Day 22
LVS的配置
========环境准备=======
DSN() 用来解析各主机的域名和ip地址，配置域名解析huajuan，负责管理其他主机
web1--->web1.tangpin.huajuan
web2--->web2.tangpin.huajuan
dns--->dns.tangpin.huajuan
web1(192.168.2.200) 用nginx部署
web2(192.168.2.201) 用nginx部署
nat(添加一块网卡，ip为192.168.2.202，vip为192.168.2.203)
dns(192.168.2.204)
client(192.168.2.205)
正常来说应该配置两个不同的网段的ip，一个对外ip，一个对内的ip，现在只要使用nat的网络模式，可以配置桥接模式对外，nat对内，但也可将两个ip的网络模式均设置为vm2【nat】模式，并且保证物理机都能Ping通这两个ip。
Web主机
======web1=======
root@web1 \~\]# yum -y install nginx \[root@web1 \~\]# echo '====web1======' /usr/share/nginx/html/index.html ====web1====== /usr/share/nginx/html/index.html \[root@web1 \~\]# nginx \[root@web1 \~\]# ss -lntpu\|grep 80 tcp LISTEN 0 128 \*:80 \*:\* users:(("nginx",pid=1575,fd=6),("nginx",pid=1574,fd=6)) tcp LISTEN 0 128 :::80 :::\* users:(("nginx",pid=1575,fd=7),("nginx",pid=1574,fd=7)) 浏览器访问进行测试，能看到重新编写的页面 ****======web2========**** \[root@web2 \~\]# yum -y install nginx\^C \[root@web2 \~\]# echo '====web2======' /usr/share/nginx ====web2====== /usr/share/nginx/html/index.html \[root@web2 \~\]# nginx \[root@web2 \~\]# ss -lntpu\|grep 80 tcp LISTEN 0 128 \*:80 \*:\* users:(("nginx",pid=1837,fd=6),("nginx",pid=1836,fd=6)) tcp LISTEN 0 128 :::80 :::\* users:(("nginx",pid=1837,fd=7),("nginx",pid=1836,fd=7)) ****======Nat主机=======**** \[root@nat \~\]#ping nat.tangoin.huajuan \[root@nat \~\]# yum -y install ntpdate \[root@nat \~\]# ntpdate cn.ntp.org.cn 12 Aug 14:12:20 ntpdate\[1580\]: adjust time server 203.107.6.88 offset 0.011727 sec \[root@nat \~\]# which ntpdate /usr/sbin/ntpdate \[root@nat \~\]# crontab -e \* 2 \* \* \* /usr/sbin/ntpdate cn.ntp.org.cn \[root@dns \~\]# crontab -l 30 2 \* \* \* /usr/sbin/ntpdate 192.168.2.202 \[root@nat \~\]# yum -y install ntp \[root@nat \~\]# systemctl start ntpd \[root@nat \~\]# systemctl enable ntpd Created symlink from /etc/systemd/system/multi-user.target.wants/ntpd.service to /usr/lib/systemd/system/ntpd.service. ****======DNS服务搭建=======**** 1、安装bind软件 \[root@DNS \~\]# yum search bind # 查询是否有bind \[root@DNS \~\]# yum -y install bind # 安装 \[root@DNS \~\]#yum list installed\|grep bind \[root@DNS \~\]#rpm -ql bind /etc/named.conf /etc/named.rfc1912.zones \[root@DNS \~\]#systemctl start named 2、备份两个文件 \[root@DNS \~\]# cp /etc/named.conf /etc/named.conf.bak \[root@DNS \~\]# cp /etc/named.rfc1912.zones /etc/named.rfc1912.zones.bak 3、修改named.conf文件 \[root@DNS \~\]# vim /etc/named.conf listen-on port 53 { 127.0.0.1;any; }; allow-query { localhost;any; }; \[root@DNS \~\]#systemctl restart named \[root@DNS \~\]#vim /etc/named.rfc1912.zones zone "tangpin.huajuan" IN { type master; file "tangpin.huajuan.zone"; allow-update { none; }; }; \[root@DNS \~\]# ls /var/named/ data named.ca named.localhost