经验首页 前端设计 程序设计 Java相关 移动开发 数据库/运维 软件/图像 大数据/云计算 其他经验
当前位置：技术经验 » 数据库运维 » LinuxShell » 查看文章
集群搭建笔记
来源：cnblogs　　作者：程康华　　时间：2018/10/8 8:59:02　　对本文有异议

目录

综合架构图

主机规划 ip

服务器主机名和 IP 规划参考模板

主机名 eth0 网卡 eth1 网卡 服务简介
lb01 10.0.0.5/24 172.16.1.5/24 负载服务
lb02 10.0.0.6/24 172.16.1.6/24 负载服务
web01 10.0.0.7/24 172.16.1.7/24 phpwww 服务
web02 10.0.0.8/24 172.16.1.8/24 php www 服务
tweb01 10.0.0.9/24 172.16.1.9/24 tomcat www 服务
db01 10.0.0.51/24 172.16.1.51/24 数据库服务
nfs01 10.0.0.31/24 172.16.1.31/24 存储服务
backup 10.0.0.41/24 172.16.1.41/24 备份服务
m01 10.0.0.61/24 172.16.1.61/24 管理服务

基础优化

  1. 修改ip地址
  2. sed -i 's#222#61#g' /etc/sysconfig/network-scripts/ifcfg-eth[01]
  4. 永久修改主机名
  5. [root@oldboy-c7 ~]# hostnamectl set-hostname oldboyedu-cc7
  6. [root@web01 data]# vim /etc/hosts
  7. 127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
  8. ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
  9. 172.16.1.5  lb01
  10. 172.16.1.6  lo02
  11. 172.16.1.7  web01
  12. 172.16.1.8  web02
  13. 172.16.1.9  sweb
  14. 172.16.1.31  nfs
  15. 172.16.1.41  backup
  16. 172.16.1.51  db
  17. #批量推送其他主机
  18. [root@web01 data]# scp -rp /etc/hosts root@172.16.1.31:/etc/
  20. 调整yum源
  21. CentOS 7
  23. wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
  24. wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
  26. //1.安装基础软件包
  27. yum install net-tools vim tree htop iftop iotop lrzsz sl wget unzip telnet nmap nc psmisc dos2unix bash-completion iotop iftop sysstat screen  -y
  29. 1.自动补全
  30. yum install bash-completion -y
  31. 退出一次，然后重新登录
  33. 安装net-tools工具，可使用ifconfig命令
  34. yum install net-tools -y 
  36. //2.关闭firewalld防火墙
  37. systemctl disable firewalld
  38. systemctl stop firewalld
  39. systemctl status firewalld
  41. //3.关闭selinux
  42. # 方式一
  43. sed -ri 's#(^SELINUX=).*#\1disabled#g' /etc/selinux/config
  44. # 方式二
  45. sed -i '/^SELINUX=/c SELINUX=disabled' /etc/selinux/config
  46. # 方式三
  47. vim /etc/selinux/config
  49. # 临时生效
  50. setenforce 0  
  52. //4.优化ulimit
  53. echo '* - nofile 65535' >> /etc/security/limits.conf
  55. //5 重启快照

m01 搭建yum仓库

  1. 1.基础环境准备
  2. //安装ftp服务,启动并加入开机启动
  3.  yum -y install vsftpd 
  4.  systemctl start vsftpd 
  5.  systemctl enable vsftpd
  7. //开启yum缓存功能
  8.  vim /etc/yum.conf
  9. [main] cachedir=/var/cache/yum/$basearch/$releasever 
  10. keepcache=1
  12.  yum clean all
  14. 2.提供基础base源
  15.  mkdir /var/ftp/centos75
  16.  mount /dev/cdrom /mnt
  17.  cp -rp  /mnt/Packages/*.rpm /var/ftp/centos75
  19. 3.提供第三方源
  20. mkdir /var/ftp/ops
  22. yum install net-tools vim tree htop iftop iotop lrzsz sl wget unzip telnet nmap nc psmisc dos2unix bash-completion iotop iftop sysstat screen  -y
  25. //复制已缓存的 Nginx docker 及依赖包 到自定义 YUM 仓库目录中
  26. [root@yum_server_69_112 ~]# find /var/cache/yum/x86_64/7/ -iname "*.rpm" -exec cp -rf {} /var/ftp/ops \;
  29. 4.安装createrepo并创建 reopdata仓库
  31. //安装createrepo
  32. [root@yum_server_69_112 ~]# yum -y install createrepo
  33. //生成仓库信息
  34. createrepo /var/ftp/ops
  35. createrepo /var/ftp/centos75
  36. //注意: 如果此仓库每次新增软件则需要重新生成一次
  39. 客户端使用yum源
  41. 1.配置并使用base基础源
  43. [root@yum_client_69_113 ~]# gzip /etc/yum.repos.d/*
  44. [root@yum_client_69_113 ~]# vim /etc/yum.repos.d/centos7.repo 
  45. [centos75]
  46. name=centos74_base
  47. baseurl=ftp://172.16.1.61/centos75
  48. gpgcheck=0
  49. 2.客户端指向本地ops源
  51. [root@yum_client_69_113 ~]# vim /etc/yum.repos.d/ops.repo 
  52. [ops]
  53. name=local ftpserver
  54. baseurl=ftp://172.16.1.61/ops
  55. gpgcheck=0
  58. yum clean all
  59. yum makecache
  62. #其他客户端同步推送过去
  63. [root@backup ~]# rsync -avz /etc/yum.repos.d root@172.16.1.6:/etc/ --delete

