一、反向代理两种模式
四层反向代理
基于四层的ip+tcp/upd端口的代理
他是http块同一级,一般配置在http块上面。
他是需要用到stream模块的,一般四层里面没有自带,需要编译安装一下。并在stream模块里面添加upstream +服务器名称,添加ip地址及端口号。定义server模块,里面添加listen 监听端口号,server_name 网站主机名,proxy_pass 服务器组名称。
stream{
upstream fuwu服务器名称{
server IP1:PORT;
server IP2:PORT;
server IP3:PORT;
........
}
server{
listen 监听端口;
server_name 网站主机名;
proxy_pass 服务器组名称;
}
}
七层反向代理
基于七层的http/https/mail等应用协议的代理
他是在http模块里面添加以upstream模块,在upstream里面定义服务器组名称,添加ip,端口号,权重(如果不添加的话,默认是1),可以在添加一个调度算法。并在http模块里面添加server模块,在里面用location来匹配URL路径,定义proxy_pass http://服务器组名称,用来将以。。。为结尾的请求转发给tomcat服务器集群。并且后端服务器需要获取真实的客户端的ip地址。
http{
upstream 服务器组名称{
server IP1:PORT [weight=1 ...];
server IP2:PORT;
..........
调度算法(rr轮询/加权轮询,least_conn最小连接,ip_hash,url_hash,faire);
}
server {
location ~ ...{
#将以***为结尾的请求转发给tomcat服务器集群
proxy_pass http://服务器组名称;
#用于后端服务器获取真实的客户端ip地址
proxy_set_header HOST $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
}
Nginx 负载均衡模式(调度算法)
nginx的会话保持
使用动静分离的原因
为什么使用负载均衡
正向代理和反向代理的区别
二、实例部署 (七层反向代理和四层反向代理结合)
实验准备(准备五台虚拟机)
提前安装nginx和tomcat
解压安装包
192.168.50.52
cd /opt
tar zxvf apache-tomcat-9.0.16.tar.gz
mkdir /usr/local/tomcat
mv apache-tomcat-9.0.16 /usr/local/tomcat/tomcat1
cp -a /usr/local/tomcat/tomcat1 /usr/local/tomcat/tomcat2
配置 tomcat 环境变量
vim /etc/profile.d/tomcat.sh
#tomcat1
export CATALINA_HOME1=/usr/local/tomcat/tomcat1
export CATALINA_BASE1=/usr/local/tomcat/tomcat1
export TOMCAT_HOME1=/usr/local/tomcat/tomcat1
#tomcat2
export CATALINA_HOME2=/usr/local/tomcat/tomcat2
export CATALINA_BASE2=/usr/local/tomcat/tomcat2
export TOMCAT_HOME2=/usr/local/tomcat/tomcat2
source /etc/profile.d/tomcat.sh
修改 tomcat2 中的 server.xml 文件,要求各 tomcat 实例配置不能有重复的端口号
vim /usr/local/tomcat/tomcat2/conf/server.xml
<Server port="8006" shutdown="SHUTDOWN"> #22行,修改Server prot,默认为8005 -> 修改为8006
<Connector port="8081" protocol="HTTP/1.1" #69行,修改Connector port,HTTP/1.1 默认为8080 -> 修改为8081
<Connector port="8010" protocol="AJP/1.3" redirectPort="8443" />
#116行,修改Connector port AJP/1.3,默认为8009 -> 修改为8010
修改各 tomcat 实例中的 startup.sh 和 shutdown.sh 文件,添加 tomcat 环境变量
vim /usr/local/tomcat/tomcat1/bin/startup.sh
# -----------------------------------------------------------------------------
# Start Script for the CATALINA Server
# -----------------------------------------------------------------------------
##添加以下内容
export CATALINA_BASE=$CATALINA_BASE1
export CATALINA_HOME=$CATALINA_HOME1
export TOMCAT_HOME=$TOMCAT_HOME1
vim /usr/local/tomcat/tomcat1/bin/shutdown.sh
# -----------------------------------------------------------------------------
# Stop script for the CATALINA Server
# -----------------------------------------------------------------------------
export CATALINA_BASE=$CATALINA_BASE1
export CATALINA_HOME=$CATALINA_HOME1
export TOMCAT_HOME=$TOMCAT_HOME1
vim /usr/local/tomcat/tomcat2/bin/startup.sh
# -----------------------------------------------------------------------------
# Start Script for the CATALINA Server
# -----------------------------------------------------------------------------
export CATALINA_BASE=$CATALINA_BASE2
export CATALINA_HOME=$CATALINA_HOME2
export TOMCAT_HOME=$TOMCAT_HOME2
vim /usr/local/tomcat/tomcat2/bin/shutdown.sh
