基于Lvs-nat模型的discuz负载均衡实现
前言：lvs-nat模型需要一台机器作为前端VS(Virtual Server)主机，和两台作为后端的RS(Real Server)才能够实现负载均衡效果
因为需要负载均衡应用Discuz，同一客户端请求如果被调度到不同的RS上，无法保障用户访问会话持久不丢失，和数据的一致性，所以还需要考虑会话保持和数据共享的问题。
会话保持的解决方案有三种：源地址哈希、会话集群、会话服务器，这里选择源地址；即将来自同一客户端的请求调度至同一台服务器，只需要将lvs集群的调度算法配置为SH(Source Hash)即可，比较简单，但实际上这种方案存在弊端，如果初始调度的RS宕机，将请求调度至其他RS时，就无法获取到之前的会话了，此处我们暂时不考虑这一情况！随后我会提供相关博客。
数据共享的解决方案在前面一篇文章（rsync+inotify）中提到过，此处我们选择NFS，由于其搭建起来比较方便，性能还不错。
环境需求：
HostVS
OS:CentOS-7-x86_64
hostname:ws1
eno16777736:10.0.0.61/8(VIP)
eno33554984:172.18.64.1/16(DIP)
gateway:10.0.0.254
HostRS1
OS:CentOS-7-x86_64
hostname:ws2 eno16777736:172.18.64.2/16 (RIP1) gateway:172.18.64.254
HostRS2OS:CentOS-7-x86_64
hostname:ws3 eno16777736:172.18.64.3/16 (RIP2) gateway:172.18.64.254
HostDB
OS:CentOS-7-x86_64
hostname:ws4eno16777736:172.18.64.4/16 gateway:172.18.64.254
时间同步：
1
2
# ntpdate cn.pool.ntp.org
# hwclock --sysohc
安装软件：
HostDB
安装二进制mariadb-5.5.46
安装NFS
1
# yum install -y nfs-utils
HostRS2
安装nginx，注意nginx属于epel源
1
# yum install-y nginx php-fpm php-mbstring php-mysql nfs-utils mariadb
HostRS1
安装nginx，注意nginx属于epel源
1
# yum install-y nginx php-fpm php-mbstring php-mysql nfs-utils mariadb
HostVS
安装LVS的cli接口程序ipvsadm
1
# yum install -y ipvsadm
配置集群
HostDB
配置mariadb
安全初始化完成后，创建discuz数据库和discuz用户，并授权其可远程操作数据库
1
2
3
4
5
6
7
# mysql_secure_installation
# mysql -u root -p
> create database discuz;
> create user 'discuz'@'lodalhost' identified by '123456';
> grant all privileges on discuz.* to 'discuz'@'%' identified by '123456';
> flush privileges;
配置NFS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
# mkdir /nfshare/
# ls -ld /nfshare/
drwxr-xr-x 2 root root 6 May 9 17:01 /nfshare/
# echo "/nfshare/ 10.0.0.62(rw,no_root_squash,async) 10.0.0.63(rw,no_root_squash,async)" > /etc/exports
# systemctl start rpcbind
Starting rpcbind:
# systemctl start nfs-server
Starting NFS services:
Starting NFS quotas:
Starting NFS mountd:
Starting NFS daemon:
Starting RPC idmapd:
# systemctl enable rpcbind
# systemctl enable nfs-server
# chkconfig rpcbind --list
rpcbind 0:off 1:off 2:on 3:on 4:on 5:on 6:off
# chkconfig nfs --list
nfs 0:off 1:off 2:on 3:on 4:on 5:on 6:off
# showmount -e 127.0.0.1
Export list for 127.0.0.1:
/nfshare/ 10.0.0.62,10.0.0.63
注意：rpcbind和nfs两个服务启动顺序不能更换，否则会出问题
解压discuz的程序包至/nfsshare/目录
1
2
3
4
# mkdir /nfshare/discuz
# unzip /Discuz_X3.2_SC_UTF8.zip -d /nfshare/discuz/
# ls /nfshare/discuz/
readmeuploadutility
HostR2
测试链接HostDB上的mariadb
1
# mysql -h 172.18.64.4 -u discuz -p
挂载HostDB上的NFS共享存储目录，属主属组修改为apache
1
2
3
4
5
6
7
8
9
10
# showmount -e 172.18.64.4
Export list for 172.18.64.4:
/nfshare/ 10.0.0.62,10.0.0.63
# mkdir /htdocs
# ls -ld /htdocs/
drwxr-xr-x 2 root root 6 May 9 17:05 /htdocs/
# mount -t nfs 172.18.64.4:/nfshare /htdocs
# ls /htdocs/
discuz
# chown -R apache:apache /htdocs/discuz/
启动php-fpm
1
2
# systemctl start php-fpm.service
# ss -tnl | grep 9000
配置nginx的配置文件
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
# vim /etc/nginx/nginx.conf
server {
listen 80;
server_namews3
# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
location / {
root /htdocs/discuz/upload;
index index.html index.htm index.php;
}
location ~ \.php$ {
root/htdocs/discuz/upload;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include /etc/nginx/fastcgi.conf;
}
error_page 404 /404.html;
location = /40x.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}
# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
# nginx
# ss -tnl | grep 80
LISTEN 0 128 *:80 *:*
测试访问discuz安装页面主机加上最后的/
1
2
3
4
5
6
7
# curl -I http://172.18.64.3/install/
HTTP/1.1 200 OK
Server: nginx/1.6.3
Date: Mon, 09 May 2016 10:23:50 GMT
Content-Type: text/html
Connection: keep-alive
X-Powered-By: PHP/5.4.16
HostRS1
配置同上
HostVS
打开核心转发功能
1
# echo 1 > /proc/sys/net/ipv4/ip_forward
先使用rr调度算法，期望会话丢失情况出现，若出现会话丢失情况，改用sh(源地址哈希)调度算法再测试，期望会话能保持
1
2
3
# ipvsadm -A -t 10.0.0.61:80 -s rr
# ipvsadm -a -t 10.0.0.61:80 -r 172.18.64.2:80 -m
# ipvsadm -a -t 10.0.0.61:80 -r 172.18.64.3:80 -m
测试：
浏览器访问http://10.0.0.61/install/
页:
[1]