1.每日复盘与今日内容
1.1复盘
- keepalived高可用配置
- 抢占式与非抢占式
- 脑裂
- keepalived处理Nginx挂掉
1.2今日内容
- 部署、安装、配置tomcat(systemctl)
- Tomcat主配置文件
- 部署静态页
- 部署zrlog🍟🍟🍟🍟🍟
- 接入负载均衡
- 挂载到NFS
2.部署Tomcat
tomcat--处理动态
Nginx--处理静态
- 官网
主流 | 依赖 |
Tomcat11 | 依赖JDK17版本 |
Tomcat10 | 依赖JDK11版本 |
Tomcat9 | 依赖JDK8版本 |
#WEB01部署JDK
上传JDK8安装
先将文件拖入之后安装
[root@web01 ~]# rpm -ivh jdk-8u181-linux-x64.rpm
warning: jdk-8u181-linux-x64.rpm: Header V3 RSA/SHA256 Signature, key ID ec551f03: NOKEY
Verifying... ################################# [100%]
Preparing... ################################# [100%]
Updating / installing...1:jdk1.8-2000:1.8.0_181-fcs ################################# [100%]#检查
[root@web01 ~]# rpm -qa|grep jdk
jdk1.8-1.8.0_181-fcs.x86_64#下载Tomcat9
[root@web01 ~]# wget https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.108/bin/apache-tomcat-9.0.108.tar.gz[root@web01 ~]# mkdir /soft#解压到/soft
[root@web01 ~]# tar xf apache-tomcat-9.0.108.tar.gz -C /soft/
[root@web01 ~]# ll /soft/
total 0
drwxr-xr-x 9 root root 220 Aug 22 08:58 apache-tomcat-9.0.108[root@web01 ~]# ln -s /soft/apache-tomcat-9.0.108/ /soft/tomcat
[root@web01 ~]# ll /soft/
total 0
drwxr-xr-x 9 root root 220 Aug 22 08:58 apache-tomcat-9.0.108
lrwxrwxrwx 1 root root 28 Aug 22 08:58 tomcat -> /soft/apache-tomcat-9.0.108/#运行Tomcat
[root@web01 bin]# #./startup.sh # 相对路径启动Tomcat
[root@web01 bin]# #/soft/tomcat/bin/startup.sh # 绝对路径启动Tomcat[root@web01 bin]# /soft/tomcat/bin/startup.sh #默认运行端口8080
[root@web01 bin]# netstat -tnulp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 1504/php-fpm: maste
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 6909/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 980/sshd: /usr/sbin
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 6909/nginx: master
tcp6 0 0 :::8080 :::* LISTEN 18473/java
3.配置systemctl方式启动Tomcat
[root@web01 ~]# cat >/usr/lib/systemd/system/tomcat.service<<'EOF'
> [Unit]
> Description=Apache Tomcat Server
> After=network.target remote-fs.target nss-lookup.target
>
> [Service]
> Type=forking
> ExecStart=/soft/tomcat/bin/startup.sh
> ExecStop=/soft/tomcat/bin/shutdown.sh
> ExecRestart=/soft/tomcat/bin/shutdown.sh && sleep2 && /soft/tomcat/bin/startup.sh
>
> [Install]
> WantedBy=multi-user.target
> EOF#重新加载systemctl
[root@web01 ~]# systemctl daemon-reload#同一时间只能用一种方式来管理启动方式要么是用命令、要么是用systemctl,不要用命令开启,systemctl关闭,不然关不掉。#停止tomcat
[root@web01 ~]# /soft/tomcat/bin/shutdown.sh#使用systemctl 运行 tomcat
[root@web01 ~]# systemctl start tomcat
[root@web01 ~]# netstat -tnulp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 1504/php-fpm: maste
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 980/sshd: /usr/sbin
tcp6 0 0 :::8080 :::* LISTEN 18708/java
tcp6 0 0 :::22 :::* LISTEN 980/sshd: /usr/sbin
tcp6 0 0 127.0.0.1:8005 :::* LISTEN 18708/java
udp 0 0 127.0.0.1:323 0.0.0.0:* 671/chronyd
udp6 0 0 ::1:323 :::* 671/chronyd
4.Tomcat主配置文件
整体结构说明
server.xml 采用嵌套结构,从外到内定义了 Tomcat 的运行时容器:
Server -> Service -> Connector(s) + Engine -> Host -> Context#类似nginx的核心区块-->http区块-->server区块-->location区块[root@web01 conf]# cat /soft/tomcat/conf/server.xml
<?xml version="1.0" encoding="UTF-8"?>
<Server port="8005" shutdown="SHUTDOWN"><Listener className="org.apache.catalina.startup.VersionLoggerListener" /><Listener className="org.apache.catalina.core.AprLifecycleListener" /><Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" /><Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" /><Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" /><GlobalNamingResources><Resource name="UserDatabase" auth="Container"type="org.apache.catalina.UserDatabase"description="User database that can be updated and saved"factory="org.apache.catalina.users.MemoryUserDatabaseFactory"pathname="conf/tomcat-users.xml" /></GlobalNamingResources><Service name="Catalina"><Connector port="8080" protocol="HTTP/1.1"connectionTimeout="20000"redirectPort="8443"maxParameterCount="1000"/><Engine name="Catalina" defaultHost="localhost"><Realm className="org.apache.catalina.realm.LockOutRealm"><Realm className="org.apache.catalina.realm.UserDatabaseRealm"resourceName="UserDatabase"/></Realm><Host name="localhost" appBase="webapps"unpackWARs="true" autoDeploy="true"><Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"prefix="localhost_access_log" suffix=".txt"pattern="%h %l %u %t "%r" %s %b" /></Host></Engine></Service>
</Server>
5.快速部署静态页面
1.配置虚拟主机
cd /soft/tomcat/conf/
vim server.xml
...<Host name="localhost" appBase="webapps"unpackWARs="true" autoDeploy="true"><Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"prefix="localhost_access_log" suffix=".txt"pattern="%h %l %u %t "%r" %s %b" /></Host>
<!--复制一份Host自定义为diy.oldboy.com 代码目录指向/code/diy--><Host name="diy.oldboy.com" appBase="/code/diy/"unpackWARs="true" autoDeploy="true"><Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"prefix="diy.oldboy.com" suffix=".log"pattern="%h %l %u %t "%r" %s %b" /></Host></Engine></Service>
</Server>
~
"server.xml" 51L, 1985C written
#重启生效
[root@web01 conf]# systemctl restart tomcat
[root@web01 conf]# echo diy... > /code/diy/index.html
[root@web01 conf]# mkdir /code/diy/ROOT
[root@web01 conf]# mv /code/diy/index.html /code/diy/ROOT
[root@web01 conf]# ll /code/diy/ROOT
total 4
-rw-r--r-- 1 root root 7 Aug 22 10:15 index.html
Tomcat的文件页内容需放在指向目录的/ROOT下才能生效
- context
类似nginx的location作用
#下面的context作用 如果访问diy.oldboy.com/tt 则给用户返回/code/tt/下的内容
#注意如果context下的目录如果不提前创建、则tomcat无法运行<Host name="diy.oldboy.com" appBase="/code/diy/"unpackWARs="true" autoDeploy="true"><Context docBase="/code/tt" path="/tt" reloadable="true" /><Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"prefix="diy.oldboy.com" suffix=".log"pattern="%h %l %u %t "%r" %s %b" /></Host>[root@web01 conf]# systemctl restart tomcat
[root@web01 conf]# mkdir /code/tt
[root@web01 conf]# echo context... > /code/tt/index.html
[root@web01 conf]# cat /code/tt/index.html
context...