backup- rsync全网备份

  1. [root@backup ~]# yum install rsync -y   //基础环境已经安装
  2. [root@backup ~]# cat /etc/rsyncd.conf 
  3. uid = www
  4. gid = www
  5. port = 873
  6. fake super = yes
  7. use chroot = no
  8. max connections = 200
  9. timeout = 600
  10. ignore errors
  11. read only = false
  12. list = false
  13. auth users = rsync_backup
  14. secrets file = /etc/rsync.password
  15. log file = /var/log/rsyncd.log
  16. #####################################
  17. [backup]
  18. path = /backup
  19. [data]
  20. path = /data
  23. [root@backup ~]# mkdir /backup/
  24. [root@backup ~]# groupadd -g666 www
  25. [root@backup ~]# useradd -u666 -g666 www
  27. [root@backup ~]# chown -R www.www /backup/
  28. [root@backup ~]# chmod 755 /backup
  30. # 创建rsync使用的虚拟连接用户
  31. [root@backup ~]# echo "rsync_backup:1" > /etc/rsync.password
  32. [root@backup ~]# chmod 600 /etc/rsync.password
  34. [root@backup ~]# systemctl enable rsyncd
  35. [root@backup ~]# systemctl start rsyncd
  38. 1 客户端定时执行脚本 推送 backup服务器
  39. [root@nfs ~]# mkdir -p /server/scripts/
  41. [root@nfs scripts]# cat /server/scripts/client_rsync_backup.sh 
  42. #!/usr/bin/bash
  43. export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin
  44. #1.定义变量
  45. Host=$(hostname)
  46. Addr=$(ifconfig eth1|awk 'NR==2{print $2}')
  47. Date=$(date +%F)
  48. Dest=${Host}_${Addr}_${Date}
  49. Path=/backup
  51. #2.创建备份目录
  52. [ -d $Path/$Dest ] || mkdir -p $Path/$Dest
  54. #3.备份对应的文件
  55. cd / && [ -f $Path/$Dest/system.tar.gz ] || tar czf $Path/$Dest/system.tar.gz etc/fstab etc/rsyncd.conf && [ -f $Path/$Dest/log.tar.gz ] || tar czf $Path/$Dest/log.tar.gz  var/log/messages var/log/secure && 
  56. #4.携带md5验证信息
  57. [ -f $Path/$Dest/flag_$Date ] || md5sum $Path/$Dest/*.tar.gz >$Path/$Dest/flag_${Date}
  59. #4.推送本地数据至备份服务器
  60. export RSYNC_PASSWORD=1
  61. rsync -avz $Path/ rsync_backup@172.16.1.41::backup
  63. #5.本地保留最近7天的数据
  64. find $Path/ -type d -mtime +7|xargs rm -rf
  67. 2 服务端backup 校验压缩包 发送给管理员
  68. 1.配置邮箱（配发件服务器）
  69. [root@backup ~]# cat /etc/mail.rc
  70. yum install mailx -y
  71. set from=343264992@163.com
  72. set smtp=smtps://smtp.163.com:465
  73. set smtp-auth-user=343264992@163.com
  74. set smtp-auth-password=aa123456
  75. set smtp-auth=login
  76. set ssl-verify=ignore
  77. set nss-config-dir=/etc/pki/nssdb/
  79. [root@backup ~]# mkdir /server/scripts -p
  80. [root@backup scripts]# vim check_backup.sh
  81. #!/usr/bin/bash
  83. #1.定义全局的变量
  84. export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin
  86. #2.定义局部变量
  87. Path=/backup
  88. Date=$(date +%F)
  90. #3.查看flag文件,并对该文件进行校验, 然后将校验的结果保存至result_时间
  91. find $Path/*_${Date} -type f -name "flag_$Date"|xargs md5sum -c >$Path/result_${Date}
  93. #4.将校验的结果发送邮件给管理员
  94. mail -s "Rsync Backup $Date" 343264992@qq.com <$Path/result_${Date}
  96. #5.删除超过7天的校验结果文件, 删除超过180天的备份数据文件
  97. find $Path/ -type f -name "result*" -mtime +7|xargs rm -f
  98. find $Path/ -type d -mtime +180|xargs rm -rf
  100. 定时任务
  101.     #多台客户端
  102. [root@nfs ~]# crontab -l
  103. 00 01 * * * /usr/bin/bash /server/scripts/clinet_rsync_backup.sh >/dev/null 2>&1
  104. 测试
  105. [root@web01 ~]# sh /server/scripts/client_rsync_backup.sh
  107. # 多台客户端快速增加
  108. [root@nfs01 yum.repos.d]# scp -rp /var/spool/cron/root root@172.16.1.7:/var/spool/cron/
  109. [root@nfs01 yum.repos.d]# rsync -avz /server root@172.16.1.8:/
  110.     #服务端
  111. [root@backup backup]# crontab -l
  112. 00 05 * * * /usr/bin/bash /server/scripts/check_backup.sh >/dev/null 2>&1

nfs 共享存储项目

  1. nfs服务端
  2. [root@nfs ~]# yum install nfs-utils -y  (已安装)
  3. [root@nfs ~]# cat /etc/exports
  4. /data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)
  6. # nfs 依赖环境
  7. [root@nfs ~]# groupadd -g 666 www
  8. [root@nfs ~]# useradd -u 666 -g 666 www
  9. [root@nfs ~]# mkdir /data
  10. [root@nfs ~]# chown -R www.www /data
  12. # 启动nfs
  13. [root@nfs ~]# systemctl enable rpcbind nfs-server  
  14. [root@nfs ~]# systemctl start rpcbind nfs-server
  16. nfs 客户端
  17. #安装工具包
  18. [root@web01 ~]# yum install nfs-utils -y  (已安装)
  19. [root@web01 ~]# systemctl start rpcbind    (默认开机自启动)
  20. #创建目录用于挂载
  21. [root@web01 ~]# mkdir /data
  22. # 挂载nfs的data目录
  23. root@web01 ~]# showmount -e 172.16.1.31
  24. Export list for 172.16.1.31:
  25. /data 172.16.1.0/24
  26. [root@web01 ~]# mount -t nfs 172.16.1.31:/data /data
  27. # 加入开机自启动
  28. 172.16.1.31:/data  /data nfs defaults   0 0
  29. 测试:
  30.    #通过windows上传一个视频或图片至/data
  31. wget http://img.mp.itc.cn/upload/20170511/cad88c2e57f44e93b664a48a98a47108_th.jpg
  32.      # 验证内容是否存在nfs服务器
  33. [root@nfs ~]# ls /data/
  34. 1111  cad88c2e57f44e93b664a48a98a47108_th.jpg  tes1  test

