HCIP\u4e2d\u7ea7\u90e8\u5206
\n\u4e00\u3001http\u670d\u52a1\u5e38\u89c4\u539f\u7406https\u8fde\u63a5\u670d\u52a1\u5668\u7528\u7684\u662f\u975e\u5bf9\u79f0\u5bc6\u94a5\uff0c\u6570\u636e\u5b89\u5168\u4f7f\u7528\u5bf9\u79f0\u52a0\u5bc6
\ntrace\u67e5\u770b\u771f\u5b9e\u8bbf\u95ee\u8005\u7684IP\u5730\u5740\uff0c\u67e5\u770b\u539f\u59cb\u8bf7\u6c42IP\uff0c\u4e0d\u4f1a\u770b\u4ee3\u7406IP<\/p>\n
\u72b6\u6001\u7801200 OK301 \u548c302\u8df3\u8f6c302\u54cd\u5e94\u62a5\u6587location\u6307\u660e\u8d44\u6e90\u4e34\u65f6\u65b0\u4f4d\u7f6e304 \u4ece\u672c\u5730\u7f13\u5b58\u8bfb401\u9700\u8981\u8d26\u53f7\u5bc6\u7801\u8ba4\u8bc1\u624d\u53ef\u4ee5\u8bbf\u95ee403 \u6ca1\u6388\u6743\uff08\u7981\u6b62 \u8bbf\u95ee\uff09404 \u8d44\u6e90\u88ab\u5220\u9664500 \u670d\u52a1\u5668\u914d\u7f6e\u95ee\u9898
\nweb\u6a21\u578b4\u4e2a1\u3001\u5355\u8fdb\u7a0bIO\u6a21\u578b\uff0c\u4e00\u4e2a\u8fdb\u884c\u4e00\u4e2ahttp\u8bf7\u6c42\uff0c\u4e0d\u9002\u5408\u9ad8\u5e76\u53d12\u3001\u591a\u8fdb\u7a0bIO\u6a21\u578b\uff0c\u4e00\u4e2a\u8fdb\u884c\u4e00\u4e2ahttp\u8bf7\u6c42\uff0c\u53ef\u4ee5\u542f\u591a\u4e2a\u8fdb\u7a0b3\u3001\u590d\u7528IO\u6a21\u578b\uff0c\u5355\u4e2a\u8fdb\u7a0b\u8fdb\u884c\u590d\u7528\uff0c\u4e00\u4e2a\u8fdb\u7a0b\u4f7f\u7528\u591a\u4e2a\u7ebf\u7a0b\uff0c\u4e00\u4e2a\u7ebf\u7a0b\u5904\u7406\u4e00\u4e2ahttp\u8bf7\u6c424\u3001\u590d\u7528\u591a\u8fdb\u7a0bIO\u6a21\u578b\uff0c\u901a\u8fc7\u4e8b\u4ef6\u673a\u5236\u4fdd\u8bc1\u9ad8\u5e76\u53d1\u7684\u957f\u8fde\u63a5\uff08linux\u5185\u6838\u7279\u6027epool\uff09
\napache\u5de5\u4f5c\u6a21\u578b\u00a01\u3001perfork\u591a\u8fdb\u7a0bIO \u6a21\u578b\uff0c\u4e0d\u652f\u6301\u9ad8\u5e76\u53d1\uff0c\u6700\u5927\u6bcf\u79d2\u652f\u630132\u4e2a\u8fdb\u7a0b\uff0c\u6bd4\u8f83\u5b89\u5168\u53ea\u4f1a\u7528apache\u7528\u6237\u8fdb\u7a0b2\u3001worker\u591a\u7ebf\u7a0bIO\u6a21\u578b\uff0c\u4e0d\u9002\u5408\u957f\u8fde\u63a5\u591a\u5e76\u53d1\u573a\u666f3\u3001event\u5f02\u6b65IO\u4e8b\u4ef6\u6a21\u578b\uff08\u590d\u7528\u6a21\u578b\uff09\uff0c\u9ed8\u8ba4\u662f\u8fd9\u79cd\uff0c\u76d1\u542c\u63a5\u6536\u7ebf\u7a0b\u548c\u5de5\u4f5c\u7ebf\u7a0b\u5206\u5f00\u5de5\u4f5c\uff0c\u9700\u89812.6\u5185\u6838\u4ee5\u4e0a\u624d\u652f\u6301\uff08\u9ed8\u8ba4php\u4e0d\u652f\u6301\u8fd9\u4e2a\u6a21\u578b\uff0c\u652f\u6301perfork\u6a21\u578b\uff09\u3002
\n\u8c03\u4ee5\u4e0a\u5de5\u4f5c\u6a21\u578b\uff1a\/etc\/httpd\/conf.modules.d\/00-mpm.conf\u628a\u5bf9\u5e94\u7684\u90a3\u884c\u6ce8\u9500\u9690\u85cf\u6216\u5f00\u542f\u91cd\u542f\u670d\u52a1\u5c31\u884c\u4e86
\n\u6d4b\u8bd5\u670d\u52a1\u5668\u538b\u529b\u00a0ab -n 10 \u00a0-c \u00a010 http:\/\/192.168.168.135\/index.html
\nhttpd \u00a0 -V\u67e5\u770b\u6a21\u578b\u7528\u7684\u54ea\u4e00\u79cd
\n\u4e8c\u3001\u914d\u7f6e\u6587\u4ef6\u89e3\u91caapache\u914d\u7f6e\u6587\u4ef6\/etc\/httpd\u4e0bconf\u4e3b\u914d\u7f6e\u6587\u4ef6\u76ee\u5f55conf\/httpd.conf\u4e3b\u914d\u7f6e\u6587\u4ef6conf.d\u76ee\u5f55\u662f\u6269\u5c55\u914d\u7f6e\u76ee\u5f55\uff0c\u914d\u7f6e\u591a\u865a\u62df\u4e3b\u673a\u7528\u7684conf.moudles.d\u529f\u80fd\u6a21\u5757\u914d\u7f6e\u76ee\u5f55\uff0c\u653e\u7684\u542f\u52a8\u6a21\u5757\u914d\u7f6e\u6587\u4ef6logs\u8f6f\u94fe\u63a5\u5230\/var\/log\/httpd\/\u4e0b\u65e5\u5fd7\u6587\u4ef6modules\u94fe\u63a5\u5230\/usr\/lib64\/httpd\/modules\u529f\u80fd\u6a21\u62df\u5e93\u4f4d\u7f6erun\u94fe\u63a5\u5230\/run\/httpd \u662fapache\u8fd0\u884c\u8fdb\u7a0b\u72b6\u6001\u6587\u4ef6state\u94fe\u63a5\u5230\/var\/lib\/httpd \u00a0\u6709\u9519\u8bef\u65f6\u95f4\u8bb0\u5f55\uff0c\u4e00\u822c\u4e3a\u7a7a<\/p>\n
\u4e09\u3001Apache\u5168\u5c40\u914d\u7f6e\u6587\u4ef6\u8be6\u89e3\u00a0cat\u00a0 \/etc\/httpd\/conf\/httpd.conf
\nhttpd -t \u6d4b\u8bd5\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5\u6709\u6ca1\u6709\u9519\u8bef
\ngrep -vE\u00a0‘#|^$’\u00a0\/etc\/httpd\/conf\/httpd.conf\u8fc7\u6ee4\u6389\u7a7a\u884c\u548c\u6ce8\u91ca\u884c
\nServerRoot\u00a0“\/etc\/httpd”\u00a0 \u00a0apache\u670d\u52a1\u914d\u7f6e\u7684\u6839\u76ee\u5f55
\nListen 80 \u00a0apache\u76d1\u542c\u7684\u9ed8\u8ba4\u7aef\u53e3\uff0c\u53ef\u4ee5\u76d1\u542c\u591a\u4e2a\u7aef\u53e3\uff0c\u5199\u591a\u4e2aListen
\nListen 172.16.0.131:80apache\u53ef\u4ee5\u76d1\u542c\u5728\u6307\u5b9a\u7684\u63a5\u53e3\u6216\u8005\u662fIP\u4e0a\uff08openEuler\u6709\u4e9b\u7aef\u53e3\u4e0d\u7528\u5173selint\u4e5f\u53ef\u4ee5\u8bbf\u95ee\uff09
\n\u6539\u76d1\u542c\u7aef\u53e3\u663e\u793a\u662fipv6:80\u95ee\u9898\uff0c\u662f\u5185\u6838\u81ea\u52a8\u8f6c\u7684\uff0c\u5176\u5b9e\u662f\u76d1\u542cipv4\uff0c\u5982\u679c\u8981\u6539\u5c31\u5728sysctl\u4e0b\u6539\uff0c\u628anet.ipv6.binv6only=0\u6539\u62101\u5c31\u4f1a\u663e\u793aipv4\u4e86\u6216\u8005\u76f4\u63a5\u5728\u914d\u7f6e\u6587\u4ef6\u4e2dListern 1.1.1.1:80\u8fd9\u6837\u6307\u5b9a\u5730\u5740+\u63a5\u53e3\u518d\u770b\u5c31\u53ef\u4ee5\u662fipv4 \u00a0\u4e86
\nInclude conf.modules.d\/*.conf \u00a0 \u00a0\u52a0\u8f7dapache\u7684\u6838\u5fc3\u6a21\u5757\u4ee5\u53ca\u7b2c\u4e09\u65b9\u6a21\u5757\uff08\u6269\u5c55\u6a21\u5757\uff09
\nUser apache \u00a0\u00a0\u5de5\u4f5c\u8fdb\u7a0b\u7ed1\u5b9a\u7684\u7528\u6237\u540d \u00a0 \u53ef\u4ee5\u6307\u5b9a\u666e\u901a\u7528\u6237\u6765\u8fd0\u884c\u8be5\u8fdb\u7a0b\uff0c\u4f46\u6307\u5b9a\u7684\u7528\u6237\u8981\u6709\/var\/www\/html\u6587\u4ef6\u8bfb\u53d6\u6709\u6743\u9650Group apache \u00a0\u5de5\u4f5c\u8fdb\u7a0b\u7ed1\u5b9a\u7684\u7528\u6237\u7ec4
\nServerAdmin root@localhost \u00a0\u00a0\u7ba1\u7406\u5458\u90ae\u7bb1 \u00a0\u8be5\u90ae\u7bb1\u5728\u670d\u52a1\u5668\u51fa\u9519\u65f6\u663e 500\u4ee5\u4e0a\u7684\u9519\u8bef\uff0c\u53ef\u4ee5\u6539\u6389\u5b83
\n<Directory \/> \u00a0 \u914d\u7f6e\u7981\u6b62\u8bbf\u95ee \/ \u6839\u76ee\u5f55 \u00a0 \uff08\u76ee\u5f55\u7684\u8bbf\u95ee\u63a7\u5236\uff09\u00a0AllowOverride none \u00a0\u5f00\u542f\u7684\u8bbf\u95ee\u53c2\u6570\u00a0 Require all denied \u00a0\u7981\u6b62\u6240\u6709\u7684\u8bbf\u95ee<\/Directory>
\nDocumentRoot\u00a0“\/var\/www\/html”\u00a0\u00a0\u7f51\u7ad9\u7684\u53d1\u5e03\u76ee\u5f55 \u00a0\u4e5f\u5c31\u662f\u7f51\u9875\u6587\u4ef6\u5b58\u653e\u7684\u4f4d\u7f6e\uff0c\u5982\u679c\u914d\u7f6e\u6307\u5b9a\u7684\u76ee\u5f55\uff0c\u8bbf\u95ee\u88ab\u7981\u6b62\uff0c\u5219\u9700\u8981\u5141\u8bb8\u8be5\u76ee\u5f55\u88ab\u8bbf\u95ee\uff0c\u4f46\u9700\u8981\u4e0b\u9762\u7684\u9009\u9879\u914d\u5408\u5141\u8bb8\u624d\u53ef\u4ee5<Directory\u00a0“\/var\/www”>AllowOverride NoneRequire all granted<\/Directory>
\n<IfModule dir_module> \u00a0 \u76ee\u5f55\u4e0b\u9ed8\u8ba4\u7684\u9996\u9875\u6587\u4ef6\u00a0 DirectoryIndex index.html \u00a0index.php \u00a0index.jsp \u00a0\u4e5f\u5c31\u662f\u8bbf\u95ee\u4e00\u4e2a\u76ee\u5f55\u65f6\u9ed8\u8ba4\u8bfb\u53d6\u76ee\u5f55\u4e0b\u7684 index.html\u00a0<\/IfModule>
\n<Files\u00a0“.ht*”> \u00a0 \u6587\u4ef6\u7684\u8bbf\u95ee\u63a7\u5236\u00a0 \u00a0 Require all denied \u00a0\u7981\u6b62 \u8bbf\u95ee\u7f51\u7ad9\u76ee\u5f55\u4e0b\u4ee5.ht\u5f00\u5934\u7684\u9690\u85cf\u6587\u4ef6<\/Files>
\n\u5728\/var\/www\/html\u4e0b\u52a0\u4e2a.htaccess\u6587\u4ef6\u540e\uff0c\u7f51\u7ad9\u8bbf\u95ee\u8981\u8ba4\u8bc1\u529f\u80fdvim .htaccessAuthType BasicAuthName \u00a0testAutheUserFile \/opt\/pass1Require user zhangsan
