首页 文章 精选 留言 我的

精选列表

搜索[nginx],共5972篇文章
优秀的个人博客,低调大师

Saltstack自动部署Haproxy+keepalived+nginx+memcache+php(fastcgi)

一系列: 部署Haproxy总的目录结构 [root@NEI-pudong-idc2E-wdjky.mesrv]#treesalt/ salt/ ├──base │├──init ││├──audit.sls ││├──dns.sls ││├──env_init.sls ││├──epel.sls ││├──files │││└──resolv.conf ││├──history.sls ││└──sysctl.sls │└──top.sls └──prod ├──cluster │├──files ││├──haproxy-outside.cfg ││└──haproxy-outside.cfg.bak │└──haproxy-outside.sls ├──haproxy │├──files ││├──haproxy-1.4.24.tar.gz ││└──haproxy.init │└──install.sls ├──keepalived │└──files └──pkg └──pkg-init.sls 1.salt master 服务器上对 /etc/salt/master 配置文件进行多环境配置 file_roots: base: -/srv/salt/base prod: -/srv/salt/prod pillar_roots: base: -/srv/salt/pillar prod: -/srv/salt/pillar 2.创建目录结构 [root@NEI-pudong-idc2E-wdjky.mesrv]#pwd /srv [root@NEI-pudong-idc2E-wdjky.mesrv]#tree . ├──pillar │├──base │└──prod └──salt ├──base └──prod 3.重启salt-master /etc/init.d/salt-masterrestart 4.系统初始化 4.1.DNS配置 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/dns.sls /etc/resolv.conf: file.managed: -source:salt://init/files/resolv.conf -user:root -group:root -mode:644 4.2.History记录时间 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/history.sls /etc/profile: file.managed: -text: -exportHISTTIMEFORMAT="%F%T(`whoami`)" 4.3.命令操作审计 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/audit.sls /etc/bashrc: file.append: -text: -exportPROMPT_COMMAND='{msg=$(history1|{readxy;echo$y;});logger"[euid=$(whoami)]":$(whoami):['pwd']"$msg";}' 4.4.epel仓库 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/epel.sls yum_rep_release: pkg.installed: -sources: -epel-release:http://mirrors.aliyun.com/epel/6/x86_64/epel-release-6-8.noarch.rpm -unless:rpm-qa|grepepel-release-6-8 4.5.初始化环境引用 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/env_init.sls include: -init.dns -init.history -init.audit 5.Haproxy配置管理 5.1.pkg模块用来安装源码编译依赖包 [root@NEI-pudong-idc2E-wdjky.meprod]#cat/srv/salt/prod/pkg/pkg-init.sls pkg-init: pkg.installed: -names: -gcc -gcc-c++ -glibc -make -autoconf -openssl -openssl-devel 5.2.Haproxy服务配置 cd/usr/local/src/ cphaproxy-1.4.24.tar.gz/srv/salt/prod/haproxy/files tarxfhaproxy-1.4.24.tar.gz cd/usr/local/src/haproxy-1.4.24/examples/ sed-i's/\/usr\/sbin\/'\$BASENAME'/\/usr\/local\/haproxy\/sbin\/'\$BASENAME'/g'haproxy.init cphaproxy.init/srv/salt/prod/haproxy/files 5.3.编写Haproxy安装sls [root@NEI-pudong-idc2E-wdjky.mehaproxy]#cat/srv/salt/prod/haproxy/install.sls include: -pkg.pkg-init haproxy-install: file.managed: -name:/usr/local/src/haproxy-1.4.24.tar.gz -source:salt://haproxy/files/haproxy-1.4.24.tar.gz -mode:755 -user:root -group:root cmd.run: -name:cd/usr/local/src&&tarxfhaproxy-1.4.24.tar.gz&&cdhaproxy-1.4.24&&makeTARGET=linux26PREFIX=/usr/local/haproxy&&makeinstallPREFIX=/usr/local/haproxy -unless:test-d/usr/local/haproxy -require: -pkg:pkg-init -file:haproxy-install /etc/init.d/haproxy: file.managed: -source:salt://haproxy/files/haproxy.init -mode:755 -user:root -group:root -require: -cmd:haproxy-install haproxy-config-dir: file.directory: -name:/etc/haproxy -mode:755 -user:root -group:root haproxy-init: cmd.run: -name:chkconfig--addhaproxy -unless:chkconfig--list|grephaproxy -require: -file:/etc/init.d/haproxy 5.4.Haproxy业务应用 [root@NEI-pudong-idc2E-wdjky.mehaproxy]#cat/srv/salt/prod/cluster/haproxy-outside.sls include: -haproxy.install haproxy-service: file.managed: -name:/etc/haproxy/haproxy.cfg -source:salt://cluster/files/haproxy-outside.cfg -user:root -group:root -mode:644 service.running: -name:haproxy -enable:True -reload:True -require: -cmd:haproxy-init -watch: -file:haproxy-service [root@NEI-pudong-idc2E-wdjky.mehaproxy]#cat/srv/salt/prod/cluster/files/haproxy-outside.cfg global log127.0.0.1:514local0warning chroot/usr/local/haproxy grouphaproxy userhaproxy daemon nbproc8 pidfile/usr/local/haproxy/logs/haproxy.pid maxconn20000 spread-checks3 defaults logglobal modehttp #optionhttplog #optionhttpclose #optiondontlognull #optionforwardfor optionredispatch #optionabortonclose retries3 #balanceroundrobin #balancesource #balanceleastconn contimeout5000 clitimeout50000 srvtimeout50000 #timeoutcheck2000 listenrandolph_status bind*:80 modehttp statsenable statsuri/admin?status #statsrealmhaproxty\haproxy statsauthsalt:randolph #statsauthadmin1:admin1 statshide-version #statsadminifTRUE #listenwebserver #optionhttpchkHEAD/checkstatus.htmlHTTP/1.0 optionhttpclose optionforwardfor balanceroundrobin cookieSERVERIDinsertindirect timeoutserver15s timeoutconnect15s serverweb01192.168.21.161:8082checkport80inter5000fall5 serverweb02192.168.21.163:8082checkport80inter5000fall5 5.5.编写Haproxy安装sls [root@NEI-pudong-idc2E-wdjky.mehaproxy]#cat/srv/salt/prod/cluster/haproxy-outside.sls include: -haproxy.install haproxy-service: file.managed: -name:/etc/haproxy/haproxy.cfg -source:salt://cluster/files/haproxy-outside.cfg -user:root -group:root -mode:644 service.running: -name:haproxy -enable:True -reload:True -require: -cmd:haproxy-init -watch: -file:haproxy-service 6.执行Haproxy状态 [root@NEI-pudong-idc2E-wdjky.mebase]#cattop.sls base: jenkins.saltstack.me: -init.env_init prod: jenkins.saltstack.me: -cluster.haproxy-outside 持续更新 ......

