当前位置：首页 > news >正文

烟台建设银行网站外包平台

news 2025/11/1 19:12:24

烟台建设银行网站,外包平台,加快实施创新驱动发展战略,织梦网站漏洞修复实验场景#xff1a; 我使用keepalived保证nginx的高可用#xff0c;我想知道什么时候ip发生漂移#xff0c;可以让ip发生漂移的时候我的邮箱收到消息. 如果对keepalived不了解#xff0c;这有详细解释#xff1a;keepalived与nginx与MySQL-CSDN博客https://blog.csdn.ne…实验场景我使用keepalived保证nginx的高可用我想知道什么时候ip发生漂移可以让ip发生漂移的时候我的邮箱收到消息. 如果对keepalived不了解这有详细解释keepalived与nginx与MySQL-CSDN博客https://blog.csdn.net/m0_59933574/article/details/134189200?spm1001.2014.3001.5501 实验步骤 Nginx通过Upstream模块实现负载均衡主机清单主机名IP系统用途Proxy-master192.168.231.201centos7.5主负载Proxy-slave192.168.231.202centos7.5主备Real-server1192.168.231.203Centos7.5web1Real-server2192.168.231.204centos7.5Web2Vip for proxy192.168.231.225 所有机器都配置安装nginx关闭防火墙与selinux [rootproxy-master ~]# systemctl stop firewalld //关闭防火墙 [rootproxy-master ~]# sed -i s/^SELINUX.*/SELINUXdisabled/ /etc/sysconfig/selinux //关闭selinux重启生效 [rootproxy-master ~]# setenforce 0 　　　　　　　　//关闭selinux临时生效安装nginx 全部4台 [rootproxy-master ~]# cd /etc/yum.repos.d/ [rootproxy-master yum.repos.d]# vim nginx.repo [nginx-stable] namenginx stable repo baseurlhttp://nginx.org/packages/centos/$releasever/$basearch/ gpgcheck0 enabled1 [rootproxy-master yum.repos.d]# yum install yum-utils -y [rootproxy-master yum.repos.d]# yum install nginx -y 实验过程 1、选择两台nginx服务器作为代理服务器。 2、给两台代理服务器安装keepalived制作高可用生成VIP 3、配置nginx的负载均衡选择201 202为代理服务器 201 # vim /etc/nginx/nginx.conf#Nginx配置文件 user nginx; worker_processes auto; error_log /var/log/nginx/error.log; pid /run/nginx.pid; include /usr/share/nginx/modules/*.conf; events {worker_connections 1024; } http {log_format main $remote_addr - $remote_user [$time_local] $request $status $body_bytes_sent $http_referer $http_user_agent $http_x_forwarded_for;access_log /var/log/nginx/access.log main;sendfile on;tcp_nopush on;tcp_nodelay on;keepalive_timeout 65;types_hash_max_size 2048;include /etc/nginx/mime.types;default_type application/octet-stream;include /etc/nginx/conf.d/*.conf;upstream backend { ####管理服务器组设置权重server 192.168.231.204:80 weight1 max_fails3 fail_timeout20s;server 192.168.231.203:80 weight1 max_fails3 fail_timeout20s;}server {listen 80;server_name localhost;location / {proxy_pass http://backend;proxy_set_header Host $host:$proxy_port;proxy_set_header X-Forwarded-For $remote_addr;}} }202 # vim /etc/nginx/nginx.confuser nginx; worker_processes auto; error_log /var/log/nginx/error.log; pid /run/nginx.pid; include /usr/share/nginx/modules/*.conf; events {worker_connections 1024; } http {log_format main $remote_addr - $remote_user [$time_local] $request $status $body_bytes_sent $http_referer $http_user_agent $http_x_forwarded_for;access_log /var/log/nginx/access.log main;sendfile on;tcp_nopush on;tcp_nodelay