-
Nginx之动静分离
Nginx之动静分离
题目需求：1）利用Nginx做负载均衡器，配置动静分离，要通过访问负载均衡器的IP实现动静分离的效果。
2）后端RS服务器一台搭建LNMP架构，一台部署LAMP架构。
3）Nginx与PHP必须以源码编译的方式安装。LNMP架构中的版本控制要求分别为
nginx1.22、mysql8.0、php8.1。本次实验环境说明：
主机名 IP地址 应用服务 操作系统 LB 192.168.92.130 nginx Centos8 RS01 192.168.92.129 nginx、mysql、php Centos8 RS02 192.168.92.132 httpd、mariadb、php Centos8 实验架构图：
配置RS01主机
配置RS01主机，该主机部署LNMP架构
RS01-部署Nginx
#关闭防火墙与SELinux [root@RS01 ~]# systemctl disable --now firewalld.service [root@RS01 ~]# setenforce 0 [root@RS01 ~]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config [root@RS01 ~]# systemctl status firewalld.service ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled) Active: inactive (dead) Docs: man:firewalld(1) [root@RS01 ~]# getenforce Disabled #配置国内YUM源仓库 [root@RS01 ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo [root@RS01 ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo #创建nginx用户 [root@RS01 ~]# useradd -Mrs /sbin/nologin nginx #下载所需依赖包 [root@RS01 ~]# dnf -y install pcre-devel openssl openssl-devel gd-devel gcc gcc-c++ wget vim make #下载nginx源码包并解压 [root@RS01 ~]# cd /usr/local/src/ [root@RS01 src]# wget http://nginx.org/download/nginx-1.22.0.tar.gz [root@RS01 src]# tar -xf nginx-1.22.0.tar.gz #进行编译安装 [root@RS01 src]# cd nginx-1.22.0/ [root@RS01 nginx-1.22.0]# ./configure \ --prefix=/usr/local/nginx \ --user=nginx \ --group=nginx \ --with-debug \ --with-http_ssl_module \ --with-http_realip_module \ --with-http_image_filter_module \ --with-http_gunzip_module \ --with-http_gzip_static_module \ --with-http_stub_status_module [root@RS01 nginx-1.22.0]# make -j $(grep 'processor' /proc/cpuinfo | wc -l) && make install #配置环境变量 [root@RS01 ~]# echo 'export PATH=/usr/local/nginx/sbin:$PATH' > /etc/profile.d/nginx.sh [root@RS01 ~]# source /etc/profile.d/nginx.sh #写service文件，用systemd方式控制nginx服务 cat > /usr/lib/systemd/system/nginx.service <<EOF [Unit] Description=nginx server daemon After=network.target [Service] Type=forking ExecStart=/usr/local/nginx/sbin/nginx ExecStop=/usr/local/nginx/sbin/nginx -s stop ExecReload=/bin/kill -HUP \$MAINPID [Install] WantedBy=multi-user.target EOF #重载生效配置 [root@RS01 ~]# systemctl daemon-reload #启动nginx并设为开机自启 [root@RS01 ~]# systemctl enable --now nginx #查看nginx的默认80端口是否启动 [root@RS01 ~]# ss -anlt State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 128 0.0.0.0:80 0.0.0.0:* LISTEN 0 128 [::]:22 [::]:*- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
浏览器访问nginx首页，确保nginx部署无问题
RS01-部署MySQL
#创建mysql用户 [root@RS01 ~]# useradd -Mrs /sbin/nologin mysql #下载所需依赖包 [root@RS01 ~]# dnf -y install ncurses-devel openssl-devel openssl cmake mariadb-devel ncurses-compat-libs #下载mysql二进制包并解压至/usr/local/目录下 [root@RS01 ~]# cd /usr/local/src/ [root@RS01 src]# wget https://downloads.mysql.com/archives/get/p/23/file/mysql-8.0.30-linux-glibc2.12-x86_64.tar.xz [root@RS01 src]# tar -xf mysql-8.0.30-linux-glibc2.12-x86_64.tar.xz -C /usr/local/ #将解压的mysql目录更名为mysql，修改该目录的属主属组为mysql [root@RS01 local]# mv mysql-8.0.30-linux-glibc2.12-x86_64 mysql [root@RS01 local]# chown -R mysql.mysql mysql [root@RS01 local]# ll -d mysql drwxr-xr-x 9 mysql mysql 129 Oct 19 15:49 mysql #添加环境变量，映射头文件、库文件、man手册 [root@RS01 ~]# echo 'export