\nErrorLog\u00a0“logs\/error_log”\u00a0 \u00a0apache\u7684\u9519\u8bef\u65e5\u5fd7\u5b58\u653e\u7684\u4f4d\u7f6e
\nLogLevel warn \u8b66\u544a debug \u66f4\u52a0\u8be6\u7ec6\u7684\u65e5\u5fd7
\n<IfModule log_config_module> \u00a0\u5b9a\u4e49\u65e5\u5fd7\u7684\u683c\u5f0f\u00a0 LogFormat\u00a0“%h %l %u %t “%r” %>s %b “%{Referer}i” “%{User-Agent}i””\u00a0 \u00a0combined\u00a0 LogFormat\u00a0“%h %l %u %t “%r” %>s %b”\u00a0common<IfModule logio_module>\u00a0 \u00a0LogFormat\u00a0“%h %l %u %t “%r” %>s %b “%{Referer}i” “%{User-Agent}i” %I %O”\u00a0 \u00a0 combinedio\u00a0<\/IfModule>\u00a0 \u00a0CustomLog\u00a0“logs\/access_log”\u00a0combined<\/IfModule>
\n<IfModule alias_module> \u00a0\u5b9a\u4e49\u7684\u522b\u540d\u76ee\u5f55\u00a0 \u00a0 ScriptAlias \/cgi-bin\/\u00a0“\/var\/www\/cgi-bin\/”<\/IfModule>
\n<IfModule mime_module> \u5b9a\u4e49\u4e86apache\u652f\u6301\u7684\u6587\u4ef6\u7c7b\u578b \u00a0\u00a0 \u00a0 TypesConfig \/etc\/mime.types \u00a0\/\/\u67e5\u770b\u8be5\u6587\u4ef6\u4e2d\u652f\u6301\u7684\u7c7b\u578b\u00a0 \u00a0 AddType application\/x-compress .Z\u00a0 \u00a0 AddType application\/x-gzip .gz .tgz\u00a0 \u00a0 AddType text\/html .shtml\u00a0 \u00a0 AddOutputFilter INCLUDES .shtml<\/IfModule>vim \/etc\/mime.types\u4e2d\u6587\u4ef6\u7c7b\u578b\u8bf4\u660eMIME \u4f1a\u5c06\u8d44\u6e90\u6253\u4e0a\u7279\u5b9a\u7684tag \u4e5f\u5c31\u662f\u544a\u8bc9\u6d4f\u89c8\u5668\u8fd9\u662f\u4ec0\u4e48\u7c7b\u578b\u7684\u8d44\u6e90
\nAddDefaultCharset UTF-8 \u00a0 \u7f51\u7ad9\u9ed8\u8ba4\u5b57\u7b26\u96c6 \u00a0\u5b57\u7b26\u5904\u7406\u7684\u65b9\u5f0fUTF-8 \u901a\u7528\u7684\u56fd\u6807\u7801 \u00a0\u00a0gb2312 \u652f\u6301\u4e2d\u6587\u00a0\u53ef\u4ee5\u5728vim \u4e2d\u4f7f\u7528:set\u00a0fileencoding=gb2312 \u00a0\u4fee\u6539\u6587\u672c\u7684\u7f16\u7801\u65b9\u5f0f\u00a0\u5f53\u7f51\u7ad9\u7a0b\u5e8f\uff08\u7f51\u9875\u6587\u4ef6\uff09\u548c\u670d\u52a1\u5668\u652f\u6301\u7684\u7f16\u7801\u65b9\u5f0f\u4e0d\u4e00\u81f4\u65f6 \u5219\u51fa\u73b0\u4e71\u7801
\n<IfModule mime_magic_module>\u00a0 \u00a0 MIMEMagicFile conf\/magic \u00a0\u00a0\u6269\u5c55\u7684mime\u7684\u7c7b\u578b \uff0c\u652f\u6301\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u6216\u8005\u662f\u4e00\u4e9b\u5e94\u7528\u7684\u7a0b\u5e8f\u7684\u6587\u4ef6\u7c7b\u578b<\/IfModule>
\nIncludeOptional conf.d\/*.conf \u00a0\u00a0\u9ed8\u8ba4\u52a0\u8f7d\u865a\u62df\u4e3b\u673a\u7684\u914d\u7f6e\u6587\u4ef6 \u5c31\u662f\u4e00\u4e2a\u4e00\u4e2a\u7f51\u7ad9\uff0c\u901a\u5e38\u6bcf\u4e00\u4e2a\u914d\u7f6e\u6587\u4ef6\u5c31\u662f\u4e00\u4e2a\u7f51\u7ad9
\n\/usr\/lib64\/httpd\/modules\/\u00a0Apache\u7684\u52a8\u6001\u529f\u80fd\u6a21\u5757 \u00a0\uff0c\u652f\u6301\u5e93\u6587\u4ef6\u4ee5\u70b9.so \u7ed3\u5c3e
\nhttpd -M\u00a0\u67e5\u770bapache\u52a0\u8f7d\u7684\u6a21\u5757 \uff0c\u53d6\u6d88\u6a21\u5757\u52a0\u8f7d\uff0c\u5219\u9700\u8981\u5728 conf.modules.d \u4e2d\u7ed9\u76f8\u5e94\u7684\u6a21\u5757\u8fdb\u884c\u6ce8\u91ca\uff0c\u5373\u53ef\u53d6\u6d88\u52a0\u8f7d<\/p>\n
apache\u9ad8\u7ea7\u914d\u7f6e\u957f\u8fde\u63a5\u7b49\u914d\u7f6e\u4f4d\u7f6evim \/usr\/share\/doc\/httpd\/httpd-default.conf
\n\u53ef\u4ee5\u5728\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d\u5173\u95edvim \/etc\/httpd\/conf\/httpd.confKeepAlive On
\n1. \u00a0apache\u7684\u957f\u8fde\u63a5\u00a0\u54cd\u5e94\u6807\u5934\u91cc\u9762\u770b\u5230keep-alive\uff0c\u5c31\u662f\u5f00\u4e86\u957f\u8fde\u63a5\u65b9\u5f0f.\u4ecehttp1.1\u5f00\u59cb\u5f15\u5165\u662f\u4e3a\u4e86\u8ba9\u4e0b\u4e00\u6b21\u7684socket\u901a\u4fe1\u590d\u7528\u4e4b\u524d\u521b\u5efa\u7684\u8fde\u63a5\uff0c\u4ece\u800c\uff0c\u51cf\u5c11\u8fde\u63a5\u7684\u521b\u5efa\u548c\u9500\u6bc1\u7684\u7cfb\u7edf\u5f00\u9500\u3002\u4fdd\u6301\u8fde\u63a5\uff0c\u4f1a\u8ba9\u67d0\u4e2a\u8fdb\u7a0b\u6216\u8005\u7ebf\u7a0b\u4e00\u76f4\u5904\u4e8e\u7b49\u5f85\u72b6\u6001\uff0c\u5373\u4f7f\u6ca1\u6709\u6570\u636e\u8fc7\u6765
\napache \u9ed8\u8ba4\u5f00\u542f\u957f\u8fde\u63a5\u00a0KeepAlive On|Off \u00a0\u5f00\u542f\u6216\u8005\u5173\u95ed\u957f\u8fde\u63a5 \u00a0 apache\u548cnginx\u662f\u9ed8\u8ba4\u5f00\u542f\u7684
\nKeepAliveTimeout 5 \u8d85\u65f6\u65f6\u95f4\uff0c\u5f53\u670d\u52a1\u5668\u5b8c\u6210\u4e00\u6b21httpd\u8bf7\u6c42\u540e\u4e0b\u4e00\u6b21\u8bf7\u6c42\u8d85\u65f6\u7684\u65f6\u95f4\uff08\u4e5f\u5c31\u662f\u7b2c\u4e00\u6b21\u8fde\u63a5\u540e\u7b49\u5f855\u79d2\uff0c5\u79d2\u5185\u6ca1\u6709\u65b0\u7684\u8bf7\u6c42\u5219\u5173\u95ed\u8fde\u63a5\uff09
\nMaxKeepAliveRequests 100 \u00a0\u6bcf\u4e00\u4e2a\u8fde\u63a5\u9ed8\u8ba4\u5904\u7406100\u4e2a\u8bf7\u6c42\u5728\u5b9e\u9645\u7684\u751f\u4ea7\u4e2d\u53ef\u4ee5\u6839\u636eab\u7684\u538b\u6d4b\u7ed3\u679c\u6765\u8fdb\u884c\u914d\u7f6e\uff0c\u63a8\u8350\u7684\u503c\u7684\u662f KeepAliveTimeout 10 -15 \u00a0 MaxKeepAliveRequests \u00a0 200
\n2. \u914d\u7f6e\u8d44\u6e90\u7684\u8bbf\u95ee\u7b56\u75652.1 \u9759\u6001\u8d44\u6e90\u7684\u914d\u7f6e\u6307\u7684\u662f\u914d\u7f6e\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u8bbf\u95ee\u7b56\u7565\u4e0d\u8981\u653e\u5728\u6839\u76ee\u5f55\uff0c\u9ed8\u8ba4\u6839\u76ee\u5f55\u4e0d\u751f\u6548\uff0c\u56e0\u4e3aconf.d\/welcome.conf\u6587\u4ef6\u914d\u7f6e\u7ed9\u9650\u5236\u4e86
\n\u76ee\u5f55\u8bbf\u95ee\u7b56\u7565<directory \u201c\u76ee\u5f55\u7684\u8def\u5f84\u201d> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0\u76ee\u5f55\u7b56\u7565\u914d\u7f6e \u00a0<\/directory>
\n\u6587\u4ef6\u8bbf\u95ee\u7b56\u7565<files \u201c\u6587\u4ef6\u7684\u8def\u5f84\u201d> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0\u00a0\u6587\u4ef6\u7684\u7b56\u7565\u914d\u7f6e<\/files>
\n\u76ee\u5f55\u548c\u6587\u4ef6\u7684\u4e2d\u7684\u5177\u4f53\u914d\u7f6e\u9879https:\/\/httpd.apache.org\/docs\/2.4\/mod\/core.html#options\u8fd9\u4e2a\u91cc\u9762\u53ef\u4ee5\u770b\u5177\u4f53\u54ea\u4e00\u9879\u662f\u4ec0\u4e48\u63a7\u5236
\nOptions: \u914d\u7f6e\u76ee\u5f55\u7684\u9009\u9879 \u7d22\u5f15\u3001\u94fe\u63a5\u7b49\u9009\u9879\uff1a options Indexes \u00a0FollowSymLinksIndexes\uff1a \u5982\u679c\u5728\u76ee\u5f55\u4e2d\u627e\u4e0d\u5230\u9ed8\u8ba4\u7684\u9996\u9875\u5219\u7d22\u5f15\u5f53\u524d\u76ee\u5f55
\nFollowSymLinks\uff1a \u5141\u8bb8apache\u4f7f\u7528\u8f6f\u94fe\u63a5Options \u00a0All \u00a0\u542f\u7528\u6240\u6709\u7684\u914d\u7f6e\u9009\u9879Options \u00a0None \u7981\u7528\u6240\u6709\u7684\u914d\u7f6e\u9009\u9879
\nAllowOverride\uff1a \u914d\u7f6e\u76ee\u5f55\u4e2d\u7684.htaccess\u8bbf\u95ee\u6587\u4ef6\u662f\u5426\u751f\u6548\u9009\u9879\uff1a\u00a0All \u00a0\u8be5\u6587\u4ef6\u4e2d\u7684\u6240\u6709\u6307\u4ee4\u90fd\u751f\u6548None \u8be5\u6587\u4ef6\u4e2d\u7684\u6240\u6709\u6307\u5b9a\u90fd\u4e0d\u751f\u6548\uff08\u9ed8\u8ba4\u4e3a\u8be5\u9879\uff09Authconfig \u00a0\u9ed8\u8ba4\u914d\u7f6e\u751f\u6548\uff0c\u5176\u4ed6\u6307\u4ee4\u90fd\u65e0\u6548
