• web 服务搭建

    实验拓扑图：

    实验环境搭建


    Centos7-5作为Client（12.0.0.12/24）；Centos7-1作为网关服务器（配置两块网卡ens33 192.168.246.7/24，ens36 12.0.0.1/24）；Centos7-2作为Web1（192.168.246.8/24 提供web1服务）；Centos7-3作为Web2（192.168.246.9/24 提供web2服务）；Centos7-4作为Nginx服务器（192.168.246.10/24）

    五台机器都关闭防火墙、防护

    7-1网关服务器配置

    1. [root@localhost ~]#ifconfig
    2. [root@localhost ~]#cd /etc/sysconfig/network-scripts/
    3. [root@localhost network-scripts]#ls
    4. ifcfg-ens33  ifdown-ipv6    ifdown-TeamPort  ifup-ippp   ifup-routes       network-functions
    5. ifcfg-lo     ifdown-isdn    ifdown-tunnel    ifup-ipv6   ifup-sit          network-functions-ipv6
    6. ifdown       ifdown-post    ifup             ifup-isdn   ifup-Team
    7. ifdown-bnep  ifdown-ppp     ifup-aliases     ifup-plip   ifup-TeamPort
    8. ifdown-eth   ifdown-routes  ifup-bnep        ifup-plusb  ifup-tunnel
    9. ifdown-ib    ifdown-sit     ifup-eth         ifup-post   ifup-wireless
    10. ifdown-ippp  ifdown-Team    ifup-ib          ifup-ppp    init.ipv6-global
    11. [root@localhost network-scripts]#cp ifcfg-ens33 ifcfg-ens36
    12. [root@localhost network-scripts]#vim ifcfg-ens36

    7-5客户机配置：最后一题的才需要这个地址

    一、在Nginx服务器上搭建LNMP服务，并且能够对外提供Discuz论坛服务，在Web1、Web2服务器上搭建Tomcat 服务

    （一）Nginx服务器上搭建LNMP服务

    ①编译安装nginx

    1. [root@zzzcentos4 ~]#yum -y install pcre-devel zlib-devel gcc gcc-c++ make
    2. [root@zzzcentos4 ~]#cd /opt
    3. [root@zzzcentos4 opt]#ls
    4. rh
    5. [root@zzzcentos4 opt]#rz -E
    6. rz waiting to receive.
    7. [root@zzzcentos4 opt]#rz -E
    8. rz waiting to receive.
    9. [root@zzzcentos4 opt]#rz -E
    10. rz waiting to receive.
    11. [root@zzzcentos4 opt]#rz -E
    12. rz waiting to receive.
    13. [root@zzzcentos4 opt]#ls
    14. Discuz_X3.4_SC_UTF8.zip    nginx-1.22.0.tar.gz  rh
    15. mysql-boost-5.7.20.tar.gz  php-7.1.10.tar.bz2
    16. [root@zzzcentos4 opt]#tar xf nginx-1.22.0.tar.gz 
    17. [root@zzzcentos4 opt]#cd nginx-1.22.0/
    18. [root@zzzcentos4 nginx-1.22.0]#useradd -M -s /sbin/nologin nginx
    19. [root@zzzcentos4 nginx-1.22.0]#./configure \
    20. > --prefix=/usr/local/nginx \
    21. > --user=nginx \
    22. > --group=nginx \
    23. > --with-http_stub_status_module
    24. [root@zzzcentos4 nginx-1.22.0]#make -j 2
    25. [root@zzzcentos4 nginx-1.22.0]#make install
    1. [root@zzzcentos4 nginx-1.22.0]#echo $PATH
    2. /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin
    3. [root@zzzcentos4 nginx-1.22.0]#
    4. [root@zzzcentos4 nginx-1.22.0]#ln -s /usr/local/nginx/sbin/nginx  /usr/bin
    5.  #为了使用nginx命令可以补全  (做到$PATH下面就行)
    6. [root@zzzcentos4 nginx-1.22.0]#tee /lib/systemd/system/nginx.service   <<eof
    7. > [Unit]
    8. > Description=nginx
    9. > After=network.target
    10. > [Service]
    11. > Type=forking
    12. > PIDFile=/usr/local/nginx/logs/nginx.pid
    13. > ExecStart=/usr/local/nginx/sbin/nginx
    14. > ExecReload=/bin/kill -1 $MAINPID
    15. > ExecStop=/bin/kill -3 $MAINPID
    16. > PrivateTmp=true
    17. > [Install]
    18. > WantedBy=multi-user.target
    19. > eof
    20. [Unit]
    21. Description=nginx
    22. After=network.target
    23. [Service]
    24. Type=forking
    25. PIDFile=/usr/local/nginx/logs/nginx.pid
    26. ExecStart=/usr/local/nginx/sbin/nginx
    27. ExecReload=/bin/kill -1 
    28. ExecStop=/bin/kill -3 
    29. PrivateTmp=true
    30. [Install]
    31. WantedBy=multi-user.target
    32. [root@zzzcentos4 nginx-1.22.0]#systemctl daemon-reload 
    33. [root@zzzcentos4 nginx-1.22.0]#systemctl enable --now nginx.service 
    34. Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service.
    35. [root@zzzcentos4 nginx-1.22.0]#systemctl start nginx
    36. [root@zzzcentos4 nginx-1.22.0]#systemctl status nginx

