

acl websrvs path_end -i .jpg .jpeg .htm .gif .png .css .js .ico

//请求报文中以此类结尾的都定义为websrvs

acl appsrvs path_end .php

use_backend appsrvs if appsrvs

//调用下面定义的dynsrvs的服务器，如果附合acl定义的

appsrvs规则

use_backend websrvs if websrvs

backend websrvs

balance roundrobin

server srv1 192.168.1.41:6081 check inter 3000ms rise 2 fall 2

server srv2 192.168.1.42:6081 check inter 3000ms rise 2 fall 2

backend appsrvs

balance source

server dynsrv1 192.168.1.112:80 check inter 3000ms rise 2 fall 2

server dynsrv2 192.168.1.113:80 check inter 3000ms rise 2 fall 2

listen stats

bind *:9099

stats enable

stats uri /myproxy?admin

stats realm “HAProxy Stats Page”

stats auth admin:admin

stats admin if TRUE

varnish配置
  1. cd /etc/varnish
  2. vim varnish.params

VARNISH_STORAGE=”file,/data/varnish/cache,1g”

//注释掉用内存缓存访问，改为用磁盘缓存

  1. vim default.vcl

vcl 4.0;

import directors;

backend websrv1 {

.host = “192.168.1.110”;

.port = “80”;

}

backend websrv2 {

.host = “192.168.1.111”;

.port = “80”;

}

backend appsrv1 {

.host = “192.168.1.112”;

.port = “80”;

}

backend appsrv2 {

.host = “192.168.1.113”;

.port = “80”;

}

sub vcl_init {

new staticsrvs = directors.round_robin();

staticsrvs.add_backend(websrv1);

staticsrvs.add_backend(websrv2);

new appsrvs = directors.hash();

appsrvs.add_backend(appsrv1,1);

appsrvs.add_backend(appsrv2,1);

}

sub vcl_recv {

if (req.url ~ “(?i).(css|js)$”) {

set req.backend_hint =appsrvs.backend(req.http.cookie);

}

if (req.url ~ “(?i).(jpg|jpeg|png|gif)$”) {

set req.backend_hint = staticsrvs.backend();

} else {

set req.backend_hint = appsrvs.backend(req.http.cookie);

}

}

sub vcl_backend_response {

if (beresp.http.cache-control !~ “s-maxage”) {

if (bereq.url ~ “(?i).(jpg|jpeg|png|gif|css|js|html|htm)$”) {

unset beresp.http.Set-Cookie;

set beresp.ttl = 3600s;

}

}

}

//定义符合条件的文件由varnish缓存3600秒

sub vcl_deliver {

if (obj.hits>0) {

set resp.http.X-Cache=”Hit via ” + server.ip;

} else {

set resp.http.X-Cache=”Miss from ” + server.ip;

}

}

keepalived配置
  1. vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived

global_defs {

notification_email {

root@localhost

}

notification_email_from keepalived@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node1

vrrp_skip_check_adv_addr

vrrp_strict

vrrp_garp_interval 0

vrrp_gna_interval 0

vrrp_mcast_group4 224.1.101.30

}

vrrp_instance VI_1 {

state MASTER

interface eno16777736

virtual_router_id 51

priority 100

advert_int 1

authentication {

auth_type PASS

auth_pass 1234

}

virtual_ipaddress {

192.168.1.50/24 dev eno16777736 label eno16777736:0

}

notify_master “/etc/keepalived/notify.sh master”

notify_backup “/etc/keepalived/notify.sh backup”

}

vrrp_instance VI_2 {

state BACKUP

priority 96

interface eno16777736

virtual_router_id 52

advert_int 1

authentication {

auth_type PASS

auth_pass 1234

}

virtual_ipaddress {

192.168.1.51/24 dev eno16777736 label eno16777736:0

}

notify_master “/etc/keepalived/notify.sh master”

notify_backup “/etc/keepalived/notify.sh backup”

}

keepalived 报警脚本

vim /etc/keepalived/notify.sh

#!/bin/bash

contact=’root@localhost’

//定义谁可以接收邮件

notify() {

local mailsubject=”$(hostname) to be $1, vip floating”

//声明本地局部变量，mailsubject是声明标题的，$(hostname)是当前主机名，意思是当前主机发生了变化，VIP流动了，$1是状态，给什么状态就显示什么状态

local mailbody=”$(date +’%F %T’): vrrp transition, $(hostname) changed to be $1″

//这是定义邮件正文的，$(date +’%F %T’)是时间，意思是在这个时刻vrrp发生了状态转移，$(hostname)当前主机变成了$1状态

echo “$mailbody” | mail -s “$mailsubject” $contact

//调用本地邮件服务器向本地用户发邮件，如果要使用互联网上的邮件服务器发邮件要用python写脚本

}

case $1 in

//$1是脚本的位置变量，看传输的是下面的哪一个什么

master)

notify master

;;

backup)

notify backup

;;

fault)

notify fault

;;

