Nginx 高可用+负载均衡部署文档V1.0.2

Nginx高可用+负载均衡部署指南软件版本说明软件版本Nginxnginx/1.6.0KeepalivedKeepalivedv1.2.15基础软件安装Nginx安装版本jdk-7u67-linux-x64.rpm，安装步骤略安装后检验Nginx版本是否正确。[root@localhost~]#/usr/local/nginx/sbin/nginx–vnginxversion:nginx/1.6.0Keepalived安装openssl安装openssl必须安装，否则安装keepalived时无法编译，keepalived依赖opensslopenssl安装tarzxvfopenssl-1.0.1g.tar.gz./config--prefix=/usr/local/openssl./config-tmakedependmakemaketestmakeinstallln-s/usr/local/openssl/usr/local/sslopenssl配置vi/etc/ld.so.conf#在/etc/ld.so.conf文件的最后面，添加如下内容：/usr/local/openssl/lib

vi/etc/profileexportOPENSSL=/usr/local/openssl/binexportPATH=$PATH:$OPENSSL

source/etc/profileyuminstallopenssl-devel-y

#如无法yum下载安装，请修改yum配置文件

测试:ldd/usr/local/openssl/bin/openssl

linux-vdso.so.1=>

(0x00007fff996b9000)

libdl.so.2=>/lib64/libdl.so.2(0x00000030efc00000)

libc.so.6=>/lib64/libc.so.6(0x00000030f0000000)

/lib64/ld-linux-x86-64.so.2(0x00000030ef800000)whichopenssl

/usr/bin/opensslopensslversion

OpenSSL1.0.0-fips29Mar2010keepalived安装本文在4、3两台机器进行keepalived安装安装tarzxvfkeepalived-1.2.13.tar.gzcdkeepalived-1.2.13./configure--prefix=/usr/local/keepalivedmakemakeinstallcp/usr/local/keepalived/sbin/keepalived/usr/sbin/cp/usr/local/keepalived/etc/sysconfig/keepalived/etc/sysconfig/cp/usr/local/keepalived/etc/rc.d/init.d/keepalived/etc/init.d/mkdir/etc/keepalivedcp/usr/local/keepalived/etc/keepalived/keepalived.conf/etc/keepalivedkeepalived配置建检查Nginx是否存活的脚本#新建Nginx检查vim/usr/local/nginx/check.sh内容如下：#!/bin/bash#ThisscriptisusedbykeepalivedforcheckingnginxrunningstatusCHECK_TIME=2check(){curl-m2/status>/dev/null2>&1return$?}while[$CHECK_TIME-ne0]dolet"CHECK_TIME-=1"checkNGINX_OK=$?if[$NGINX_OK-eq0];thenexit0fiif[$NGINX_OK-ne1]&&[$CHECK_TIME-eq0]thenexit1fidonekeepalived.conf:vim/usr/local/keepalived/etc/keepalived/keepalived.confMaster:Master!ConfigurationFileforkeepalivedvrrp_scriptcheck_run{

script“/usr/local/nginx/check.sh"

interval2

weight2}vrrp_instanceVI_1{

stateMASTER

#3上改为Master

interfaceeth0

#对外提供服务的网络接口

virtual_router_id51

#VRRP组名，两个节点的设置必须一样，以指明各个节点属于同一VRRP组

priority150

#数值愈大，优先级越高

advert_int1

#同步通知间隔

authentication{

#包含验证类型和验证密码。类型主要有PASS、AH两种，通常使用的类型为PASS，据说AH使用时有问题

auth_typePASS

auth_pass1111

}

track_script{

check_run

#调用脚本check.sh检查haproxy是否存活

}

virtual_ipaddress{

#vip地址

03deveth0scopegloba

}}slave：slave!ConfigurationFileforkeepalivedvrrp_scriptchech_run{

script“/usr/local/nginx/check.sh"

interval2

weight2}vrrp_instanceVI_1{

stateBACKUP

#

interfaceeth0

#对外提供服务的网络接口

virtual_router_id51

#VRRP组名，两个节点的设置必须一样，以指明各个节点属于同一VRRP组

priority120

#数值愈大，优先级越高,

advert_int1

#同步通知间隔

authentication{

#包含验证类型和验证密码。类型主要有PASS、AH两种，通常使用的类型为PASS，据说AH使用时有问题

auth_typePASS

auth_pass1111

}

track_script{

check_run

#调用脚本check.sh检查haproxy是否存活

}

virtual_ipaddress{

#vip地址

03deveth1scopegloba

}

}Nginx配置文件新建upstreams.confupstreamuc_cluster{ip_hash;serverapp01:7060;#主机名+端口serverapp01:7061;}upstreampos_cluster{ip_hash;serverapp01:7060;#主机名+端口serverapp01:7061;}upstreammps_cluster{ip_hash;serverapp01:7060;serverapp01:7061;serverapp02:7060;}upstreamgms_cluster{ip_hash;serverapp01:7060;serverapp01:7061;serverapp02:7060;}...新建server.confserver{listen80;server_name; default_type'text/html'; charsetutf-8;#charsetkoi8-r;#access_loglogs/host.access.logmain; location~.*.*${ #index/portal; proxy_passhttp://uc_cluster; rewrite"^/+$"/portalbreak; } location^~/pos/{ proxy_passhttp://pos_cluster; } location^~/mps/{ proxy_passhttp://mps_cluster; } location^~/gms/{ proxy_passhttp://gms_cluster; } location^~/fas/{ proxy_passhttp://fas_cluster; } location^~/mdm/{ proxy_passhttp://mdm_cluster; } location^~/pms/{ proxy_passhttp://pms_cluster; proxy_connect_timeout600s; proxy_send_timeout300s; } location^~/crm/{ proxy_passhttp://crm_cluster; }#error_page404/404.html;#redirectservererrorpagestothestaticpage/50x.html#error_page500502503504/50x.html;location=/50x.html{roothtml;}}新建proxy.conf文件#!nginx(-)#proxy.confproxy_redirectoff;proxy_set_headerHost$host;proxy_set_headerX-Real-IP$remote_addr;#»ñæip#proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for;#»ñúµÄæipclient_max_body_size10m;client_body_buffer_size128k;proxy_connect_timeout90;proxy_send_timeout90;proxy_read_timeout90;proxy_buffer_size4k;proxy_buffers432k;proxy_busy_buffers_size64k;proxy_temp_file_write_size64k;修改Nginx文件#usernobody;worker_processes4;error_loglogs/error.log;error_loglogs/error.lognotice;error_loglogs/error.loginfo;pidlogs/nginx.pid;events{useepoll;worker_connections1024;}http{includeupstreams.conf;includemime.types;default_typeapplication/octet-stream;includeproxy.conf;log_formatmain'$remote_addr-$remote_user[$