    ②编译安装mysql

    1. [root@zzzcentos4 nginx-1.22.0]#cd /opt
    2. [root@zzzcentos4 opt]#ls
    3. Discuz_X3.4_SC_UTF8.zip    nginx-1.22.0         php-7.1.10.tar.bz2
    4. mysql-boost-5.7.20.tar.gz  nginx-1.22.0.tar.gz  rh
    5. [root@zzzcentos4 opt]#yum -y install \
    6. > ncurses \
    7. > ncurses-devel \
    8. > bison \
    9. > cmake
    10. [root@zzzcentos4 opt]#yum -y install gcc gcc-c++ cmake bison bison-devel zlib-devel libcurl-devel libarchive-devel boost-devel   ncurses-devel gnutls-devel libxml2-devel openssl-devel libevent-devel libaio-devel
    11. [root@zzzcentos4 opt]#useradd -M -s /sbin/nologin  mysql
    12. [root@zzzcentos4 opt]#ls
    13. Discuz_X3.4_SC_UTF8.zip    nginx-1.22.0         php-7.1.10.tar.bz2
    14. mysql-boost-5.7.20.tar.gz  nginx-1.22.0.tar.gz  rh
    15. [root@zzzcentos4 opt]#tar xf mysql-boost-5.7.20.tar.gz 
    16. [root@zzzcentos4 opt]#ls
    17. Discuz_X3.4_SC_UTF8.zip  mysql-boost-5.7.20.tar.gz  nginx-1.22.0.tar.gz  rh
    18. mysql-5.7.20             nginx-1.22.0               php-7.1.10.tar.bz2
    19. [root@zzzcentos4 opt]#cd mysql-5.7.20/
    20. [root@zzzcentos4 mysql-5.7.20]#
    21. [root@zzzcentos4 mysql-5.7.20]#cmake \
    22. > -DCMAKE_INSTALL_PREFIX=/usr/local/mysql \
    23. > -DMYSQL_UNIX_ADDR=/usr/local/mysql/mysql.sock \
    24. > -DSYSCONFDIR=/etc \
    25. > -DSYSTEMD_PID_DIR=/usr/local/mysql \
    26. > -DDEFAULT_CHARSET=utf8  \
    27. > -DDEFAULT_COLLATION=utf8_general_ci \
    28. > -DWITH_EXTRA_CHARSETS=all \
    29. > -DWITH_INNOBASE_STORAGE_ENGINE=1 \
    30. > -DWITH_ARCHIVE_STORAGE_ENGINE=1 \
    31. > -DWITH_BLACKHOLE_STORAGE_ENGINE=1 \
    32. > -DWITH_PERFSCHEMA_STORAGE_ENGINE=1 \
    33. > -DMYSQL_DATADIR=/usr/local/mysql/data \
    34. > -DWITH_BOOST=boost \
    35. > -DWITH_SYSTEMD=1