PATH=$PATH:/usr/local/mysql/bin' > /etc/profile.d/mysql.sh [root@RS01 ~]# source /etc/profile.d/mysql.sh [root@RS01 ~]# ln -s /usr/local/mysql/include/ /usr/local/include/mysql [root@RS01 ~]# echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf [root@RS01 ~]# ldconfig [root@RS01 ~]# sed -i '22a MANDATORY_MANPATH /usr/local/mysql/man' /etc/man_db.conf #创建数据存放目录，并修改属主属组为mysql [root@RS01 ~]# mkdir /data [root@RS01 ~]# chown -R mysql.mysql /data [root@RS01 ~]# ll -d /data drwxr-xr-x 2 mysql mysql 6 Oct 19 16:03 /data #初始化数据库 [root@RS01 ~]# /usr/local/mysql/bin/mysqld --initialize --user=mysql --datadir=/data/ 2022-10-19T08:04:52.924520Z 0 [System] [MY-013169] [Server] /usr/local/mysql/bin/mysqld (mysqld 8.0.30) initializing of server in progress as process 38603 2022-10-19T08:04:52.933728Z 1 [System] [MY-013576] [InnoDB] InnoDB initialization has started. 2022-10-19T08:04:53.432867Z 1 [System] [MY-013577] [InnoDB] InnoDB initialization has ended. 2022-10-19T08:04:54.545086Z 6 [Note] [MY-010454] [Server] A temporary password is generated for root@localhost: y-hV/mlqw6Bg #添加配置文件 cat > /etc/my.cnf <<EOF [mysqld] basedir = /usr/local/mysql datadir = /data socket = /tmp/mysql.sock port = 3306 pid-file = /data/mysql.pid user = mysql skip-name-resolve EOF #写service文件，用systemd方式控制mysql服务 cat > /usr/lib/systemd/system/mysqld.service <<EOF [Unit] Description=mysql server daemon After=network.target sshd-keygen.target [Service] Type=forking ExecStart=/usr/local/mysql/support-files/mysql.server start ExecStop=/usr/local/mysql/support-files/mysql.server stop ExecReload=/bin/kill -HUP [Install] WantedBy=multi-user.target EOF #重载生效配置 [root@RS01 ~]# systemctl daemon-reload #启动mysql并设为开机自启 [root@RS01 ~]# systemctl enable --now mysqld.service #利用初始化的临时密码登录后重设密码 [root@RS01 ~]# mysql -uroot -p'y-hV/mlqw6Bg' mysql: [Warning] Using a password on the command line interface can be insecure. Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 8 Server version: 8.0.30 Copyright (c) 2000, 2022, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> ALTER user 'root'@'localhost' IDENTIFIED WITH caching_sha2_password BY '123456'; Query OK, 0 rows affected (0.00 sec) mysql> exit; Bye #利用新密码进行登录测试是否登录成功 [root@RS01 ~]# mysql -uroot -p123456 mysql: [Warning] Using a password on the command line interface can be insecure. Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 9 Server version: 8.0.30 MySQL Community Server - GPL Copyright (c) 2000, 2022, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> exit Bye [root@RS01 ~]#- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
RS01-部署PHP
#安装所需的依赖包 [root@RS01 ~]# dnf -y install epel-release [root@RS01 ~]# dnf -y install libxml2 libxml2-devel openssl openssl-devel bzip2 bzip2-devel libcurl libcurl-devel libicu-devel libjpeg libjpeg-devel libpng libpng-devel openldap-devel pcre-devel freetype freetype-devel gmp gmp-devel libmcrypt libmcrypt-devel readline readline-devel libxslt libxslt-devel mhash mhash-devel php-mysqlnd libsqlite3x-devel libzip-devel wget gcc gcc-c++ make [root@RS01 ~]# dnf -y install http://mirror.centos.org/centos/8-stream/PowerTools/x86_64/os/Packages/oniguruma-devel-6.8.2-2.el8.x86_64.rpm #下载php源码包并解压 [root@RS01 ~]# cd /usr/local/src/ [root@RS01 src]# wget https://www.php.net/distributions/php-8.1.11.tar.gz [root@RS01 src]# tar -xf php-8.1.11.tar.gz #进行编译安装 [root@RS01 src]# cd php-8.1.11/ [root@RS01 php-8.1.11]# ./configure --prefix=/usr/local/php8 \ --with-config-file-path=/etc \ --enable-fpm \ --disable-debug \ --disable-rpath \ --enable-shared \ --enable-soap \ --with-openssl \ --enable-bcmath \ --with-iconv \ --with-bz2 \ --enable-calendar \ --with-curl \ --enable-exif \ --enable-ftp \ --enable-gd \ --with-jpeg \ --with-zlib-dir \ --with-freetype \ --with-gettext \ --enable-mbstring \ --enable-pdo \ --with-mysqli=mysqlnd \ --with-pdo-mysql=mysqlnd \ --with-readline \ --enable-shmop \ --enable-simplexml \ --enable-sockets \ --with-zip \ --enable-mysqlnd-compression-support \ --with-pear --enable-pcntl \ --enable-posix [root@RS01 php-8.1.11]# make -j $(cat /proc/cpuinfo |grep processor|wc -l) && make install #配置环境变量 [root@RS01 ~]# echo 'export PATH=/usr/local/php8/bin:$PATH' > /etc/profile.d/php8.sh [root@RS01 ~]# source /etc/profile.d/php8.sh #查看php版本，测试php的环境变量配置成功与否 [root@RS01 ~]# php -v PHP 8.1.11 (cli) (built: Oct 19 2022 16:34:27) (NTS) Copyright (c) The PHP Group Zend Engine v4.1.11, Copyright (c) Zend Technologies #映射头文件 [root@RS01 ~]# ln -s /usr/local/php8/include /usr/include/php [root@RS01 ~]# ll /usr/include/php lrwxrwxrwx 1 root root 23 Oct 19 16:42 /usr/include/php -> /usr/local/php8/include #映射库文件 [root@RS01 ~]# echo '/usr/local/php8/lib' > /etc/ld.so.conf.d/php.conf [root@RS01 ~]# ldconfig #配置php-fpm [root@RS01 ~]# cd /usr/local/src/php-8.1.11/ [root@RS01 php-8.1.11]# cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm [root@RS01 php-8.1.11]# chmod +x /etc/rc.d/init.d/php-fpm [root@RS01 php-8.1.11]# cp /usr/local/php8/etc/php-fpm.conf.default /usr/local/php8/etc/php-fpm.conf [root@RS01 php-8.1.11]# cp /usr/local/php8/etc/php-fpm.d/www.conf.default /usr/local/php8/etc/php-fpm.d/www.conf #写service文件，用systemd方式控制php服务 [root@RS01 ~]# cat > /usr/lib/systemd/system/php.service <- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
RS01-nginx连接php配置
[root@RS01 ~]# cd /usr/local/nginx/conf/ #修改配置文件前记得备份原文，防止误操作 [root@RS01 conf]# cp nginx.conf nginx.conf.bak [root@RS01 conf]# vim nginx.conf ........... location / { root html; index index.html index.htm index.php; #新增index.php } ........... location ~ \.php$ { #将php块取消注释 root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; #将/scripts改成$document_root include fastcgi_params; } ............... #重启服务，生效配置 [root@RS01 conf]# systemctl restart nginx.service [root@RS01 conf]# vim /usr/local/php8/etc/php-fpm.d/www.conf ......... user = nginx group = nginx .......... listen = 127.0.0.1:9000 .......... #重启服务，生效配置 [root@RS01 conf]# systemctl restart php.service #写个php测试页面 [root@RS01 conf]# cd /usr/local/nginx/html/ [root@RS01 html]# mv index.html{,.bak} [root@RS01 html]# cat > index.php <- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
浏览器访问动态页面
浏览器访问静态页面
配置RS02主机
该主机部署LAMP架构