\n3\u3001\u8bbf\u95ee\u63a7\u5236\uff1a\u4e5f\u662f\u5728\u8fd9\u4e2a\u9879\u91cc\u5199<Directory \u00a0“\/data\/euler”>\u57fa\u4e8e\u5ba2\u6237\u7aefIP\u5730\u5740\u7684\u8bbf\u95ee\u63a7\u5236\u00a0Require all granted \u00a0\u5141\u8bb8\u6240\u6709\u4eba\u8fdb\u884c\u8bbf\u95eeRequire \u00a0all denied \u00a0\u7981\u6b62\u6240\u6709\u4eba\u8fdb\u884c\u8bbf\u95eeRequire not ip 192.168.1.1 \u00a0\u4f8b\u5916 \u00a0not ip \u548c granted \u00a0\u8fdb\u884c\u8fde\u7528 \u00a0\u8868\u793a\u9ed1\u540d\u5355<\/Directory><\/p>\n
<Directory \u00a0“\/data\/euler”><RequireAll> \u00a0\u8868\u793aRequire\u4e2d\u6240\u6709\u7684\u6307\u4ee4\u540c\u65f6\u751f\u6548Require all granted \u00a0\u5141\u8bb8\u6240\u6709\u4eba\u8bbf\u95eeRequire not ip 192.168.1.1 \u00a0\u5c06\u8be5IP\u6392\u9664\u5728\u5916<\/RequireALL><\/Directory>
\n<\/RequireAll>RequireAll: \u5728\u8be5\u6bb5\u843d\u5185\u7684require\u6307\u4ee4\u9700\u8981\u5168\u90e8\u6ee1\u8db3\uff0c\u4e5f\u5c31\u662f\u903b\u8f91\u4e0e\u7684\u5173\u7cfbRequireAny: \u5728\u8be5\u6bb5\u843d\u5185\u7684require\u6307\u4ee4\u53ea\u9700\u8981\u6ee1\u8db3\u5176\u4e2d\u4efb\u610f\u4e00\u4e2a\u5373\u53ef\u4f7f\u7528\u6280\u5de7\uff1a \u5982\u679crequire\u7684\u6307\u4ee4\u5f7c\u6b64\u4e4b\u524d\u662f\u4e92\u76f8\u51b2\u7a81\u7684\uff0c\u4f7f\u7528All\uff0c\u5982\u679c\u5f7c\u6b64\u4e4b\u524d\u4e92\u76f8\u4e0d\u5f71\u54cd\uff0c\u5219\u4f7f\u7528AnyRequire \u00a0ip \u00a0192.168.1.1 \u00a0\u767d\u540d\u5355\u65f6 \u4e0d\u9700\u8981 \u5148\u62d2\u7edd\u53ef\u4ee5\u76f4\u63a5\u914d\u7f6e\uff08\u56e0\u4e3aapache\u9ed8\u8ba4\u7684\u7b56\u7565\u662f\u62d2\u7edd\u7684\uff09Require \u00a0host \u00a0example.com \u00a0\u5141\u8bb8\u7279\u5b9a\u7684\u4e3b\u673a\u8fdb\u884c\u8bbf\u95ee\uff08\u6240\u6307\u5b9a\u7684\u4e3b\u673a\u540d\u662f\u670d\u52a1\u5668\u7aef\u53ef\u4ee5\u6b63\u5e38\u89e3\u6790\u5230\u5730\u5740\u7684\uff0c\u624d\u80fd\u591f\u751f\u6548\uff09<\/p>\n
4\u3001\u57fa\u4e8e\u7528\u6237\u8ba4\u8bc1\u7684\u8bbf\u95ee\u63a7\u5236\uff1a\u5728\u8ba4\u8bc1\u7684\u76ee\u5f55\u8def\u5f84\u4e2d\u8fdb\u884c\u6dfb\u52a0<Directory\u00a0“\/data\/euler”>\u00a0 \u00a0AuthType Basic\u00a0 \u00a0AuthName openEuler\u00a0 \u00a0AuthUserFile \/opt\/pass1\u00a0 \u00a0require \u00a0user \u00a0zhangsan<\/Directory>
\nAuthType \u00a0Basic \u00a0 \u00a0\u57fa\u7840\u8ba4\u8bc1AuthName \u8ba4\u8bc1\u63d0\u793a\u7684\u4fe1\u606fAuthUserFile \u00a0\u8ba4\u8bc1\u7684\u7528\u6237\u548c\u5bc6\u7801\u5b58\u50a8\u7684\u6587\u4ef6 \u00a0htpasswd -c \/opt\/pass1 zhangsan \u00a0 \u751f\u6210\u6587\u4ef6require \u00a0user \u00a0zhangsan \u00a0\u53ef\u4ee5\u8ba4\u8bc1\u7684\u7528\u6237
\n\u57fa\u4e8e\u5bc6\u6587\u7684\u8ba4\u8bc1\u65b9\u5f0f\uff1a \u00a0\u6458\u8981\u8ba4\u8bc1AuthType \u00a0DigestAuthName \u8ba4\u8bc1\u63d0\u793a\u7684\u4fe1\u606f\uff08\u5728\u6458\u8981\u8ba4\u8bc1\u4e2d\u88ab\u79f0\u4e3a\u57df\uff09AuthUserFile \u00a0\u8ba4\u8bc1\u7684\u7528\u6237\u548c\u5bc6\u7801\u5b58\u50a8\u7684\u6587\u4ef6htdigest -c \u00a0\/opt\/pass2 \u00a0openEuler lisi \u00a0 \u751f\u6210\u6458\u8981\u6587\u4ef6require \u00a0user \u00a0zhangsan \u00a0\u53ef\u4ee5\u8ba4\u8bc1\u7684\u7528\u6237<\/p>\n
\u56db\u3001Apache\u7684\u6570\u636e\u538b\u7f29\uff1a\u5728\u670d\u52a1\u5668\u7aef\u5c06\u8f83\u5927\u7684\u8d44\u6e90\u6587\u4ef6\u53d1\u9001\u5230\u5ba2\u6237\u7aef\u65f6\u5bf9\u5185\u5bb9\u8fdb\u884c\u538b\u7f29\u540e\u4f20\u8f93\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2dhttpd.confSetOutputFilter DEFLATE \u00a0 \u5f00\u542f\u538b\u7f29\uff0c\u9ed8\u8ba4\u5f00\u542f
\nhtml css js\u8fd9\u4e09\u7c7b\u6587\u4ef6\u4e00\u822c\u90fd\u662f\u8981\u538b\u7f29\u7684
\n\u5f00\u542f\u538b\u7f29\u662f\u542f\u7528\u538b\u7f29\u4f20\u8f93\u7684\u6700\u57fa\u7840\u7684\u8981\u6c42\u538b\u7f29\u4f20\u8f93\u7684\u8fc7\u7a0b\uff1a \u5ba2\u6237\u7aef\u6d4f\u89c8\u5668\u53d1\u9001\u8bf7\u6c42\u662f\u5728\u8bf7\u6c42\u5934\u4e2d\u52a0\u4e0aAccept-Encoding\u544a\u8bc9\u670d\u52a1\u5668\u7aef\u81ea\u5df1\u6240\u652f\u6301\u7684\u89e3\u538b\u7684\u65b9\u5f0f\u9ed8\u8ba4\u4f7f\u7528\u7684gzip\uff0c\u670d\u52a1\u5668\u7aef\u6839\u636e\u6d4f\u89c8\u5668\u7684\u8bf7\u6c42\u5934\u4fe1\u606f\u8fdb\u884c\u538b\u7f29\u540e\uff0c\u901a\u8fc7Content-Encoding\u6765\u544a\u8bc9\u6d4f\u89c8\u5668\u6570\u636e\u538b\u7f29\u7684\u65b9\u5f0f\uff0c\u6d4f\u89c8\u5668\u6839\u636e\u6307\u5b9a\u7684\u65b9\u5f0f\u8fdb\u884c\u89e3\u538b
\nAddOutputFilterByType DEFLATE text\/plain \u00a0 \u6307\u5b9a\u8981\u538b\u7f29\u7684\u6587\u4ef6\u7c7b\u578bAddOutputFilterByType DEFLATE application\/zip \u00a0zip\u538b\u7f29\u6587\u4ef6AddOutputFilterByType DEFLATE application\/octet-stream \u00a0\u4e8c\u8fdb\u5236\u6d41\u6587\u4ef6AddOutputFilterByType DEFLATE text\/html \u00a0html\u7f51\u9875\u6587\u4ef6AddOutputFilterByType DEFLATE text\/css \u00a0css \u6837\u5f0f\u8868\u6587\u4ef6AddOutputFilterByType DEFLATE application\/javascript js\u7c7b\u578b\u6587\u4ef6AddOutputFilterByType DEFLATE application\/mp4 \u00a0\u538b\u7f29MP4\u00a0DeflateCompressionLevel 9 \u00a0 \u538b\u7f29\u7684\u7ea7\u522b \u00a00 – 9 \u6570\u5b57\u8d8a\u5927\u538b\u7f29\u6548\u679c\u8d8a\u597d
\n\u4ec0\u4e48\u6837\u7684\u573a\u666f\u4e0b\u8981\u7981\u6b62\u6570\u636e\u538b\u7f29\uff1a1. \u65e9\u671f\u7684\u6d4f\u89c8\u5668\u7684\u517c\u5bb9\u95ee\u9898\uff0c\u4e0d\u652f\u6301\u538b\u7f29\u9009\u9879\uff0c\u9700\u8981\u5ffd\u7565\u7279\u5b9a\u7684\u6d4f\u89c8\u5668\u7684\u7248\u672c2. \u670d\u52a1\u5668\u7684\u7279\u522b\u5927\u7684\u6587\u4ef6\u8fdb\u884c\u538b\u7f29\uff0c\u4f1a\u6d88\u8017\u5927\u91cf\u7684CPU\u548c\u5185\u5b58\uff0c\u4f8b\u5982ISO\u3001\u5927\u578b\u7684\u89c6\u9891\u6587\u4ef6\u3001\u6570\u636e\u6587\u4ef6\u2026
\n\u7981\u6b62\u538b\u7f29\u7684\u4e24\u4e2a\u65b9\u5f0f\uff1a\u7981\u6b62\u7279\u5b9a\u7684\u6d4f\u89c8\u5668\u8fdb\u884c\u538b\u7f29edge \u00a0chrome\u00a0\u73b0\u4ee3\u5316\u6d4f\u89c8\u5668\u4e2d\u5728\u7528\u6237\u8bbf\u95ee\u8d44\u6e90\u65f6\u4f7f\u7528\u7528\u6237\u4ee3\u7406\u6765\u9632\u6b62\u90e8\u5206\u7f51\u7ad9\u5bf9\u6d4f\u89c8\u5668\u7684\u9650\u5236 BrowserMatch ^Mozilla\/4.0[678] no-gzip \u00a0 \u9650\u5236\u706b\u72d04.06 4.07 4.08 \u8fdb\u884c\u538b\u7f29
\n\u7981\u6b62\u7279\u5b9a\u7684\u8d44\u6e90\u540e\u7f00\u8fdb\u884c\u538b\u7f29SetEnvIfNoCase Request_URI .(mp4|mov|avi)$ no-gzip.iso .mp4\u00a0Apache\u7684\u65e5\u5fd7\u914d\u7f6eaccess_log \u00a0\u670d\u52a1\u5668\u7684\u6b63\u786e\u65e5\u5fd7\uff0c\u6240\u6709\u7528\u6237\u8bbf\u95ee\u7684\u8bf7\u6c42\u90fd\u8bb0\u5f55\u5728\u6b64error_log \u00a0 \u670d\u52a1\u5668\u7684\u9519\u8bef\u65e5\u5fd7\uff0c\u6240\u6709\u670d\u52a1\u7684\u62a5\u9519\u548c\u9650\u5236\u90fd\u8bb0\u5f55\u5728\u6b64
\n\u4e94\u3001\u65e5\u5fd7\u7684\u683c\u5f0f\uff1a\u00a0172.16.0.1 – – [03\/Mar\/2024:15:27:44 +0800]\u00a0“GET \/test.mp4 HTTP\/1.1”\u00a0304 –\u00a0“-”\u00a0“Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/118.0.0.0 Safari\/537.36 Edg\/118.0.2088.46”
\n\u5b9a\u4e49\u65e5\u5fd7\u8f93\u51fa\u683c\u5f0fhttpd.conf\u4e3b\u914d\u7f6e\u4ef6\u4e2d\u6539LogFormat\u00a0“%h %l %u %t “%r” %>s %b “%{Referer}i” “%{User-Agent}i””\u00a0 combined