    1. [root@zzzcentos4 mysql-5.7.20]#vim /etc/my.cnf
    2. [client]
    3. port = 3306
    4. socket=/usr/local/mysql/mysql.sock
    5.  
    6. [mysqld]
    7. user = mysql
    8. basedir=/usr/local/mysql
    9. datadir=/usr/local/mysql/data
    10. port = 3306
    11. character-set-server=utf8
    12. pid-file = /usr/local/mysql/mysqld.pid
    13. socket=/usr/local/mysql/mysql.sock
    14. bind-address = 0.0.0.0
    15. skip-name-resolve
    16. max_connections=2048
    17. default-storage-engine=INNODB
    18. max_allowed_packet=16M
    19. server-id = 1
    20.  
    21. sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES,NO_AUTO_CREATE_USER,NO_AUTO_VALUE_ON_ZERO,
    22. NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,PIPES_AS_CONCAT,ANSI_QUOTES
    23. [root@zzzcentos4 mysql-5.7.20]#chown -R mysql:mysql /usr/local/mysql/
    24. [root@zzzcentos4 mysql-5.7.20]#chown mysql:mysql /etc/my.cnf
    25. [root@zzzcentos4 mysql-5.7.20]#
    26. [root@zzzcentos4 mysql-5.7.20]#echo 'export PATH=/usr/local/mysql/bin:/usr/local/mysql/lib:$PATH' >> /etc/profile
    27. [root@zzzcentos4 mysql-5.7.20]#source /etc/profile
    28. [root@zzzcentos4 mysql-5.7.20]#cd /usr/local/mysql/bin/
    29. [root@zzzcentos4 bin]#./mysqld \
    30. > --initialize-insecure \
    31. > --user=mysql \
    32. > --basedir=/usr/local/mysql \
    33. > --datadir=/usr/local/mysql/data
    34. [root@zzzcentos4 bin]#cp /usr/local/mysql/usr/lib/systemd/system/mysqld.service /usr/lib/systemd/system/
    35. [root@zzzcentos4 bin]#systemctl daemon-reload 
    36. [root@zzzcentos4 bin]#systemctl start mysqld.service
    37. [root@zzzcentos4 bin]#systemctl status mysqld.service

    ③ 编译安装php软件

    1. [root@zzzcentos4 bin]#cd /opt
    2. [root@zzzcentos4 opt]#ls
    3. Discuz_X3.4_SC_UTF8.zip  mysql-boost-5.7.20.tar.gz  nginx-1.22.0.tar.gz  rh
    4. mysql-5.7.20             nginx-1.22.0               php-7.1.10.tar.bz2
    5. [root@zzzcentos4 opt]#tar xf php-7.1.10.tar.bz2 
    6. [root@zzzcentos4 opt]#cd php-7.1.10/
    7. [root@zzzcentos4 php-7.1.10]#yum -y install gd \
    8. > libjpeg libjpeg-devel \
    9. > libpng libpng-devel \
    10. > freetype freetype-devel \
    11. > libxml2 libxml2-devel \
    12. > zlib zlib-devel \
    13. > curl curl-devel \
    14. > openssl openssl-devel
    15. [root@zzzcentos4 php-7.1.10]#./configure \
    16. > --prefix=/usr/local/php \
    17. > --with-mysql-sock=/usr/local/mysql/mysql.sock \
    18. > --with-mysqli \
    19. > --with-zlib \
    20. > --with-curl \
    21. > --with-gd \
    22. > --with-jpeg-dir \
    23. > --with-png-dir \
    24. > --with-freetype-dir \
    25. > --with-openssl \
    26. > --enable-fpm \
    27. > --enable-mbstring \
    28. > --enable-xml \
    29. > --enable-session \
    30. > --enable-ftp \
    31. > --enable-pdo \
    32. > --enable-tokenizer \
    33. > --enable-zip
    34. [root@zzzcentos4 php-7.1.10]#make -j 2
    35. [root@zzzcentos4 php-7.1.10]#make install

