keepalive+nginx双机热备
nginx+keepalive双机热备
nginx安装
在线安装：
这次安装环境因为上传文件比较麻烦所以使用了在线安装的方式
用到的工具是wget
工具安装方式：
yum -y install wget
安装nginx命令：
wget http://nginx.org/download/nginx-1.5.9.tar.gz
该命令为下载文件到当前目录下
下载好压缩包后我们首先要为nginx安装依赖
yum -y install gcc pcre-devel zlib-devel openssl openssl-devel
安装好依赖后我们来解压nginx的安装压缩包
tar -zxvf nginxxxxx.xxx
这样我们就把nginx解压到当前目录下了，进入nginx目录我们进行编译
./configure
make
make install
到这里我们安装完成进入sbin目录进行使用nginx
命令
./nginx -t 检验配置文件
./nginx -s reload 重新加载配置文件
./nginx 启动
./nginx - stop 停止
nginx配置
当我们安装并启动nginx后我们用浏览器输入服务器ip就会显示一个nginx的介绍页面，但是我们的使用并不仅仅停留到这里，我们需要使用nginx的更加强大的功能，这时我们就需要通过配置来使用nginx的更多功能，进入/conf/nginx.config文件这里就是我们配置nginx的位置下面是我们的一个简答的配置文件
user nobody;
worker_processes 1;
error_log logs/error.log;
error_log logs/error.log notice;
error_log logs/error.log info;
pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log logs/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 0;
keepalive_timeout 65;
gzip on;
upstream nginxserver10001 {
server 172.16.1.64:10001;
server 172.16.1.66:10001;
}
server {
listen 10001;
server_name nginxserver10001;
ssl on;
ssl_certificate /home/esblb/server.pem;
ssl_certificate_key /home/esblb/server.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#启用TLS1.1、TLS1.2要求OpenSSL1.0.1及以上版本，若您的OpenSSL版本低于要求，请使用 ssl_protocols TLSv1;
ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;
ssl_prefer_server_ciphers on;
location / {
proxy_redirect http://$host$1 https://$host$1;
proxy_redirect http://$host:80$1 https://$host$1;
proxy_set_header Host $host:10001;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-HTTPS-Protocol $ssl_protocol;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Scheme $scheme;
proxy_pass http://nginxserver10001;
}
location /nginx_status{
stub_status on;
allow all;
access_log off;
}
}
another virtual host using mix of IP-, name-, and port-based configuration
server {
listen 8000;
listen somename:8080;
server_name somename alias another.alias;
location / {
root html;
index index.html index.htm;
}
}
HTTPS server
server {
listen 443 ssl;
server_name localhost;
ssl_certificate cert.pem;
ssl_certificate_key cert.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
root html;
index index.html index.htm;
}
}
}
如果发现进入网站显示错误一定要注意是否防火墙端口打开
再具体的配置就先不在这里说了我们继续 (￣▽￣)／
开机启动
通常服务器要考虑全面比如断电什么的所以通常程序都要准备开机自启的功能
vi /etc/init.d/nginx
nginx Startup script for the Nginx HTTP Server
it is v.0.0.2 version.
chkconfig: - 85 15
description: Nginx is a high-performance web and proxy server.
It has a lot of features, but it's not for everyone.
processname: nginx
pidfile: /var/run/nginx.pid
config: /usr/local/nginx/conf/nginx.conf
nginxd=/usr/local/nginx/sbin/nginx
nginx_config=/usr/local/nginx/conf/nginx.conf
nginx_pid=/var/run/nginx.pid
RETVAL=0
prog="nginx"
# Source function library.
. /etc/rc.d/init.d/functions
# Source networking configuration.
. /etc/sysconfig/network
# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
[ -x $nginxd ] || exit 0
# Start nginx daemons functions.
start() {
if [ -e $nginx_pid ];then
echo "nginx already running...."
exit 1
fi
echo -n $"Starting $prog: "
daemon $nginxd -c ${nginx_config}
RETVAL=$?
echo
[ $RETVAL = 0 ] && touch /var/lock/subsys/nginx
return $RETVAL
}
# Stop nginx daemons functions.
stop() {
echo -n $"Stopping $prog: "
killproc $nginxd
RETVAL=$?
echo
[ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /var/run/nginx.pid
}
# reload nginx service functions.
reload() {
echo -n $"Reloading $prog: "
#kill -HUP cat ${nginx_pid}
killproc $nginxd -HUP
RETVAL=$?
echo
}
# See how we were called.
case "$1" in
start)
start
;;
stop)
stop
;;
reload)
reload
;;
restart)
stop
start
;;
status)
status $prog
RETVAL=$?
;;
*)
echo $"Usage: $prog {start|stop|restart|reload|status|help}"
exit 1
esac
exit $RETVAL
将该文件提高权限chmod -R 777 xxxx
将该文件加入到开机自启脚本中/etc/rc.local
/etc/init.d/nginx start
keppalived安装
keepalived的作用主要是监控nginx，当监控到其蹦掉的时候就自动转移虚拟ip的指向进行无缝切换nginx，然后试着启动该台服务器的nginx。
安装说明：
wget http://www.keepalived.org/software/keepalived-2.0.14.tar.gz
yum install keepalived –y
keepalived配置
/etc/keepalived/keepalivec.conf
global_defs {
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 192.168.17.129
smtp_connect_timeout 30
# 通过它，可以访问到主机，在hosts文件中，要做映射关系，类似于 127.0.0.1 LVS_DEVEL
router_id LVS_DEVEL
}
vrrp_script chk_http_port {
script "/usr/local/src/nginx_check.sh" # 执行脚本所在的位置
interval 2 #检测脚本执行的间隔，单位秒，每个2秒执行一次脚本
weight 2
}
vrrp_instance VI_1 {
state MASTER # 备份服务器上将 MASTER 改为 BACKUP
interface ens33 # 绑定的网卡注意使用查询ip命令来查看当前主机的网卡填写正确网卡名称
virtual_router_id 51 # 主、备机的 virtual_router_id 必须相同
priority 90 # 主、备机取不同的优先级，主机值较大，备份机值较小
advert_int 1 #每隔一秒发送一次心跳，确保从服务器是否还活着
authentication { # 心跳检测需要的密码
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.17.50 # VRRP H 虚拟地址
}
}
检测脚本
/usr/local/src
!/bin/bash
A=ps -C nginx –no-header |wc -l
if [ $A -eq 0 ];then
/usr/local/nginx/sbin/nginx #Nginx启动命令的位置
sleep 2
if [ ps -C nginx --no-header |wc -l -eq 0 ];then
killall keepalived
fi
fi
命令
检测ip
ip addr
ipconfig
启动keepalived
service keepalived start
关闭keepalived
service keepalived stop
查看状态
systemctl status keepalived.service
浙公网安备 33010602011771号