NFS 共享存储数据实时复制到 backup

  1. 安装inotify-tools
  2. [root@nfs ~]# yum install inotify-tools rsync -y
  3. 安装sersync
  4. [root@nfs ~]# wget https://raw.githubusercontent.com/wsgzao/sersync/master/sersync2.5.4_64bit_binary_stable_final.tar.gz
  5. 解压重命名
  6. [root@nfs01 ~]# tar xf sersync2.5.4_64bit_binary_stable_final.tar.gz -C /usr/local/
  7. [root@nfs01 local]# mv GNU-Linux-x86/ sersync
  9. #配置sersync
  10.    <fileSystem xfs="true"/>  <!-- 文件系统 -->
  12.      <inotify> <!-- 监控的事件类型 -->
  13.         <delete start="true"/>
  14.         <createFolder start="true"/>
  15.         <createFile start="true"/>
  16.         <closeWrite start="true"/>
  17.          <moveFrom start="true"/>
  18.          <moveTo start="true"/>
  19.          <attrib start="false"/>
  20.           <modify start="false"/>
  21.       </inotify>
  23. <sersync>
  24.          <localpath watch="/data"> <!-- 监控的目录 -->
  25.            <remote ip="172.16.1.41" name="data"/>  <!-- backup的IP以及模块 -->
  26.          </localpath>
  29.   <rsync> <!-- rsync的选项 -->
  30.             <commonParams params="-az"/>
  31.            <auth start="true" users="rsync_backup" passwordfile="/etc/rsync.pass"/>
  32.             <userDefinedPort start="false" port="874"/><!-- port=874 -->
  33.             <timeout start="true" time="100"/><!-- timeout=100 -->
  34.              <ssh start="false"/>
  35.         </rsync>
  38. #创建密码文件
  39. [root@nfs01 sersync]# echo "1" > /etc/rsync.pass
  40. [root@nfs01 ~]# chmod 600 /etc/rsync.pass
  41. #backup创建目录
  42. [root@backup /]# mkdir /data
  43. [root@backup /]# chowm -R www.www /data
  44. 启动sersync
  45. [root@nfs ~]# /usr/local/sersync/sersync2 -dro /usr/local/sersync/confxml.xml

SSH、Ansible,批量管理服务项目

  1. [root@backup ~]# rpm -ql openssh-server
  2. /etc/ssh/sshd_config    --- ssh服务配置文件
  3. /usr/sbin/sshd          --- ssh服务进程启动命令
  5. [root@backup ~]# rpm -ql openssh-clients
  6. /usr/bin/scp            --- 远程拷贝命令
  7. /usr/bin/sftp           --- 远程文件传输命令
  8. /usr/bin/ssh            --- 远程连接登录命令
  9. /usr/bin/ssh-copy-id    --- 远程分发公钥命令
  12. 1.创建密钥对
  13. [root@m01 ~]# ssh-keygen -t rsa -C xuliangwei.com   #一路回车即可
  14. [root@m01 ~]# ls ~/.ssh/
  15. id_rsa(钥匙)  id_rsa.pub(锁头)
  17. 2#发送密钥给需要登录的用户
  18. [root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@172.16.1.31
  20. #远程登录对端主机方式
  21. [root@m01 ~]# ssh root@172.16.1.41
  23. # 不登陆主机执行命令
  24. [root@m01 ~]# ssh root@172.16.1.41 "hostname -i"
  26. .ansible借助公钥批量管理
  27. #利用非交换式工具实现批量分发公钥与批量管理服务器
  28. [root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@172.16.1.41
  30. [root@m01 ~]# yum install ansible -y
  32. //检查ansible版本
  33. [root@m01 ~]# ansible --version
  34. ansible 2.6.1
  36. 配置ansible  主机清单
  37. [root@m01 ~]# vim /etc/ansible/hosts
  38. [root@m01 7]# cat /etc/ansible/hosts
  39. [lb]
  40. 172.16.1.5
  41. 172.16.1.6
  42. [web]
  43. 172.16.1.7
  44. 172.16.1.8
  45. [sweb]
  46. 172.16.1.9
  47. [nfs]
  48. 172.16.1.31
  49. [backup]
  50. 172.16.1.41
  51. [db]
  52. 172.16.1.51
  54. # ansible是通过ssh端口探测通信
  55. [root@m01 ~]# ansible all -m ping
  57. #批量执行命令
  58. [root@m01 ~]# ansible all -m command -a "df -h"
  59. [root@m01 ~]# ansible all -m command -a "hostname"

MySQL 数据库环境搭建

  1. # 1.下载MySQL官方扩展源     (yum仓库已经准备好)
  2. [root@nginx ~]# rpm -ivh http://repo.mysql.com/yum/mysql-5.7-community/el/7/x86_64/mysql57-community-release-el7-10.noarch.rpm
  4. #2.安装mysql5.7, 文件过大可能会导致下载缓慢
  5. [root@nginx ~]# yum install mysql-community-server -y
  7. #3.启动数据库, 并加入开机自启动
  8. [root@nginx ~]# systemctl start mysqld
  9. [root@nginx ~]# systemctl enable mysqld
  11. #4.由于mysql5.7默认配置了默认密码, 需要过滤temporary password关键字查看对应登陆数据库密码
  12. [root@nginx ~]# grep 'temporary password' /var/log/mysqld.log
  14. #5.登陆mysql数据库[password中填写上一步过滤的密码]
  15. [root@web02 ~]# mysql -uroot -p$(awk '/temporary password/{print $NF}' /var/log/mysqld.log)
  17. #6.重新修改数据库密码
  18. mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'Ckh123.com';
  20. # 服务器mysql允许远程用户连接 (授权法)
  21. grant all privileges on *.* to 'all'@'%' identified by 'Ckh123.com';
  22. flush privileges;
  23. #7. web客户端安装 mysql (命令 测试用 可以不用装)
  24. [root@web02 ~]# yum provides mysql
  25. [root@web02 ~]# yum install mariadb -y
  26. [root@web02 ~]# mysql -h172.16.1.51 -uall -pCkh123.com