#关闭防火墙与SELinux [root@RS02 ~]# systemctl disable --now firewalld.service [root@RS02 ~]# setenforce 0 [root@RS02 ~]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config [root@RS02 ~]# systemctl status firewalld.service ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled) Active: inactive (dead) Docs: man:firewalld(1) [root@RS02 ~]# getenforce Disabled #配置国内YUM源仓库 [root@RS02 ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo [root@RS02 ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo #yum安装httpd、mysql、php [root@RS02 ~]# dnf -y install httpd [root@RS02 ~]# dnf -y install mariadb* [root@RS02 ~]# dnf -y install php* #启动各服务并设为开机自启 [root@RS02 ~]# systemctl enable --now httpd [root@RS02 ~]# systemctl enable --now mariadb [root@RS02 ~]# systemctl enable --now php-fpm.service #看到这里你可能会疑惑，php的9000端口呢？ [root@RS02 ~]# ss -anlt State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 80 0.0.0.0:3306 0.0.0.0:* LISTEN 0 128 [::]:22 [::]:* LISTEN 0 128 *:80 *:* #可以看到php已经启动了 [root@RS02 ~]# systemctl status php-fpm.service ● php-fpm.service - The PHP FastCGI Process Manager Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; vendor preset: disabled) Active: active (running) since Wed 2022-10-19 18:43:52 CST; 12min ago #进入配置文件一探究竟，可以看到php是以监听套接字文件启动 [root@RS02 ~]# vim /etc/php-fpm.d/www.conf ......... listen = /run/php-fpm/www.sock ......... #配置httpd [root@RS02 ~]# vim /etc/httpd/conf/httpd.conf .......... <IfModule dir_module> DirectoryIndex index.html index.php #新增index.php </IfModule> ........... #重启服务，生效配置 [root@RS02 ~]# systemctl restart httpd #写个php测试页面 [root@RS02 ~]# cd /var/www/html/ [root@RS02 html]# cat > index.php <- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
去到浏览器访问动态页面
去到浏览器访问静态页面
配置LB主机
安装nginx做负载均衡，动静分离
#关闭防火墙与SELinux [root@RS02 ~]# systemctl disable --now firewalld.service [root@RS02 ~]# setenforce 0 [root@RS02 ~]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config [root@RS02 ~]# systemctl status firewalld.service ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled) Active: inactive (dead) Docs: man:firewalld(1) [root@RS02 ~]# getenforce Disabled #配置国内YUM源仓库 [root@RS02 ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo [root@RS02 ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo #yum安装nginx [root@LB ~]# dnf -y install nginx #启动nginx并设为开机自启 [root@LB ~]# systemctl enable --now nginx.service #配置负载均衡与动静分离 [root@LB ~]# vim /etc/nginx/nginx.conf ............... upstream active { #定义动态网站池 server 192.168.92.129; server 192.168.92.132; } upstream static { #定义静态网站池 server 192.168.92.129:82; server 192.168.92.132:82; } server { listen 80; include /etc/nginx/default.d/*.conf; location ~ \.php$ { #反代动态网站 proxy_pass http://active; } location ~ .*\.(html|jpg|ico|txt|png|css|svg|js)$ { #反代静态网站 proxy_pass http://static; } ................. [root@LB ~]# systemctl restart nginx.service- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
测试负载均衡与动静分离
先测试静态网站的负载均衡
测试动态网站负载均衡，可以看到加个index.php的URI就访问到了动态网站，实现了动态分离，为区分开两个动态网站，我在其中一个安装了游戏网站
-
相关阅读:
随笔记录：SE模块插入位置总结
我们能做出来数据库吗？
java.sql.SQLExceptio
【BOOST C++】win10下，用VS2019开发BOOST C++代码
Java基础 | 如何用Javadoc Tool写规范正确的java注释
一句话总结Docker与K8S的关系
[python][deepface][原创]使用deepface进行表情识别
Java基础27，28（多线程,ThreadMethod ,线程安全问题,线程状态,线程池）
5. Spring Boot配置绑定
Managing Test Files with create_files and delete_files Bash Scripts
- 原文地址：https://blog.csdn.net/m0_50111062/article/details/127437137