\n%h \u5ba2\u6237\u7aefIP\u5730\u5740 \u00a0172.16.0.1\u00a0%l \u8fdc\u7a0b\u767b\u5f55\u540d \u00a0\uff08\u5982\u679c\u662f – \u00a0\u8be5\u9879\u6ca1\u6709\u6570\u636e\uff09%u \u5df2\u8ba4\u8bc1\u7684\u7528\u6237\u540d –\u00a0%t \u65f6\u95f4\u6233 \u00a0 [03\/Mar\/2024:15:27:44 +0800]%r \u00a0http\u8bf7\u6c42\u7684\u65b9\u6cd5+url+\u7248\u672c\u53f7 \u00a0GET \/test.mp4 \u00a0http 1.1%>s \u54cd\u5e94\u72b6\u6001\u7801 \u00a0 304%b \u00a0\u8d44\u6e90\u7684\u5b57\u8282\u6570\u00a0%{Referer}i \u5ba2\u6237\u7aef\u7684\u6765\u8def \u00a0–\u00a0%{User-agent}i \u00a0 \u7528\u6237\u7684\u6d4f\u89c8\u5668\u4fe1\u606f\uff08\u4ee3\u7406\u4fe1\u606f\uff09 \u00a0combined \u65e5\u5fd7\u7684\u540d\u79f0
\n\u81ea\u5b9a\u4e49\u65e5\u5fd7\uff0c\uff08\u6587\u4ef6\u7684\u8def\u5f84+\u65e5\u5fd7\u683c\u5f0f\u7684\u540d\u79f0\uff09CustomLog \u00a0\/var\/log\/data.log \u00a0 \u00a0 httpd_test<\/p>\n
\u516d\u3001Apache \u914d\u7f6eHTTPS\u4e3a\u57df\u540dhcie.openeuler.org.cn \u914d\u7f6essl\u8bbf\u95ee1. \u5b89\u88c5apache\u7684ssl\u7684\u6a21\u5757yum \u00a0install \u00a0mod_ssl \u00a0-y
\n\u770b\u6587\u4ef6\u751f\u6210\u6ca1\u6709\u00a0rpm -ql mod_ssl
\n2.\u7533\u8bf7\u8bc1\u4e66\u5728 zerossl.com\u4e2d\u7533\u8bf7\u5355\u57df\u540d\u8bc1\u4e66 \u00a090\u5929\u6709\u6548Let\u2019s Encrypt \u00a0R3\u7684\u8bc1\u4e66 \u8be5\u8bc1\u4e66\u652f\u6301\u901a\u914d\u7b26
\n3.\u914d\u7f6e\u8bc1\u4e66vim \u00a0\/etc\/httpd\/conf.d\/ssl.confSSLCACertificateFile \/opt\/ssl\/ca_bundle.crt \u00a0\u8bc1\u4e66\u94fe\uff08\u53ef\u4ee5\u4e0d\u914d\u7f6e\uff0c\u5728\u6d4f\u89c8\u5668\u4e2d\u6709\u81ea\u5e26\uff09SSLCertificateKeyFile \/opt\/ssl\/private.key \u00a0 \u670d\u52a1\u5668\u7684\u79c1\u94a5\u6587\u4ef6SSLCertificateFile \/opt\/ssl\/certificate.crt \u00a0\u670d\u52a1\u5668\u7684\u8bc1\u4e66\uff08\u7b7e\u540d\u540e\u7684\u516c\u94a5\uff09SSLEngine on \u00a0\u5f00\u542fhttps\u7684\u5f15\u64ceListen 443 \u00a0https\u00a0\u6539\u914d\u7f6e\u6587\u4ef6\u76d1\u542c\u7684\u662f443 \u7aef\u53e3
\n4\u3001\u5f3a\u5236\u4f7f\u7528https\u8bbf\u95ee\uff0c\u7528http\u4e5f\u4f1a\u81ea\u52a8\u8df3\u8f6c\u81f3https\u8bbf\u95ee\u65b9\u6cd5\u00a0\u5e0c\u671b\u4ec5\u5f00\u542fhttps\u7684\u8bbf\u95ee\uff0c\u800c\u4e0d\u8981\u8ba9\u7528\u6237\u8bbf\u95eehttp ,\u914d\u7f6eURL\u91cd\u5199\u89c4\u5219\uff0c\u5c06http\u7684\u8bbf\u95ee\u91cd\u5b9a\u5411\u5230https\u00a0\u5728 httpd.conf \u4e2d\u4e5f\u5c31\u662f80\u7aef\u53e3\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\u8fdb\u884c\u914d\u7f6eRewriteEngine on \u00a0\u5f00\u542f\u91cd\u5b9a\u5411\u89c4\u5219RewriteRule ^(\/.*)$ https:\/\/%{HTTP_HOST}$1\u00a0[redirect=302]<\/p>\n
\u4e03\u3001Apache\u7684\u865a\u62df\u4e3b\u673a\u6240\u8c13\u7684\u865a\u62df\u4e3b\u673a\u5c31\u662f\u5728\u4e00\u53f0\u670d\u52a1\u5668\u4e0a\u5b9e\u73b0\u591a\u4e2a\u7f51\u7ad9\u7684\u8bbf\u95ee\uff0c\u5728\u4e00\u53f0\u670d\u52a1\u5668\u4e0a\u901a\u8fc7\u865a\u62df\u4e3b\u673a\u90e8\u7f72\u591a\u4e2a\u7f51\u7ad9\uff0c\u5e76\u4e14\u6bcf\u4e2a\u7f51\u7ad9\u90fd\u662f\u72ec\u7acb\u7684\u865a\u62df\u4e3b\u673a\u7684\u914d\u7f6e\uff1avim \/etc\/httpd\/conf.d\/*.conf \u00a0\u5728\u8be5\u76ee\u5f55\u4e0b\u6240\u6709\u4ee5\u70b9.conf\u7ed3\u5c3e\u7684\u6587\u4ef6\u90fd\u662f\u865a\u62df\u4e3b\u673a
\napache\u5b9e\u73b0\u865a\u62df\u4e3b\u673a\u7684\u65b9\u5f0f\u6709\u4e09\u79cd\uff1a1. \u662f\u57fa\u4e8e\u7aef\u53e3\u7684\u865a\u62df\u4e3b\u673avim \/etc\/httpd\/conf.d\/*.conf\u00a0<VirtualHost *:81>DocumentRoot \/var\/www\/html\/site1<\/VirtualHost>Listen 81 \u00a0 \u00a0 \u52a0\u4e0a\u76d1\u542c\u7aef\u53e3
\n*\u53f7\u53ef\u4ee5\u5177\u4f53\u6307\u5b9a\u672c\u673a\u54ea\u4e2aIP\u5730\u5740
\n2. \u662f\u57fa\u4e8eIP\u7684\u865a\u62df\u4e3b\u673avim \/etc\/httpd\/conf.d\/*.conf\u00a0<VirtualHost 172.16.0.100:80>ServerName site3.example.comDocumentRoot \/var\/www\/html\/site3<\/VirtualHost>
\n<VirtualHost 172.16.0.200:80>ServerName site3.example.comDocumentRoot \/var\/www\/html\/site4<\/VirtualHost><\/p>\n
3. \u662f\u57fa\u4e8e\u540d\u79f0\u7684\u865a\u62df\u4e3b\u673a\u6240\u8c13\u7684\u540d\u79f0\u6307\u7684\u5c31\u662f\u901a\u8fc7\u57df\u540d\u6765\u8fdb\u884c\u8bbf\u95eevim \/etc\/httpd\/conf.d\/*.conf\u00a0<VirtualHost *:80>ServerName site3.example.comDocumentRoot \/var\/www\/html\/site3<\/VirtualHost>
\n<VirtualHost *:80>ServerName site4.example.comDocumentRoot \/var\/www\/html\/site4<\/VirtualHost>
\n\u6ce8\u610f\uff1a\u5982\u679c\u5728httpd.conf\u4e2d \u5df2\u7ecf\u6307\u5b9a\u4e86 Listen 80\uff0c\u6ca1\u6709\u6307\u5b9a\u5177\u4f53\u7684IP\u7aef\u53e3\u5219\u6240\u6709IP\u90fd\u76d1\u542c80\uff0c\u5219\u4e0d\u7528\u914d\u7f6e\uff0c\u5982\u679c\u6307\u5b9a\u7684\u662f192.168.1.1:80 \u5177\u4f53IP\u768480\u7aef\u53e3\u5219\uff0c\u865a\u62df\u4e3b\u673a\u4e2d\u9700\u8981\u914d\u7f6e Listen 172.16.0.100:80 \u76d1\u542c\u5177\u4f53IP\u768480\u7aef\u53e3<\/p>\n
<\/p>\n
\u4e03\u3001Nginx\u7684\u5b89\u88c5\u4e0e\u914d\u7f6e1\u3001Master\u4e3b\u8fdb\u7a0b\uff0c\u4e3b\u914d\u7f6e\u63a7\u5236\u00a0worker\u5de5\u4f5c\u8fdb\u7a0b\uff0c\u5f02\u6b65IO\u6a21\u578b\uff0c\u652f\u6301\u957f\u8fde\u63a5\uff0c\u4e5f\u53ef\u4ee5\u63a5\u6536\u65b0\u7684\u8fdb\u7a0b
\nstream\u6a21\u5757\u53ef\u4ee5\u5b9e\u73b0\u7aef\u53e3\u6620\u5c04
\nLB\u6a21\u62df\u505a\u8d1f\u8f7d\u5747\u8861\u548c\u53cd\u5411\u4ee3\u7406\u662f\u8d77\u7684
\n2\u3001\u5b89\u88c5yum install nginx \uff08\u4e0d\u652f\u6301\u70ed\u5347\u7ea7\uff09\u00a0\u6e90\u7801\u5305\u5b89\u88c5\u652f\u6301\u70ed\u5347\u7ea7
\nnginx -t\u6821\u9a8c\u914d\u7f6e\u6587\u4ef6nginx -v\u770b\u7248\u672cnginx \u542f\u52a8nginx -s stop\u505c\u6b62nging -s quit \u4f18\u96c5\u505c\u6b62nginx -s load \u542f\u52a8
\n\/etc\/nginx\/nginx.conf\u00a0\u5168\u5c40\u914d\u7f6e
\nnginx.conf.default\u5404\u79cd\u5e94\u7528\u53c2\u8003\u914d\u7f6e\u6587\u4ef6
\nconf.d\/\u4e0b\u9762\u653e\u865a\u62df\u76ee\u5f55
\n\/usr\/share\/nginx\/html\/\u9ed8\u8ba4\u7f51\u7ad9\u76ee\u5f55
\n\/var\/log\/nginx\u65e5\u5fd7\u76ee\u5f55
\n3\u3001Nginx\u7684\u914d\u7f6e\u6587\u4ef6\u8be6\u89e3\uff1a\/etc\/nginx\/nginx.conf
\nuser nginx; \u00a0\u8fd0\u884c\u7684\u7528\u6237
\nworker_processes auto; \u00a0\u5982\u679c\u662fauto\u5219\u4e0eCPU\u548c\u6838\u5fc3\u6570\u6210\u6b63\u6bd4\uff0c\u6307\u5b9a\u5de5\u4f5c\u7684\u8fdb\u7a0b\u6570
\nerror_log \/var\/log\/nginx\/error.log; \u00a0\u6307\u5b9a\u9519\u8bef\u7684\u65e5\u5fd7
\npid \/run\/nginx.pid; \u00a0\u00a0master \u8fdb\u7a0b\u7684ID
\ninclude \/usr\/share\/nginx\/modules\/*.conf; \u00a0nginx\u52a0\u8f7d\u7684\u6a21\u5757\u914d\u7f6e\u6587\u4ef6
\nevents \u6307\u5b9a\u5de5\u4f5c\u6a21\u5f0f \u00a0{worker_connections 1024; \u00a0\u6307\u5b9a\u5355\u4e2a\u8fdb\u7a0b\u7684\u8fde\u63a5\u6570}
\nHTTP\u6a21\u5757\u7684\u914d\u7f6elog_format \u00a0main \u00a0‘$remote_addr – $remote_user [$time_local] “$request” ”$status $body_bytes_sent “$http_referer” ””$http_user_agent” “$http_x_forwarded_for”‘;log_format \u00a0\u65e5\u5fd7\u7684\u683c\u5f0f