Nginx+PHP 流行动态 Web 环境搭建

  1. #1.使用Nginx官方提供的rpm包  (yum仓库已经准备好)
  2. [root@nginx ~]# cat /etc/yum.repos.d/nginx.repo   
  3. [nginx]
  4. name=nginx repo
  5. baseurl=http://nginx.org/packages/centos/7/$basearch/
  6. gpgcheck=0
  7. enabled=1
  9. #2.执行yum安装
  10. [root@nginx ~]# yum install nginx -y
  11. # 修改nginx 运行身份
  12. sed -i '/^user/c user www;' /etc/nginx/nginx.conf  
  13. [root@web01 ~]# id www  
  14. uid=666(www) gid=666(www) 组=666(www)  
  15. [root@web01 ~]# # groupadd -g 666 www  
  16. [root@web01 ~]# # useradd -u666 -g666 www  
  17. #3.启动并加入开机自启动
  18. [root@web01 ~]# systemctl start nginx  
  19. [root@nginx ~]# systemctl enable nginx
  21. #检查 运行进程中式否www 用户运行
  22. [root@web01 ~]# ps aux |grep nginx  
  23. www        2396  0.0  0.3  46996  1784 ?        S    08:44   0:00 nginx: worker process  
  24. root       2398  0.0  0.2 112720   984 pts/0    R+   08:44   0:00 grep --color=auto nginx
  27. 使用第三方扩展epel源安装php7.1
  29. #1.移除旧版php   (没有旧版 )
  30. [root@nginx ~]# yum remove php-mysql-5.4 php php-fpm php-common   
  32. #2.安装扩展源 (yum仓库已经准备了)
  33. # 依赖包
  34. [root@nginx ~]# rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
  35. [root@nginx ~]# rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
  36. # 或者用yum自行解决依赖包安装
  38. #3.安装php7.1版本
  39. [root@nginx ~]# yum -y install php71w php71w-cli php71w-common php71w-devel php71w-embedded php71w-gd php71w-mcrypt php71w-mbstring php71w-pdo php71w-xml php71w-fpm php71w-mysqlnd php71w-opcache php71w-pecl-memcached php71w-pecl-redis php71w-pecl-mongodb
  41. #4.替换php-fpm运行的用户和组身份
  42. [root@web02 ~]# sed -i '/^user/c user = www' /etc/php-fpm.d/www.conf 
  43. [root@web02 ~]# sed -i '/^group/c group = www' /etc/php-fpm.d/www.conf
  45. #5.启动php-fpm管理进程, 并加入开机自启
  46. [root@nginx ~]# systemctl start php-fpm
  47. [root@nginx ~]# systemctl enable php-fpm
  50. ansible 批量管理
  51. [root@m01 7]# ansible web -m yum -a "name=nginx state=installed"
  52. [root@m01 7]# ansible web -m shell -a "sed -i '/^user/c user www;' /etc/nginx/nginx.conf "
  53. [root@m01 7]# ansible web -m group -a "name=www gid=666"
  54. [root@m01 7]# ansible web -m user -a "name=www uid=666 group=666 "
  55. [root@m01 7]# ansible web -m service -a "name=nginx state=started enabled=yes"
  56. [root@m01 7]# ansible web -m yum -a "name=php71w,php71w-cli,php71w-common,php71w-devel,php71w-embedded,php71w-gd,php71w-mcrypt,php71w-mbstring,php71w-pdo,php71w-xml,php71w-fpm,php71w-mysqlnd,php71w-opcache,php71w-pecl-memcached,php71w-pecl-redis,php71w-pecl-mongodb  state=installed"
  57. [root@m01 7]# ansible web -m shell -a "sed -i '/^user/c user = www' /etc/php-fpm.d/www.conf;sed -i '/^group/c group = www' /etc/php-fpm.d/www.conf"
  58. [root@m01 7]# ansible web -m service -a "name=php-fpm state=started enabled=yes"
  60. 调整网站上传文件大小
  61. vim /etc/php.ini
  62. memory_limit=1024M
  63. post_max_size=1024M
  64. upload_max_filesize=1024M　　
  65. max_execution_time=60
  66. max_input_time=60
  68. vim nginx配置文件 nginx.conf, 找到http{} 段 添加
  69. client_max_body_size 1024M; 
  70. # 重启服务生效配置
  71. [root@web01 code]# systemctl restart nginx php-fpm
  73. wordpress 安装 *
  74. [root@web01 conf.d]# cat wordpress.conf
  75. server {
  76.     server_name wordpress.etiantian.org;
  77.     listen 80;
  78.     root /code/wordpress;
  79.     index index.php index.html;
  81.     location ~ \.php$ {
  82.         root /code/wordpress;
  83.             fastcgi_pass   127.0.0.1:9000;
  84.             fastcgi_index  index.php;
  85.             fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
  86.             include        fastcgi_params;
  87.     }
  88. }
  90. [root@web01 conf.d]# nginx -t
  91. [root@web01 conf.d]# systemctl restart nginx
  92. #1.获取wordpress代码
  93. [root@web01 ~]# wget https://cn.wordpress.org/wordpress-4.9.4-zh_CN.tar.gz
  95. #2.解压网站源码文件,拷贝至对应站点目录,并授权站点目录
  96. [root@web01 ~]# tar xf wordpress-4.9.4-zh_CN.tar.gz -C /code/wordpress/
  97. [root@web01 ~]# chown -R www.www /code/wordpress/
  99. # wordpress 产品需要手动创建数据库
  100. #1.登陆数据库
  101. [root@http-server ~]# mysql -uroot -pCkh123.com
  102. #2.创建wordpress数据库
  103. MariaDB [(none)]> create database wordpress;
  104. MariaDB [(none)]> exit
  106. # windows hosts解析 登录浏览器访问wordpress.etiantian.org 并安装
  109. wecenter 安装 *
  110. [root@web01 conf.d]# cat wecenter.conf
  111. server {
  112.     server_name wecenter.etiantian.org;
  113.     listen 80;
  114.     root /code/wecenter;
  115.     index index.php index.html;
  117.     location ~ \.php$ {
  118.         root /code/wecenter;
  119.             fastcgi_pass   127.0.0.1:9000;
  120.             fastcgi_index  index.php;
  121.             fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
  122.             include        fastcgi_params;
  123.     }
  124. }
  125. [root@web01 code]# nginx -t
  126. [root@web01 code]# systemctl restart nginx
  128. # 下载wecenter 产品
  129. [root@web01 ~]# wget http://ahdx.down.chinaz.com/201605/WeCenter_v3.2.1.zip
  130. [root@web01 ~]# unzip WeCenter_v3.1.9.zip 
  131. [root@web01 code]# mv WeCenter_3-2-1 wecenter
  132. [root@web01 ~]# chown -R www.www /code/wecenter/
  134. #1.登陆数据库
  135. [root@http-server ~]# mysql -uroot -pCkh123.com
  137. #2.创建wecenter数据库
  138. MariaDB [(none)]> create database wecenter;
  139. MariaDB [(none)]> exit
  141. # window hosts解析 通过浏览器访问 wecenter.etiantian.org 并安装

