Nginx教程

今天药忘吃喽~ 2023-08-17 15:55 118阅读 0赞

#  #

# **Nginx教程** #

# 1. **课程目标** #

## 1.1. **了解反向代理和负载均衡的概念** ##

## 1.2. **掌握Nginx的安装和使用** ##

## 1.3. **利用Nginx实现负载均衡** ##

# 2. **Nginx相关概念** #

## 2.1. **反向代理** ##

反向代理（Reverse Proxy）方式是指以代理服务器来接受internet上的连接请求，然后将请求转发给内部网络上的服务器，并将从服务器上得到的结果返回给internet上请求连接的客户端，此时代理服务器对外就表现为一个服务器。

![1276309-20190702174733822-1372490634.png][]

## 2.2. **负载均衡** ##

负载均衡，英文名称为Load Balance，是指建立在现有网络结构之上，并提供了一种廉价有效透明的方法扩展网络设备和服务器的带宽、增加吞吐量、加强网络数据处理能力、提高网络的灵活性和可用性。其原理就是数据流量分摊到多个服务器上执行，减轻每台服务器的压力，多台服务器共同完成工作任务，从而提高了数据的吞吐量。

![1276309-20190702174747198-1876152508.png][]

# 3. **Nginx的安装** #

## 3.1. **下载nginx** ##

官网：[http://nginx.org/][http_nginx.org]

## 3.2. **上传并解压nginx** ##

tar -zxvf nginx-1.8.1.tar.gz -C /usr/local/src

## 3.3. **编译nginx** ##

\#进入到nginx源码目录

cd /usr/local/src nginx-1.8.1

\#检查安装环境

./configure --prefix=/usr/local/nginx

\#缺包报错 ./configure: error: C compiler cc is not found

\#使用YUM安装缺少的包

yum -y install gcc pcre-devel openssl openssl-devel

\#编译安装

make && make install

# 4. **配置nginx** #

## 4.1. **配置反向代理** ##

1.修改nginx配置文件

<table> 
 <tbody> 
 <tr> 
 <td> server { &nbsp;&nbsp;&nbsp;&nbsp;listen &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;80; &nbsp;&nbsp;&nbsp;&nbsp;server_name &nbsp;nginx-01.itcast.cn; #172.16.203.101/hello.html location / { &nbsp;&nbsp;&nbsp;&nbsp;root html; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_pass http://192.168.0.21:8080; &nbsp;&nbsp;&nbsp;&nbsp;} } </td> 
 </tr> 
 </tbody> 
</table>

2.启动tomcat-01上的tomcat

3.启动nginx-01上的nginx

./nginx

## 4.2. **动静分离** ##

\#动态资源 index.jsp

<table> 
 <tbody> 
 <tr> 
 <td> location ~ .*\.(jsp|do|action)$ { &nbsp;&nbsp;&nbsp;&nbsp;proxy_pass http://tomcat-01.itcast.cn:8080; } </td> 
 </tr> 
 </tbody> 
</table>

\#静态资源

<table> 
 <tbody> 
 <tr> 
 <td> location ~ .*\.(html|js|css|gif|jpg|jpeg|png)$ { &nbsp;&nbsp;&nbsp;&nbsp;expires 3d; } </td> 
 </tr> 
 </tbody> 
</table>

## 4.3. **负载均衡** ##

在http这个节下面配置一个叫upstream的，后面的名字可以随意取，但是要和location下的proxy\_pass http://后的保持一致。

<table> 
 <tbody> 
 <tr> 
 <td> http { &nbsp;&nbsp;&nbsp;&nbsp;upstream tomcats&nbsp;{ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;server 172.16.203.20:8080 weight=1; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;server tomcat-02.itcast.cn:8080 weight=1; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;server tomcat-02.itcast.cn:8080 weight=1; } location ~ .*\.(jsp|do|action) { &nbsp;&nbsp;&nbsp;&nbsp;proxy_pass http://tomcats; } } </td> 
 </tr> 
 </tbody> 
</table>

# 5. **利用keepalived实现高可靠（HA）** #

## 5.1. **高可靠概念** ##

HA(High Available), 高可用性集群，是保证业务连续性的有效解决方案，一般有两个或两个以上的节点，且分为活动节点及备用节点。

![1276309-20190702174815036-218733097.png][]