\naccess_log \u00a0\/var\/log\/nginx\/access.log \u00a0main;\u00a0sendfile \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0on; \u00a0\u00a0\u9ad8\u6548\u6587\u4ef6\u4f20\u8f93\u7684\uff08\u76f4\u63a5\u4ece\u78c1\u76d8\u4e0a\u8bfb\u53d6\u6587\u4ef6\u53d1\u9001\u7ed9\u7528\u6237\uff0c\u800c\u4e0d\u662f\u5148\u8bfb\u5230\u5185\u5b58\u518d\u4ece\u5185\u5b58\u4e2d\u53d1\u9001\uff09tcp_nopush \u00a0 \u00a0on; \u00a0 \u00a0\u7acb\u5373\u56de\u5e94TCP\u7684\u8bf7\u6c42tcp_nodelay \u00a0 \u00a0on; \u00a0 \u00a0\u00a0\u5bf9\u4e8e\u5c0f\u6570\u636e\u5305\u76f4\u63a5\u56de\u5e94keepalive_timeout \u00a0 65; \u00a0\u5f00\u542f\u957f\u8fde\u63a5\u7684\u8d85\u65f6 \u00a065s\u00a0types_hash_max_size 4096; \u00a0\u8bb0\u5f55Nginx\u7684\u54c8\u5e0c\u6563\u5217\u7684\u5927\u5c0finclude \u00a0 \/etc\/nginx\/mime.types; \u00a0\u53ef\u4ee5\u8bc6\u522b\u7684\u6587\u4ef6\u7c7b\u578bdefault_type \u00a0 \u00a0application\/octet-stream; \u00a0\u53ef\u4ee5\u76f4\u63a5\u5904\u7406\u4e8c\u8fdb\u5236\u7684\u6d41\u6587\u4ef6\uff0c\u4e5f\u5c31\u662f\u4e8c\u8fdb\u5236\u7684\u6587\u4ef6\u53ef\u4ee5\u76f4\u63a5\u4e0b\u8f7d
\ninclude \/etc\/nginx\/conf.d\/*.conf \u00a0\u865a\u62df\u4e3b\u673a\u7684\u914d\u7f6e\u76ee\u5f55server { \u00a0 \u00a0\u8868\u793a\u4e00\u4e2a\u5b8c\u6574\u7684\u865a\u62df\u4e3b\u673a\u7684\u914d\u7f6e\u00a0 listen \u00a080 \u00a0\u76d1\u542c\u7684\u7aef\u53e3\u00a0 server_name \u4e3b\u673a\u540d\uff08\u57df\u540d\uff09\u00a0 root \u7f51\u7ad9\u7684\u6839\u76ee\u5f55 \u00a0\u00a0 include \/etc\/nginx\/default.d\/*.conf; \u00a0\u5b9a\u4e49\u865a\u62df\u4e3b\u673a\u5f00\u542f\u7684\u9ad8\u9636\u7279\u6027\u00a0 error_page 404 \/404.html; \u00a0\u8fd4\u56de404\u9519\u8bef\u7684\u5730\u5740\uff08\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\uff09\u00a0 location = \/40x.html { \u00a0 \u8def\u7531\u89c4\u5219\uff08\u5b9a\u4e49\u7684\u7b56\u7565\uff09\u00a0 \u7b56\u7565\u7684\u5185\u5bb9}
\n}\u00a0error_page 500 502 503 504 \/50x.html; \u00a0\u5b9a\u4e49\u7684\u9519\u8bef\u7801\u7684\u8fd4\u56de\u9875\u9762
\n4\u3001Nginx\u7684\u6570\u636e\u538b\u7f29\uff1agzip on; \u00a0\u5f00\u542f\u538b\u7f29gzip_comp_level 9; \u00a0\u538b\u7f29\u7684\u6bd4\u4f8b\u662f\u6700\u5927\u4e3a9 \u8303\u56f4 1-9gzip_min_length 1; \u00a0\u5ffd\u7565\u5c0f\u4e8e\u8be5\u5927\u5c0f\u7684\u6587\u4ef6\u4e0d\u538b\u7f29\uff0c\u5355\u4f4d\u662f\u5b57\u8282gzip_types \u00a0 text_plain text\/css application\/octet-stream; \u00a0\u538b\u7f29\u7684\u6587\u4ef6\u7c7b\u578b \uff08mime.type\u4e2d\u67e5\u770b\uff09
\n5\u3001\u865a\u62df\u4e3b\u673a\u7684\u914d\u7f6e\uff1a\u57fa\u4e8e\u7aef\u53e3\u7684\u865a\u62df\u4e3b\u673aserver {listen 81;root \/usr\/share\/nginx\/html\/site1;}server {listen 82;root \/usr\/share\/nginx\/html\/site2;}\u57fa\u4e8eIP\u7684\u865a\u62df\u4e3b\u673aserver {listen 172.18.0.134:80;root \/usr\/share\/nginx\/html\/site1;}server {listen 172.18.0.100:80;root \/usr\/share\/nginx\/html\/site2;}\u57fa\u4e8e\u540d\u79f0\u7684\u865a\u62df\u4e3b\u673aserver {listen 172.18.0.100:80;server_name example.com;root \/usr\/share\/nginx\/html\/site1;}server {listen 172.18.0.100:80;server_name test.com;root \/usr\/share\/nginx\/html\/site2;}
\n6\u3001location \u7684\u89c4\u5219\uff1alocation\u53ef\u4ee5\u5b9e\u73b0\u7684\u529f\u80fd\uff1a\u2022\u91cd\u5b9a\u5411\uff1a\u53ef\u4ee5\u4f7f\u7528\u00a0return\u00a0\u6216 rewrite \u6307\u4ee4\u8fdb\u884c\u8bf7\u6c42\u91cd\u5b9a\u5411\u3002\u2022\u53cd\u5411\u4ee3\u7406\u8bbe\u7f6e\uff1a\u53ef\u4ee5\u4f7f\u7528 proxy_set_header \u6765\u8bbe\u7f6e\u8bf7\u6c42\u5934\u4fe1\u606f\u3002\u2022\u8d1f\u8f7d\u5747\u8861\u8bbe\u7f6e\uff1a\u53ef\u4ee5\u4f7f\u7528 proxy_pass \u5c06\u8bf7\u6c42\u5206\u53d1\u5230\u8d1f\u8f7d\u5747\u8861\u7684\u540e\u7aef\u670d\u52a1\u5668\u3002\u2022FastCGI \u8bbe\u7f6e\uff1a\u53ef\u4ee5\u4f7f\u7528 fastcgi_pass \u6307\u4ee4\u5c06\u8bf7\u6c42\u8f6c\u53d1\u7ed9 FastCGI \u670d\u52a1\u5668\u5904\u7406\u3002\u2022\u9759\u6001\u6587\u4ef6\u5904\u7406\uff1a\u53ef\u4ee5\u4f7f\u7528 try_files \u6307\u4ee4\u6765\u5c1d\u8bd5\u4e0d\u540c\u7684\u6587\u4ef6\u8def\u5f84\u6765\u5904\u7406\u9759\u6001\u6587\u4ef6\u8bf7\u6c42\u3002\u2022\u65e5\u5fd7\u8bbe\u7f6e\uff1a\u53ef\u4ee5\u4f7f\u7528 access_log \u548c error_log \u6307\u4ee4\u6765\u914d\u7f6e\u8bbf\u95ee\u65e5\u5fd7\u548c\u9519\u8bef\u65e5\u5fd7\u7684\u8bb0\u5f55\u8def\u5f84\u3002\u2022Gzip \u538b\u7f29\uff1a\u53ef\u4ee5\u4f7f\u7528 gzip \u76f8\u5173\u6307\u4ee4\u6765\u914d\u7f6e\u54cd\u5e94\u5185\u5bb9\u7684\u538b\u7f29
\n\uf070= \u5f00\u5934\u8868\u793a\u7cbe\u786e\u5339\u914dlocation = \/name.html { \u00a0\u7cbe\u786e\u5339\u914d \u00a0\u5fc5\u987b\u662fname.html\u00a0return\u00a0403;}\uf070^~ \u5f00\u5934\u8868\u793auri\u4ee5\u67d0\u4e2a\u5e38\u89c4\u5b57\u7b26\u4e32\u5f00\u5934\uff0c\u4e0d\u662f\u6b63\u5219\u5339\u914dlocation ^~ \/pass {return\u00a0403;}\uf070~ \u5f00\u5934\u8868\u793a\u533a\u5206\u5927\u5c0f\u5199\u7684\u6b63\u5219\u5339\u914dlocation ~ \/pass {return\u00a0403;}
\n\uf070~* \u5f00\u5934\u8868\u793a\u4e0d\u533a\u5206\u5927\u5c0f\u5199\u7684\u6b63\u5219\u5339\u914dlocation ~*\/pass {return\u00a0403;}\uf070\/ \u901a\u7528\u5339\u914d, \u5982\u679c\u6ca1\u6709\u5176\u5b83\u5339\u914d,\u4efb\u4f55\u8bf7\u6c42\u90fd\u4f1a\u5339\u914d\u5230\/ \u901a\u914d\u7b26 \u8def\u5f84\u4e2d\u7684\u6240\u6709\u8d44\u6e90\u90fd\u53ef\u4ee5\u5339\u914d\u5230 \u00a0location \/*.php {\u7f51\u7ad9\u7684\u5168\u5c40\u914d\u7f6e\u4e2d}\u5728location \u4e2d\u6307\u5b9a\u8def\u5f84\u7684\u65b9\u5f0f\u4f7f\u7528root\u6307\u5b9a \u00a0\u8868\u793a\u76f8\u5bf9\u8def\u5f84 \u00a0\u6307\u7684\u662f\/usr\/share\/nginx + location\u7684root + location\u7684\u8def\u5f84server {listen 172.18.0.134:81;server_name example.com;root \/usr\/share\/nginx\/html\/site1;location \/bbs {root\u00a0test\/euler;autoindex on;}}172.18.0.134:81\/bbs \u2014\u2014> \/usr\/share\/nginx\/test\/euler\/bbs\u4f7f\u7528alias\u00a0\u6307\u5b9a \u00a0\u8868\u793a\u7edd\u5bf9\u8def\u5f84location \/bbs {alias\u00a0\/usr\/share\/nginx\/test\/euler\/bbs;autoindex on; \u00a0\u5f00\u542f\u7d22\u5f15return\u00a0404\uff1b \u8fd4\u56de\u4e00\u4e2a\u6307\u5b9a\u7684\u9519\u8bef}\u5728location\u4e2d\u6307\u5b9a \/bbs \u8868\u793a\u7684\u662f\u6587\u4ef6 \u00a0\/bbs\/ \u8868\u793a\u7684\u662f\u76ee\u5f55\u00a0\u5728location\u4e2dalias\u4f1a\u8986\u76d6server\u6bb5\u843d\u7684root\u00a0example.com\/bbs \u00a0– \/usr\/share\/nginx\/test\/euler\/bbs;
\n7\u3001Https\u7684\u914d\u7f6essl_certificate\u00a0“\/etc\/pki\/nginx\/server.crt”; \u00a0 \u7f51\u7ad9\u7684\u8bc1\u4e66ssl_certificate_key\u00a0“\/etc\/pki\/nginx\/private\/server.key”; \u00a0\u7f51\u7ad9\u7684\u79c1\u94a5\u6587\u4ef6
\n\u8bc1\u4e66\u9700\u8981\u627e\u6743\u5a01\u7684CA\u8fdb\u884c\u7533\u8bf7\uff0c\u5982\u679c\u662f\u81ea\u5df1\u8bd5\u9a8c\uff0c\u53ef\u4ee5\u4f7f\u7528openssl\u8fdb\u884c\u81ea\u7b7e\u540d\u8bc1\u4e66openssl -x 509 \u00a0\u751f\u6210CA\u7684\u516c\u79c1\u94a5\u751f\u6210CSR\u7684\u8bc1\u4e66\u8bf7\u6c42\u6587\u4ef6 \u540c\u65f6\u751f\u6210\u79c1\u94a5\u4f7f\u7528\u79c1\u94a5\u7ed9CSR\u7b7e\u540d\u5e76\u751f\u6210\u8bc1\u4e66
\n8\u3001Nginx \u70ed\u5347\u7ea7\uff1a\u6240\u8c13\u7684\u70ed\u5347\u7ea7\u6307\u7684\u662f\u53ef\u4ee5\u5728nginx\u5de5\u4f5c\u7684\u72b6\u6001\u4e0b\u5bf9nginx\u7684\u7248\u672c\u8fdb\u884c\u5347\u7ea7\uff0c\u5e76\u4e14\u4e0d\u5f71\u54cd\u7528\u6237\u7684\u8bbf\u95ee\u539f\u7406\uff1a\u5728\u4e8eNginx\u7684\u7a0b\u5e8f\u652f\u6301 USR2\u7684\u4fe1\u53f7\uff08\u8be5\u4fe1\u53f7\u53ef\u4ee5\u8ba9\u7a0b\u5e8f\u91cd\u65b0\u52a0\u8f7d\uff0c\u800c\u4e0d\u7528\u7ed3\u675f\u8fdb\u7a0b\u518d\u91cd\u65b0\u542f\u52a8\uff09\uff0c\u4e5f\u5c31\u662f\u5728Nginx\u7684\u65b0\u7248\u548c\u65e7\u7248\u80fd\u591f\u540c\u65f6\u5728\u7cfb\u7edf\u4e2d\u54cd\u5e94\u670d\u52a1\uff0c\u5982\u679c\u65e7\u7248\u7684Nginx\u6ca1\u6709\u95ee\u9898\uff0c\u5219\u7ed3\u675f\u65e7\u7248\u7a0b\u5e8f\uff0c\u65b0\u7248\u66ff\u4ee3\u5de5\u4f5c