Nginx+Tomcat 流行动态 Web 环境搭建

  1. 1.准备Java基础环境
  2. [root@web02 ~]# yum install java jarjar-maven-plugin -y
  3. [root@web03 ~]# mkdir /server && cd /server
  5. 2.下载并安装Tomcat服务
  6. wget http://mirrors.shu.edu.cn/apache/tomcat/tomcat-8/v8.5.34/bin/apache-tomcat-8.5.34.tar.gz
  7. [root@web03 server]# tar xf apache-tomcat-8.5.34.tar.gz
  8. [root@web03 server]# ln -s /server/apache-tomcat-8.5.34 /server/tomcat8_1
  9. # 启动 tomcat 服务
  10. [root@lb01 ~]# /server/tomcat8_1/bin/startup.sh
  11. [root@lb01 ~]# netstat -lntp
  13. # 浏览器访问  http://10.0.0.9:8080/
  15. [root@web03 WEB-INF]# pwd
  16. /server/tomcat-8080/webapps/ROOT/WEB-INF
  18. [root@web03 webapps]# jar xf jpress-web-newest.war
  19. # 浏览器访问 http://10.0.0.9:8081/jpress
  20. 0.准备数据库[db01]
  21. mysql> create database jpress;
  23. 4.启动tomcat
  24. [root@web03 tomcat]# /root/tomcat/bin/startup.sh
  25.     关闭tomcat方式
  26. [root@web03 tomcat]# /root/tomcat/bin/shutdown.sh
  29. 5.在proxy上新增java节点
  30. upstream php {
  31.     server 172.16.1.7:80;
  32.     server 172.16.1.8:80;
  33. }
  35. upstream java {
  36.     server 172.16.1.9:8081;
  37. }
  39. server {
  40.     server_name wordpress.etiantian.org;
  41.     listen 80;
  42.     location / {
  43.         proxy_pass http://php;
  44.         include proxy_params;
  45.     }
  46. }
  47. server {
  48.     server_name jpress.etiantian.org;
  49.     listen 80;
  50.     location / {
  51.         proxy_pass http://java;
  52.         include proxy_params;
  53.     }
  54. }
  56. [root@lb01 conf.d]# nginx -t
  57. [root@lb01 conf.d]# systemctl restart nginx
  60. 6.给tomcat提供静态存储[nfs操作]
  61. [root@nfs ~]# cat /etc/exports
  62. /data/blog 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)
  63. /data/java 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)   #新增
  65. [root@nfs ~]# mkdir /data/java
  66. [root@nfs ~]# chown -R www.www /data/java/
  68. [root@nfs ~]# systemctl restart nfs-server
  70. 7.在web03上操作
  71. [root@web03 ROOT]# yum install nfs-utils -y
  72. [root@web03 ROOT]# showmount -e 172.16.1.31
  73. Export list for 172.16.1.31:
  74. /data/java 172.16.1.0/24
  75. /data/blog 172.16.1.0/24
  77. 8.准备挂载环境
  78. [root@web03 ROOT]# groupadd -g 666 www
  79. [root@web03 ROOT]# useradd -g www -u 666 www
  81. 挂载
  82. [root@web03 ROOT]# cp -rp attachment/ attachment_bak
  83. [root@web03 ROOT]# rm -rf attachment/*
  84. [root@web03 ROOT]# mount -t nfs 172.16.1.31:/data/java /root/apache-tomcat-8.5.33/webapps/ROOT/attachment
  85. [root@web03 ROOT]# cp -rp attachment_bak/* attachment/
  87. 永久挂载
  88. [root@web03 ROOT]# cat /etc/fstab 
  89. 172.16.1.31:/data/java /root/apache-tomcat-8.5.33/webapps/ROOT/attachment nfs defaults,_rnetdev 0 0
  90. [root@web03 ROOT]# mount -a

将 PHP 产品和 Tomcat 产品上传目录挂载到 NFS

  1. #1.web先找出图片存储的路径，然后进行挂载
  3. wordpress   wp-content/uploads/
  4. wecenter    uploads
  5. jpress          attachment/
  8. # nfs01 服务器提供静态存储
  9. [root@nfs01 data]# cat /etc/exports
  10. /data/wordpress 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)
  11. /data/wecenter 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)
  12. /data/jpress 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)
  14. [root@nfs01 data]# mkdir /data/{wecenter,jpress,wordpress}
  15. [root@nfs01 data]# chown -R www.www /data
  16. [root@nfs01 data]# systemctl restart nfs-server
  19.  # web01 安装 nfs工具  (已经安装)
  20. [root@web01 code]# yum install nfs-utils
  21. [root@web01 code]# showmount -e 172.16.1.31
  22. Export list for 172.16.1.31:
  23. /data/jpress    172.16.1.0/24
  24. /data/wecenter  172.16.1.0/24
  25. /data/wordpress 172.16.1.0/24
  27. [root@web01 ~]# groupadd -g 666 www   (已经创建了)
  28. [root@web01 ~]# useradd -g www -u 666 www
  30. # 挂载
  31. [root@web01 wecenter]# pwd
  32. /code/wecenter
  33. [root@web01 wecenter]# cp -rp uploads/ uploads_bak
  34. [root@web01 code]# mount -t nfs 172.16.1.31:/data/wecenter /code/wecenter/uploads
  35. [root@web01 code]# cp -rp /code/wecenter/uploads_bak/* /code/wecenter/uploads/
  36. [root@web01 code]# cat /etc/fstab
  37. 172.16.1.31:/data/wecenter  /code/wecenter/uploads nfs defaults 0 0
  39. [root@web01 wp-content]# pwd
  40. /code/wordpress/wp-content
  41. [root@web01 wp-content]# cp -rp uploads/ uploads_bak
  42. [root@web01 code]# mount -t nfs 172.16.1.31:/data/wordpress /code/wordpress/wp-content/uploads
  43. [root@web01 code]# cp -rp /code/wordpress/wp-content/uploads_bak/* /code/wordpress/wp-content/uploads/
  44. [root@web01 code]# cat /etc/fstab
  45. 172.16.1.31:/data/wordpress /code/wordpress/wp-content/uploads nfs defaults 0 0
  47. #web03 的jpress
  48. [root@web03 jpress]# pwd
  49. /server/tomcat-8080/webapps/jpress
  50. [root@web03 jpress]# cp -rp attachment/ attachment_bak
  51. [root@web03 jpress]# mount -t nfs 172.16.1.31:/data/jpress /server/tomcat-8080/webapps/ROOT/attachment
  53. [root@web03 jpress]# groupadd -g 666 www
  54. [root@web03 jpress]# useradd -g www -u 666 www
  55. [root@web03 jpress]# chown -R www.www /server/tomcat-8080/webapps
  57. [root@web03 jpress]# cp -rp attachment_bak/* attachment/
  59. [root@web03 jpress]# cat /etc/fstab
  60. 172.16.1.31:/data/jpress /server/tomcat8_1/webapps/jpress/attachment nfs defaults 0 0