## 5.2. **高可靠软件keepalived** ##

keepalive是一款可以实现高可靠的软件，通常部署在2台服务器上，分为一主一备。Keepalived可以对本机上的进程进行检测，一旦Master检测出某个进程出现问题，将自己切换成Backup状态，然后通知另外一个节点切换成Master状态。

## 5.3. **keepalived安装** ##

下载keepalived官网:http://keepalived.org

将keepalived解压到/usr/local/src目录下

tar -zxvf keepalived-1.2.19.tar.gz -C /usr/local/src

进入到/usr/local/src/keepalived-1.2.19目录

cd /usr/local/src/keepalived-1.2.19

开始configure

./configure

\#编译并安装

make && make install

## 5.4. **将keepalived添加到系统服务中** ##

拷贝执行文件

cp /usr/local/keepalived/sbin/keepalived /usr/sbin/

将init.d文件拷贝到etc下,加入开机启动项

cp /usr/local/keepalived/etc/rc.d/init.d/keepalived /etc/init.d/keepalived

将keepalived文件拷贝到etc下

cp /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/

创建keepalived文件夹

mkdir -p /etc/keepalived

将keepalived配置文件拷贝到etc下

cp /usr/local/keepalived/etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf

添加可执行权限

chmod +x /etc/init.d/keepalived

添加keepalived到开机启动

chkconfig --add keepalived

chkconfig keepalived on

## 5.5. **配置keepalived虚拟IP** ##

\#MASTER节点

<table> 
 <tbody> 
 <tr> 
 <td> global_defs { } vrrp_instance VI_1 { &nbsp;&nbsp;&nbsp;&nbsp;state MASTER &nbsp;&nbsp;&nbsp;&nbsp;interface eth0 &nbsp;&nbsp;&nbsp;&nbsp;virtual_router_id 51 &nbsp;&nbsp;&nbsp;&nbsp;priority 100 &nbsp;&nbsp;&nbsp;&nbsp;advert_int 1 &nbsp;&nbsp;&nbsp;&nbsp;authentication { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;auth_type PASS &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;auth_pass 1111 &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp;&nbsp;&nbsp;&nbsp;virtual_ipaddress { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;10.0.0.10/24 &nbsp;&nbsp;&nbsp;&nbsp;} } </td> 
 </tr> 
 </tbody> 
</table>

\#BACKUP节点

<table> 
 <tbody> 
 <tr> 
 <td> global_defs { } vrrp_instance VI_1 { &nbsp;&nbsp;&nbsp;&nbsp;state BACKUP &nbsp;&nbsp;&nbsp;&nbsp;interface eth0 &nbsp;&nbsp;&nbsp;&nbsp;virtual_router_id 51 &nbsp;&nbsp;&nbsp;&nbsp;priority 99 &nbsp;&nbsp;&nbsp;&nbsp;advert_int 1 &nbsp;&nbsp;&nbsp;&nbsp;authentication { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;auth_type PASS &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;auth_pass 1111 &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp;&nbsp;&nbsp;&nbsp;virtual_ipaddress { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;10.0.0.10/24 &nbsp;&nbsp;&nbsp;&nbsp;} } </td> 
 </tr> 
 </tbody> 
</table>