\n\u4e0b\u8f7d\u4f4e\u7248\u672c\u7684Nginxwget \u00a0ttps:\/\/nginx.org\/download\/nginx-1.22.1.tar.gz
\n\u7f16\u8bd1\u5b89\u88c5tar xzf nginx-1.22.1.tar.gz \u00a0\u89e3\u538b\u6587\u4ef6cd\u00a0nginx-1.22.1 \u00a0\u8fdb\u5165\u76ee\u5f55.\/configure –prefix=\/usr\/local\/nginx \u00a0\u6307\u5b9a\u5b89\u88c5\u7684\u8def\u5f84make -j 2 \u00a0\u4f7f\u7528\u4e24\u6838\u8fdb\u884c\u9884\u7f16\u8bd1make installl \u7f16\u8bd1\u5e76\u5b89\u88c5
\n\u542f\u52a8nginx.\/nginx
\n\u5347\u7ea7\u8fc7\u7a0bwget https:\/\/nginx.org\/download\/nginx-1.25.4.tar.gz \u4e0b\u8f7d\u65b0\u7248tar xzf nginx-1.25.4.tar.gzcd\u00a0nginx-1.25.4.\/configure \u00a0–prefix=\/usr\/local\/nginx \u9884\u914d\u7f6emake -j 2 \u00a0\u9884\u7f16\u8bd1 \u8bb0\u4f4f\u4e00\u5b9a\u4e0d\u8981make install\uff08\u4f1a\u8986\u76d6\u539f\u6765\u7684\u914d\u7f6e\u6587\u4ef6\u548c\u4e8c\u8fdb\u5236\u6587\u4ef6\uff09 make install\u540e\u4f1a\u8986\u76d6\u5b89\u88c5cp\u00a0-a \/usr\/local\/nginx\/sbin\/nginx \/usr\/local\/nginx\/sbin\/nginx.bak \u5907\u4efd\u65e7\u7248\u672ccp\u00a0-a \/opt\/nginx-1.25.4\/objs\/nginx \/usr\/local\/nginx\/sbin\/nginx -f \u00a0\u65b0\u7248\u8986\u76d6\u65e7\u7248\u672cps uax |grep nginx \u67e5\u8be2master\u7684PIDkill\u00a0-s USR2 PID \u00a0\u6b64\u65f6 \u65b0\u7248\u7684Nginx\u81ea\u52a8\u8fd0\u884c\u8bbf\u95ee\u6d4b\u8bd5\u65b0\u7248\u7684Nginx\u53ef\u7528kill\u00a0 PID \u00a0\u7ed3\u675f\u65e7\u7248\u672c\u7684Nginx \u00a0\u5347\u7ea7\u5b8c\u6210<\/p>\n
\u516b\u3001web\u67b6\u6784
\nNginx \/ Apache \u00a0\u90fd\u662f\u9ed8\u8ba4\u63d0\u4f9bhtml \u8d85\u6587\u672c\u7f51\u9875\u7684\u8bbf\u95ee\uff0c\u800c\u65e0\u6cd5\u63d0\u4f9b\u52a8\u6001\u5e94\u7528\u7a0b\u5e8f
\n1\u3001\u8fd0\u884c\u52a8\u6001\u7684\u5e94\u7528\u7a0b\u5e8f2\u4e2a\u65b9\u6cd5\uff1a\u4ea4\u7ed9web\u670d\u52a1\u5668\u81ea\u8eab\u7684\u6a21\u5757\u6765\u5b8c\u6210
\n\u4ea4\u7ed9\u7b2c\u4e09\u65b9\u670d\u52a1\u5668\u6765\u5b8c\u6210\u4ee5apache\u4e3a\u4f8b \u5982\u679c\u9700\u8981\u8fd0\u884cphp \uff0c\u6709\u4e24\u4e2a\u65b9\u5f0f\u7b2c\u4e00\u4e2a\u65b9\u5f0f\u901a\u8fc7php\u7684\u6a21\u5757\u4f7f\u7528apache\u6765\u8fd0\u884c \uff08\u5fc5\u987b\u5728prefork\u6a21\u5f0f\u4e0b\uff09\u7b2c\u4e8c\u4e2a\u65b9\u5f0f\u4ea4\u7ed9php\u7684\u670d\u52a1\u5668\u6765\u8fdb\u884c\u5904\u7406\uff08\u5728event\u6a21\u5f0f\u4e0b\uff09\uff0cyum\u5b89\u88c5\u5b8c\u9ed8\u8ba4\u662f\u8fd9\u79cd
\n\u73b0\u5728\u8fd0\u884c\u7684\u52a8\u6001\u7a0b\u5e8f\u901a\u5e38\u4ea4\u7ed9\u5e94\u7528\u7a0b\u5e8f\u7684\u540e\u7aef\u8fdb\u884c\u5904\u7406CGI\uff1a \u5e94\u7528\u7a0b\u5e8f\u7f51\u5173\u63a5\u53e3\uff08\u7b80\u5355\u7406\u89e3\u5c31\u662f\u4e2aAPI\u7684\u5730\u5740\uff0cPHP\u6216python\u540e\u53f0\uff09\u00a0CGI \u7684\u4e3b\u8981\u4f5c\u7528\u662f\u5141\u8bb8 Web \u670d\u52a1\u5668\u8c03\u7528\u5916\u90e8\u7a0b\u5e8f\u6765\u5904\u7406\u5ba2\u6237\u7aef\u7684\u8bf7\u6c42\uff0c\u5e76\u5c06\u5904\u7406\u7ed3\u679c\u8fd4\u56de\u7ed9\u5ba2\u6237\u7aeffast-cgi\u662fcgi\u7684\u589e\u5f3a\u7248\uff0c\u652f\u6301\u957f\u8fde\u63a5
\n2\u3001\u5b9e\u9a8c LAMP \u5b9e\u73b0 \u00a0wordpress \u00a0\u4f01\u4e1a\u95e8\u6237\u7f51\u7ad9 \u00a0yum install \u00a0httpdyum install \u00a0mariadb-server\u00a0yum install \u00a0 php
\n\u4f1a\u81ea\u52a8\u5728\/etc\/httpd\/conf.d\/\u4e0b\u751f\u6210\u4e00\u4e2aphp.conf\u6587\u4ef6
\nsystemctl start php-fpm \u00a0php\u7684\u670d\u52a1\u8fdb\u7a0b\uff0c\u53ef\u4ee5\u4e0d\u7528\u7ba1\uff0capache\u7684\u9ed8\u8ba4\u65b9\u5f0f\uff1a \u5728\u5b89\u88c5\u597dphp\u540e\uff0c\u4f1a\u5728apache\u7684\u865a\u62df\u4e3b\u673a\u76ee\u5f55\u4e2d\uff0c\u751f\u6210\u4e00\u4e2aphp.conf\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5728\u8be5\u914d\u7f6e\u6587\u4ef6\u4e2d\u901a\u8fc7CGI\u8c03\u7528\u540e\u7aef\u7684PHP\u670d\u52a1\u5668\u6765\u8fdb\u884cphp\u7684\u5904\u7406\uff0c\u56e0\u4e3a\u5b89\u88c5\u5b8c\u6210php\u540e\u5c31\u4f1a\u81ea\u52a8\u5728conf.d\/\u76ee\u5f55\u4e0b\u81ea\u52a8\u4ea7\u751fphp.conf\u6587\u4ef6\uff0capache\u542f\u52a8\u65f6\u5c31\u81ea\u52a8\u8fde\u5e26\u542f\u52a8
\n\u5728LAMP\u4e2d\u914d\u7f6eApache\u4f7f\u7528php\u7684\u4e24\u79cd\u65b9\u5f0f\uff08\u5e38\u7528\u7b2c\u4e8c\u79cd\u65b9\u6cd5\uff091\u5728perfork\u6a21\u5f0f\u4e0b\u4f7f\u7528apache\u81ea\u8eab\u6765\u8fd0\u884cphp\u2014\u2014> \u4e5f\u5c31\u662f\u901a\u8fc7web\u670d\u52a1\u5668\u6240\u643a\u5e26\u6a21\u5757\u6765\u8fd0\u884c2\u9700\u8981\u6307\u5b9aphp\u7684\u5934\u90e8\u6587\u4ef6\uff0c\u4e5f\u5c31\u662f\u544a\u8bc9apache\u8fd9\u4e00\u7c7bphp\u7684\u6587\u4ef6\u662f\u4ec0\u4e48\u7c7b\u578b\uff08\u76ee\u5e38\u7528\u8fd9\u79cd\uff09
\n\u7b2c2\u79cd\u65b9\u6cd5\u53c8\u5206\u4e24\u79cd\u914d\u7f6e\u65b9\u6cd5\uff1a\u914d\u7f6ephp\u7684\u540e\u7aef\u670d\u52a1\u5668\u4f7f\u7528CGI\u6765\u8fdb\u884c\u8c03\u7528 \u2014\u2014> \u901a\u8fc7\u7b2c\u4e09\u65b9\u670d\u52a1\u5668\u6765\u8fd0\u884cphp\u914d\u7f6ephp\u7684CGI\u63a5\u53e3\u4e24\u79cd\u65b9\u6cd5\u4e24\u79cd\u65b9\u6cd5\u90fd\u8981\u505a\u7684\u524d\u7f6e \u6b65\u9aa4vim \u00a0\/etc\/httpd\/conf.d\/php.conf\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d\u914dAddType text\/html \u00a0.php \u6dfb\u52a0php\u7684\u6587\u4ef6\u7c7b\u578bDirectoryIndex index.php \u00a0 \u9996\u9875\u6587\u4ef6\u540d
\n<FileMath .(php|phar)$>\u00a0 \u00a0#SetHandler application\/x-httpd-php \u00a0\u6ce8\u91ca\u6389\u8fd9\u884c<\/FileMatch>
\n\u7b2c\u4e00\u79cd\u65b9\u6cd5vim \u00a0\/etc\/httpd\/conf.d\/php.conf\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d<FilesMatch .(php|phar)$>SetHandler\u00a0“proxy:unix:\/run\/php-fpm\/www.sock|fcgi:\/\/localhost”\u00a0 \/\/\u53e6\u4e00\u79cd\u5199\u6cd5\u548c\u4e0a\u9762\u4e8c\u9009\u4e00<\/FilesMatch>
\nvim \/etc\/php-fpm.d\/www.conflisten = \/run\/php-fpm\/www.sock \u00a0 \u00a0\/\/\u8d77\u7528\uff0c\u9ed8\u8ba4\u542f\u7528
\n\u7b2c\u4e8c\u79cd\u65b9\u6cd5\u7ed9php\u6307\u5b9a\u7aef\u53e3vim \u00a0\/etc\/httpd\/conf.d\/php.conf\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d<FilesMatch .(php|phar)$>setHandler\u00a0“proxy:fcgi:\/\/127.0.0.1:9000”\u00a0 \u8be5\u79cd\u65b9\u5f0f\u9700\u8981php\u76d1\u542c9000\u7aef\u53e3<\/FilesMatch>
\nvim \/etc\/php-fpm.d\/www.conf\u6ce8\u610f\u6389listen = \/run\/php-fpm\/www\/sock \u00a0\u6dfb\u52a0listen = 9000<\/p>\n
\u5b89\u88c5wordpress\u4e0b\u8f7d\u7f51\u7ad9\u7684\u6e90\u7801\u901a\u5e38\u6307\u7684\u662f\u4e00\u4e2aCMS\uff08\u5185\u5bb9\u7ba1\u7406\uff09\u7684\u7cfb\u7edfwget https:\/\/cn.wordpress.org\/latest-zh_CN.tar.gz<\/p>\n
yum install httpd php \u00a0php-fpm -ysudo\u00a0yum install php-jsonyum install \u00a0mariadb-server\u00a0yum install php-mysqlidnf install \u00a0php-curl php-dom php-exif php-fileinfo php-fpm php-gd php-hash php-json php-mbstring php-mysqli php-openssl php-pcre php-xml libsodium