搭建 Nginx+keepalived 七层负载，172.16.1.5/6/lb01/lb02

  1. # web01  和web02 环境保持一模一样
  2. [root@web01 code]# rsync -avz /code root@172.16.1.8:/ 
  3. [root@web01 code]# rsync -avz /etc/nginx root@172.16.1.8:/etc/ --delete
  4. [root@web01 code]# scp -rp /etc/php.ini root@172.16.1.8:/etc/
  5. [root@web02 ~]# vim /etc/fstab
  6. 172.16.1.31:/data/wecenter  /code/wecenter/uploads nfs defaults 0 0
  7. 172.16.1.31:/data/wordpress /code/wordpress/wp-content/uploads nfs defaults 0 0
  8. [root@web02 ~]# mount -a
  9. [root@web02 ~]# df -h
  10. [root@web02 code]# systemctl restart nginx php-fpm
  12. # 安装nginx
  13. [root@db01 ~]# yum install nginx
  14. [root@db01 conf.d]# mv default.conf default.conf.off
  15. [root@db01 conf.d]# cat proxy.conf
  16. upstream php {
  17.     server 172.16.1.7:80;
  18.     server 172.16.1.8:80;
  19. }
  20. upstream java {
  21.     server 172.16.1.9:8080;
  22. }
  23. server {
  24.     listen 80;
  25.     server_name wordpress.etiantian.org;
  26.     location / {
  27.         proxy_pass http://php;
  28.         include proxy_params;
  29.     }
  30. }
  31. server {
  32.     listen 80;
  33.     server_name wecenter.etiantian.org;
  34.     location / {
  35.         proxy_pass http://php;
  36.         include proxy_params;
  37.     }
  38. }
  39. server {
  40.     listen 80;
  41.     server_name jpress.etiantian.org;
  42.     location / {
  43.            proxy_pass http://java;
  44.            include proxy_params;
  45.          }
  46. }
  48. [root@db01 conf.d]# cat /etc/nginx/proxy_params
  49. proxy_set_header Host $http_host;
  50. proxy_set_header X-Real-IP $remote_addr;
  51. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  53. proxy_connect_timeout 30;
  54. proxy_send_timeout  60;
  55. proxy_read_timeout  60;
  57. proxy_buffering on;
  58. proxy_buffer_size 32k;
  59. proxy_buffers 4 128k;
  61. [root@db01 conf.d]# nginx -t
  62. [root@db01 conf.d]# systemctl restart nginx
  64. ##windows hosts 解析  浏览器访问
  66. # +keepalived
  68. #两台lb 一模一样配置 , 快速配置一台lb02-6
  69. [root@lb02 ~]# yum install nginx
  70. [root@lb02 ~]# scp -rp root@172.16.1.5:/etc/yum.repos.d /etc/  (基础环境已经配置好yum仓库)
  71. [root@lb02 conf.d]# rsync -avz root@172.16.1.5:/etc/nginx /etc/ --delete
  72. [root@lb02 ~]# systemctl start nginx
  73. [root@lb02 ~]# systemctl enable nginx
  75. # 安装 keepalived
  76. [root@lb01 ~]# yum install keepalived -y
  77. [root@lb02 ~]# yum install keepalived -y
  79. #配置 keepalived
  80. [root@lb01 conf.d]# cat /etc/keepalived/keepalived.conf
  81. global_defs {
  82.     router_id lb01
  83. }
  84. vrrp_instance VI_1 {
  85.     state BACKUP
  86.     interface eth0
  87.     virtual_router_id 50
  88.     priority 150
  89.     advert_int 1
  90.     authentication {
  91.         auth_type PASS
  92.         auth_pass 1111
  93.     }
  94.     virtual_ipaddress {
  95.         10.0.0.3
  96.     }
  97. }
  98. [root@lb01 conf.d]# systemctl restart keepalived
  99. [root@lb01 conf.d]# systemctl enable keepalived
  101. [root@lb02 conf.d]# cat /etc/keepalived/keepalived.conf
  102. global_defs {
  103.     router_id lb02
  104. }
  105. vrrp_instance VI_1 {
  106.     state MASTER
  107.     interface eth0
  108.     virtual_router_id 50
  109.     priority 100
  110.     advert_int 1
  111.     authentication {
  112.         auth_type PASS
  113.         auth_pass 1111
  114. }
  115.     virtual_ipaddress {
  116.         10.0.0.3
  117.     }
  118. }
  119. [root@lb02 conf.d]# systemctl restart keepalived
  120. [root@lb01 conf.d]# systemctl enable keepalived

