# yum install gcc gcc-c++ make automake autoconf libtool pcre pcre-devel zlib zlib-devel openssl openssl-devel ca-certificates

# cd /usr/local/src/# wget http://nginx.org/download/nginx-1.24.0.tar.gz

# cd /usr/local/src/# tar -zxvf nginx-1.24.0.tar.gz# cd nginx-1.24.0# ./configure --prefix=/usr/local/nginx# make && make install

# vi /usr/local/nginx/conf/nginx.conf

user root;
worker_processes 1;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
#access_log logs/access.log main;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
#gzip on;
server {
listen 88;
server_name localhost;
#charset koi8-r;
#access_log logs/host.access.log main;
location / {
root html;
index index.html index.htm;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
}

# vi /usr/local/nginx/html/index.html

<h1>Welcome to nginx! 192.168.0.35</h1>

<h1>Welcome to nginx! 192.168.0.36</h1>

# firewall-cmd --zone=public --add-port=88/tcp --permanent#permanent永久生效,沒有此參數(shù)防火墻重啟便失效

systemctl status firewalld //或者 firewall-cmd --state

# systemctl start firewalld.service

firewall-cmd --reload  或者  service firewalld restart

firewall-cmd --zone=public --add-port=3306/tcp --permanent  //--permanent永久生效,沒有此參數(shù)防火墻重啟便失效

firewall-cmd --zone=public --remove-port=3306/tcp --permanent

systemctl stop firewalld

systemctl enable firewalld

systemctl disable firewalld

firewall-cmd --permanent --list-port

# /usr/local/nginx/sbin/nginx -t

nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is oknginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful

# /usr/local/nginx/sbin/nginx

# /usr/local/nginx/sbin/nginx -s reload

# vi /lib/systemd/system/nginx.service

[Unit]
Description=nginx
After=network.target
[Service]
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
ExecReload=/usr/local/nginx/sbin/nginx -s reload
ExecStop=/usr/local/nginx/sbin/nginx -s quit
PrivateTmp=true
[Install]
WantedBy=multi-user.target

systemctl enable nginx.service

systemctl daemon-reload

systemctl status nginx.service

# cd /usr/local/src/# wget https://www.keepalived.org/software/keepalived-2.2.8.tar.gz

tar -xzvf keepalived-2.2.8.tar.gzcd keepalived-2.2.8/./configure --prefix=/usr/local/keepalived --sysconf=/etcmake && make install

cd /etc/keepalivedcp keepalived.conf.sample keepalived.conf

! Configuration File for keepalived
global_defs {
## keepalived 自帶的郵件提醒需要開啟 sendmail 服務(wù)。 建議用獨(dú)立的監(jiān)控或第三方 SMTP
router_id wongoing01    ## 標(biāo)識(shí)本節(jié)點(diǎn)的字條串，通常為 hostname
}
## keepalived 會(huì)定時(shí)執(zhí)行腳本并對(duì)腳本執(zhí)行的結(jié)果進(jìn)行分析，動(dòng)態(tài)調(diào)整 vrrp_instance 的優(yōu)先級(jí)。如果腳本執(zhí)行結(jié)果為 0，并且 weight 配置的值大于 0，則優(yōu)先級(jí)相應(yīng)的增加。如果腳本執(zhí)行結(jié)果非 0，并且 weight配置的值小于 0，則優(yōu)先級(jí)相應(yīng)的減少。其他情況，維持原本配置的優(yōu)先級(jí)，即配置文件中 priority 對(duì)應(yīng)的值。
vrrp_script chk_nginx {
script "/etc/keepalived/nginx_check.sh"     ## 檢測(cè) nginx 狀態(tài)的腳本路徑
interval 2     ## 檢測(cè)時(shí)間間隔
weight -20   ## 如果條件成立，權(quán)重-20
}
## 定義虛擬路由， VI_1 為虛擬路由的標(biāo)示符，自己定義名稱
vrrp_instance VI_1 {
state MASTER      ## 主節(jié)點(diǎn)為 MASTER， 對(duì)應(yīng)的備份節(jié)點(diǎn)為 BACKUP
interface ens33     ## 綁定虛擬 IP 的網(wǎng)絡(luò)接口，與本機(jī) IP 地址所在的網(wǎng)絡(luò)接口相同， 虛擬機(jī)里面一般是ens33，物理主機(jī)通常是eth0
virtual_router_id 51    ## 虛擬路由的 ID 號(hào)， 兩個(gè)節(jié)點(diǎn)設(shè)置必須一樣， 可選 IP 最后一段使用, 相同的 VRID 為一個(gè)組，他將決定多播的 MAC 地址
priority 100            ## 節(jié)點(diǎn)優(yōu)先級(jí)， 值范圍 0-254， MASTER 要比 BACKUP 高
nopreempt            ## 優(yōu)先級(jí)高的設(shè)置 nopreempt 解決異常恢復(fù)后再次搶占的問題
advert_int 1          ## 組播信息發(fā)送間隔，兩個(gè)節(jié)點(diǎn)設(shè)置必須一樣， 默認(rèn) 1s
## 設(shè)置驗(yàn)證信息，兩個(gè)節(jié)點(diǎn)必須一致
authentication {
auth_type PASS
auth_pass 1111      ## 真實(shí)生產(chǎn)，按需求對(duì)應(yīng)該過來
}
## 將 track_script 塊加入 instance 配置塊
track_script {
chk_nginx        ## 執(zhí)行 Nginx 監(jiān)控的服務(wù)
}
## 虛擬 IP 池, 兩個(gè)節(jié)點(diǎn)設(shè)置必須一樣
virtual_ipaddress {
192.168.0.100      ## 虛擬 ip，可以定義多個(gè)
}
}

! Configuration File for keepalived
global_defs {
router_id wongoing02
}
vrrp_script chk_nginx {
script "/etc/keepalived/nginx_check.sh"
interval 2
weight -20
}
vrrp_instance VI_1 {
state BACKUP
interface ens33
virtual_router_id 51
priority 90
advert_int 1
authentication {
auth_type PASS
auth_pass 1111!i!
}
track_script {
chk_nginx
}
virtual_ipaddress {
192.168.0.100
}
}

# vi /etc/keepalived/nginx_check.sh

#!/bin/bash
A=`ps -C nginx –no-header |wc -l`
if [ $A -eq 0 ];then
/usr/local/nginx/sbin/nginx
sleep 2
if [ `ps -C nginx --no-header |wc -l` -eq 0 ];then
killall keepalived
fi
fi

# chmod +x /etc/keepalived/nginx_check.sh

# systemctl start keepalived.service

# systemctl status keepalived.service

systemctl enable keepalived.service

systemctl stop keepalived.servicesystemctl stop nginx.service

systemctl start nginx.servicesystemctl start keepalived.service

systemctl start keepalived.service