Nginx+Tomcat+Keepalived实现高可用Web集群

环境：CenOS 6.5 Nginx-Master：10.10.10.128 Nginx-Backup：10.10.10.129 Tomcat1：10.10.10.130 Tomcat2：10.10.10.131 VIP：10.10.10.100

一、环境基础配置 1、更换国内yum源 2、关闭防火墙、SELinux 3、时间同步

二、Web端安装Web服务

1、查看是否安装JDK [root@Tomcat1 ~]# java -version java version "1.8.0_171" Java(TM) SE Runtime Environment (build 1.8.0_171-b11) Java HotSpot(TM) 64-Bit Server VM (build 25.171-b11, mixed mode) 2、安装JDK 官网下载二进制包 解压到/usr/local/java     tar zxvf jdk-8u171-linux-x64.tar.gz -C /usr/local/java/ 修改环境变量/etc/profile     JAVA_HOME=/usr/local/java     PATH=$JAVA_HOME/bin:$PATH     CLASSPATH=$JAVA_HOME/jre/lib/ext:$JAVA_HOME/lib/tools.jar     export PATH JAVA_HOME CLASSPATH 使环境变量生效：     source /etc/profile 3、下载Tomcat源码包：     wget -O /opt/apache-tomcat-9.0.7.tar.gz http://mirrors.hust.edu.cn/apache/tomcat/tomcat-9/v9.0.7/bin/apache-tomcat-9.0.7.tar.gz 4、解压到/usr/local/tomcat     tar zxvf /opt/apache-tomcat-9.0.7.tar.gz -C /usr/local/ 5、修改Tomcat的主页     rm -rf /usr/local/apache-tomcat-9.0.7/webapps/ROOT/*     echo "Tomcat1" >/usr/local/apache-tomcat-9.0.7/webapps/ROOT/index.html  #Tomcat1     echo "Tomcat2" >/usr/local/apache-tomcat-9.0.7/webapps/ROOT/index.html  #Tomcat2 6、测试Tomcat能否正常启动 [root@Tomcat1 bin]# ./usr/local/apache-tomcat-9.0.7/bin /startup.sh Using CATALINA_BASE:  /usr/local/apache-tomcat-9.0.7 Using CATALINA_HOME:  /usr/local/apache-tomcat-9.0.7 Using CATALINA_TMPDIR: /usr/local/apache-tomcat-9.0.7/temp Using JRE_HOME:        /usr/local/java Using CLASSPATH:      /usr/local/apache-tomcat-9.0.7/bin/bootstrap.jar:/usr/local/apache-tomcat-9.0.7/bin/tomcat-juli.jar Tomcat started.

curl 10.10.10.130:8080  #返回Tomcat1 curl 10.10.10.131:8080  #返回Tomcat2

至此web端配置完成。

二、Nginx反向代理安装

1、安装依赖软件     yum install -y gcc gcc-c++     yum install -y pcre pcre-devel openssl openssl-devel zlib zlib-devel 2、官网下载源码包 3、解压源码包     tar zxvf nginx-1.14.0.tar.gz -C /tmp/ 4、编译安装     useradd -s /bin/false -M nginx     ./configure --user=nginx --group=nginx --prefix=/usr/local/nginx-1.14.0/ --with-http_v2_module --with-http_ssl_module --with-http_sub_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre     make && make install 5、配置反向代理/usr/local/nginx/conf/nginx.conf worker_processes  1; pid        /usr/local/nginx/logs/nginx.pid; worker_rlimit_nofile 51200; events {   use epoll;   worker_connections  51200; } http {   include      mime.types;   default_type  application/octet-stream;   server_names_hash_bucket_size 128;   client_header_buffer_size 32k;   large_client_header_buffers 4 32k;   client_max_body_size 8m;   sendfile        on;   tcp_nopush      on;   keepalive_timeout  65;   tcp_nodelay on;   gzip on;   gzip_min_length 1k;   gzip_buffers 4 16k;   gzip_http_version 1.0;   gzip_comp_level 2;   gzip_types    test/plain application/x-javascript test/css application/xml;   gzip_vary on;

  upstream backend {         server 10.10.10.130:8080;         server 10.10.10.131:8080;

  }   server {       listen      80;       server_name  10.10.10.128;  #Nginx2改为：10.10.10.129       location / {           root  /var/www/html;           index  index.php index.html index.htm;           proxy_pass http://backend;       }   } }      先测试再启动： [root@Nginx1 ~]# /usr/local/nginx-1.14.0/sbin/nginx -t nginx: the configuration file /usr/local/nginx-1.14.0//conf/nginx.conf syntax is ok nginx: configuration file /usr/local/nginx-1.14.0//conf/nginx.conf test is successful [root@Nginx1 ~]# /usr/local/nginx-1.14.0/sbin/nginx [root@Nginx1 ~]# lsof -i:80 COMMAND  PID  USER  FD  TYPE DEVICE SIZE/OFF NODE NAME nginx  4896  root    6u  IPv4  18439      0t0  TCP *:http (LISTEN) nginx  4897 nginx    6u  IPv4  18439      0t0  TCP *:http (LISTEN)

curl 10.10.10.128  #轮询返回Tomcat1 Tomcat2 Nginx2同样的搭建。 至此Nginx反向代理搭建完成。

三、使用Keepalived实现高可用

1、安装：     yum install keepalived -y 2、修改配置文件/etc/keepalived/keepalived.conf MASTER 端： ! Configuration File for keepalived vrrp_script check_nginx {         script "/etc/keepalived/check_nginx.sh"         interval 2         weight 2 } global_defs {   notification_email {     acassen@firewall.loc     failover@firewall.loc     sysadmin@firewall.loc   }   notification_email_from Alexandre.Cassen@firewall.loc   smtp_server 192.168.200.1   smtp_connect_timeout 30   router_id LVS_DEVEL1 }

vrrp_instance VI_1 {     state MASTER     interface eth0     virtual_router_id 51     priority 100     advert_int 1     authentication {         auth_type PASS         auth_pass 1111     }     virtual_ipaddress {         10.10.10.100/24 dev eth0   }  track_script {         check_nginx   } } BACKUP端： 修改： router_id LVS_DEVEL2 state BACKUP priority 90

检测Nginx脚本： #!/bin/bash nginxpid=`ps -C nginx --no-header | wc -l` if [ $nginxpid -eq 0 ];then         /etc/init.d/keepalived stop fi chmod +x /etc/keepalived/check_nginx.sh

重启Keepalived服务 service keepalived restart

四、检验服务的高可用

Nginx1执行：killall nginx 发现 web访问依然正常

Tomcat1执行：/usr/local/apache-tomcat-9.0.7/bin/shutdown.sh 发现 web访问依然正常

高可用的环境搭建完毕。