on;keepalive_timeout 65;types_hash_max_size 2048;include /etc/nginx/mime.types;default_type application/octet-stream;include /etc/nginx/conf.d/*.conf;upstream backend { server 192.168.231.204:80 weight1 max_fails3 fail_timeout20s;server 192.168.231.203:80 weight1 max_fails3 fail_timeout20s;}server {listen 80;server_name localhost;location / {proxy_pass http://backend;proxy_set_header Host $host:$proxy_port;proxy_set_header X-Forwarded-For $remote_addr;}} }Keepalived实现调度器HA 主备都安装keepalived [rootzhu ~]# yum install -y keepalived[rootbei ~]# yum install -y keepalived#主备都进行的操作cp /etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf.bak#主备都修改配置文件vim /etc/keepalived/keepalived.conf#这是主的配置文件 ! Configuration File for keepalivedglobal_defs {router_id directory1 #辅助改为directory2 }vrrp_instance VI_1 {state MASTER #定义主还是备interface ens33 #VIP绑定接口virtual_router_id 80 #整个集群的调度器一致priority 100 #back改为50advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.231.225/24 # vip} }#这是备的配置文件 ! Configuration File for keepalivedglobal_defs {router_id directory2 }vrrp_instance VI_1 {state BACKUP #设置为backupinterface ens33nopreempt #设置到back上面不抢占资源virtual_router_id 80priority 50 #辅助改为50advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.231.225/24} } 主备均启动keepalived 开机自启 # systemctl enable keepalived 启动 systemctl start keepalived查看ip[rootzhu ~]# ip a | grep 225inet 192.168.231.225/24 scope global secondary ens33对调度器Nginx健康检查可选两台都设置思路让Keepalived以一定时间间隔执行一个外部脚本脚本的功能是当Nginx失败则关闭本机的Keepalived 主服务器 vim check_nginx_status.sh #!/bin/bash /usr/bin/curl -I http://localhost /dev/null if [ $? -ne 0 ];then # /etc/init.d/keepalived stopsystemctl stop keepalived fi 备服务器 vim check_nginx_status.sh #!/bin/bash /usr/bin/curl -I http://localhost /dev/null if [ $? -ne 0 ];then # /etc/init.d/keepalived stopsystemctl stop keepalived fi 给主备的脚本的执行权限 chmod x check_nginx_status.sh 将脚本引用在keepalived的配置文件中主服务器的keepalived的配置文件 ! Configuration File for keepalivedglobal_defs {router_id directory1 } vrrp_script check_nginx { #引用脚本script /etc/keepalived/check_nginx_status.shinterval 5 } vrrp_instance VI_1 {state MASTER interface ens33 virtual_router_id 80 priority 100 advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.231.225/24 } track_script {check_nginx} } 备服务器的keepalived的配置文件 [rootbei ~]# vim /etc/keepalived/keepalived.conf! Configuration File for keepalived global_defs {router_id directory2 } vrrp_script check_nginx {script /etc/keepalived/check_nginx_status.shinterval 5 } vrrp_instance VI_1 {state BACKUP interface ens33nopreempt virtual_router_id 80priority 50 advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.231.225/24}track_script {check_nginx} } 现在我们就可以实现keepalived的高可用实现IP漂移如何以邮件的方式收到呢我们以QQ邮箱为例我是自己给自己发因此我的收件人与发件人都写了自己的QQ 获取最重要的授权码授权码拿到手以后在主备服务器进行相同的操作主备均下载yum install -y mailx编写配置文件 vim /etc/mail.rcset bsdcompat set fromxxxxxxxxxqq.com ###发送者 set smtpsmtp.qq.com set smtp-auth-userxxxxxxxxxqq.com set smtp-auth-passwordjawypsdsdsddbeg ####前面获取到的授权码 set smtp-authlogin set ssl-verifyignore 主备编写邮件脚本主备均进行的操作 cd /etc/keepalived/vim sendmail.sh#!