*)

echo “Usage: $(basename $0) {master|backup|fault}”

exit 1

;;

esac

chmod +x notify.sh

bash -n notify.sh

//检查语法

bash -x notify.sh master

systemctl start haproxy varnish keepalived

//启动所有服务

app2:192.168.1.42

app2服务器上所安装的软件与配置与app1上是一致的，只是将keepalived的配置做一下调整，如下

! Configuration File for keepalived

global_defs {

notification_email {

root@localhost

}

notification_email_from keepalived@localhost

smtp_server 127.0.0.1

smtp_connect_timeout 30

router_id node1

vrrp_skip_check_adv_addr

vrrp_strict

vrrp_garp_interval 0

vrrp_gna_interval 0

vrrp_mcast_group4 224.1.101.30

}

vrrp_instance VI_1 {

state BACKUP

interface eno16777736

virtual_router_id 51

priority 96

advert_int 1

authentication {

auth_type PASS

auth_pass 1234

}

virtual_ipaddress {

192.168.1.50/24 dev eno16777736 label eno16777736:0

}

notify_master “/etc/keepalived/notify.sh master”

notify_backup “/etc/keepalived/notify.sh backup”

}

vrrp_instance VI_2 {

state MASTER

priority 100

interface eno16777736

virtual_router_id 52

advert_int 1

authentication {

auth_type PASS

auth_pass 1234

}

virtual_ipaddress {

192.168.1.51/24 dev eno16777736 label eno16777736:0

}

notify_master “/etc/keepalived/notify.sh master”

notify_backup “/etc/keepalived/notify.sh backup”

}

mariadb:192.168.1.43

1.yum install -y mariadb-server

2.vim /etc/my.cnf

skip_name_resolve=ON

innodb_file_per_table=ON

mysql_secure_installation

Set root password? [Y/n] y #是否设置密码

New password: #输入要设置的密码

Re-enter new password:

Remove anonymous users? [Y/n] y #是否删除匿名用户

Disallow root login remotely? [Y/n]n

#是否禁止管理员远程登录（为了试验方便，设置成不要，生成中禁止远程登录）

Remove test database and access to it? [Y/n]n

#删除测试数据库

Reload privilege tables now? [Y/n]y #重载

mysql -uroot -pcentos

create database wordpress;

grant all on wordpress.* to ‘wps’@’%’ identified by ‘centos’;

flush privileges;

mysql -uwps -pcentos

systemctl start mariadb

web1:192.168.1.110
  1. yum install -y epel-releaseyum install -y nginx nfs-utils
  2. vim /etc/nginx/conf.d/web.conf

server {

server_name 192.168.1.110;

index index.html;

root /data/apps;

}

  1. systemctl start nginx
  2. mkdir -p /data/apps
  3. 上传wordpress软件包到服务器
  4. unzip wordpress-4.3.1-zh_CN.zip
  5. cp -r wordpress /data/apps
  6. cd /data/apps
  7. ln -sv wordpress wps
  8. mkdir /data/apps/wps/wp-content/uploads
  9. mount -t nfs 192.168.1.40:/mnt/share /data/apps/wps/wp-content/uploads
  10. mkdir /data/apps/wps/html
  11. mount -t nfs 192.168.1.40:/mnt/html /data/apps/wps/html
web2:192.168.1.111
  1. yum install -y epel-releaseyum install -y nginx nfs-utils
  2. vim /etc/nginx/conf.d/web.conf

server {

server_name 192.168.1.111;

index index.html;

root /data/apps;

}

  1. systemctl start nginx
  2. mkdir -p /data/apps
  3. 上传wordpress软件包到服务器
  4. unzip wordpress-4.3.1-zh_CN.zip
  5. cp -r wordpress /data/apps
  6. cd /data/apps
  7. ln -sv wordpress wps
  8. mkdir /data/apps/wps/wp-content/uploads
  9. mount -t nfs 192.168.1.40:/mnt/share /data/apps/wps/wp-content/uploads
  10. mkdir /data/apps/wps/html
  11. mount -t nfs 192.168.1.40:/mnt/html /data/apps/wps/html
app1:192.168.1.112
  1. yum install httpd php-mysql php-mbstring nfs-utils
  2. vim /etc/httpd/conf.d/app.conf

<VirtualHost 192.168.1.112:80>

DocumentRoot “/data/apps”

DirectoryIndex index.php index.html

<Directory “/data/apps”>

Options FollowSymLinks

AllowOverride All

Require all granted

</Directory>

CustomLog “logs/wp_access.log” combined

ErrorLog “logs/wp_error.log”

</VirtualHost>

  1. mkdir -p /data/apps
  2. 上传wordpress软件包到服务器
  3. unzip wordpress-4.3.1-zh_CN.zip
  4. cp -r wordpress /data/apps
  5. cd /data/apps
  6. ln -sv wordpress wps
  7. cd wps
  8. cp wp-config-sample.php wp-config.php
  9. vim wp-config.php

/** WordPress数据库的名称 */

define(‘DB_NAME’, ‘wordpress’);

/** MySQL数据库用户名 */

define(‘DB_USER’, ‘wps’);

