一、 源码安装nginx

1.安装基础依赖包

yum -y install gcc automake autoconf libtool make gcc gcc-c++ openssl openssl-devel

2. 添加nginx用户和用户组

groupadd -r nginx

useradd -r -g nginx nginx

2.  安装pcre

/usr/local/src/

wget https://sourceforge.net/projects/pcre/files/pcre/8.41/pcre-8.41.tar.gz

tar -zxvf pcre-8.41.tar.gz

wget https://sourceforge.net/projects/libpng/files/zlib/1.2.11/zlib-1.2.11.tar.gz

tar –zxvf zlib-1.2.11.tar.gz

wget https://www.openssl.org/source/openssl-1.1.0b.tar.gz

tar –zxvf openssl-1.1.0b.tar.gz

3. 安装nginx

编译：

./configure \

--prefix=/usr/local/nginx/ \

--sbin-path=/usr/local/nginx/sbin/nginx \

--conf-path=/usr/local/nginx/nginx.conf \

--pid-path=/usr/local/nginx/nginx.pid \

--user=nginx \

--group=nginx \

--with-http_ssl_module \

--with-http_flv_module \

--with-http_mp4_module \

--with-http_stub_status_module \

--with-http_gzip_static_module \

--http-client-body-temp-path=/var/tmp/nginx/client/ \

--http-proxy-temp-path=/var/tmp/nginx/proxy \

--http-fastcgi-temp-path=/var/tmp/nginx/fcgi \

--http-uwsgi-temp-path=/var/tmp/nginx/uwsgi \

--http-scgi-temp-path=/var/tmp/nginx/scgi \

--with-pcre=/usr/local/src/pcre-8.44 \

--with-zlib=/usr/local/src/zlib-1.2.11 \

--with-openssl=/usr/local/src/openssl-1.1.0g

注：

当前所在目录一定要是/usr/local/src/nginx-1.10.2

--with-pcre=/usr/local/src/pcre-8.41 指的是pcre-8.41 的源码路径。

--with-zlib=/usr/local/src/zlib-1.2.11 指的是zlib-1.2.11 的源码路径。

--with-openssl=/usr/local/src/openssl-1.1.0g 指的是openssl-1.1.0g 的源码路径。

make && make install

3. 在/etc/init.d/ 添加nginx启动脚本

#! /bin/bash#chkconfig: - 85 15

PATH=/usr/local/nginx

DESC="nginx daemon"NAME=nginx

DAEMON=$PATH/sbin/$NAME

CONFIGFILE=$PATH/$NAME.conf

PIDFILE=$PATH/logs/$NAME.pid

SCRIPTNAME=/etc/init.d/$NAME

set-e

[-x "$DAEMON" ] ||exit 0

do_start() {

$DAEMON-c $CONFIGFILE || echo -n "nginx already running"}

do_stop() {

$DAEMON-s stop || echo -n "nginx not running"}

do_reload() {

$DAEMON-s reload || echo -n "nginx can't reload"}

case"$1" instart)

echo-n "Starting $DESC: $NAME"do_start

echo".";;

stop)

echo-n "Stopping $DESC: $NAME"do_stop

echo".";;

reload|graceful)

echo-n "Reloading $DESC configuration..."do_reload

echo".";;

restart)

echo-n "Restarting $DESC: $NAME"do_stop

do_start

echo".";;*)

echo"Usage: $SCRIPTNAME {start|stop|reload|restart}" >&2exit3;;

esac

exit 0

nginx 启动脚本

chmod a+x /etc/init.d/nginx

chkconfig --add nginx

chkconfig nginx on

4. start/stop/status  nginx service

#启动nginx服务

systemctl start nginx.service

#停止nginx服务

systemctl stop nginx.service

#重启nginx服务

systemctl restart nginx.service

#重新读取nginx配置(这个最常用, 不用停止nginx服务就能使修改的配置生效)

systemctl reload nginx.service

二、 编译php

21. 安装基础依赖包

yum -y install gcc gcc-c++ glibc libXpm-devel postgresql-devel libxml2 libxml2-devel openssl openssl-devel curl-devel  libjpeg.x86_64 libpng.x86_64 freetype.x86_64 libjpeg-devel.x86_64 libpng-devel.x86_64 freetype-devel.x86_64 libjpeg-devel bzip2-devel.x86_64 libXpm-devel   gmp-devel icu libicu libicu-devel  php-mcrypt  libmcrypt  libmcrypt-devel  postgresql-devel libxslt-devel