/bin/bash to_emailxxxxxxxxqq.com #这是收件人 ipaddressip -4 a show dev ens33 | awk /brd/{print $2} notify() {mailsubject${ipaddress}to be $1, vip转移mailbody$(date %F %T): vrrp 飘移, $(hostname) 切换到 $1echo $mailbody | mail -s $mailsubject $to_email } case $1 in master)notify master;; backup)notify backup;; fault)notify fault;; *)echo Usage: $(basename $0) {master|backup|fault}exit 1;; esac 记得给脚本执行权限 chmod x sendmail.sh 在keepalived的配置文件内引用邮件脚本主备的配置文件都需要操作 ! Configuration File for keepalivedglobal_defs {router_id directory1 }vrrp_script check_nginx {script /etc/keepalived/check_nginx_status.shinterval 5 }vrrp_instance VI_1 {state MASTER interface ens33 virtual_router_id 80 priority 100 advert_int 1authentication {auth_type PASSauth_pass 1111}virtual_ipaddress {192.168.231.225/24 }track_script {check_nginx}#引用邮件脚本主备都只需要加这三行即可notify_master /etc/keepalived/sendmail.sh masternotify_backup /etc/keepalived/sendmail.sh backupnotify_fault /etc/keepalived/sendmail.sh fault}系统重载让所有配置文件都重新加载一下主备都进行 systemctl daemon-reload开始演示此时我们的vip在备服务器上 [rootbei ~]# ip a | grep 225inet 192.168.231.225/24 scope global secondary ens33我们开启主服务器的nginx服务以及keepalived [rootzhu ~]# systemctl start nginx [rootzhu ~]# systemctl start keepalived按照脚本vip也会从备漂移到主服务器 [rootbei ~]# ip a | grep 225 [rootbei ~]# rootzhu ~]# ip a | grep 225inet 192.168.231.225/24 scope global secondary ens33收到邮件实验注意事项 1.写完脚本记得给执行权限 2.每次修改完配置文件记得要重启服务 3.获取qq授权码比较繁琐
文章转载自：
http://www.morning.ymtbr.cn.gov.cn.ymtbr.cn
http://www.morning.cwwbm.cn.gov.cn.cwwbm.cn
http://www.morning.ypxyl.cn.gov.cn.ypxyl.cn
http://www.morning.gxeqedd.cn.gov.cn.gxeqedd.cn
http://www.morning.mhlkc.cn.gov.cn.mhlkc.cn
http://www.morning.fkgqn.cn.gov.cn.fkgqn.cn
http://www.morning.cqwb25.cn.gov.cn.cqwb25.cn
http://www.morning.lsfzq.cn.gov.cn.lsfzq.cn
http://www.morning.qlpyn.cn.gov.cn.qlpyn.cn
http://www.morning.zrkws.cn.gov.cn.zrkws.cn
http://www.morning.tdfyj.cn.gov.cn.tdfyj.cn
http://www.morning.pmmrb.cn.gov.cn.pmmrb.cn
http://www.morning.lbpqk.cn.gov.cn.lbpqk.cn
http://www.morning.nrzbq.cn.gov.cn.nrzbq.cn
http://www.morning.yrhpg.cn.gov.cn.yrhpg.cn
http://www.morning.pbksb.cn.gov.cn.pbksb.cn
http://www.morning.nrbqf.cn.gov.cn.nrbqf.cn
http://www.morning.bktzr.cn.gov.cn.bktzr.cn
http://www.morning.fydsr.cn.gov.cn.fydsr.cn
http://www.morning.qrhh.cn.gov.cn.qrhh.cn
