Nginx 高可用+负载均衡部署文档V1.0.2

Nginx高可用+负载均衡部署指南1软件版本说明2基础软件安装2.1Nginx安装版本jdk-7u67-linux-x64.rpm，安装步骤略安装后检验Nginx版本是否正确。

[root@localhost ~]# /usr/local/nginx/sbin/nginx –vnginx version: nginx/1.6.02.2Keepalived安装2.2.1openssl安装openssl必须安装，否则安装keepalived时无法编译，keepalived依赖opensslopenssl安装tar zxvf openssl-1.0.1g.tar.gz./config--prefix=/usr/local/openssl./config-tmake dependmakemake testmake installln-s /usr/local/openssl/usr/local/sslopenssl配置vi/etc/ld.so.conf#在/etc/ld.so.conf文件的最后面，添加如下内容：/usr/local/openssl/libvi/etc/profileexport OPENSSL=/usr/local/openssl/binexport PATH=$PATH:$OPENSSLsource/etc/profileyum install openssl-devel -y #如无法yum下载安装，请修改yum配置文件测试:ldd /usr/local/openssl/bin/openssllinux-vdso.so.1 => (0x00007fff996b9000)libdl.so.2 => /lib64/libdl.so.2 (0x00000030efc00000)libc.so.6 => /lib64/libc.so.6 (0x00000030f0000000)/lib64/ld-linux-x86-64.so.2 (0x00000030ef800000) which openssl/usr/bin/opensslopenssl versionOpenSSL 1.0.0-fips 29 Mar 20102.2.2keepalived安装本文在172.17.30.64、172.17.30.83两台机器进行keepalived安装安装tar zxvf keepalived-1.2.13.tar.gzcd keepalived-1.2.13./configure--prefix=/usr/local/keepalivedmakemake installcp/usr/local/keepalived/sbin/keepalived/usr/sbin/cp/usr/local/keepalived/etc/sysconfig/keepalived/etc/sysconfig/cp/usr/local/keepalived/etc/rc.d/init.d/keepalived/etc/init.d/mkdir/etc/keepalivedcp/usr/local/keepalived/etc/keepalived/keepalived.conf/etc/keepalived2.2.3keepalived配置建检查Nginx是否存活的脚本#新建Nginx检查vim /usr/local/nginx/check.sh内容如下：#!/bin/bash#This script is used by keepalived for checking nginx running status CHECK_TIME=2check(){curl -m 2 http://127.0.0.1/status >/dev/null 2>&1return $?}while [ $CHECK_TIME -ne 0 ]dolet "CHECK_TIME -= 1"checkNGINX_OK=$?if [ $NGINX_OK -eq 0 ];thenexit 0fiif [ $NGINX_OK -ne 1 ] && [ $CHECK_TIME -eq 0 ]thenexit 1fidonekeepalived.conf:vim /usr/local/keepalived/etc/keepalived/keepalived.confMaster:Master! Configuration File for keepalivedvrrp_script check_run {script “/usr/local/nginx/check.sh"interval 2weight 2}vrrp_instance VI_1 {state MASTER #172.17.210.83上改为Masterinterface eth0 #对外提供服务的网络接口virtual_router_id 51 #VRRP组名，两个节点的设置必须一样，以指明各个节点属于同一VRRP组priority 150 #数值愈大，优先级越高advert_int 1 #同步通知间隔authentication { #包含验证类型和验证密码。

类型主要有PASS、AH两种，通常使用的类型为PASS，据说AH使用时有问题auth_type PASSauth_pass 1111}track_script {check_run #调用脚本check.sh检查haproxy是否存活}virtual_ipaddress { #vip地址172.17.210.103 dev eth0 scope globa}}slave：slave! Configuration File for keepalivedvrrp_script chech_run {script “/usr/local/nginx/check.sh"interval 2weight 2}vrrp_instance VI_1 {state BACKUP #interface eth0 #对外提供服务的网络接口virtual_router_id 51 #VRRP组名，两个节点的设置必须一样，以指明各个节点属于同一VRRP组priority 120 #数值愈大，优先级越高, advert_int 1 #同步通知间隔authentication { #包含验证类型和验证密码。

类型主要有PASS、AH两种，通常使用的类型为PASS，据说AH使用时有问题auth_type PASSauth_pass 1111}track_script {check_run #调用脚本check.sh检查haproxy是否存活}virtual_ipaddress { #vip地址172.17.210.103 dev eth1 scope globa}}3Nginx配置文件3.1新建upstreams.conf1、upstream uc_cluster {2、 ip_hash;3、 server app01:7060;#主机名+端口4、 server app01:7061;5、}6、 upstream pos_cluster {7、 ip_hash;8、 server app01:7060;#主机名+端口9、 server app01:7061;10、}11、upstream mps_cluster {12、 ip_hash;13、 server app01:7060;14、server app01:7061;15、server app02:7060;16、}upstream gms_cluster {17、ip_hash;18、server app01:7060;19、server app01:7061;20、server app02:7060;21、}...3.2新建server.confserver {listen 80;server_name ;default_type 'text/html';charset utf-8;#charset koi8-r;#access_log logs/host.access.log main;location ~ .*.*$ {#index /portal;proxy_pass http://uc_cluster;rewrite "^/+$" /portal break;}location ^~ /pos/ {proxy_pass http://pos_cluster;}location ^~ /mps/ {proxy_pass http://mps_cluster;}location ^~ /gms/ {proxy_pass http://gms_cluster;}location ^~ /fas/ {proxy_pass http://fas_cluster;}location ^~ /mdm/ {proxy_pass http://mdm_cluster;}location ^~ /pms/ {proxy_pass http://pms_cluster;proxy_connect_timeout 600s;proxy_send_timeout 300s;}location ^~ /crm/ {proxy_pass http://crm_cluster;}#error_page 404 /404.html;# redirect server error pages to the static page /50x.html#error_page 500 502 503 504 /50x.html;location = /50x.html {root html;}}3.3新建proxy.conf文件#!nginx (-)# proxy.confproxy_redirect off;proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr; #»ñæip#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #»ñúµÄæip client_max_body_size 10m;client_body_buffer_size 128k;proxy_connect_timeout 90;proxy_send_timeout 90;proxy_read_timeout 90;proxy_buffer_size 4k;proxy_buffers 4 32k;proxy_busy_buffers_size 64k;proxy_temp_file_write_size 64k;3.4修改Nginx文件#user nobody;worker_processes 4;error_log logs/error.log;error_log logs/error.log notice;error_log logs/error.log info;pid logs/nginx.pid;events {use epoll;worker_connections 1024;}http {include upstreams.conf;include mime.types;default_type application/octet-stream;include proxy.conf;log_format main '$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';access_log logs/access.log main;sendfile on;#tcp_nopush on;#keepalive_timeout 0;keepalive_timeout 65;tcp_nodelay on;gzip on;gzip_min_length 10240;gzip_proxied expired no-cache no-store private auth;gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml application/xml+rss image/svg+xml application/x-font-ttf application/vnd.ms-fontobject;gzip_disable "MSIE [1-6]\.";include servers.conf;}。