Centos7-64bit-编译安装配置Nginx stream四层负载均衡 动态加载

2018-08-10 17:12

分享人：老牛

yum install screen -y && screen -S nginx

sudo yum -y groupinstall "Development Tools" && yum -y epel-release wget gc autoconf automake pcre-devel zlib-devel openssl-devel

----------------------yum安装nginx(默认未编译stream模块,如果需要用按下面方法编译)------------------------------

安装nginx

sudo yum install nginx -y

设置nginx开机启动

sudo systemctl enable nginx

-----------------------通过编译安装nginx(开启stream模块 动态加载方式)-----------------------------

编译安装nginx

sudo yum check-update || sudo yum update -y

yum groupinstall -y 'Development Tools'

yum install -y epel-release

yum install -y wget perl perl-devel perl-ExtUtils-Embed libxslt libxslt-devel libxml2 libxml2-devel gd gd-devel GeoIP GeoIP-devel

wget https://nginx.org/download/nginx-1.13.2.tar.gz && tar zxvf nginx-1.13.2.tar.gz

wget https://ftp.pcre.org/pub/pcre/pcre-8.40.tar.gz && tar xzvf pcre-8.40.tar.gz

wget https://www.zlib.net/zlib-1.2.11.tar.gz && tar xzvf zlib-1.2.11.tar.gz

wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz && tar xzvf openssl-1.1.0f.tar.gz

rm -rf *.tar.gz

cd ~/nginx-1.13.2

cp ~/nginx-1.13.2/man/nginx.8 /usr/share/man/man8

gzip /usr/share/man/man8/nginx.8

man nginx

./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --user=nginx --group=nginx --build=CentOS --builddir=nginx-1.13.2 --with-select_module --with-poll_module --with-threads --with-file-aio --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_geoip_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_auth_request_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --with-mail=dynamic --with-mail_ssl_module --with-stream=dynamic --with-stream_ssl_module --with-stream_realip_module --with-stream_geoip_module=dynamic --with-stream_ssl_preread_module --with-compat --with-pcre=../pcre-8.40 --with-pcre-jit --with-zlib=../zlib-1.2.11 --with-openssl=../openssl-1.1.0f --with-openssl-opt=no-nextprotoneg --with-debug

make

make install

ln -s /usr/lib64/nginx/modules /etc/nginx/modules

nginx -V

useradd --system --home /var/cache/nginx --shell /sbin/nologin --comment "nginx user" --user-group nginx

nginx -t

mkdir -p /var/cache/nginx && sudo nginx -t

vi /usr/lib/systemd/system/nginx.service

写入以下内容

[Unit]

Description=nginx - high performance web server

Documentation=https://nginx.org/en/docs/

After=network-online.target remote-fs.target nss-lookup.target

Wants=network-online.target

[Service]

Type=forking

PIDFile=/var/run/nginx.pid

ExecStartPre=/usr/sbin/nginx -t -c /etc/nginx/nginx.conf

ExecStart=/usr/sbin/nginx -c /etc/nginx/nginx.conf

ExecReload=/bin/kill -s HUP $MAINPID

ExecStop=/bin/kill -s TERM $MAINPID

[Install]

WantedBy=multi-user.target

启动nginx 设置开机启动nginx

systemctl start nginx.service && sudo systemctl enable nginx.service

检查nginx是否开机启动

systemctl is-enabled nginx.service

检查nginx是否正常运行

sudo systemctl status nginx.service

ps aux | grep nginx

curl -I 127.0.0.1

shutdown -r now

rm /etc/nginx/koi-utf /etc/nginx/koi-win /etc/nginx/win-utf

mkdir ~/.vim/

cp -r ~/nginx-1.13.2/contrib/vim/* ~/.vim/

rm /etc/nginx/*.default

-------------------------------nginx编译安装完毕------------------------------------------

-----------------------防火墙管理(未设置nginx 80端口可能无法访问)-----------------------------

启动防火墙

systemctl start firewalld.service

添加防火墙规则(添加80 443端口)--刚编译的 若未添加 可能无法访问

sudo firewall-cmd --permanent --zone=public --add-service=http

sudo firewall-cmd --permanent --zone=public --add-service=https

sudo firewall-cmd --reload

如需要可关闭防火墙

systemctl stop firewalld.service

关闭防火墙开机启动

systemctl disable firewalld.service

设置防火墙开机启动

systemctl enable firewalld.service

Centos7 防火墙 相关控制命令

systemctl is-enabled nginx.service #查询nginx是否开机启动

systemctl enable nginx.service #开机运行nginx

systemctl disable nginx.service #取消开机运行nginx

systemctl start nginx.service #启动nginx

systemctl stop nginx.service #停止nginx

systemctl restart nginx.service #重启nginx

systemctl reload nginx.service #重新加载nginx配置文件

systemctl status nginx.service #查询nginx运行状态

systemctl --failed #显示启动失败的服务

#查看端口监听情况

ss -tlnp|grep :80

nginx服务器默认root路径

/usr/share/nginx/html

nginx服务器默认配置文件

/etc/nginx/nginx.conf

追加配置文件路径(会自动加载.conf结尾的文件)

/etc/nginx/conf.d

---------------------------负载均衡配置------------------------------

清空nginx配置

cp /etc/nginx/nginx.conf /etc/nginx/nginx.confbackup

cat /dev/null > /etc/nginx/nginx.conf

vi /etc/nginx/nginx.conf

根据实际情况添加负载均衡配置

worker_processes 1;

load_module  "modules/ngx_stream_module.so";

events {

worker_connections  1024;

}

stream {

upstream backend {

hash $remote_addr consistent;

server 176.58.111.12:80 weight=5 max_fails=3 fail_timeout=30s;

server 178.79.163.35:80 weight=5  max_fails=3 fail_timeout=30s;

}

server {

listen 80;

proxy_connect_timeout 1s;

proxy_timeout 3s;

proxy_pass backend;

}

}