    1. [root@zzzcentos4 etc]#ls
    2. pear.conf  php-fpm.conf  php-fpm.conf.default  php-fpm.d
    3. [root@zzzcentos4 etc]#cd php-fpm.d/
    4. [root@zzzcentos4 php-fpm.d]#ls
    5. www.conf.default
    6. [root@zzzcentos4 php-fpm.d]#cp www.conf.default www.conf
    7. [root@zzzcentos4 php-fpm.d]#ls
    8. www.conf  www.conf.default
    9. [root@zzzcentos4 php-fpm.d]#ln -s /usr/local/php/bin/* /usr/local/bin/
    10. [root@zzzcentos4 php-fpm.d]#ln -s /usr/local/php/sbin/* /usr/local/sbin/
    11. [root@zzzcentos4 php-fpm.d]#
    12. [root@zzzcentos4 php-fpm.d]#cd /opt/php-7.1.10/sapi/fpm
    13. [root@zzzcentos4 fpm]#cp php-fpm.service /usr/lib/systemd/system/php-fpm.service
    14. [root@zzzcentos4 fpm]#systemctl daemon-reload 
    15. [root@zzzcentos4 fpm]#systemctl start php-fpm.service 
    16. [root@zzzcentos4 fpm]#systemctl status php-fpm.service

    ④配置 Nginx支持PHP解析

    [root@zzzcentos4 fpm]#vim /usr/local/nginx/conf/nginx.conf

    1. [root@zzzcentos4 fpm]#nginx -s reload
    2. [root@zzzcentos4 fpm]#systemctl restart nginx.service 
    3. [root@zzzcentos4 fpm]#cd /usr/local/nginx/html/
    4. [root@zzzcentos4 html]#vim /usr/local/nginx/html/index.php
    5. [root@zzzcentos4 html]#cat /usr/local/nginx/html/index.php
    6. <?php
    7. phpinfo();
    8. ?>
    9. [root@zzzcentos4 html]#
    验证数据库工作是否正常
    1. [root@zzzcentos4 html]#mysql -uroot -pabc123
    2. mysql: [Warning] Using a password on the command line interface can be insecure.
    3. Welcome to the MySQL monitor.  Commands end with ; or \g.
    4. Your MySQL connection id is 5
    5. Server version: 5.7.20 Source distribution
    6.  
    7. Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved.
    8.  
    9. Oracle is a registered trademark of Oracle Corporation and/or its
    10. affiliates. Other names may be trademarks of their respective
    11. owners.
    12.  
    13. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
    14.  
    15. mysql> CREATE DATABASE bbs;
    16. Query OK, 1 row affected (0.02 sec)
    17.  
    18. mysql> GRANT all ON bbs.* TO 'bbsuser'@'%' IDENTIFIED BY 'admin123';
    19. Query OK, 0 rows affected, 1 warning (0.03 sec)
    20.  
    21. mysql> GRANT all ON bbs.* TO 'bbsuser'@'localhost' IDENTIFIED BY 'admin123';
    22. Query OK, 0 rows affected, 2 warnings (0.00 sec)
    23.  
    24. mysql> flush privileges;
    25. Query OK, 0 rows affected (0.01 sec)
    26.  
    27. mysql> quit
    28. Bye
    29. [root@zzzcentos4 html]#vim /usr/local/nginx/html/index.php 
    30. <?php
    31. $link=mysqli_connect('192.168.246.10','bbsuser','admin123');
    32. if($link) echo "
      Success!!
      "      ;
    33. else echo "Fail!!";
    34. ?>

    ⑤安装论坛

    1. [root@zzzcentos4 opt]#ls
    2. dir_SC_UTF8              mysql-5.7.20               nginx-1.22.0         php-7.1.10          rh
    3. Discuz_X3.4_SC_UTF8.zip  mysql-boost-5.7.20.tar.gz  nginx-1.22.0.tar.gz  php-7.1.10.tar.bz2  说明.htm
    4. [root@zzzcentos4 opt]#cd dir_SC_UTF8/
    5. [root@zzzcentos4 dir_SC_UTF8]#ls
    6. readme  upload  utility
    7. [root@zzzcentos4 dir_SC_UTF8]#cp -r upload/ /usr/local/nginx/html/bbs/
    8. [root@zzzcentos4 dir_SC_UTF8]#cd /usr/local/nginx/html/bbs/
    9. [root@zzzcentos4 bbs]#ls
    10. admin.php  archiver     crossdomain.xml  forum.php  index.php  member.php  portal.php  source    uc_client
    11. api        config       data             group.php  install    misc.php    robots.txt  static    uc_server
    12. api.php    connect.php  favicon.ico      home.php   m          plugin.php  search.php  template
    13. [root@zzzcentos4 bbs]#chown -R nginx.nginx ./config/
    14. [root@zzzcentos4 bbs]#chown -R nginx.nginx  ./data/
    15. [root@zzzcentos4 bbs]#chown -R nginx.nginx ./uc_client/
    16. [root@zzzcentos4 bbs]#chown -R nginx.nginx ./uc_server/
    17. [root@zzzcentos4 bbs]#chmod -R 777 ./config/
    18. [root@zzzcentos4 bbs]#chmod -R 777 ./data/
    19. [root@zzzcentos4 bbs]#chmod -R 777 ./uc_client/
    20. [root@zzzcentos4 bbs]#chmod -R 777 ./uc_server/
    21. [root@zzzcentos4 bbs]#

