小型架构实验模拟

一实验需求

二实验环境

22 机器：做nginx 反向代理做静态资源服务器

装 nginx keepalived filebeat

44机器： 做22 机器的备胎

装nginx keepalived

99机器：做mysql的主

装mysqld 装node 装filebeat

77机器：做mysql从做tomcat动态资源服务器

装mysqld node tomcat

88机器：做mysql从做tomcat 动态资源服务器

装mysqld node1 tomcat

66 机器：做elk 节点服务器且做mha 的manager 节点

装logstash es es-head kibana manager

三实验步骤

1，先做nginx的反向代理和不同域名指向

1.1（22,44）nginx 配置文件如下：


http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
 
    access_log  /var/log/nginx/access.log  main;
 
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
 
    upstream tomcat {
      server 192.168.217.77:8080;
      server 192.168.217.88:8080;
    }
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
 
    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;
 
    server {
        listen       80;
        listen       [::]:80;
        server_name  _;
        root         /usr/share/nginx/html;
 
 
          location ~*\.jsp$ {
        proxy_pass http://tomcat;
        }
 
        location ~* \.(jpg|jpeg|png|gif|bmp|html)$ {
        root  /usr/share/nginx/html/;
        }
}
 
  server {
        listen       80;
 
 
 
       server_name www.benet.com;
       root /data/benet;
       location / {
       proxy_pass http://192.168.217.77:8080;
       }
}
 
  server {
        listen       80;
 
       server_name www.kgc.com;
       root /data/kgc;
       location / {
       proxy_pass http://192.168.217.88:8080;
       }
 
}
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
 
  server {
        listen       80;
        error_page 404 /404.html;
        location = /404.html {
        }
 
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
 
}

1.2 解释

1.3 实验效果

访问nginx 以.jsp 结尾会以轮询方式访问后面的tomcat

访问 nginx 以.png 结尾会在本地找

访问 benet 域名会指向tomcat1 (记得本机做域名映射)

访问kgc 域名会指向 tomcat 2

以上答案错误！正确答案：

客户只知道域名根据域名做对应的动静分离

2，做nginx 的高可用

2.1 keepalive 配置文件如下 (这是主)

备改 router_id LVS_02 state BACKUP priority 80


! Configuration File for keepalived
 
global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 127.0.0.1
   smtp_connect_timeout 30
   router_id LVS_01
   vrrp_skip_check_adv_addr
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}
 
vrrp_script check_down {
        script "/etc/keepalived/ng.sh"
        interval 1
        weight -30
        fall 3
        rise 2
        timeout 2
}
 
vrrp_instance VI_1 {
    state MASTER
    interface ens33
    virtual_router_id 51
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
 
    virtual_ipaddress {
        192.168.217.188
    }
 
    track_script {
        check_down
}
 
}

2.2 （22,44机器）写检测nginx 是否活着的脚本（注意路径）

2.3 实验效果

虚拟ip 188 会飘在 22 机器上（主）

当手动制造 22 机器故障 systemctl stop nginx 虚拟ip 会飘到44机器上

证明：若主出现故障从会顶上来

3，做mysql 主从复制与读写分离 mha做高可用

前篇已详细概述，本篇暂不赘述

4，做filebeat 收集nginx 的正确错误日志

4.1 （22机器）filebeat 的配置文件


#=========================== Filebeat inputs =============================
 
filebeat.inputs:
 
# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.
 
- type: log
 
  enabled: true
 
  paths:
    - /var/log/nginx/access.log
  tags: ["access"]
 
- type: log
 
  enabled: true
 
  paths:
    - /var/log/nginx/error.log
  tags: ["error"]


#----------------------------- Logstash output --------------------------------
output.logstash:
  # The Logstash hosts
  hosts: ["192.168.217.66:5044"]
 
  # Optional SSL. By default is off.
  # List of root certificates for HTTPS server verifications
  #ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
 
  # Certificate for SSL client authentication
  #ssl.certificate: "/etc/pki/client/cert.pem"
 
  # Client Certificate Key
  #ssl.key: "/etc/pki/client/cert.key"