\n\u8ba9php\u652f\u6301apachevim \u00a0\/etc\/httpd\/conf.d\/php.conf\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d\u914dAddType text\/html \u00a0.php \u6dfb\u52a0php\u7684\u6587\u4ef6\u7c7b\u578bDirectoryIndex index.php \u00a0 \u9996\u9875\u6587\u4ef6\u540d
\nvim \u00a0\/etc\/httpd\/conf.d\/php.conf\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d<FilesMatch .(php|phar)$>SetHandler\u00a0“proxy:unix:\/run\/php-fpm\/www.sock|fcgi:\/\/localhost”\u00a0<\/FilesMatch>
\nvim \/etc\/php-fpm.d\/www.conflisten = \/run\/php-fpm\/www.sock \u00a0 \u00a0\/\/\u8d77\u7528\uff0c\u9ed8\u8ba4\u542f\u7528
\n<IfModule dir_module>\u00a0 \u00a0 DirectoryIndex index.html index.php<\/IfModule><\/p>\n
\u914d\u7f6e\u5e76\u5b89\u88c5CMS\u7cfb\u7edf\uff08\u8bb0\u5f97\u5173\u95ed\u9632\u706b\u5899\u548cSELinux\uff09\u5b89\u88c5\u8fc7\u7a0b\u4e2d\u9700\u8981\u914d\u7f6e\u6570\u636e\u5e93\u3001\u914d\u7f6e\u6743\u9650\u3001\u5b89\u88c5\u63d2\u4ef6\u2026
\nmysql_secure_installation\u521d\u59cb\u5316mysql\u8bbe\u7f6eMySQL\u7684\u65b0\u5bc6\u7801\u5e76\u786e\u8ba4\u3002\u672c\u793a\u4f8b\u8bbe\u7f6e\u5bc6\u7801admin\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u7ee7\u7eed\u4f7f\u7528\u63d0\u4f9b\u7684\u5bc6\u7801\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u79fb\u9664\u533f\u540d\u7528\u6237\u3002\u8bbe\u7f6e\u662f\u5426\u5141\u8bb8\u8fdc\u7a0b\u8fde\u63a5MySQL\u3002\u4e0d\u9700\u8981\u8fdc\u7a0b\u8fde\u63a5\u65f6\uff0c\u8f93\u5165Y\u5e76\u56de\u8f66\u3002\u9700\u8981\u8fdc\u7a0b\u8fde\u63a5\u65f6\uff0c\u8f93\u5165N\u6216\u5176\u4ed6\u4efb\u610f\u975eY\u7684\u6309\u952e\uff0c\u5e76\u56de\u8f66\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u5220\u9664test\u5e93\u4ee5\u53ca\u5bf9test\u5e93\u7684\u8bbf\u95ee\u6743\u9650\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u91cd\u65b0\u52a0\u8f7d\u6388\u6743\u8868\u3002
\ncreate database wordpress\u521b\u5efa\u6570\u636e\u5e93
\n\u672c\u6559\u7a0b\u4e2d\u521b\u5efa\u65b0\u7528\u6237xlc\uff0c\u65b0\u7528\u6237\u5bc6\u7801\u4e3aadmincreate user \u2018xlc\u2019@\u2018localhost\u2019 identified by \u2018admin\u2019;
\n\u8d4b\u4e88\u7528\u6237\u5bf9\u6570\u636e\u5e93wordpress\u7684\u5168\u90e8\u6743\u9650\u3002grant all privileges on wordpress.* to \u2018xlc\u2019@\u2018localhost\u2019;
\n\u4f7f\u914d\u7f6e\u751f\u6548\u3002flush privileges;
\n\u53ea\u9700\u8981\u89e3\u538b\u51fa\u7684wordpress\u6587\u4ef6\u5939\u4e0b\u6240\u6709\u5185\u5bb9\uff0c\u653e\u5230\/var\/www\/html\/\u4e0b
\n\u770b\u4e0bapache\u8fdb\u7a0b\u662f\u54ea\u4e2a\u7528\u6237\u5c31\u8bbe\u7f6e\u4e3a\u6587\u4ef6\u6765\u54ea\u4e2a\u7528\u6237chown\u00a0apache:apache \u00a0 -R \u00a0\/var\/www\/html\/*<\/p>\n
\u5b89\u88c5Discuz\u88c5\u5305yum install httpd php \u00a0php-fpm -ysudo\u00a0yum install php-jsonyum install \u00a0mariadb-server\u00a0yum install php-mysqlidnf install \u00a0php-curl php-dom php-exif php-fileinfo php-fpm php-gd php-hash php-json php-mbstring php-mysqli php-openssl php-pcre php-xml libsodium
\n\u8ba9php\u652f\u6301apachevim \u00a0\/etc\/httpd\/conf.d\/php.conf\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d\u914dAddType text\/html \u00a0.php \u6dfb\u52a0php\u7684\u6587\u4ef6\u7c7b\u578bDirectoryIndex index.php \u00a0 \u9996\u9875\u6587\u4ef6\u540d
\nvim \u00a0\/etc\/httpd\/conf.d\/php.conf\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d<FilesMatch .(php|phar)$>SetHandler\u00a0“proxy:unix:\/run\/php-fpm\/www.sock|fcgi:\/\/localhost”\u00a0<\/FilesMatch>
\nvim \/etc\/php-fpm.d\/www.conflisten = \/run\/php-fpm\/www.sock \u00a0 \u00a0\/\/\u8d77\u7528\uff0c\u9ed8\u8ba4\u542f\u7528
\nmysql_secure_installation\u521d\u59cb\u5316mysql\u8bbe\u7f6eMySQL\u7684\u65b0\u5bc6\u7801\u5e76\u786e\u8ba4\u3002\u672c\u793a\u4f8b\u8bbe\u7f6e\u5bc6\u7801admin\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u7ee7\u7eed\u4f7f\u7528\u63d0\u4f9b\u7684\u5bc6\u7801\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u79fb\u9664\u533f\u540d\u7528\u6237\u3002\u8bbe\u7f6e\u662f\u5426\u5141\u8bb8\u8fdc\u7a0b\u8fde\u63a5MySQL\u3002\u4e0d\u9700\u8981\u8fdc\u7a0b\u8fde\u63a5\u65f6\uff0c\u8f93\u5165Y\u5e76\u56de\u8f66\u3002\u9700\u8981\u8fdc\u7a0b\u8fde\u63a5\u65f6\uff0c\u8f93\u5165N\u6216\u5176\u4ed6\u4efb\u610f\u975eY\u7684\u6309\u952e\uff0c\u5e76\u56de\u8f66\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u5220\u9664test\u5e93\u4ee5\u53ca\u5bf9test\u5e93\u7684\u8bbf\u95ee\u6743\u9650\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u91cd\u65b0\u52a0\u8f7d\u6388\u6743\u8868\u3002
\ncreate database wordpress\u521b\u5efa\u6570\u636e\u5e93
\n\u672c\u6559\u7a0b\u4e2d\u521b\u5efa\u65b0\u7528\u6237user\uff0c\u65b0\u7528\u6237\u5bc6\u7801\u4e3aadmincreate user \u2018user\u2019@\u2018localhost\u2019 identified by \u2018admin\u2019;
\n\u8d4b\u4e88\u7528\u6237\u5bf9\u6570\u636e\u5e93wordpress\u7684\u5168\u90e8\u6743\u9650\u3002grant all privileges on wordpress.* to \u2018user\u2019@\u2018localhost\u2019;
\n\u4f7f\u914d\u7f6e\u751f\u6548\u3002flush privileges;
\n\u4e0b\u8f7ddiscuz\u7684\u8bba\u575b\u6e90\u7801wget https:\/\/gitee.com\/Discuz\/DiscuzX\/attach_files\/1621557\/download
\n\u53ea\u9700\u8981\u89e3\u538b\u51fa\u7684upload\u6587\u4ef6\u5939\u6240\u6709\u5185\u5bb9\uff0c\u5176\u5b83\u4e0d\u8981\uff0c\u653e\u5230\/var\/www\/html\/\u4e0b
\n\u770b\u4e0bapache\u8fdb\u7a0b\u662f\u54ea\u4e2a\u7528\u6237\u5c31\u8bbe\u7f6e\u4e3a\u6587\u4ef6\u6765\u54ea\u4e2a\u7528\u6237chown\u00a0apache:apache \u00a0 -R \u00a0\/var\/www\/html\/*
\n\u5b89\u88c5cms<\/p>\n
\u4e5d\u3001DNS\u90e8\u5206
\nDNS\u662f\u4e00\u4e2a\u4ec0\u4e48\u67b6\u6784\uff1f\uff1fDNS \u662f\u4e00\u4e2a\u5178\u578b\u7684C\/S\u67b6\u6784\u4e5f\u5c31\u662f\u5b58\u5728DNS\u7684\u5ba2\u6237\u7aef\u548cDNS\u7684\u670d\u52a1\u7aef\uff0c\u7528\u6237\u6240\u4f7f\u7528\u7684\u8ba1\u7b97\u673a\u5c31\u662fDNS\u7684\u5ba2\u6237\u7aef\uff0c\u5ba2\u6237\u7aef\u5411\u670d\u52a1\u5668\u7aef\u53d1\u8d77\u8bf7\u6c42\u8981\u6c42\u670d\u52a1\u7aef\u63d0\u4f9b\u67d0\u4e00\u4e2a\u57df\u540d\u7684IP\u5730\u5740\u5c31\u662f\u5bfb\u6c42\u89e3\u6790DNS \u4f7f\u7528UDP\u548cTCP 53\u7aef\u53e3\u8fdb\u884c\u901a\u4fe1
\nDNS\u7684\u5c42\u7ea7\u7ed3\u6784\uff1a\u6839\u57df: .\u7528\u70b9\u8868\u793a\u6839\u57df\u5168\u6c42\u53ea\u670913\u53f0ip4+13\u53f0ipv6\uff1b\u4e92\u8054\u7f51\u4e0a\u6240\u6709\u7684\u8bb0\u5f55\u89e3\u6790\u90fd\u662f\u4f9d\u9760\u6839\u57df\u6765\u7ef4\u6301\u7684\uff0c\u8d1f\u8d23\u9876\u7ea7\u57df\u540d\u7684\u89e3\u6790\uff08\u4e5f\u5c31\u662f\u5f53\u51fa\u73b0example.com \u57df\u540d\u9700\u8981\u89e3\u6790\u65f6\uff0c\u6839\u57df\u8fd4\u56de\u4e00\u7ec4.com\u670d\u52a1\u5668\u7684\u5730\u5740\uff0c\u7531.com\u7684\u670d\u52a1\u5668\u6765\u8fdb\u884c\u89e3\u6790\uff09
\n\u9876\u7ea7\u57df:.com .cn.org.net \u2026\u2026 \u00a0\u9876\u7ea7\u57df\u8d1f\u8d23\u627e\u5230\u57df\u540d\u7684\u6743\u5a01\u57dfcom \u00a0\u901a\u7528\u5546\u4e1a\u57df\u540dcn \u00a0\u56fd\u5bb6\u57df\u540d\/\u5730\u533a\u57df\u540dorg \u8868\u793a\u975e\u8425\u5229\u6027\u7ec4\u7ec7net \u00a0\u7f51\u7edc\u516c\u53f8edu \u00a0\u6559\u80b2gov \u00a0 \u653f\u5e9c\u2026\u2026.