    （二）Web1、Web2服务器上搭建Tomcat 服务

    ①安装Oracle JDK（即部署java环境）

    1. [root@zzzcentos2 ~]#cd /opt/
    2. [root@zzzcentos2 opt]#ls
    3. rh
    4. [root@zzzcentos2 opt]#rz -E
    5. rz waiting to receive.
    6. [root@zzzcentos2 opt]#rz -E
    7. rz waiting to receive.
    8. [root@zzzcentos2 opt]#ls
    9. apache-tomcat-9.0.16.tar.gz  jdk-8u291-linux-x64.tar.gz  rh
    10. [root@zzzcentos2 opt]#ls
    11. apache-tomcat-9.0.16.tar.gz  jdk-8u291-linux-x64.tar.gz  rh
    12. [root@zzzcentos2 opt]#systemctl stop firewalld
    13. [root@zzzcentos2 opt]#setenforce 0
    14. setenforce: SELinux is disabled
    15. [root@zzzcentos2 opt]#java -version
    16. openjdk version "1.8.0_131"
    17. OpenJDK Runtime Environment (build 1.8.0_131-b12)
    18. OpenJDK 64-Bit Server VM (build 25.131-b12, mixed mode)
    19. [root@zzzcentos2 opt]#tar xf jdk-8u291-linux-x64.tar.gz -C /usr/local/
    20. [root@zzzcentos2 opt]#cd /usr/local/
    21. [root@zzzcentos2 local]#ls
    22. bin  etc  games  include  jdk1.8.0_291  lib  lib64  libexec  sbin  share  src
    23. [root@zzzcentos2 local]#ln -s jdk1.8.0_291/ jdk
    24. [root@zzzcentos2 local]#vim /etc/profile.d/jdk.sh
    25. [root@zzzcentos2 local]#cat /etc/profile.d/jdk.sh
    26. export JAVA_HOME=/usr/local/jdk
    27. export PATH=$JAVA_HOME/bin:$PATH
    28. export JRE_HOME=$JAVA_HOME/jre
    29. export CLASSPATH=$JAVA_HOME/lib/:$JRE_HOME/lib/
    30.  
    31. [root@zzzcentos2 local]#source /etc/pro
    32. profile    profile.d/ protocols  
    33. [root@zzzcentos2 local]#source /etc/profile.d/jdk.sh 
    34. [root@zzzcentos2 local]#java -version
    35. java version "1.8.0_291"
    36. Java(TM) SE Runtime Environment (build 1.8.0_291-b10)
    37. Java HotSpot(TM) 64-Bit Server VM (build 25.291-b10, mixed mode)
    38. [root@zzzcentos2 local]#