- 管理自带的管理界面
Tomcat自带的管理页面管理功能监控功能
1.所有的管理页面,都将权限赋予给了角色,而角色的名称是固定的: manager-gui admin-gui
2.需要添加一个用户,将用户捆绑至对应的角色,这样用户就可以访问到对应的页面
#将3行内容复制到倒数第1行的上面
[root@web01 conf]# tail -4 /soft/tomcat/conf/tomcat-users.xml
<role rolename="manager-gui"/>
<role rolename="admin-gui"/>
<user username="tomcat" password="123456" roles="manager-gui,admin-gui"/>
</tomcat-users>3.由于项目默认允许127.0.0.1访问,所以配置好了角色和用户也无法正常访问:
[root@web01 ROOT]# vim /soft/tomcat/webapps/host-manager/META-INF/context.xml
[root@web01 ROOT]# vim /soft/tomcat/webapps/manager/META-INF/context.xml默认状态,
<Valve className="org.apache.catalina.valves.RemoteAddrValve"allow="\d+\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />
修改后的状态:10\.0\.0\.\d
<Valve className="org.apache.catalina.valves.RemoteAddrValve"allow="10\d+\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />
重启生效
[root@web01 conf]# systemctl restart tomcat
6.Tomcat部署zrlog博客
#第一步 配置server
[root@web01 ~]# cd /soft/tomcat/conf/
[root@web01 conf]# vim server.xml
...<Host name="diy.oldboy.com" appBase="/code/diy/"unpackWARs="true" autoDeploy="true"><Context docBase="/code/tt" path="/tt" reloadable="true" /><Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"prefix="diy.oldboy.com" suffix=".log"pattern="%h %l %u %t "%r" %s %b" /></Host><Host name="www.zrlog.com" appBase="/code/zrlog/"unpackWARs="true" autoDeploy="true"><Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"prefix="zrlog" suffix=".log"pattern="%h %l %u %t "%r" %s %b" /></Host></Engine></Service>
</Server>#重启生效
[root@web01 conf]# systemctl restart tomcat
[root@web01 conf]# cd /code/zrlog/
[root@web01 zrlog]# wget https://dl.zrlog.com/release/javax-war/zrlog.war
#修改名称为ROOT.war 立刻自动解压部署
[root@web01 zrlog]# mv zrlog ROOT
#等待自动解压后删除war包
[root@web01 zrlog]# rm -rf zrlog.war#创建数据库zrlog
[root@db01 ~]# mysql -uroot -plzy123.com -e "create database zrlog;"
[root@db01 ~]# mysql -uroot -plzy123.com -e "show databases;"
+--------------------+
| Database |
+--------------------+
| information_schema |
| mysql |
| performance_schema |
| wordpress |
| zh |
| zrlog |
+--------------------+#windows解析
10.0.0.7 www.zrlog.com#安装部署流程
7.Tomcat接入负载均衡
- 单台
[root@web01 conf.d]# cat tom.conf
server {listen 80;server_name www.zrlog.com;location / {proxy_pass http://127.0.0.1:8080;proxy_set_header Host $http_host;}
}[root@web01 conf.d]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@web01 conf.d]# systemctl restart nginx
- 多台
#1.WEB02部署JDK
[root@web02 ~]# scp 10.0.0.7:~/jdk* .