# -----------------------------------------------------------------------------
# Stop script for the CATALINA Server
# -----------------------------------------------------------------------------
export CATALINA_BASE=$CATALINA_BASE2
export CATALINA_HOME=$CATALINA_HOME2
export TOMCAT_HOME=$TOMCAT_HOME2
启动各 tomcat 中的 /bin/startup.sh
/usr/local/tomcat/tomcat1/bin/startup.sh
/usr/local/tomcat/tomcat2/bin/startup.sh
netstat -natp | grep java
部署192.168.50.52的tomcat server
mkdir /usr/local/tomcat/tomcat1/webapps/qin
vim /usr/local/tomcat/tomcat1/webapps/qin/index.jsp
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<html>
<head>
<title>JSP feng page</title> #指定为 test2 页面
</head>
<body>
<% out.println("动态页面 1,mylove2);%>
</body>
</html>
mkdir /usr/local/tomcat/tomcat2/webapps/feng
vim /usr/local/tomcat/tomcat2/webapps/feng/index.jsp
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<html>
<head>
<title>JSP feng page</title> #指定为 test2 页面
</head>
<body>
<% out.println("动态页面 2,mylove3);%>
</body>
</html>
部署192.168.50.53的tomcat server
mkdir /usr/local/tomcat/webapps/qin1
vim /usr/local/tomcat/webapps/qin1/index.jsp
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<html>
<head>
<title>JSP feng page</title> #指定为 test2 页面
</head>
<body>
<% out.println("动态页面 1,mylove);%>
</body>
</html>
部署192.168.50.56 七层反向代理Nginx server
#准备静态页面和静态图片
cd /usr/local/nginx/html
vim love.html
<html>
<body>
<h1>this is nginx test web</h1>
<img src="love.jpg" />
</body>
</html>
vim /usr/local/nginx/conf/nginx.conf
......
http {
......
#gzip on;
#配置负载均衡的服务器列表,weight参数表示权重,权重越高,被分配到的概率越大
upstream tomcat_server {
server 192.168.50.53:8080 weight=1;
server 192.168.50.52:8080 weight=1;
server 192.168.50.52:8081 weight=1;
}
server {
listen 80;
server_name localhost;
charset utf-8;
#access_log logs/host.access.log main;
#配置Nginx处理动态页面请求,将 .jsp文件请求转发到Tomcat 服务器处理
location ~ .*\.jsp$ {
proxy_pass http://tomcat_server;
#设置后端的Web服务器可以获取远程客户端的真实IP
##设定后端的Web服务器接收到的请求访问的主机名(域名或IP、端口),默认HOST的值为proxy_pass指令设置的主机名。如果反向代理服务器不重写该请求头的话,那么后端真实服务器在处理时会认为所有的请求都来自反向代理服务器,如果后端有防攻击策略的话,那么机器就被封掉了。
proxy_set_header HOST $host;
##把$remote_addr赋值给X-Real-IP,来获取源IP
proxy_set_header X-Real-IP $remote_addr;
##在nginx 作为代理服务器时,设置的IP列表,会把经过的机器ip,代理机器ip都记录下来
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
#配置Nginx处理静态图片请求
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|css)$ {
root html;
expires 10d;
}
location / {
root html;
index index.html index.htm;
}
......
}
......
}
部署192.168.50.58 七层反向代理Nginx server
<html>
<body>
<h1>this is nginx test2 web</h1>
<img src="psc.jpg" />
</body>
</html>
vim /usr/local/nginx/conf/nginx.conf
upstream tomcat_server {
server 192.168.50.53:8080 weight=1;
server 192.168.50.52:8080 weight=1;
server 192.168.50.52:8081 weight=1;
}
server {
listen 80;
server_name localhost;
charset utf-8;
#charset koi8-r;
#access_log logs/host.access.log main;
location ~ .*\.jsp$ {
proxy_pass http://tomcat_server;
proxy_set_header HOST $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|css)$ {
root html;
expires 10d;
}
部署192.168.50.57 四层反向代理(nginx)
vim /usr/local/nginx/conf/nginx.conf
stream {
upstream appserver {
server 192.168.50.56:80;
server 192.168.50.58:80;
}
server {
listen 8080;
proxy_pass appserver;
}
}