    ②安装tomcat

    1. [root@zzzcentos2 local]#cd /opt/
    2. [root@zzzcentos2 opt]#ls
    3. apache-tomcat-9.0.16.tar.gz  jdk-8u291-linux-x64.tar.gz  rh
    4. [root@zzzcentos2 opt]#tar xf apache-tomcat-9.0.16.tar.gz 
    5. [root@zzzcentos2 opt]#ls
    6. apache-tomcat-9.0.16  apache-tomcat-9.0.16.tar.gz  jdk-8u291-linux-x64.tar.gz  rh
    7. [root@zzzcentos2 opt]#cp -r apache-tomcat-9.0.16 /usr/local/
    8. [root@zzzcentos2 opt]#cd /usr/local/
    9. [root@zzzcentos2 local]#ls
    10. apache-tomcat-9.0.16  bin  etc  games  include  jdk  jdk1.8.0_291  lib  lib64  libexec  sbin  share  src
    11. [root@zzzcentos2 local]#ln -s apache-tomcat-9.0.16/ tomcat
    12. [root@zzzcentos2 local]#useradd -s /sbin/nologin -M tomcat
    13. [root@zzzcentos2 local]#chown -R tomcat:tomcat tomcat/
    14. [root@zzzcentos2 local]#vim /usr/lib/systemd/system/tomcat.service
    15. [root@zzzcentos2 local]#cat /usr/lib/systemd/system/tomcat.service
    16. [Unit]
    17. Description=Tomcat
    18. After=syslog.target network.target
    19.  
    20. [Service]
    21. Type=forking
    22. ExecStart=/usr/local/tomcat/bin/startup.sh
    23. ExecStop=/usr/local/tomcat/bin/shutdown.sh
    24. RestartSec=3
    25. PrivateTmp=true
    26. User=tomcat
    27. Group=tomcat
    28.  
    29. [Install]
    30. WantedBy=multi-user.target
    31.  
    32. [root@zzzcentos2 local]#systemctl daemon-reload
    33. [root@zzzcentos2 local]#systemctl start tomcat
    34. [root@zzzcentos2 local]#systemctl status tomcat

    二、为nginx服务配置虚拟主机，新增两个域名 www.kgc.com 和 www.benet.com，使用http://www.kgc.com/index.php可访问上一题的Discuz论坛页面。使用http://www.benet.com则访问/usr/local/nginx/html/index.html目录中的index.html文件的内容，内容自定义

    ①nginx服务配置虚拟主机

    [root@zzzcentos4 ~]#vim /usr/local/nginx/conf/nginx.conf

    搭建好论坛之后就生成了

    1. server {
    2.         listen       80;
    3.         server_name  www.benet.com;
    4.         root /usr/local/nginx/html;
    5. }

    ②客户机配置：

    ③真机配置：

    C:\Windows\System32\drivers\etc

    ④检测：

    使用http://www.benet.com则访问/usr/local/nginx/html/index.html目录中的index.html文件的内容

    使用http://www.kgc.com/index.php可访问上一题的Discuz论坛页面

    三、对基于www.benet.com域名的虚拟机主机的nginx服务调优：隐藏nginx版本号，缓存静态图片网页时间为1天，设置防盗链功能

    [root@zzzcentos4 ~]#vim /usr/local/nginx/conf/nginx.conf
    1. server {
    2.        listen 80;
    3.        server_name www.benet.com;
    4.        expires 1d;
    5.        server_tokens off;
    6.        root /usr/local/nginx/html;
    7.        location ~* \.(jpg|jepg|gif|bmp)$ {
    8.        valid_referers none blocked *.benet.com benet.com;
    9.        if ( $invalid_referer ) {
    10.        return 403;
    11. }
    12. }
    13. }

    客户机检测：

    四、网关服务器搭建NFS服务，提供的文件系统使用LVM类型，共享目录名称为/opt/nfs；要求根据日期对Discuz论坛服务的访问日志进行日志分割，要求每天生成一份日志文件，保存到NFS服务共享的目录内。