[root@web02 ~]# rpm -ivh jdk-8u181-linux-x64.rpm#2.WEB02部署Tomcat
[root@web02 ~]# scp -r 10.0.0.7:/soft /#3.将WEB01的代码同步到WEB02
[root@web02 ~]# scp -r 10.0.0.7:/code/zrlog /code/#4.配置systemctl启动方式
[root@web02 ~]# scp 10.0.0.7:/usr/lib/systemd/system/tomcat.service /usr/lib/systemd/system/[root@web02 ~]# systemctl daemon-reload#5.启动tomcat
[root@web02 ~]# systemctl start tomcat
[root@web02 ~]# netstat -tnulp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 961/sshd: /usr/sbin
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 69766/php-fpm: mast
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 94884/nginx: master
tcp6 0 0 :::22 :::* LISTEN 961/sshd: /usr/sbin
tcp6 0 0 :::8080 :::* LISTEN 105456/java #6.windows hosts解析到10.0.0.8测试zrlog#7.负载均衡配置转发zrlog
[root@lb01 conf.d]# cat zrlog.conf
upstream tom {server 172.16.1.7:8080;server 172.16.1.8:8080;
}
server {listen 443 ssl;server_name www.zrlog.com;ssl_certificate ssl_key/server.crt;ssl_certificate_key ssl_key/server.key;# 配置 SSL 会话缓存,提高性能ssl_session_cache shared:SSL:1m;# 设置 SSL 会话超时时间ssl_session_timeout 5m;# 自定义设置使用的TLS协议的类型以及加密套件(以下为配置示例,请您自行评估是否需要配置)ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;# 指定允许的 TLS 协议版本,TLS协议版本越高,HTTPS通信的安全性越高,但是相较于低版本TLS协议,高版本TLS协议对浏览器的兼容性较差ssl_protocols TLSv1.2 TLSv1.3;# 优先使用服务端指定的加密套件ssl_prefer_server_ciphers on;include lv_env;location / {proxy_pass http://tom;}}#配置将用户访问http请求强制跳转https
server {listen 80;server_name www.zrlog.com;return 302 https://$server_name$request_uri;
}
[root@lb01 conf.d]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@lb01 conf.d]# systemctl restart nginx
8.静态文件挂载NFS
#1.找到图片的位置
Request URL: http://www.zrlog.com:8080/attached/image/20250822/20250822114746_206_thumbnail.png?h=723&w=660#2.配置NFS
[root@nfs ~]# vim /etc/exports
/data/wp 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)
/data/zh 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)
/data/zrlog 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)[root@nfs ~]# mkdir /data/zrlog
[root@nfs ~]# chown www.www /data/zrlog
[root@nfs ~]# systemctl start nfs
[root@nfs ~]# systemctl restart nfs#3.将上传的图片拷贝到NFS
[root@web02 zrlog]# scp -r /code/zrlog/ROOT/attached/image 10.0.0.31:/data/zrlog/
[root@nfs ~]# chown -R www.www /data/zrlog/
[root@nfs ~]# ll /data/zrlog/
total 0
drwxr-x--- 3 www www 19 Aug 22 11:53 attached#4.挂载相应目录、
#如果没有上传attached目录不存在需要手动创建。
[root@web01 ~]# mkdir /code/zrlog/ROOT/attached/
[root@web01 ~]# mount -t nfs 172.16.1.31:/data/zrlog /code/zrlog/ROOT/attached/
[root@web01 ~]# df -h
Filesystem Size Used Avail Use% Mounted on
devtmpfs 459M 0 459M 0% /dev
tmpfs 475M 0 475M 0% /dev/shm
tmpfs 475M 37M 438M 8% /run
tmpfs 475M 0 475M 0% /sys/fs/cgroup
/dev/sda3 48G 5.2G 43G 11% /
/dev/sda1 195M 122M 74M 63% /boot
tmpfs 95M 0 95M 0% /run/user/0
172.16.1.31:/data/zrlog 48G 3.8G 45G 8% /code/zrlog/ROOT/attached[root@web02 ~]# mount -t nfs 172.16.1.31:/data/zrlog /code/zrlog/ROOT/attached/
[root@web02 ~]# df -h
Filesystem Size Used Avail Use% Mounted on
devtmpfs 459M 0 459M 0% /dev
tmpfs 475M 0 475M 0% /dev/shm
tmpfs 475M 49M 426M 11% /run
tmpfs 475M 0 475M 0% /sys/fs/cgroup
/dev/sda3 48G 4.8G 43G 11% /
/dev/sda1 195M 122M 74M 63% /boot
tmpfs 95M 0 95M 0% /run/user/0
172.16.1.31:/data/wp 48G 3.8G 45G 8% /code/wordpress/wp-content/uploads
172.16.1.31:/data/zrlog 48G 3.8G 45G 8% /code/zrlog/ROOT/attached#注意Nginx默认上传的限制
vim /etc/nginx/nginx.conf # 写在http区块即可
client_max_body_size 20M;
9.今日总结
- 部署、安装、配置tomcat(systemctl)
- Tomcat主配置文件
- 部署静态页
- 部署zrlog🍟🍟🍟🍟🍟
- 接入负载均衡
- 挂载到NFS