\#分别启动两台机器上的keepalived

service keepalived start

## 5.6. **配置keepalived心跳检查** ##

\#MASTER节点

<table> 
 <tbody> 
 <tr> 
 <td> global_defs { } &nbsp; vrrp_script&nbsp;chk_health { &nbsp;&nbsp;&nbsp;&nbsp;script "[[ `ps -ef | grep nginx | grep -v grep | wc -l` -ge 2 ]] &amp;&amp; exit 0 || exit 1" &nbsp;&nbsp;&nbsp;&nbsp;interval 1 &nbsp;&nbsp;&nbsp;&nbsp;weight -2 } &nbsp; vrrp_instance VI_1 { &nbsp;&nbsp;&nbsp;&nbsp;state MASTER &nbsp;&nbsp;&nbsp;&nbsp;interface eth0 &nbsp;&nbsp;&nbsp;&nbsp;virtual_router_id 1 &nbsp;&nbsp;&nbsp;&nbsp;priority 100 &nbsp;&nbsp;&nbsp;&nbsp;advert_int 2 &nbsp;&nbsp;&nbsp;&nbsp;authentication { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;auth_type PASS &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;auth_pass 1111 &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;track_script { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;chk_health &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;virtual_ipaddress { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;10.0.0.10/24 &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;notify_master&nbsp;"/usr/local/keepalived/sbin/notify.sh master" &nbsp;&nbsp;&nbsp;&nbsp;notify_backup&nbsp;"/usr/local/keepalived/sbin/notify.sh backup" &nbsp;&nbsp;&nbsp;&nbsp;notify_fault&nbsp;"/usr/local/keepalived/sbin/notify.sh fault" } </td> 
 </tr> 
 </tbody> 
</table>

\#添加切换通知脚本

vi /usr/local/keepalived/sbin/notify.sh

<table> 
 <tbody> 
 <tr> 
 <td> #!/bin/bash &nbsp; case "$1" in &nbsp;&nbsp;&nbsp;&nbsp;master) &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/usr/local/nginx/sbin/nginx &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;exit 0 &nbsp;&nbsp;&nbsp;&nbsp;;; backup) &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/usr/local/nginx/sbin/nginx -s stop &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/usr/local/nginx/sbin/nginx &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;exit 0 &nbsp;&nbsp;&nbsp;&nbsp;;; &nbsp;&nbsp;&nbsp;&nbsp;fault) &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/usr/local/nginx/sbin/nginx -s stop &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;exit 0 &nbsp;&nbsp;&nbsp;&nbsp;;; &nbsp;&nbsp;&nbsp;&nbsp;*) &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo 'Usage: notify.sh {master|backup|fault}' &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;exit 1 &nbsp;&nbsp;&nbsp;&nbsp;;; esac </td> 
 </tr> 
 </tbody> 
</table>

\#添加执行权限

chmod +x /usr/local/keepalived/sbin/notify.sh

<table> 
 <tbody> 
 <tr> 
 <td> global_defs { } &nbsp; vrrp_script chk_health { &nbsp;&nbsp;&nbsp;&nbsp;script "[[ `ps -ef | grep nginx | grep -v grep | wc -l` -ge 2 ]] &amp;&amp; exit 0 || exit 1" &nbsp;&nbsp;&nbsp;&nbsp;interval 1 &nbsp;&nbsp;&nbsp;&nbsp;weight -2 } &nbsp; vrrp_instance VI_1 { &nbsp;&nbsp;&nbsp;&nbsp;state BACKUP &nbsp;&nbsp;&nbsp;&nbsp;interface eth0 &nbsp;&nbsp;&nbsp;&nbsp;virtual_router_id 1 &nbsp;&nbsp;&nbsp;&nbsp;priority 99 &nbsp;&nbsp;&nbsp;&nbsp;advert_int 1 &nbsp;&nbsp;&nbsp;&nbsp;authentication { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;auth_type PASS &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;auth_pass 1111 &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;track_script { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;chk_health &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;virtual_ipaddress { &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;10.0.0.10/24 &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;notify_master "/usr/local/keepalived/sbin/notify.sh master" &nbsp;&nbsp;&nbsp;&nbsp;notify_backup "/usr/local/keepalived/sbin/notify.sh backup" &nbsp;&nbsp;&nbsp;&nbsp;notify_fault "/usr/local/keepalived/sbin/notify.sh fault" } </td> 
 </tr> 
 </tbody> 
</table>

\#在第二台机器上添加notify.sh脚本

\#分别在两台机器上启动keepalived

service keepalived start

chkconfig keepalived on

转载于:https://www.cnblogs.com/cerofang/p/11122182.html

[1276309-20190702174733822-1372490634.png]: /images/20230810/1431cab835534dbea1b09c244eb15f4b.png
[1276309-20190702174747198-1876152508.png]: /images/20230810/36e592439db7469d99394c9ab2d3b447.png
[http_nginx.org]: http://nginx.org/
[1276309-20190702174815036-218733097.png]: /images/20230810/c53256de2ac04888841ff15007108c06.png