首页 文章 精选 留言 我的

精选列表

搜索[nginx],共5986篇文章
优秀的个人博客,低调大师

Saltstack自动部署Haproxy+keepalived+nginx+memcache+php(fastcgi)

一系列: 部署Haproxy总的目录结构 [root@NEI-pudong-idc2E-wdjky.mesrv]#treesalt/ salt/ ├──base │├──init ││├──audit.sls ││├──dns.sls ││├──env_init.sls ││├──epel.sls ││├──files │││└──resolv.conf ││├──history.sls ││└──sysctl.sls │└──top.sls └──prod ├──cluster │├──files ││├──haproxy-outside.cfg ││└──haproxy-outside.cfg.bak │└──haproxy-outside.sls ├──haproxy │├──files ││├──haproxy-1.4.24.tar.gz ││└──haproxy.init │└──install.sls ├──keepalived │└──files └──pkg └──pkg-init.sls 1.salt master 服务器上对 /etc/salt/master 配置文件进行多环境配置 file_roots: base: -/srv/salt/base prod: -/srv/salt/prod pillar_roots: base: -/srv/salt/pillar prod: -/srv/salt/pillar 2.创建目录结构 [root@NEI-pudong-idc2E-wdjky.mesrv]#pwd /srv [root@NEI-pudong-idc2E-wdjky.mesrv]#tree . ├──pillar │├──base │└──prod └──salt ├──base └──prod 3.重启salt-master /etc/init.d/salt-masterrestart 4.系统初始化 4.1.DNS配置 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/dns.sls /etc/resolv.conf: file.managed: -source:salt://init/files/resolv.conf -user:root -group:root -mode:644 4.2.History记录时间 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/history.sls /etc/profile: file.managed: -text: -exportHISTTIMEFORMAT="%F%T(`whoami`)" 4.3.命令操作审计 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/audit.sls /etc/bashrc: file.append: -text: -exportPROMPT_COMMAND='{msg=$(history1|{readxy;echo$y;});logger"[euid=$(whoami)]":$(whoami):['pwd']"$msg";}' 4.4.epel仓库 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/epel.sls yum_rep_release: pkg.installed: -sources: -epel-release:http://mirrors.aliyun.com/epel/6/x86_64/epel-release-6-8.noarch.rpm -unless:rpm-qa|grepepel-release-6-8 4.5.初始化环境引用 [root@NEI-pudong-idc2E-wdjky.mesrv]#cat/srv/salt/base/init/env_init.sls include: -init.dns -init.history -init.audit 5.Haproxy配置管理 5.1.pkg模块用来安装源码编译依赖包 [root@NEI-pudong-idc2E-wdjky.meprod]#cat/srv/salt/prod/pkg/pkg-init.sls pkg-init: pkg.installed: -names: -gcc -gcc-c++ -glibc -make -autoconf -openssl -openssl-devel 5.2.Haproxy服务配置 cd/usr/local/src/ cphaproxy-1.4.24.tar.gz/srv/salt/prod/haproxy/files tarxfhaproxy-1.4.24.tar.gz cd/usr/local/src/haproxy-1.4.24/examples/ sed-i's/\/usr\/sbin\/'\$BASENAME'/\/usr\/local\/haproxy\/sbin\/'\$BASENAME'/g'haproxy.init cphaproxy.init/srv/salt/prod/haproxy/files 5.3.编写Haproxy安装sls [root@NEI-pudong-idc2E-wdjky.mehaproxy]#cat/srv/salt/prod/haproxy/install.sls include: -pkg.pkg-init haproxy-install: file.managed: -name:/usr/local/src/haproxy-1.4.24.tar.gz -source:salt://haproxy/files/haproxy-1.4.24.tar.gz -mode:755 -user:root -group:root cmd.run: -name:cd/usr/local/src&&tarxfhaproxy-1.4.24.tar.gz&&cdhaproxy-1.4.24&&makeTARGET=linux26PREFIX=/usr/local/haproxy&&makeinstallPREFIX=/usr/local/haproxy -unless:test-d/usr/local/haproxy -require: -pkg:pkg-init -file:haproxy-install /etc/init.d/haproxy: file.managed: -source:salt://haproxy/files/haproxy.init -mode:755 -user:root -group:root -require: -cmd:haproxy-install haproxy-config-dir: file.directory: -name:/etc/haproxy -mode:755 -user:root -group:root haproxy-init: cmd.run: -name:chkconfig--addhaproxy -unless:chkconfig--list|grephaproxy -require: -file:/etc/init.d/haproxy 5.4.Haproxy业务应用 [root@NEI-pudong-idc2E-wdjky.mehaproxy]#cat/srv/salt/prod/cluster/haproxy-outside.sls include: -haproxy.install haproxy-service: file.managed: -name:/etc/haproxy/haproxy.cfg -source:salt://cluster/files/haproxy-outside.cfg -user:root -group:root -mode:644 service.running: -name:haproxy -enable:True -reload:True -require: -cmd:haproxy-init -watch: -file:haproxy-service [root@NEI-pudong-idc2E-wdjky.mehaproxy]#cat/srv/salt/prod/cluster/files/haproxy-outside.cfg global log127.0.0.1:514local0warning chroot/usr/local/haproxy grouphaproxy userhaproxy daemon nbproc8 pidfile/usr/local/haproxy/logs/haproxy.pid maxconn20000 spread-checks3 defaults logglobal modehttp #optionhttplog #optionhttpclose #optiondontlognull #optionforwardfor optionredispatch #optionabortonclose retries3 #balanceroundrobin #balancesource #balanceleastconn contimeout5000 clitimeout50000 srvtimeout50000 #timeoutcheck2000 listenrandolph_status bind*:80 modehttp statsenable statsuri/admin?status #statsrealmhaproxty\haproxy statsauthsalt:randolph #statsauthadmin1:admin1 statshide-version #statsadminifTRUE #listenwebserver #optionhttpchkHEAD/checkstatus.htmlHTTP/1.0 optionhttpclose optionforwardfor balanceroundrobin cookieSERVERIDinsertindirect timeoutserver15s timeoutconnect15s serverweb01192.168.21.161:8082checkport80inter5000fall5 serverweb02192.168.21.163:8082checkport80inter5000fall5 5.5.编写Haproxy安装sls [root@NEI-pudong-idc2E-wdjky.mehaproxy]#cat/srv/salt/prod/cluster/haproxy-outside.sls include: -haproxy.install haproxy-service: file.managed: -name:/etc/haproxy/haproxy.cfg -source:salt://cluster/files/haproxy-outside.cfg -user:root -group:root -mode:644 service.running: -name:haproxy -enable:True -reload:True -require: -cmd:haproxy-init -watch: -file:haproxy-service 6.执行Haproxy状态 [root@NEI-pudong-idc2E-wdjky.mebase]#cattop.sls base: jenkins.saltstack.me: -init.env_init prod: jenkins.saltstack.me: -cluster.haproxy-outside 持续更新 ......