http://www.morning.mdnnz.cn.gov.cn.mdnnz.cn
http://www.morning.bwkzn.cn.gov.cn.bwkzn.cn
http://www.morning.bhdtx.cn.gov.cn.bhdtx.cn
http://www.morning.wjyyg.cn.gov.cn.wjyyg.cn
http://www.morning.nwmwp.cn.gov.cn.nwmwp.cn
http://www.morning.qkskm.cn.gov.cn.qkskm.cn
http://www.morning.lxhny.cn.gov.cn.lxhny.cn
http://www.morning.jmlgk.cn.gov.cn.jmlgk.cn
http://www.morning.hytqt.cn.gov.cn.hytqt.cn
http://www.morning.hnhkz.cn.gov.cn.hnhkz.cn
http://www.morning.wljzr.cn.gov.cn.wljzr.cn
http://www.morning.phjyb.cn.gov.cn.phjyb.cn
http://www.morning.fgsct.cn.gov.cn.fgsct.cn
http://www.morning.mghgl.cn.gov.cn.mghgl.cn
http://www.morning.btqqh.cn.gov.cn.btqqh.cn
http://www.morning.xq3nk42mvv.cn.gov.cn.xq3nk42mvv.cn
http://www.morning.mswkd.cn.gov.cn.mswkd.cn
http://www.morning.flncd.cn.gov.cn.flncd.cn
http://www.morning.rszwc.cn.gov.cn.rszwc.cn
http://www.morning.ryglh.cn.gov.cn.ryglh.cn
http://www.morning.kqxng.cn.gov.cn.kqxng.cn
http://www.morning.cwtrl.cn.gov.cn.cwtrl.cn
http://www.morning.hncrc.cn.gov.cn.hncrc.cn
http://www.morning.rlksq.cn.gov.cn.rlksq.cn
http://www.morning.qdsmile.cn.gov.cn.qdsmile.cn
http://www.morning.zcwwb.cn.gov.cn.zcwwb.cn
http://www.morning.mhpkz.cn.gov.cn.mhpkz.cn
http://www.morning.fmry.cn.gov.cn.fmry.cn
http://www.morning.mxmdd.cn.gov.cn.mxmdd.cn
http://www.morning.nkqxb.cn.gov.cn.nkqxb.cn
http://www.morning.kdgcx.cn.gov.cn.kdgcx.cn
http://www.morning.wnbqy.cn.gov.cn.wnbqy.cn
http://www.morning.cbpkr.cn.gov.cn.cbpkr.cn
http://www.morning.bswxt.cn.gov.cn.bswxt.cn
http://www.morning.rythy.cn.gov.cn.rythy.cn
http://www.morning.pqkrh.cn.gov.cn.pqkrh.cn
http://www.morning.kmwbq.cn.gov.cn.kmwbq.cn
http://www.morning.hyryq.cn.gov.cn.hyryq.cn
http://www.morning.xcjwm.cn.gov.cn.xcjwm.cn
http://www.morning.clhyj.cn.gov.cn.clhyj.cn
http://www.morning.tqqfj.cn.gov.cn.tqqfj.cn
http://www.morning.ngzkt.cn.gov.cn.ngzkt.cn
http://www.morning.wqbzt.cn.gov.cn.wqbzt.cn
http://www.morning.lwzpp.cn.gov.cn.lwzpp.cn
http://www.morning.zjqwr.cn.gov.cn.zjqwr.cn
http://www.morning.frsbf.cn.gov.cn.frsbf.cn
http://www.morning.qzqjz.cn.gov.cn.qzqjz.cn
http://www.morning.rkxdp.cn.gov.cn.rkxdp.cn
http://www.morning.rnfn.cn.gov.cn.rnfn.cn
http://www.morning.qtrlh.cn.gov.cn.qtrlh.cn
http://www.morning.tsnq.cn.gov.cn.tsnq.cn
http://www.morning.rqfzp.cn.gov.cn.rqfzp.cn
http://www.morning.kncrc.cn.gov.cn.kncrc.cn
http://www.morning.mkyxp.cn.gov.cn.mkyxp.cn
http://www.morning.phlwj.cn.gov.cn.phlwj.cn
http://www.morning.rdwm.cn.gov.cn.rdwm.cn
http://www.morning.qbfqb.cn.gov.cn.qbfqb.cn
http://www.morning.xzsqb.cn.gov.cn.xzsqb.cn
http://www.morning.ztcxx.com.gov.cn.ztcxx.com
http://www.morning.gnjtg.cn.gov.cn.gnjtg.cn

查看全文

http://www.tj-hxxt.cn/news/268821.html