Nginx四层反向代理

Nginx 四层代理
yum install nginx -y
yum install nginx-mod-stream -y
vim /etc/nginx/nginx.conf

编辑内容如下：

user nginx;
worker_processes auto;

error_log /var/log/nginx/error.log;

pid /run/nginx.pid;

Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.

load_module /usr/lib64/nginx/modules/ngx_stream_module.so;

include /usr/share/nginx/modules/*.conf;
events {
worker_connections 1024;
}
stream {
upstream lb {
server 172.16.1.5:3306;

}

log_format  main '$remote_addr $remote_port - [$time_local] $status $protocol '
                 '"$upstream_addr" "$upstream_bytes_sent" "$upstream_connect_time"';

server {
        listen 3306;
        proxy_connect_timeout 60s;
        proxy_timeout 60s;
        proxy_pass lb;

       # access_log  logs/access.log  main;
}

}

IPVS反向代理：

安装IPVS内核模块

yum install ipvsadm
sudo modprobe ip_vs

setenforce 0
echo "1" > /proc/sys/net/ipv4/ip_forward

设置IPVS规则

sudo ipvsadm -A -t 192.168.0.1:80 -s rr
sudo ipvsadm -a -t 192.168.0.1:80 -r 192.168.0.2:80 -g
sudo ipvsadm -a -t 192.168.0.1:80 -r 192.168.0.3:80 -g

-m表示模式为NAT模式
-g标志表示使用DR模式，即直接路由模式，它允许负载均衡器将流量直接转发到后端服务器

保存IPVS规则

sudo ipvsadm-save > /etc/sysconfig/ipvsadm

应用IPVS规则

sudo systemctl restart ipvsadm

sudo apt-get install ipvsadm

添加LVS服务

ipvsadm -A -t 192.168.1.100:1521 -s rr

添加真实服务器

ipvsadm -a -t 192.168.1.100:1521 -r 192.168.1.101:1521
ipvsadm -a -t 192.168.1.100:1521 -r 192.168.1.102:1521

设置连接持久化

ipvsadm -p 1000