资源下载

更多资源
优质分享App

优质分享App

近一个月的开发和优化,本站点的第一个app全新上线。该app采用极致压缩,本体才4.36MB。系统里面做了大量数据访问、缓存优化。方便用户在手机上查看文章。后续会推出HarmonyOS的适配版本。

Mario

Mario

马里奥是站在游戏界顶峰的超人气多面角色。马里奥靠吃蘑菇成长,特征是大鼻子、头戴帽子、身穿背带裤,还留着胡子。与他的双胞胎兄弟路易基一起,长年担任任天堂的招牌角色。

Rocky Linux

Rocky Linux

Rocky Linux(中文名:洛基)是由Gregory Kurtzer于2020年12月发起的企业级Linux发行版,作为CentOS稳定版停止维护后与RHEL(Red Hat Enterprise Linux)完全兼容的开源替代方案,由社区拥有并管理,支持x86_64、aarch64等架构。其通过重新编译RHEL源代码提供长期稳定性,采用模块化包装和SELinux安全架构,默认包含GNOME桌面环境及XFS文件系统,支持十年生命周期更新。

Sublime Text

Sublime Text

Sublime Text具有漂亮的用户界面和强大的功能,例如代码缩略图,Python的插件,代码段等。还可自定义键绑定,菜单和工具栏。Sublime Text 的主要功能包括:拼写检查,书签,完整的 Python API , Goto 功能,即时项目切换,多选择,多窗口等等。Sublime Text 是一个跨平台的编辑器,同时支持Windows、Linux、Mac OS X等操作系统。

用户登录
用户注册