slaves dynamic named.empty named.loopback 4、创建文件，定义正向解析 \[root@DNS \~\]# cd /var/named/ \[root@DNS named\]# cp -p named.localhost tangpin.huajuan.zone 5、编辑域名文件 \[root@DNS named\]#vim tangpin.huajuan.zone ...... NS @ A 127.0.0.1 AAAA ::1 nat A 192.168.2.202(nat主机的ip) xn A 192.168.2.203(nat主机的虚拟ip) web1 A 192.168.2.200(web1主机的ip) web2 A 192.168.2.201(web2主机的ip) 4、检查配置文件 \[root@DNS named\]# named-checkconf /etc/named.conf \[root@DNS named\]# named-checkconf /etc/named.rfc1912.zones \[root@DNS named\]# named-checkzone tangpin.huajuan.zone tangpin.huajuan.zone \[root@DNS named\]# systemctl restart named 5、真机访问测试 依次ping web1.tangpin.huajuan、ping web2.tangpin.huajuan、ping nat.tangpin.huajuan ping www.yuanyu.zhangmin PING nat.tangpin.huajuan (192.168.2.202) 56(84) bytes of data. 64 bytes fromnat.tangpin.huajuan (192.168.2.202): icmp_seq=1ttl=64 time=0.011 ms 64 bytes from nat.tangpin.huajuan (192.168.2.202): icmp_seq=2ttl=64 time=0.026 ms 64 bytes from nat.tangpin.huajuan (192.168.2.202): icmp_seq=3ttl=64 time=0.022 ms 64 bytes from nat.tangpin.huajuan (192.168.2.202): icmp_seq=4ttl=64 time=0.043 ms ****======client测试=======**** \[root@client \~\]#vim /etc/sysconfig/network-scripts/ifcfg-ens33 DNS3=192.168.2.204 # 将DNS服务器ip地址(或者域名)添加进去 \[root@DNS \~\]# crontab -e 30 2 \* \* \* /usr/sbin/ntpdate 192.168.2.202 ****======NAT模式搭建实战(nat主机)=======**** ****# 安装ipvsadm**** \[root@dns \~\]# yum -y install ipvsadm ****# 清空之前的规则**** \[root@nat \~\]# ipvsadm -L -n IP Virtual Server version 1.2.1 (size=4096) Prot LocalAddress:Port Scheduler Flags -\> RemoteAddress:Port Forward Weight ActiveConn InActConn TCP 192.168.2.203:80 rr ****# 添加对外网的规则(vip)**** \[root@nat \~\]# ipvsadm -A -t ****192.168.2.203:80**** -s rr ****【**** ****公网ip】**** \[root@nat \~\]# ipvsadm -L -n IP Virtual Server version 1.2.1 (size=4096) Prot LocalAddress:Port Scheduler Flags -\> RemoteAddress:Port Forward Weight ActiveConn InActConn TCP 192.168.2.203:80 rr ****# 添加对内网的规则**** \[root@nat \~\]# ipvsadm -a -t ****192.168.2.202:80**** -r ****192.168.2.200**** ****:80**** -m ****内网**** ****web1**** \[root@nat \~\]# ipvsadm -a -t ****192.168.2.202:80**** -r ****192.168.2.200**** ****:80**** -m ****【内网】**** ****【**** ****web2】**** ****Mysql主从复制补充**** ****slave服务器不⼩⼼写⼊数据的解决⽅案**** 1. 正常情况下，master既可以读，也可以写，但是slave从服务器 只能读取操作，⼀旦我们在slave从服务器中写⼊数据，主从结 构会失败。 2. show slave status\\G 3. 如果数据⽐较少，可以通过跳过当前语句的⽅式解决，但是如果从服务器写⼊的数据⽐较多，架构必须重新搭建 4. 可通过变量sql_slave_skip_counter临时跳过事务进⾏处理 mysql\> set GLOBAL sql_slave_skip_counter=N # n代表跳过的n个事务 mysql\> stop slave; mysql\> start slave; 5. 跳过事务应该在slave上运⾏ 6. 传统的ab复制⽅式可以使⽤，基于GTIDs的⽅式不⽀持基于gtids的主从复制搭建 ****基于gtids的主从复制搭建**** 1. 