2.2. 编译php

遇到如下错误

1)checkconfig php 报错 configure: error: mcrypt.h not found. Please reinstall libmcrypt.？

yum -y install libXpm-devel

2)如果出现错误：--ENABLE-OPCACHE=NO

时执行export LD_LIBRARY_PATH=/usr/local/mysql/lib或export LD_LIBRARY_PATH=/lib/:/usr/lib/:/usr/local/lib

'./configure' '--prefix=/usr/local/php' '--with-pdo-pgsql' '--with-zlib-dir' '--with-freetype-dir' '--enable-mbstring' '--with-libxml-dir=/usr' '--enable-soap' '--enable-calendar' '--with-curl' '--with-mcrypt' '--with-gd' '--with-pgsql' '--disable-rpath' '--enable-inline-optimization' '--with-bz2' '--with-zlib' '--enable-sockets' '--enable-sysvsem' '--enable-sysvshm' '--enable-pcntl' '--enable-mbregex' '--enable-exif' '--enable-bcmath' '--with-mhash' '--enable-zip' '--with-pcre-regex' '--with-pdo-mysql' '--with-mysqli' '--with-jpeg-dir=/usr' '--with-png-dir=/usr' '--enable-gd-native-ttf' '--with-openssl' '--with-fpm-user=www-data' '--with-fpm-group=www-data' '--with-libdir=/lib/x86_64-linux-gnu/' '--enable-ftp' '--with-gettext' '--with-xmlrpc' '--with-xsl' '--enable-opcache' '--enable-fpm' '--with-iconv' '--with-xpm-dir=/usr'

make && make install

2.3 copy 配置文件

cp /usr/local/src/php-7.1.6/php.ini-development /usr/local/php/lib/php.ini

cp /usr/local/php/etc/php-fpm.conf.default /usr/local/php/etc/php-fpm.conf

cp /usr/local/php/etc/php-fpm.d/www.conf.default /usr/local/php/etc/php-fpm.d/www.conf

cp /usr/local/src/php-7.1.6/sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm

2.4 修改vim /etc/profile文件使其永久性生效，并对所有系统用户生效，在文件末尾加上如下两行代码

PATH=$PATH:/usr/local/php/bin

export PATH

source /etc/profile

启动php-fpm: useradd www-data; /usr/local/php/sbin/php-fpm

2.5 php-fpm设置开机自启 systemctl enable php-fpm

四、nginx(负载均衡)

4.1. 配置nginx yum 源

cat /etc/yum.repos.d/nginx.repo

[nginx]

name=nginx repo

baseurl=http://nginx.org/packages/centos/7/$basearch/

gpgcheck=0

enabled=1

4。2. 安装nginx

yum install nginx  -y

4.3 配置nginx 负载均衡

1)cat /etc/nginx/nginx.conf

upstream web{

server 192.168.1.134;

server 192.168.1.137;

}

2) cat /etc/nginx/conf.d/default.conf(192.168.1.148)

server {

listen 80;

server_name 192.168.1.148;

#charset koi8-r;

#access_log /var/log/nginx/host.access.log main;

location / {

#root /usr/share/nginx/html;

index index.html index.php index.htm;

proxy_pass http://web;

}

3) cat /etc/nginx/conf.d/default.conf(192.168.1.149)

server {

listen 80;

server_name 192.168.1.149;

#charset koi8-r;

#access_log /var/log/nginx/host.access.log main;

location / {

#root /usr/share/nginx/html;

index index.html index.php index.htm;

proxy_pass http://web;

}

4.4  测试分别148/149正常访问web服务(134/137)

curl 192.168.1.148

curl 192.168.1.149

五、 部署keepalived(实现web集群高可用 148主 149 备)

5.1 安装keepalived(分别在148和149 安装)

yum install wget make gcc gcc-c++ openssl-devel

wget http://www.keepalived.org/software/keepalived-2.0.7.tar.gz

tar zxvf keepalived-2.0.7.tar.gz

cd keepalived-2.0.7

./configure --prefix=/opt/keepalived

如果报以下警告：

*** WARNING - this build will not support IPVS with IPv6. Please install libnl/libnl-3 dev libraries to support IPv6 with IPVS.

