vlambda博客
学习文章列表

[root@Korea1 ~]# getenforceEnforcing[root@Korea1 ~]# setenforce 0[root@Korea1 ~]# getenforcePermissive

[root@Korea1 ~]# uname -aLinux Korea1 4.18.0-240.1.1.el8_3.x86_64 #1 SMP Thu Nov 19 17:20:08 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

useradd -r www -s /sbin/nologinwget http://nginx.org/download/nginx-1.18.0.tar.gz -P /srv/cd /srv/yum -y install gcc pcre-devel zlib zlib-devel make tartar -zxvf nginx-1.18.0.tar.gz cd nginx-1.18.0/./configure --prefix=/usr/local/nginxmake && make install

# 大写的V可以查看安装命令[root@Japan2 nginx-1.18.0]# /usr/local/nginx/sbin/nginx -Vnginx version: nginx/1.18.0built by gcc 8.3.1 20191121 (Red Hat 8.3.1-5) (GCC) configure arguments: --prefix=/usr/local/nginx

cd /srv/nginx-1.18.0/./configure --prefix=/usr/local/nginx --user=www --group=www --with-streammake# 备份cp /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.bak# 拷贝至nginx的二进制目录下cp objs/nginx /usr/local/nginx/sbin/# 再次查看安装情况/usr/local/nginx/sbin/nginx -V

cat /etc/redhat-release

#显示系统中可用和不可用的所有的DNF软件库dnf repolist all

http { #必须定义在http段中 upstream web{ #C server 45.76.51.26; #D server 202.182.107.126 ;  } #主分发器的虚拟主机 server { listen 80; server_name localhost; location / { #反向代理 proxy_pass http://web;        } }}

firewall-cmd --zone=trusted --list-all

firewall-cmd --permanent --zone=trusted --add-source=141.164.50.226

elinks http://141.164.50.226 --dump

upstream web{ #C server 45.76.51.26 weight=3; #D server 202.182.107.126 weight=1;}

#必须定义在http段中upstream web{ ip_hash; #C server 45.76.51.26 weight=1; #D server 202.182.107.126 weight=1;}

#必须定义在http段中upstream web{ ip_hash; #C server 45.76.51.26 weight=1 down; #D server 202.182.107.126 weight=1;}

#必须定义在http段中upstream web{ # ip_hash; #C server 45.76.51.26 weight=1 ; #D server 202.182.107.126 weight=1 backup;}

vim /etc/hosts#将域名解析到主分发器A的公网IP141.164.50.226 www.cc.com141.164.50.226 www.dd.com

http { upstream webc{ #C server 45.76.51.26 weight=1; ...... } upstream webd{ #D server 202.182.107.126 weight=1; ......        } server { listen 80; server_name www.cc.com; location / { #反向代理                 proxy_pass http://webc; } } server { listen 80; server_name www.dd.com; location / { #反向代理                 proxy_pass http://webd; } }

yum install httpd phpsystemctl start httpd.servicekillall nginxsystemctl start httpd.serviceelinks 45.76.51.26 --dump

echo "<?php phpinfo()?>" > /var/www/html/index.php

http {  upstream php{ server 45.76.51.26 weight=1; }  upstream html{ server 202.182.107.126 weight=1;  } #一个虚拟主机即可 server { listen 80; server_name 141.164.50.226;    location ~* \.php$ { proxy_pass http://php; }    location ~* \.html$ {
 proxy_pass http://html; } }}

http { upstream elinks{ server 45.76.51.26 weight=1; # cc } upstream chrome{ server 202.182.107.126 weight=1; # dd  } server { listen 80; server_name 141.164.50.226; location /{ if ($http_user_agent ~* Elinks){ proxy_pass http://elinks; } if ($http_user_agent ~* chrome){ proxy_pass http://chrome; }         } }}

http { upstream hb.server{ server 45.76.51.26 weight=1; } upstream hn.server{ server 202.182.107.126 weight=1; } upstream default.server{#B server 141.164.34.223 weight=1; } #nginx内置的geo模块 geo $geo{ default default; #假设定义了CD的IP位置 45.76.51.26 hb; 202.182.107.126 hn;  } server { listen 80; server_name 141.164.50.226; location /{ proxy_pass http://$geo.server$request_uri; } }}

wget https://www.keepalived.org/software/keepalived-2.2.1.tar.gztar -zxvf keepalived-2.2.1.tar.gzcd keepalived-2.2.1/yum install openssl-devel libnl3-devel -y./configure --prefix=/usr/local/keepalivedmake && make install/usr/local/keepalived/sbin/keepalived -v

yum install openssl-devel# OpenSSL is not properly installed on your system.yum install libnl3-devel# WARNING - this build will not support IPVS with IPv6. Please install libnl/libnl-3 dev libraries to support IPv6 with IPVS. 