什么是GTIDs 1)Global transaction identifiers 全局事务标识符，是mysql5.6新加⼊的技术 2)使⽤GTIDs时，每⼀个事务都可以被识别和个跟踪 3)添加的新的slave或者发⽣故障时，需要将master身份或者⻆⾊迁移到slave上时，都需要考虑哪⼀个⼆进制⽇志以及哪个position值，极⼤简化了相关操作。 4)GTIDs是完全基于事务的，因此不⽀持MYISAM存储引擎 5) GTIDs由source_id 和transaction组成； source_id来源于server.uuid可以在auto.cnf中看到；tansaction_id 是⼀个序列数字，⾃动⽣成 2. 限制条件 1)不⽀持⾮事务引擎（MyISAM）因为可以回导致多个gtid分布给同⼀个事务 2)create table select语句不⽀持（主库语法报错） 3) create、drop temprary table语法不⽀持 4)必须使⽤enforce-gtid-consistency参数 5)sql-slave-skip-counter不⽀持 6) gtid复制环境中必须统⼀开启gtid或者关闭gtid 7)在5.7之前使⽤mysql upgrade命令也会出现问题 3. replication是基于传统的⽅式部署，并且已经在运⾏，利⽤已经 存在的环境升级⾄基于GTIDs的replication 1)修改配置⽂件，⽀持GTIDs（主从） 2)重启数据库（主从） 3)为了保证数据⼀直，master和slave都设置为只读 4)从服务器上重新配置同步 4. 实践步骤 1)修改配置⽂件⽀持GTIDs ****=======**** ****master**** ****的配置=========**** \[mysqld
basedir=/usr/local/mysql
datadir=/usr/local/mysql/data
socket=/tmp/mysql.sock
port=3306
log-error=/usr/local/mysql/data/db01-
master.err
log-bin=/usr/local/mysql/data/binlog
server-id=10
character_set_server=utf8mb4
gtid-mode=on
log-slave-updates=1
enforce-gtid-consistency
=======slave的配置=========
mysqld
basedir=/usr/local/mysql
datadir=/usr/local/mysql/data
socket=/tmp/mysql.sock
port=3310
log-error=/usr/local/mysql/data/db01-
slave.err
relay-log=/usr/local/mysql/data/relaylog
server-id=11
character_set_server=utf8mb4
log-bin=/usr/local/mysql/data/binlog
gtid-mode=on
log-slave-updates=1
enforce-gtid-consistency
skip-slave-start
2)重启启动mysql服务
root@mysql001 \~\]# service mysql8 restart Shutting down MySQL.......... SUCCESS! Starting MySQL.. SUCCESS! \[root@slave \~\]# service mysql8 restart Shutting down MySQL.. SUCCESS! Starting MySQL... SUCCESS! 3)主从配置只读模式 mysql\> set @@global.read_only=ON; Query OK, 0 rows affected (0.00 sec) mysql\> set @@global.read_only=ON; Query OK, 0 rows affected (0.00 sec) 4) slave重新配置change master to mysql\> stop slave; mysql\> reset slave; mysql\> change master to -\> master_host='10.1.1.100', -\> master_user='slave', -\> master_password='slave_123', -\> master_port=3306, -\> master_auto_position=1; Query OK, 0 rows affected, 8 warnings (0.01sec) mysql\> start slave; mysql\> show slave status\\G  5)关闭主从服务器的只读模式 mysql\> set @@global.read_only=OFF; Query OK, 0 rows affected (0.00 sec) mysql\> set @@global.read_only=OFF; Query OK, 0 rows affected (0.00 sec) 6)获得公钥 \[root@slave \~\]# mysql -uslave -pslave_123 -h 10.1.1.100 -P3306 --get-server-public-key mysql: \[Warning\] Using a password on the command line interface can be insecure. Welcome to the MySQL monitor. Commands end with ; or \\g. Your MySQL connection id is 11 Server version: 8.0.33 MySQL Community Server - GPL Copyright (c) 2000, 2023, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\\h' for help. Type '\\c' to clear the current input statement. mysql\> quit Bye