配置 Nginx- tomcat- HTTPS 加密访问项目

  1. [root@web01 code]# mkdir /etc/nginx/ssl_key 
  2. [root@web01 code]# cd /etc/nginx/ssl_key/
  3. [root@web01 ~]# openssl genrsa -idea -out server.key 2048
  4. 这里密码设置1234
  5. [root@web01 ~]# openssl req -days 36500 -x509 -sha256 -nodes -newkey rsa:2048 -keyout server.key -out server.crt
  6. Country Name (2 letter code) [XX]:CN
  7. State or Province Name (full name) []:WH
  8. Locality Name (eg, city) [Default City]:WH
  9. Organization Name (eg, company) [Default Company Ltd]:edu    
  10. Organizational Unit Name (eg, section) []:SA
  11. Common Name (eg, your name or your server's hostname) []:bgx
  12. Email Address []:bgx@foxmail.com
  14. [root@web01 ssl_key]# cat /etc/nginx/conf.d/wecenter-https.conf
  15. server {
  16.     listen 443;
  17.     server_name wecenter.etiantian.org;
  18.     ssl on;
  19.     ssl_certificate   ssl_key/server.crt;
  20.         ssl_certificate_key  ssl_key/server.key;
  21.     location / {
  22.         root /code/wecenter;
  23.         index index.php index.html;
  24.     }
  25.     location ~ \.php$ {
  26.         root /code/wecenter;
  27.             fastcgi_pass   127.0.0.1:9000;
  28.             fastcgi_index  index.php;
  29.             fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
  30.             include        fastcgi_params;
  32.     }
  33. }
  34. [root@web01 ~]# cat /etc/nginx/conf.d/wordpress-https.conf
  35. server {
  36.     server_name wordpress.etiantian.org;
  37.     listen 443;
  38.     root /code/wordpress;
  39.     index index.php index.html;
  40.     ssl on;
  41.     ssl_certificate ssl_key/server.crt;
  42.     ssl_certificate_key ssl_key/server.key;
  44.     location ~ \.php$ {
  45.         root /code/wordpress;
  46.             fastcgi_pass   127.0.0.1:9000;
  47.             fastcgi_index  index.php;
  48.             fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
  49.             include        fastcgi_params;
  51.     }
  52. }
  54. [root@web01 conf.d]# rsync -avz /etc/nginx root@172.16.1.8:/etc/ --delete
  55. [root@web01 ssl_key]# nginx -t
  56. nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
  57. nginx: configuration file /etc/nginx/nginx.conf test is successful
  58. [root@web01 ssl_key]# systemctl restart nginx
  60. # 负载均衡配置
  61. [root@lb01 code]# mkdir /etc/nginx/ssl_key 
  62. [root@lb01 code]# cd /etc/nginx/ssl_key/
  63. [root@lb01 ssl_key]# scp -rp root@172.16.1.7:/etc/nginx/ssl_key/* ./
  64. [root@lb01 nginx]# cat /etc/nginx/conf.d/proxy-https.conf
  65. upstream php {
  66.     server 172.16.1.7:443;
  67.     server 172.16.1.8:443;
  68. }
  69. upstream java {
  70.     server 172.16.1.9:8080;
  71. }
  72. server {
  73.     listen 80;
  74.     server_name wordpress.etiantian.org;
  75.     return 302 https://$server_name$request_uri;
  76. }
  77. server {
  78.     listen 80;
  79.     server_name wecenter.etiantian.org;
  80.     return 302 https://$server_name$request_uri;
  81. }
  82. server {
  83.     listen 80;
  84.     server_name jpress.etiantian.org;
  85.     return 302 https://$server_name$request_uri;
  86. }
  87. server {
  88.     listen       443 ssl;
  89.     server_name  jpress.etiantian.org;
  91.     ssl on;
  92.     ssl_certificate  ssl_key/server.crt;
  93.     ssl_certificate_key  ssl_key/server.key;
  95.     ssl_session_cache    shared:SSL:1m;
  96.     ssl_session_timeout  5m;
  98.     ssl_ciphers  HIGH:!aNULL:!MD5;
  99.     ssl_prefer_server_ciphers  on;
  101.     location / {
  102.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  103.         proxy_set_header Host $http_host;
  104.         proxy_set_header X-Forwarded-Proto https;
  105.         proxy_redirect off;
  106.         proxy_connect_timeout      240;
  107.         proxy_send_timeout         240;
  108.         proxy_read_timeout         240;
  109.         # note, there is not SSL here! plain HTTP is used
  110.         proxy_pass http://java;
  111.     }
  112. }
  114. server {
  115.     listen 443;
  116.     server_name wordpress.etiantian.org;
  117.         ssl on;
  118.             ssl_certificate  ssl_key/server.crt;
  119.         ssl_certificate_key  ssl_key/server.key;
  120.     location / {
  121.         proxy_pass https://php;
  122.         include proxy_params;
  123.     }
  124. }
  126. server {
  127.     listen 443;
  128.     server_name wecenter.etiantian.org;
  129.         ssl on;
  130.             ssl_certificate  ssl_key/server.crt;
  131.         ssl_certificate_key  ssl_key/server.key;
  132.     location / {
  133.         proxy_pass https://php;
  134.         include proxy_params;
  135.     }
  137. }
  139. # lb02 一样的配置
  140. [root@lb01 ssl_key]# rsync -avz /etc/nginx root@172.16.1.6:/etc/ --delete
  144. #其中最为关键的就是 ssl_certificate 和 ssl_certificate_key 这两项配置，其他的按正常配置。不过多了一个 proxy_set_header X-Forwarded-Proto https; 配置。     
  147. Tomcat server.xml 完整配置
  149. [root@web03 server]# cat tomcat8_1/conf/server.xml
  150. <?xml version="1.0" encoding="UTF-8"?>
  152. <Server port="8011" shutdown="SHUTDOWN">
  153.   <Listener className="org.apache.catalina.startup.VersionLoggerListener" />
  154.   <Listener className="org.apache.catalina.security.SecurityListener" />
  155.   -->
  156.   <!--APR library loader. Documentation at /docs/apr.html -->
  157.   <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  158.   <!-- Prevent memory leaks due to use of particular java/javax APIs-->
  159.   <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
  160.   <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
  161.   <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />
  163.     <Resource name="UserDatabase" auth="Container"
  164.               type="org.apache.catalina.UserDatabase"
  165.               description="User database that can be updated and saved"
  166.               factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
  167.               pathname="conf/tomcat-users.xml" />
  168.   </GlobalNamingResources>
  170.   <Service name="Catalina">
  171.   
  172.     <Connector port="8081" protocol="HTTP/1.1"
  173.                connectionTimeout="20000"
  174.                redirectPort="443"
  175.         proxyPort="443" />
  176.  
  177.     <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
  178.     
  179.     <Engine name="Catalina" defaultHost="localhost">
  181.       <Realm className="org.apache.catalina.realm.LockOutRealm">
  182.         <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
  183.                resourceName="UserDatabase"/>
  184.       </Realm>
  186.       <Host name="localhost"  appBase="webapps"
  187.             unpackWARs="true" autoDeploy="true">
  189.         <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
  190.           remoteIpHeader="x-forwarded-for"
  191.                   remoteIpProxiesHeader="x-forwarded-by"
  192.                   protocolHeader="x-forwarded-proto"
  193.                prefix="localhost_access_log" suffix=".txt"
  194.                pattern="%h %l %u %t &quot;%r&quot; %s %b" />
  196.       </Host>
  197.     </Engine>
  198.   </Service>
  199. </Server>           
  201. #上述的配置中没有什么特别的，但是特别特别注意的是必须有 proxyPort="443"，这是整篇文章的关键，当然 redirectPort 也必须是 443。同时 <Value> 节点的配置也非常重要，否则你在 Tomcat 中的应用在读取 getScheme() 方法以及在 web.xml 中配置的一些安全策略会不起作用。