http { upstream web{ #C server 45.76.51.26 weight=1; #D server 202.182.107.126 weight=1;  } server { listen 80; server_name localhost; location / { proxy_pass http://web; } }}

global_defs { ##定义故障通知邮箱 notification_email { [email protected] [email protected] [email protected] } ##发件人地址 notification_email_from [email protected] ##邮件服务器地址 smtp_server 192.168.200.1 ##联系邮件服务器的超时时长 smtp_connect_timeout 30 #标识信息，一个名字而已； router_id LVS_DEVEL vrrp_skip_check_adv_addr vrrp_strict}#定义一个脚本vrrp_script check_nginx {#脚本路径，这个脚本将用于监测nginx的运行script "/usr/local/keepalived/etc/keepalived/nginx_pid.sh"#探针每两秒运行一次脚本interval 2#允许的失败次数fall 1}#一个实例就是一个集群#定义了一个实例叫做VI_1vrrp_instance VI_1 { #主 MASTER state MASTER #ifconfig查看到的网卡名 虚拟IP绑定的端口 #interface eth0  interface ens3 #发送多播包的地址，如果不设置，默认使用绑定的网卡的IP #mcast_src_ip 141.164.50.226 ##让master 和backup在同一个虚拟路由里，id 号必须相同； virtual_router_id 51 #优先级 priority 100  #多久发一次组播 advert_int 1 #组播只有确认过密码才能被收取 authentication { auth_type PASS auth_pass 1111 } #调用脚本 track_script { check_nginx } virtual_ipaddress {        192.168.200.16 }}

#!/bin/bash# 是否存在nginxnginx_pid=`ps -C nginx --no-header |wc -l`if [ $nginx_pid -eq 0 ];then# 尝试重启nginx /usr/local/nginx/sbin/nginx # nginx启动不了 sleep 1 if [ `ps -C nginx --no-header |wc -l` -eq 0 ];then      # keepalived自我毁灭,那么将不会再发组播 killall keepalived fifi

[root@Korea1 keepalived]# dos2unix nginx_pid.sh dos2unix: converting file nginx_pid.sh to Unix format...[root@Korea1 keepalived]# sh nginx_pid.sh

ip addr show

# ifconfig查看网卡ens3tcpdump -nn -vvv -i ens3 vrrp

vrrp_instance VI_1 {    state BACKUP ##让master 和backup在同一个虚拟路由里，id 号必须相同； virtual_router_id 51 #优先级低于主机    priority 80}

#虚拟IPhttps://www.jianshu.com/p/a8ade44960dc# centos安装powertools库问题https://www.reddit.com/r/CentOS/comments/jd7x3d/how_to_enable_powertools_in_centos_stream/# 防火墙如何加载白名单IPhttps://teddysun.com/566.html# nginx的地理位置判断模块http://www.ttlsa.com/nginx/using-nginx-geo-method/# keepalivedhttps://www.redhat.com/sysadmin/keepalived-basicshttps://www.keepalived.org/manpage.htmlhttps://centos.pkgs.org/7/centos-x86_64/libnl3-devel-3.2.28-4.el7.x86_64.rpm.htmlhttps://www.jianshu.com/p/a6b5ab36292ahttps://blog.csdn.net/mofiu/article/details/76644012# shell脚本格式转换https://www.jianshu.com/p/7baea461dc2e# 内外网的关系https://blog.csdn.net/weixin_42724467/article/details/89147214# 腾讯云虚拟IPhttps://cloud.tencent.com/document/product/215/36691?from=information.detail.%E9%AB%98%E5%8F%AF%E7%94%A8%E8%99%9A%E6%8B%9Fip