不用担心，我们只需要用到VRRP功能，不需要用IPVS功能，所以请确保以下三项是yes就行了。

Use VRRP Framework : Yes

Use VRRP VMAC : Yes

Use VRRP authentication : Yes

make && make install

5.2 配置keepalived

mkdir /etc/keepalived

cp /data/keepalived/etc/keepalived/keepalived.conf /etc/keepalived/

systemctl enable keepalived

1) keepalived matser和backup 配置

cat /etc/keepalived/keepalived.conf

! Configuration Fileforkeepalived

global_defs {

notification_email {

acassen@firewall.loc

failover@firewall.loc

sysadmin@firewall.loc

}

notification_email_from Alexandre.Cassen@firewall.loc

smtp_server192.168.200.1smtp_connect_timeout30router_id LVS_DEVEL

vrrp_skip_check_adv_addr

vrrp_strict

vrrp_garp_interval 0

vrrp_gna_interval 0

}

vrrp_script chk_nginx {

script"/etc/keepalived/nginx_pid.sh" #检查nginx状态的脚本

interval 2weight3}

vrrp_instance VI_1 {

state MASTER

interface ens33

virtual_router_id51priority100advert_int1authentication {

auth_type PASS

auth_pass1111}

virtual_ipaddress {192.168.1.66}

track_script {

chk_nginx

}

}

keepa matser

cat /etc/keepalived/keepalived.conf

! Configuration Fileforkeepalived

global_defs {

notification_email {

acassen@firewall.loc

failover@firewall.loc

sysadmin@firewall.loc

}

notification_email_from Alexandre.Cassen@firewall.loc

smtp_server192.168.200.1smtp_connect_timeout30router_id LVS_DEVEL

vrrp_skip_check_adv_addr

vrrp_strict

vrrp_garp_interval 0

vrrp_gna_interval 0

}

vrrp_script chk_nginx {

script"/etc/keepalived/nginx_pid.sh" #检查nginx状态的脚本

interval 2weight3}

vrrp_instance VI_1 {

state BACKUP

interface ens33

virtual_router_id51priority91advert_int1authentication {

auth_type PASS

auth_pass1111}

virtual_ipaddress {192.168.1.66}

track_script {

chk_nginx

}

}

keepa backup 配置

2)监控nginx脚本

cat /etc/keepalived/nginx_pid.sh#!/bin/bash#version 0.0.1#A=`ps -C nginx --no-header |wc -l`if [ $A -eq 0 ];then

systemctl restart nginx.service

sleep3

if [ `ps -C nginx --no-header |wc -l` -eq 0 ];then

systemctl stop keepalived

fi

fi

nginx 监控状态脚本

5.4  配置firewalld防火墙允许vrrp协议

VRRP(Virtual Router Redundancy Protocol，虚拟路由器冗余协议)

主(148):

systemctl start  firewalld.service

systemctl enable  firewalld.service

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.1.149" protocol value="vrrp" accept"

firewall-cmd --reload

备(149)：

systemctl start  firewalld.service

systemctl enable  firewalld.service

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.1.149" protocol value="vrrp" accept"

firewall-cmd --reload

5.3 启动keepalived ，测试主备vip飘移

systemctl start keepalived

1) 当NGINX_MASTER、NGINX_BACKUP服务器nginx均正常工作时

mater:

tailf message

backup：

2)  关闭NGINX_MASTER的keepalived服务

主：

systemctl  stop keepalived

备：

tailf  messages

六、 添加防火墙规则

firewall-cmd --zone=public --add-port=80/tcp --permanent

firewall-cmd --reload