haproxy实现discuz论坛的动静分离和负载均衡
一、在cs2、cs3、cs4上安装httpd# yum install httpd# yum install httpd
# yum install httpd
二、在cs3、cs4上安装php和php-mysql# yum install php
# yum install php-mysql
# yum install php
# yum install php-mysql
三、在cs5上安装mysql# yum install mariadb-server
四、在cs5上给dz论坛创建数据库# systemctl start mariadb
# mysql
#创建一个discuz用的数据库，库名叫dz
MariaDB [(none)]> create database dz;
#创建并授权账号dzadmin密码123321给dz库，授权范围为全网
MariaDB [(none)]> grant all privileges on dz.* to dzadmin@'%' identified by '123321';
#授权账号dzadmin密码123321给dz库，授权范围为本地
MariaDB [(none)]> grant all privileges on dz.* to dzadmin@localhost identified by '123321';
#刷新权限
MariaDB [(none)]> flush privileges;
五、配置cs2、cs3、cs4的httpd# vim /etc/httpd/conf/httpd.conf
ServerName cs2.xinfeng.com:80 #修改此处
DocumentRoot "/var/×××w/html/upload" #因为次文件还不存在，所以会报错，等装了dz之后再执行之后的就OK了
# httpd -t
# systemctl start httpd
# vim /etc/httpd/conf/httpd.conf
ServerName cs3.xinfeng.com:80 #修改此处
DocumentRoot "/var/×××w/html/upload"
# httpd -t
# systemctl start httpd
# vim /etc/httpd/conf/httpd.conf
ServerName cs4.xinfeng.com:80 #修改此处
DocumentRoot "/var/×××w/html/upload"
# httpd -t
# systemctl start httpd
六、在cs3安装discuz# wget http://download.comsenz.com/DiscuzX/3.2/Discuz_X3.2_SC_UTF8.zip
# mkdir Discuz
# unzip -d /root/Discuz Discuz_X3.2_SC_UTF8.zip
# cp -a /root/Discuz/* /var/×××w/html/
# chmod -R 777 /var/×××w/html/upload/*
打开cs3.xinfeng.com安装
论坛管理员账号admin，密码123七、将cs3上安装完成后的网站根目录复制到cs2和cs4上#复制cs3下的/var/×××w/html所有文件到cs2/var/×××w/html/下
# scp -r /var/×××w/html/* 192.168.1.114:/var/×××w/html/
#复制cs3下的/var/×××w/html所有文件到cs4/var/×××w/html/下
# scp -r /var/×××w/html/* 192.168.1.115:/var/×××w/html/
八、将cs3和cs4的静态文件存放目录挂载到cs2下#/var/×××w/html/upload中需要挂载的目录如下
data ┄┄┄数据缓存及附件
static ┄┄┄静态文件
设置cs2为NFS服务器# yum install nfs-utils
# yum install rpcbind
# service rpcbind start
# vim /etc/exports
#NFS输出目录为data，可以访问这个目录的主机为cs3和cs4，权限为读写，访问uid为0(root)，允许超过1024的端口号连接
/var/×××w/html/upload/data/ 192.168.1.113(rw,all_squash,anonuid=0,insecure)
/var/×××w/html/upload/data/ 192.168.1.115(rw,all_squash,anonuid=0,insecure)
#NFS输出目录为static，可以访问这个目录的主机为cs3和cs4，权限为读写，访问uid为0(root)，允许超过1024的端口号连接
/var/×××w/html/upload/static/ 192.168.1.113(rw,all_squash,anonuid=0,insecure)
/var/×××w/html/upload/static/ 192.168.1.115(rw,all_squash,anonuid=0,insecure)
# service nfs start
#查看共享状态
# showmount -e
Export list for cs2.xinfeng.com:
/var/×××w/html/upload/static 192.168.1.115,192.168.1.113
/var/×××w/html/upload/data 192.168.1.115,192.168.1.113
在cs3上挂载# yum install nfs-utils
# yum install rpcbind
# service rpcbind start
# service nfs start
# mount 192.168.1.114:/var/×××w/html/upload/data/ /var/×××w/html/upload/data/
# mount 192.168.1.114:/var/×××w/html/upload/static/ /var/×××w/html/upload/static/
# showmount -e 192.168.1.114
Export list for 192.168.1.114:
/var/×××w/html/upload/static 192.168.1.115,192.168.1.113
/var/×××w/html/upload/data 192.168.1.115,192.168.1.113
在cs4上挂载
# yum install nfs-utils
# yum install rpcbind
# service rpcbind start
# service nfs start
# mount 192.168.1.114:/var/×××w/html/upload/data/ /var/×××w/html/upload/data/
# mount 192.168.1.114:/var/×××w/html/upload/static/ /var/×××w/html/upload/static/
# showmount -e 192.168.1.114
Export list for 192.168.1.114:
/var/×××w/html/upload/static 192.168.1.115,192.168.1.113
/var/×××w/html/upload/data 192.168.1.115,192.168.1.113
九、在cs1上安装配置haproxy开起日志功能
# vim /etc/rsyslog.conf
#打开或增加一下几行，让udp514端口处于监听状态，并将日志纪录到指定文件中
$ModLoad imudp
$UDPServerRun 514
local2.* /var/log/haproxy.log
# systemctl restart rsyslog.service
# ss -unl | grep 514
UNCONN 0 0 *:514 *:*
UNCONN 0 0 :::514 :::*
配置haproxy
# yum install haproxy
# vim /etc/haproxy/haproxy.cfg
#---------------------------------------------------------------------
global #全局配置
log 127.0.0.1 local2 #日志纪录位置
chroot /var/lib/haproxy #haproxy的工作目录
pidfile /var/run/haproxy.pid #pid文件位置
maxconn 4000 #最大连接数
user haproxy #运行时使用的用户身份
group haproxy #运行时使用的组身份
daemon #启动为守护进程，不加此处运行在前台
stats socket /var/lib/haproxy/stats #本地访问stats统计信息时以套接字方式通信
defaults #默认配置
mode http #已http模式运行
log global #默认日志为全局配置中日志的设置
option httplog
option dontlognull
option http-server-close
option forwardfor except 127.0.0.0/8 #除本机外所有发往服务器的请求首部中加入“X-Forwarded-For”首部
option redispatch
retries 3
timeout http-request 10s
timeout queue 1m
timeout connect 10s
timeout client 1m
timeout server 1m
timeout http-keep-alive 10s
timeout check 10s
maxconn 3000 #前端最大并发连接数
listen static #设置统计报告页面
bind *:9000 #监听在本机9000端口
stats enable #打开
stats hide-version #隐藏haproxy版本
stats uri /hadzadmin?stats #统计页面路径
stats realm "HAProxy/ Static" #打开统计页面的认证功能
stats auth hasts:123 #进入统计页面所使用的账号hasts和密码123
stats admin if TRUE #条件满足时进入管理级别
frontend dz #前端设置
bind *:80 #监听在80端口
acl url_static path_beg -i /data /static /images /javascript /stylesheets #url开头为这些的静态内容
acl url_static path_end -i .jpg .gif .png .css .js .html .ico #url结尾带为这些的静态内容
use_backend staser if url_static #如果静态内容符合url_static的条件，就调度到staser中的服务器
default_backend dyser #其他默认调度到dyser中的服务器
backend dyser #后端动态内容服务器设置
cookie srv insert nocache #在cookie中插入srv字串防止登录信息丢失
balance roundrobin #调度算法为轮询
server cs3 192.168.1.113:80 check
server cs4 192.168.1.115:80 check
rspadd X-Via:dynamic
backend staser #后端静态内容服务器设置
balance roundrobin
server cs1 192.168.1.114:80 check
rspadd X-Via:static
# systemctl start haproxy
修改cs2、cs3、cs4的http配置文件，让他们能收到真实访问的ip# vim /etc/httpd/conf/httpd.conf
#修改一下内容
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
# service httpd reload
#cs3和cs4执行同样的操作
十、测试分别看下cs2,cs3,cs4最近的访问日志# tail -1 /var/log/httpd/access_log
192.168.1.110 - - "GET /data/attachment/forum/201606/05/161843j4au463pthh432zf.png HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.122 Safari/537.36 SE 2.X MetaSr 1.0"
# tail -1 /var/log/httpd/access_log
192.168.1.110 - - "GET /misc.php?mod=patch&action=ipnotice&_r=0.40765136777967004&inajax=1&ajaxtarget=ip_notice HTTP/1.1" 200 65 "http://cs1.xinfeng.com/forum.php?mod=viewthread&tid=1&extra=page%3D1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
# tail -1 /var/log/httpd/access_log
192.168.1.110 - - "GET /misc.php?mod=patch&action=pluginnotice&inajax=1&ajaxtarget=plugin_notice HTTP/1.1" 200 65 "http://cs1.xinfeng.com/forum.php?mod=viewthread&tid=1&extra=page%3D1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
转载自：https://blog.51cto.com/5165807/2320969
相关参考：https://blog.51cto.com/6638225/1872121
页:
[1]