资源下载

更多资源
优质分享App

优质分享App

近一个月的开发和优化,本站点的第一个app全新上线。该app采用极致压缩,本体才4.36MB。系统里面做了大量数据访问、缓存优化。方便用户在手机上查看文章。后续会推出HarmonyOS的适配版本。

Mario

Mario

马里奥是站在游戏界顶峰的超人气多面角色。马里奥靠吃蘑菇成长,特征是大鼻子、头戴帽子、身穿背带裤,还留着胡子。与他的双胞胎兄弟路易基一起,长年担任任天堂的招牌角色。

腾讯云软件源

腾讯云软件源

为解决软件依赖安装时官方源访问速度慢的问题,腾讯云为一些软件搭建了缓存服务。您可以通过使用腾讯云软件源站来提升依赖包的安装速度。为了方便用户自由搭建服务架构,目前腾讯云软件源站支持公网访问和内网访问。

Nacos

Nacos

Nacos /nɑ:kəʊs/ 是 Dynamic Naming and Configuration Service 的首字母简称,一个易于构建 AI Agent 应用的动态服务发现、配置管理和AI智能体管理平台。Nacos 致力于帮助您发现、配置和管理微服务及AI智能体应用。Nacos 提供了一组简单易用的特性集,帮助您快速实现动态服务发现、服务配置、服务元数据、流量管理。Nacos 帮助您更敏捷和容易地构建、交付和管理微服务平台。

用户登录
用户注册