    Centos7-1作为网关服务器

    1. [root@localhost ~]#lsblk
    2. [root@localhost ~]#echo "- - -" > /sys/class/scsi_host/host0/scan;echo "- - -" > /sys/class/scsi_host/host1/scan;echo "- - -" > /sys/class/scsi_host/host2/scan
    3. [root@localhost ~]#lsblk
    4. NAME            MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
    5. sda               8:0    0   60G  0 disk 
    6. ├─sda1            8:1    0    5G  0 part /boot
    7. └─sda2            8:2    0   54G  0 part 
    8.   ├─centos-root 253:0    0   50G  0 lvm  /
    9.   └─centos-swap 253:1    0    4G  0 lvm  [SWAP]
    10. sdb               8:16   0   20G  0 disk 
    11. sdc               8:32   0   20G  0 disk 
    12. sr0              11:0    1  4.2G  0 rom
    13. [root@localhost ~]#pvcreate /dev/sdb /dev/sdc
    14. #建物理卷
    15.   Physical volume "/dev/sdb" successfully created.
    16.   Physical volume "/dev/sdc" successfully created.
    17. [root@localhost ~]#vgcreate vg /dev/sdb /dev/sdc
    18. #建卷组
    19.   Volume group "vg" successfully created
    20. [root@localhost ~]#lvcreate -n lvm -L 10G /dev/vg
    21. #建逻辑卷  指定名称lvm  指定大小30G  存放在/dev/vg下
    22.   Logical volume "lvm" created.
    23. [root@localhost ~]#mkfs.xfs /dev/vg/lvm
    24. meta-data=/dev/vg/lvm            isize=512    agcount=4, agsize=655360 blks
    25.          =                       sectsz=512   attr=2, projid32bit=1
    26.          =                       crc=1        finobt=0, sparse=0
    27. data     =                       bsize=4096   blocks=2621440, imaxpct=25
    28.          =                       sunit=0      swidth=0 blks
    29. naming   =version 2              bsize=4096   ascii-ci=0 ftype=1
    30. log      =internal log           bsize=4096   blocks=2560, version=2
    31.          =                       sectsz=512   sunit=0 blks, lazy-count=1
    32. realtime =none                   extsz=4096   blocks=0, rtextents=0
    33. [root@localhost ~]#mount /dev/vg/lvm /opt
    34. [root@localhost ~]#mkdir /opt/nfs
    35. [root@localhost ~]#vim /etc/exports
    36. /opt/nfs *
    37. [root@localhost ~]#cat /etc/exports
    38. /opt/nfs *
    39. [root@localhost ~]#exportfs -r
    40. exportfs: No options for /opt/nfs *: suggest *(sync) to avoid warning
    41. [root@localhost ~]#exportfs -v
    42. /opt/nfs      	<world>(ro,sync,wdelay,hide,no_subtree_check,sec=sys,secure,root_squash,no_all_squash)
    43. [root@localhost ~]#hostname zzzcentos1
    44. [root@localhost ~]#su
    45. [root@zzzcentos1 ~]#

    nginx 服务挂载共享目录

    1. [root@zzzcentos4 ~]#systemctl restart nginx
    2. [root@zzzcentos4 ~]#showmount -e 192.168.246.7
    3. Export list for 192.168.246.7:
    4. /opt/nfs *
    5. [root@zzzcentos4 ~]#mount 192.168.246.7:/opt/nfs /opt
    6. [root@zzzcentos4 ~]#

    日志文件

    1. #!/bin/bash
    2. day=`date  "+%Y-%m-%d"`
    3. log="/usr/local/nginx/logs"
    4. pid=`cat  /usr/local/nginx/logs/nginx.pid`
    5.  
    6. mv /${log}/access.log  /opt/${day}
    7. kill -USR1 ${pid}
    8. sed -i '/.*bbs.*/!p' /opt/${day}

    五、要求配置location匹配请求地址http://www.kgc.com/test/XXXX，使用户访问该路径下的文件时返回/var/share/nginx/html/目录下的文件内容。
    要求使用rewrite将使用域名www.benet.com 请求以 .php 结尾的访问都跳转到域名www.kgc.com上，而且后面的参数保持不变，比如访问http://www.benet.com/bbs/index.php跳转到http://www.kgc.com/bbs/index.php

    Nginx服务配置

    1. location ~* \.php$ {
    2.       rewrite (.*) http://www.kgc.com/$1;
    3. }

    1. [root@zzzcentos4 ~]#nginx -s reload
    2. [root@zzzcentos4 ~]#mkdir /var/share/nginx/html -p
    3. [root@zzzcentos4 ~]#cd /var/share/nginx/html/
    4. [root@zzzcentos4 html]#echo hello > index.html
    5. [root@zzzcentos4 html]#nginx -s reload

    去浏览器检测：

    六、在Nginx服务器上对基于www.benet.com域名的虚拟机主机设置动静分离由nginx提供静态页面服务，将对 .jsp文件的动态页面请求转发到Tomcat 服务器处理，并实现负载均衡

    Nginx服务器配置

    location下的根没生效？？

    配置Tomcat服务器

    1. [root@localhost ~]#cd /usr/local/tomcat/webapps/ROOT/
    2. [root@localhost ROOT]#echo tomcat 7-2 > index.jsp
    3. [root@localhost ROOT]#cat index.jsp
    4. tomcat 7-2
    5. [root@localhost ROOT]#

