手機(jī)與PC訪問分離
環(huán)境
| 主機(jī) | ip |
|---|---|
| Proxy | 10.0.0.6 |
| web01 | 10.0.0.7 |
| web02 | 10.0.0.8 |
配置web01訪問頁面為iphone頁面
[root@web01 conf.d]# cat sj.conf
server {
listen 80;
server_name sj.oldboy.com;
location / {
root /sj;
index index.html;
}
}
[root@web01 conf.d]# mkdir /sj
[root@web01 conf.d]# echo "Iphone....." >/sj/index.html
[root@web01 conf.d]# systemctl restart nginx
配置web02為android訪問頁面
[root@web02 conf.d]# cat sj.conf
server {
listen 80;
server_name sj.oldboy.com;
location / {
root /sj;
index index.html;
}
}
[root@web02 conf.d]# mkdir /sj
[root@web02 conf.d]# echo "Android...." > /sj/index.html
[root@web02 conf.d]# systemctl restart nginx
通過負(fù)載均衡分流
[root@lb01 ~]# cd /etc/nginx/conf.d/
[root@lb01 conf.d]# cat sj_proxy.conf
upstream iphone {
server 172.16.1.7:80;
}
upstream android {
server 172.16.1.8:80;
}
server {
listen 80;
server_name sj.oldboy.com;
location / {
if ($http_user_agent ~* "iphone"){
proxy_pass http://iphone;
}
if ($http_user_agent ~* "android"){
proxy_pass http://android;
}
}
}
[root@lb01 conf.d]# systemctl restart nginx
訪問測試
nginx+keepalive實現(xiàn)負(fù)載均衡高可用
環(huán)境
| 服務(wù)器系統(tǒng) | 角色 | 外網(wǎng)IP | 內(nèi)網(wǎng)IP |
|---|---|---|---|
| CentOS7.5 | keepalived-master | eth0:10.0.0.5 | eth1:172.16.1.5 |
| CentOS7.5 | keepalived-slave | eth0:10.0.0.6 | eth1:172.16.1.6 |
在lb01和lb02分別安裝keepalived
[root@lb01 ~]# yum install keepalived -y
[root@lb02 ~]# yum install keepalived -y
配置lb01-keepalive-master
[root@lb01 ~]# cat /etc/keepalived/keepalived.conf
global_defs {
router_id lb01
}
vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 50
priority 150
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
10.0.0.3
}
}
配置lb02-keepalive-backup
[root@lb02 ~]# cat /etc/keepalived/keepalived.conf
global_defs {
router_id lb02
}
vrrp_instance VI_1 {
state BAKCUP
interface eth0
virtual_router_id 50
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
10.0.0.3
}
}
keepalived配置文件含義
列腦故障排查思路
當(dāng)keepalive-backup服務(wù)器無法聯(lián)系主服務(wù)器時會響應(yīng)虛擬ip褥琐，此時兩臺服務(wù)器同時響應(yīng)虛擬ip，導(dǎo)致ip無法連接的現(xiàn)象為列腦。
常見列腦故障原因
服務(wù)器網(wǎng)線松動等網(wǎng)絡(luò)故障
服務(wù)器硬件故障發(fā)生損壞現(xiàn)象而崩潰
主備都開啟firewalld防火墻
Nginx服務(wù)死掉等
解決思路
在備上編寫檢測腳本, 測試如果能ping通主并且備節(jié)點還有VIP的話則認(rèn)為產(chǎn)生了列腦
1.編寫腳本
[root@lb02 ~]# cat check_split_brain.sh
#!/bin/sh
lb01_vip=10.0.0.3
lb01_ip=10.0.0.5
while true;do
ping -c 2 -W 3 $lb01_ip &>/dev/null
if [ $? -eq 0 -a `ip add|grep "$lb01_vip"|wc -l` -eq 1 ];then
echo "ha is split brain.warning."
else
echo "ha is ok"
fi
sleep 5
done
2.執(zhí)行腳本
通過screen命令在后臺執(zhí)行該腳本即可
如果Nginx宕機(jī), 會導(dǎo)致用戶請求失敗, 但Keepalived并不會進(jìn)行切換, 所以需要編寫一個腳本檢測Nginx的存活狀態(tài), 如果不存活則kill nginx和keepalived
[root@lb01 ~]# mkdir /server/scripts
[root@lb01 ~]# vim /server/scripts/check_web.sh
#!/bin/sh
#使用while死循環(huán)
while true;do
nginxpid=$(ps -C nginx --no-header|wc -l)
#1.判斷Nginx是否存活,如果不存活則嘗試啟動Nginx
if [ $nginxpid -eq 0 ];then
systemctl start nginx
sleep 5
#2.5秒后再次獲取一次Nginx狀態(tài)
nginxpid=$(ps -C nginx --no-header|wc -l)
#3.再次進(jìn)行判斷, 如Nginx還不存活則停止Keepalived,讓地址進(jìn)行漂移,并退出腳本
if [ $nginxpid -eq 0 ];then
systemctl stop keepalived
exit 1
fi
fi
sleep 5
done
[root@lb01 ~]# chmod +x /server/scripts/check_web.sh
在keepalived配置文件中調(diào)用此腳本镣陕，lb01與lb02都需操作（并將腳本中的循環(huán)取消掉）
[root@lb02 ~]# cat /etc/keepalived/keepalived.conf
global_defs {
router_id lb02
}
vrrp_script check_web {
script "/server/scripts/check_web.sh"
interval 2
weight 50
}
vrrp_instance VI_1 {
state BAKCUP
interface eth0
virtual_router_id 50
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
10.0.0.3
}
}