/** MySQL数据库密码 */

define(‘DB_PASSWORD’, ‘centos’);

/** MySQL主机 */

define(‘DB_HOST’, ‘192.168.1.43’);

  1. systemctl start httpd
  2. mkdir /data/apps/wps/wp-content/uploads
  3. mount -t nfs 192.168.1.40:/mnt/share /data/apps/wps/wp-content/uploads
  4. mkdir /data/apps/wps/html
  5. mount -t nfs 192.168.1.40:/mnt/html /data/apps/wps/html
app2:192.168.1.113
  1. yum install httpd php-mysql php-mbstring nfs-utils
  2. vim /etc/httpd/conf.d/app.conf

<VirtualHost 192.168.1.113:80>

DocumentRoot “/data/apps”

DirectoryIndex index.php index.html

<Directory “/data/apps”>

Options FollowSymLinks

AllowOverride All

Require all granted

</Directory>

CustomLog “logs/wp_access.log” combined

ErrorLog “logs/wp_error.log”

</VirtualHost>

  1. mkdir -p /data/apps
  2. 上传wordpress软件包到服务器
  3. unzip wordpress-4.3.1-zh_CN.zip
  4. cp -r wordpress /data/apps
  5. cd /data/apps
  6. ln -sv wordpress wps
  7. cd wps
  8. cp wp-config-sample.php wp-config.php
  9. vim wp-config.php

/** WordPress数据库的名称 */

define(‘DB_NAME’, ‘wordpress’);

/** MySQL数据库用户名 */

define(‘DB_USER’, ‘wps’);

/** MySQL数据库密码 */

define(‘DB_PASSWORD’, ‘centos’);

/** MySQL主机 */

define(‘DB_HOST’, ‘192.168.1.43’);

  1. systemctl start httpd
  2. mkdir /data/apps/wps/wp-content/uploads
  3. mount -t nfs 192.168.1.40:/mnt/share /data/apps/wps/wp-content/uploads
  4. mkdir /data/apps/wps/html
  5. mount -t nfs 192.168.1.40:/mnt/html /data/apps/wps/html
修改本机hosts文件

加入 www.test.com 192.168.1.50 www.test.com 192.168.1.51

测试：

访问www.test.com/wps

keepalived+varnish+haproxy+LNAMPclipboard

将固定链接改为html形式

clipboard1

 

本文来自投稿，不代表Linux运维部落立场，如若转载，请注明出处：http://www.178linux.com/91596

赞 (2)
ruopu1989ruopu1989
0
上一篇 2018-02-13 12:33
下一篇 2018-02-22 15:40

相关推荐

  • CentOS 6.5下OpenVPN的搭建

    一、openvpn原理 二、安装openvpn 三、制作相关证书     3.1 制作CA证书     3.2 制作Server端证书     3.3 制作Client端证书 四、配置Server端 五、配置Client端 一、openvp…

    Linux干货 2016-04-21

  • sed的详细用法

    sed(Stream EDitor)是一款流编辑器，用来对文本进行过滤与替换操作。其原理是：通过文件或管道读取文件内容，但是sed默认并不直接修改源文件，而是一次仅读取文件的一行至模式空间(pattern space)根据sed指令进行编辑并输出结果后清除模式空间，即所有的操作都是在模式空间中进行的。 语法格式 sed [option]…&nb…

    Linux干货 2016-11-14

  • Linux运维学习历程-第九天-bash脚本初步了解

    概述：   本章重点在于讲解bash脚本的基础知识，为今后学习使用bash脚本打下基础 一、bash基础特性         程序：指令+数据             指令：由程序文件提供         &n…

    Linux干货 2016-08-18

  • Linux用户与权限管理

    由于Linux是多用户、多任务系统，出于一些需要，当我们创建的文件希望对一部分用户开放，对一部分用户隐藏的时候应该怎么办呢？这样的话，就需要涉及到Linux系统中对用户以及对文件权限的管理。 一、相关文件 在Linux中，一切配置文件都是以文本文档的方式来保存的，同样用户的信息也保存在系统的一些文件中，其位置为/etc/passwd。此文件只有root用户具…

    Linux干货 2016-08-05

  • 计算机组成及Linux基础

    第1题：描述计算机的组成及功能 1.1计算机的组成       计算机是有 运算器，控制器，存储器，输入设备和输出设备组成计算机 1.2计算机各部件功能 运算器 对数据进行算术运算，逻辑运算和对数据进行加工处理 存储器 存储程序，数据和各种信号，命令等信息，并在需要时提供这些信息 控制器 是整个计算机的中枢神…

    Linux干货 2017-07-02

  • 马哥教育网络班22期+第3周课程练习 忍者乱太郎喻成

    1、列出当前系统上所有已经登录的用户的用户名，注意：同一个用户登录多次，则只显示一次即可。  who|awk '{print $1}'|uniq 2、取出最后登录到当前系统的用户的相关信息。 题目不是很清晰我估计是题目想要的是 last -1   cat /etc/pa…

    Linux干货 2016-09-06
电话咨询
在线咨询