将 NFS 存储数据实时复制到静态 Web 本地 172.16.1.9/10/web01/02

  1. # web01准备环境
  3. [root@web01 ~]# yum install rsync -y   //基础环境已经安装
  4. [root@web01 ~]# cat /etc/rsyncd.conf 
  5. uid = www
  6. gid = www
  7. port = 873
  8. fake super = yes
  9. use chroot = no
  10. max connections = 200
  11. timeout = 600
  12. ignore errors
  13. read only = false
  14. list = false
  15. auth users = rsync_backup
  16. secrets file = /etc/rsync.password
  17. log file = /var/log/rsyncd.log
  18. #####################################
  20. [data]
  21. path = /data
  24. [root@web01 ~]# mkdir /data/
  25. [root@web01 ~]# groupadd -g666 www     (用户已经存在)
  26. [root@web01 ~]# useradd -u666 -g666 www
  28. [root@web01 ~]# chown -R www.www /data/
  29. [root@web01 ~]# chmod 755 /data   (默认755)
  31. # 创建rsync使用的虚拟连接用户
  32. [root@web01 ~]# echo "rsync_backup:1" > /etc/rsync.password
  33. [root@web01 ~]# chmod 600 /etc/rsync.password
  35. [root@web01 ~]# systemctl enable rsyncd
  36. [root@web01 ~]# systemctl restart rsyncd
  39. # 复制之前的sersync 配置文件修改
  41. [root@nfs01 data]# cd /usr/local/sersync/
  42. [root@nfs01 sersync]# cp confxml.xml web01-confxml.xml
  43. [root@nfs01 sersync]# vim web01-confxml.xml  # 修改的地方
  44.     <host hostip="localhost" port="8009"></host>
  45.             <remote ip="172.16.1.7" name="data"/>
  46. #启动服务
  47. [root@nfs01 sersync]# /usr/local/sersync/sersync2 -dro /usr/local/sersync/web01-confxml.xml
  48.             
  49. web02 操作类似

Nginx 静态 Web 服务环境搭建 172.16.1.9/10/sweb01/02 +实现动静分离

  1. flag-------------------------------
  2. 系统      服务      地址
  3. CentOS7.5   proxy       10.0.0.5  lb01
  4. CentOS7.5   Nginx       10.0.0.7  web01
  5. CentOS7.5   TOmcat      10.0.0.9  web03
  6.             
  7. # web01静态资源
  8. [root@web01 data]# wget http://nginx.org/nginx.png
  9. [root@web01 data]# cat /etc/nginx/conf.d/ds.conf
  10. server {
  11.     listen 80;
  12.     server_name ds.etiantian.org;
  13.     root /data;
  14.     index index.php index.html;
  16.     location ~* .*\.(png|jpg|gif)$ {
  17.         root /data;
  18.     }
  19. }
  20.             
  21. # web03 动态资源            
  22. [root@web03 webapps]# cat /server/tomcat8_1/webapps/ROOT/java-test.jsp
  23. <%@ page language="java" import="java.util.*" pageEncoding="utf-8"%>
  24. <HTML>
  25.     <HEAD>
  26.         <TITLE>JSP Test Page</TITLE>
  27.     </HEAD>
  28.     <BODY>
  29.       <%
  30.         Random rand = new Random();
  31.         out.println("<h1>Random number:</h1>");
  32.         out.println(rand.nextInt(99)+100);
  33.       %>
  34.           </BODY>
  35.           </HTML>           
  36.             
  37. #lb01 整合静态和动态资源在一个页面
  38. # nginx 配置 
  39. [root@lb01 conf.d]# cat /etc/nginx/conf.d/ds.conf
  40. upstream static {
  41.         server 10.0.0.7:80;
  42. }
  43. upstream javaround {
  44.         server 10.0.0.9:8080;
  45. }
  46. server {
  47.         listen 80;
  48.         server_name ds.etiantian.org;
  49.         location / {
  50.                 root /soft/code;
  51.                 index index.html;
  52.         }
  53.         location ~ .*\.(png|jpg|gif)$ {
  54.                 proxy_pass http://static;
  55.                 include proxy_params;
  56.         }
  57.         location  ~ .*\.jsp$ {
  58.                 proxy_pass http://javaround;
  59.                 include proxy_params;
  60.         }
  61. }           
  63. # 代码            
  64. [root@lb01 conf.d]# cat /soft/code/index.html
  65. <html lang="en">
  66. <head>
  67.         <meta charset="UTF-8" />
  68.         <title>测试ajax和跨域访问</title>
  69.         <script src="http://libs.baidu.com/jquery/2.1.4/jquery.min.js"></script>
  70. </head>
  71. <script type="text/javascript">
  72. $(document).ready(function(){
  73.         $.ajax({
  74.         type: "GET",
  75.         url: "http://ds.etiantian.org/java-test.jsp",
  76.         success: function(data) {
  77.                 $("#get_data").html(data)
  78.         },
  79.         error: function() {
  80.                 alert("fail!!,请刷新再试!");
  81.         }
  82.         });
  83. });
  84. </script>
  85.         <body>
  86.                 <h1>测试动静分离</h1>
  87.                <img src="http://ds.etiantian.org/nginx.png">
  88.                 <div id="get_data"></div>
  89.         </body>
  90. </html>         
  91.             
  92.             
  93. # windows hosts 解析 10.0.0.5   ds.etiantian.org  
  94. # 浏览器访问  http://ds.etiantian.org/  图片和动态随机数同时显示在一个页面上,
  95. # 停掉web01 的nginx  页面的图片不显示,动态资源正常显示 反之一样
  96.
 友情链接：直通硅谷 　点职佳 　北美留学生论坛

LinuxShell热门文章

  • vdbench 数据校验测试方法
  • CentOS7一键脚本安装WireGuard
  • VMware Ubuntu 20.04 LTS 使用Qemu虚拟机u-boot启动或者配合busybox模拟ARM开发板
  • Activation of org.freedesktop.systemd1 timed out
  • vmWare 虚机文件不能启动的事故处理
  • windows远程连接centos及闪退异常解决记录
  • CentOS7防火墙放行或限制指定IP和端口（firewall）
  • jvm：jmap无法dump文件的解决办法
  • C# 控制 GPIO
  • linux中文件权限的字母含义

    • LinuxShell推荐文章

  • 旧物利用 - 将机顶盒改造为一台Linux开发机！
  • condition字符串匹配问题
  • proxmox ve 部署双节点HA集群及glusterfs分布式文件系统
  • 入门到精通rsync和inotify
  • 解决 CentOS 7 官方 yum 仓库无法使用的最佳实践
  • Linux 提权-NFS 共享
  • 将虚拟机跑在ceph之中
  • saltStack自动化工具
  • SeaweedFS + TiKV 部署保姆级教程
  • GlusterFs分布式文件系统

    • 本站QQ群：前端 618073944 | Java 606181507 | Python 626812652 | C/C++ 612253063 | 微信 634508462 | 苹果 692586424 | C#/.net 182808419 | PHP 305140648 | 运维 608723728

    W3xue 的所有内容仅供测试，对任何法律问题及风险不承担任何责任。通过使用本站内容随之而来的风险与本站无关。
    关于我们  |  意见建议  |  捐助我们  |  报错有奖  |  广告合作、友情链接（目前9元/月）请联系QQ：27243702 沸活量
    皖ICP备17017327号-2　皖公网安备34020702000426号