Nginx+Tomcat+Keepalived实现高可用web集群-linux安全运维_跨零代码

跨零代码为大家提供高品质的运维解决方案,请大家多多来访,跨零不胜感激,在此谢过。

Nginx+Tomcat+Keepalived实现高可用web集群:

环境:CenOS 6.5 Nginx-Master:10.10.10.128 Nginx-Backup:10.10.10.129 Tomcat1:10.10.10.130 Tomcat2:10.10.10.131 VIP:10.10.10.100

一、环境基础配置

1、更换国内yum源

2、关闭防火墙、SELinux

3、时间同步

二、Web端安装Web服务

1、查看是否安装JDK [root@Tomcat1 ~]# java -version java version "1.8.0_171" Java(TM) SE Runtime Environment (build 1.8.0_171-b11) Java HotSpot(TM) 64-Bit Server VM (build 25.171-b11, mixed mode) 2、安装JDK 官网下载二进制包 解压到/usr/local/java     tar zxvf jdk-8u171-linux-x64.tar.gz -C /usr/local/java/ 修改环境变量/etc/profile     JAVA_HOME=/usr/local/java     PATH=$JAVA_HOME/bin:$PATH     CLASSPATH=$JAVA_HOME/jre/lib/ext:$JAVA_HOME/lib/tools.jar     export PATH JAVA_HOME CLASSPATH 使环境变量生效:     source /etc/profile 3、下载Tomcat源码包:     wget -O /opt/apache-tomcat-9.0.7.tar.gz http://mirrors.hust.edu.cn/apache/tomcat/tomcat-9/v9.0.7/bin/apache-tomcat-9.0.7.tar.gz 4、解压到/usr/local/tomcat     tar zxvf /opt/apache-tomcat-9.0.7.tar.gz -C /usr/local/ 5、修改Tomcat的主页     rm -rf /usr/local/apache-tomcat-9.0.7/webapps/ROOT/*     echo "Tomcat1" >/usr/local/apache-tomcat-9.0.7/webapps/ROOT/index.html  #Tomcat1     echo "Tomcat2" >/usr/local/apache-tomcat-9.0.7/webapps/ROOT/index.html  #Tomcat2 6、测试Tomcat能否正常启动 [root@Tomcat1 bin]# ./usr/local/apache-tomcat-9.0.7/bin /startup.sh  Using CATALINA_BASE:   /usr/local/apache-tomcat-9.0.7 Using CATALINA_HOME:   /usr/local/apache-tomcat-9.0.7 Using CATALINA_TMPDIR: /usr/local/apache-tomcat-9.0.7/temp Using JRE_HOME:        /usr/local/java Using CLASSPATH:       /usr/local/apache-tomcat-9.0.7/bin/bootstrap.jar:/usr/local/apache-tomcat-9.0.7/bin/tomcat-juli.jar Tomcat started.  curl 10.10.10.130:8080   #返回Tomcat1 curl 10.10.10.131:8080   #返回Tomcat2  至此web端配置完成。

二、Nginx反向代理安装

1、安装依赖软件     yum install -y gcc gcc-c++     yum install -y pcre pcre-devel openssl openssl-devel zlib zlib-devel 2、官网下载源码包 3、解压源码包     tar zxvf nginx-1.14.0.tar.gz -C /tmp/ 4、编译安装     useradd -s /bin/false -M nginx     ./configure --user=nginx --group=nginx --prefix=/usr/local/nginx-1.14.0/ --with-http_v2_module --with-http_ssl_module --with-http_sub_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre     make && make install 5、配置反向代理/usr/local/nginx/conf/nginx.conf worker_processes  1; pid        /usr/local/nginx/logs/nginx.pid; worker_rlimit_nofile 51200; events {    use epoll;    worker_connections  51200; } http {    include       mime.types;    default_type  application/octet-stream;    server_names_hash_bucket_size 128;    client_header_buffer_size 32k;    large_client_header_buffers 4 32k;    client_max_body_size 8m;    sendfile        on;    tcp_nopush      on;    keepalive_timeout  65;    tcp_nodelay on;    gzip on;    gzip_min_length 1k;    gzip_buffers 4 16k;    gzip_http_version 1.0;    gzip_comp_level 2;    gzip_types    test/plain application/x-javascript test/css application/xml;    gzip_vary on;      upstream backend {         server 10.10.10.130:8080;         server 10.10.10.131:8080;     }    server {        listen       80;        server_name  10.10.10.128;   #Nginx2改为:10.10.10.129        location / {             root   /var/www/html;            index  index.php index.html index.htm;            proxy_pass http://backend;        }    } }       先测试再启动: [root@Nginx1 ~]# /usr/local/nginx-1.14.0/sbin/nginx -t nginx: the configuration file /usr/local/nginx-1.14.0//conf/nginx.conf syntax is ok nginx: configuration file /usr/local/nginx-1.14.0//conf/nginx.conf test is successful [root@Nginx1 ~]# /usr/local/nginx-1.14.0/sbin/nginx [root@Nginx1 ~]# lsof -i:80 COMMAND  PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME nginx   4896  root    6u  IPv4  18439      0t0  TCP *:http (LISTEN) nginx   4897 nginx    6u  IPv4  18439      0t0  TCP *:http (LISTEN)  curl 10.10.10.128  #轮询返回Tomcat1 Tomcat2 Nginx2同样的搭建。 至此Nginx反向代理搭建完成。

三、使用Keepalived实现高可用

1、安装:     yum install keepalived -y 2、修改配置文件/etc/keepalived/keepalived.conf MASTER 端: ! Configuration File for keepalived vrrp_script check_nginx {         script "/etc/keepalived/check_nginx.sh"         interval 2         weight 2 } global_defs {    notification_email {      acassen@firewall.loc      failover@firewall.loc      sysadmin@firewall.loc    }    notification_email_from Alexandre.Cassen@firewall.loc    smtp_server 192.168.200.1    smtp_connect_timeout 30    router_id LVS_DEVEL1 }  vrrp_instance VI_1 {     state MASTER     interface eth0     virtual_router_id 51     priority 100     advert_int 1     authentication {         auth_type PASS         auth_pass 1111     }     virtual_ipaddress {         10.10.10.100/24 dev eth0    }  track_script {         check_nginx    } } BACKUP端: 修改: router_id LVS_DEVEL2 state BACKUP priority 90  检测Nginx脚本: #!/bin/bash nginxpid=`ps -C nginx --no-header | wc -l` if [ $nginxpid -eq 0 ];then         /etc/init.d/keepalived stop fi chmod +x /etc/keepalived/check_nginx.sh  重启Keepalived服务 service keepalived restart

四、检验服务的高可用

Nginx1执行:killall nginx 发现 web访问依然正常  Tomcat1执行:/usr/local/apache-tomcat-9.0.7/bin/shutdown.sh 发现 web访问依然正常  高可用的环境搭建完毕。




//下面这个css和插件后台设置的主题有关系,如果需要换样式,则需要修改以下CSS名称

从零到一,创造未来!跨零代码综合IT问题解决服务站,欢迎你的到来。运维教程 只为你绽放。

本文固定链接: http://kua0.com/2019/02/02/nginxtomcatkeepalived实现高可用web集群-linux安全运维_跨零代码/

为您推荐

发表评论

电子邮件地址不会被公开。 必填项已用*标注