    1. [root@localhost ~]#systemctl stop firewalld
    2. [root@localhost ~]#setenforce 0
    3. setenforce: SELinux is disabled
    4. [root@localhost ~]#hostname zzzcentos3
    5. [root@localhost ~]#su
    6. [root@zzzcentos3 ~]#cd /usr/local/tomcat/webapps/ROOT/
    7. [root@zzzcentos3 ROOT]#ls
    8. asf-logo-wide.svg  bg-middle.png  bg-upper.png  index.jsp          tomcat.css  tomcat.png        tomcat.svg
    9. bg-button.png      bg-nav.png     favicon.ico   RELEASE-NOTES.txt  tomcat.gif  tomcat-power.gif  WEB-INF
    10. [root@zzzcentos3 ROOT]#echo tomcat 7-3 > index.jsp
    11. [root@zzzcentos3 ROOT]#cat  index.jsp
    12. tomcat 7-3
    13. [root@zzzcentos3 ROOT]#

    检测：​​​​​​​

    七、在网关服务器上设置SNAT/DNAT，使client使用网关服务器的ens36接口的IP地址访问也可实现上一题的效果。

    客户机地址配置

    网关服务器配置

    1. [root@zzzcentos1 ~]#sysctl -a |grep "ip_forward"
    2. [root@zzzcentos1 ~]#vim /etc/sysctl.conf 
    3. # sysctl settings are defined through files in
    4. # /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.
    5. #
    6. # Vendors settings live in /usr/lib/sysctl.d/.
    7. # To override a whole file, create a new file with the same in
    8. # /etc/sysctl.d/ and put new settings there. To override
    9. # only specific settings, add a file with a lexically later
    10. # name in /etc/sysctl.d/ and put new settings there.
    11. #
    12. # For more information, see sysctl.conf(5) and sysctl.d(5).
    13. net.ipv4.ip_forward = 1
    14. [root@zzzcentos1 ~]#sysctl  -p
    15. net.ipv4.ip_forward = 1
    16. [root@zzzcentos1 ~]#

    做SNAT与DNAT

    1. [root@zzzcentos1 ~]#iptables -t nat -A PREROUTING -i ens36 -d 12.0.0.1 -p tcp --dport 80 -j DNAT --to 192.168.246.7
    2. [root@zzzcentos1 ~]#
    3. [root@zzzcentos1 ~]#iptables -t nat -A POSTROUTING -o ens36 -s 192.168.246.0/24 -j SNAT --to 12.0.0.1
    4. [root@zzzcentos1 ~]#iptables -t nat -vnL
    5. Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
    6.  pkts bytes target     prot opt in     out     source               destination         
    7.     0     0 DNAT       tcp  --  ens36  *       0.0.0.0/0            12.0.0.1             tcp dpt:80 to:192.168.246.7
    8.  
    9. Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
    10.  pkts bytes target     prot opt in     out     source               destination         
    11.  
    12. Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
    13.  pkts bytes target     prot opt in     out     source               destination         
    14.  
    15. Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
    16.  pkts bytes target     prot opt in     out     source               destination         
    17.     0     0 SNAT       all  --  *      ens36   192.168.246.0/24     0.0.0.0/0            to:12.0.0.1
    18. [root@zzzcentos1 ~]#

    [root@zzzcentos1 ~]#iptables -t nat -A PREROUTING -i ens36 -d 12.0.0.1 -p tcp --dport 80 -j DNAT --to 192.168.246.10

    此题有点问题，下回接着分析

  • 相关阅读:
    ClickHouse(15)ClickHouse合并树MergeTree家族表引擎之GraphiteMergeTree详细解析
    霸榜双11！科技创新助力九牧卫浴赢战全渠道
    已解决‘mongo‘ 不是内部或外部命令,也不是可运行的程序
    化工行业调研：中国二氧化碳（CO2）2028年市场规模将达到64.66亿元
    金仓数据库KingbaseES运维工具参考手册（3. 系统数据与日志收集工具）
    基于springboot的高校失物招领系统毕业设计源码111731
    封装适用于CentOS7的MySQL离线包
    计算机中CPU、内存、缓存的关系
    Verilog实现半整数分频，3.5分频电路，可推广至N.5分频
    Android PackageManager 基本使用
  • 原文地址：https://blog.csdn.net/zzzxxx520369/article/details/136515624