\n\u6743\u5a01\u57df: \u00a0\u6743\u5a01\u57df \u662f\u6700\u7ec8\u8d1f\u8d23\u5c06\u57df\u540d\u89e3\u6790\u6210IP\u7684\u8282\u70b9
\nDNS\u7684\u89e3\u6790\u65b9\u5f0f\uff1aDNS\u5c06\u57df\u540d\u89e3\u6790\u6210IP \u2014\u2014> \u6b63\u5411\u89e3\u6790DNS\u5c06IP\u89e3\u6790\u6210\u57df\u540d \u2014\u2014> \u53cd\u5411\u89e3\u6790
\n\u89e3\u6790\u4e24\u79cd\u65b9\u5f0f1\u3001\u9012\u5f52\u67e5\u8be2\uff1azhangsan.lab0.cn —\u672c\u5730\/etc\/hosts\u89e3\u6790— \u672c\u5730DNS –\u4e0a\u6e38DNS– \u6743\u5a01DNS— \u7528\u6237\u6240\u8c13\u7684\u9012\u5f52\u67e5\u8be2\uff0c\u6307\u7684\u662f\u5ba2\u6237\u7aef\u627e\u6307\u5b9a\u7684DNS\u67e5\u8be2\u8bb0\u5f55\uff0cDNS\u76f4\u63a5\u8fd4\u56de\u8bb0\u5f55\uff0c\u5bf9\u4e8e\u5ba2\u6237\u7aef\u800c\u8a00\uff0c\u6574\u4e2a\u8bb0\u5f55\u662fDNS\u4e3a\u5176\u63d0\u4f9b\u4e3a\u5176\u67e5\u8be2\u5230\u7684
\n2\u3001\u8fed\u4ee3\u67e5\u8be2\uff1azhangsan.lab0.cn –\u672c\u5730DNS —\u8fd4\u56de.cn DNS —\u7528\u6237\u67e5\u8be2.cn DNS —\u8fd4\u56delab0.cn DNS —\u7528\u6237\u67e5\u8be2 lab0.cn \u00a0DNS—\u8fd4\u56de zhangsan.lab0.cn \u00a0IP \u5730\u5740
\n\u73b0\u5728\u7684DNS\u67e5\u8be2\u7ed3\u5408\u4e86\u9012\u5f52\u548c\u8fed\u4ee3\uff0c\u4e00\u6b21\u9012\u5f52\u591a\u6b21\u8fed\u4ee3\uff1b\u4e00\u6b21\u9012\u5f52\u6307\u7684\u662f \u5ba2\u6237\u7aef\u5411\u672c\u5730DNS\u53d1\u8d77\u89e3\u6790\u662f\u9012\u5f52
\n\u53cd\u5411\u89e3\u6790\u8bb0\u5f55\u7684\u4f7f\u7528\u573a\u666f\uff1a \u00a0\u7528\u5728\u9632\u6b62\u5783\u573e\u90ae\u4ef6\u00a0\u53cd\u5411\u89e3\u6790\u662f\u5c06IP\u89e3\u6790\u6210\u57df\u540d \u00a0\u56e0\u6b64ARPA \u79f0\u4e3a\u53cd\u5411\u8bb0\u5f55\uff0c\u5982\u679c\u4e0d\u9700\u8981\u7528\u5230\u53cd\u5411\u8bb0\u5f55\u662f\u53ef\u4ee5\u4e0d\u7528\u914d\u7f6e\u7684
\n\u5728LINUX\u4e2d\u901a\u5e38\u4f7f\u7528bind\u6765\u4f5c\u4e3aDNS\u7684\u670d\u52a1\u7aef\u7a0b\u5e8f\uff0cBIND\u53ef\u4ee5\u63d0\u4f9b\u9ad8\u6548\u7684\u89e3\u6790\u670d\u52a1\u4ee5 example.com \u8fd9\u4e2a\u57df\u4e3a\u4f8b\u8fdb\u884cDNS\u89e3\u6790
\n1. \u5b89\u88c5bind\u00a0yum install\u00a0bind\u00a0-ysystemctl \u00a0enable\u00a0–now \u00a0named
\n2. \u914d\u7f6ebind\u914d\u7f6e\u6587\u4ef6\uff1a\/etc\/named.conf \u00a0\u4e3b\u914d\u7f6e\u6587\u4ef6listen-on port 53 { any; }; \u00a0\u00a0\u5141\u8bb8\u76d1\u542c\u6240\u6709IP\u7684\u7aef\u53e3allow-query \u00a0 \u00a0 { any; }; \u00a0\u5141\u8bb8\u6240\u6709\u4eba\u67e5\u8be2\u7684\u5730\u5740include\u00a0“\/etc\/named.rfc1912.zones”; \u00a0\u5f15\u5165\u533a\u57df\u6587\u4ef6\uff08\u6b63\u5411\u548c\u53cd\u5411\u6587\u4ef6\u90fd\u5199\u5728\u8fd9\u91cc\u9762\uff09include\u00a0“\/etc\/named.root.key”; \u00a0\u00a0\u6839\u57df\u7684\u5217\u8868
\n\/var\/named \u00a0 \u00a0 \u00a0\u533a\u57df\u7684\u914d\u7f6e\u6587\u4ef6\uff08\u53ef\u4ee5\u4f7f\u7528bind-chroot\u6765\u4fdd\u62a4\u533a\u57df\u6587\u4ef6 \uff09bind-chroot \u00a0\u5c31\u662f\u5c06bind\u8fd0\u884c\u7684\u6839\u76ee\u5f55\u9501\u5b9a\u5728\/var\/named\/chroot \u4e0b
\n\/var\/named\/slave\u00a0\u4eceDNS\u7684\u76ee\u5f55 \u00a0\u8be5\u76ee\u5f55\u4e2d\u7684\u533a\u57df\u6587\u4ef6\u90fd\u662f\u4ece\u4e3b\u670d\u52a1\u5668\u4e0b\u8f7d\u8fc7\u6765\u7684
\n\/var\/named\/named.ca \u00a0\u00a0\u6240\u6709\u6839\u670d\u52a1\u5668\u7684\u5217\u8868 \u5217\u8868\u662f\u53ef\u4ee5\u66f4\u65b0\u7684
\nhttps:\/\/www.iana.org\/ \u00a0\u00a0\u83b7\u53d6\u6839\u57df\u7684\u5730\u5740\u5305\u62ec\u955c\u50cf\u7ad9
\n\/var\/log\/named.log \u00a0\u5982\u679c\u8be5\u6587\u4ef6\u4e0d\u5b58\u5728\u5219\uff0c\u67e5\u770bmessage\u7684\u65e5\u5fd7
\nnamed-checkzone \u00a0example.com example.com.zone\u57df\u540d \u00a0 \u00a0 \u00a0 \u533a\u57df\u6587\u4ef6\u540d
\n3. \u914d\u7f6e\u6b63\u5411\u89e3\u6790vim \/etc\/named.rfs1912.zones\u00a0\u6b63\u5411\u533a\u57df\u914d\u7f6e\uff1azone\u00a0“example.com”\u00a0IN {\u00a0 \u00a0type\u00a0master;\u00a0 \u00a0file\u00a0“example.com.zone”;};
\n\u53cd\u5411\u533a\u57df\u914d\u7f6e\uff1azone\u00a0“0.18.172.in-addr.arpa”\u00a0IN {\u00a0 \u00a0type\u00a0master;\u00a0 \u00a0file\u00a0“0.18.172.zone”;};\u5176\u4e2d0.18.172 \u662f\u53cd\u5199\u7684\u5b50\u7f51\u5730\u5740\uff0c\u6700\u540e\u4e00\u4f4d\u4e3b\u673a\u4f4d\u4e0d\u7528\u5199
\n4.\u521b\u5efa\u6b63\u5411\u533a\u57df\u6587\u4ef6\uff08\u4e0a\u9762\u4e3b\u914d\u7f6e\u6587\u4ef6\u52a0\u5b8c\u540e\u8fd9\u91cc\u8fd8\u5f97\u521b\u5efa\u6b63\u5411\u89e3\u6790\u6587\u4ef6\uff09\/var\/named\/named.empty \u4e0b\u5411\u533a\u57df\u6587\u4ef6\/var\/named\/named.loopbak \u00a0 \u00a0 \u00a0\u53cd\u5411\u533a\u57df\u6587\u4ef6
\n\/var\/named\/cp\u00a0-a named.localhost \u00a0example.com.zone\u7528\u6a21\u5757\u521b\u5efa\u89e3\u6790\u6587\u4ef6 \u00a0\uff0c\u6240\u6709\u7684\u533a\u57df\u6587\u4ef6\uff0c\u4e0d\u7ba1\u662f\u6b63\u5411\u533a\u57df\u8fd8\u662f\u53cd\u5411\uff0cnamed\u7528\u6237\u90fd\u5fc5\u987b\u53ef\u4ee5\u8bfb\u53d6\u8be5\u533a\u57df\u6539\u6210\u8fd9\u6837\uff1a\u7b2c\u4e8c\u884c\u7b2c\u4e8c\u4e2a@\u5305\u542b@\u5f80\u540e\u6539\u6210\uff1ans.example.com admin.exapmle.com. \u540e\u9762admin\u5f00\u59cb\u662f\u90ae\u4ef6A\u8bb0\u5f55\uff1a\u8981\u89e3\u6790\u7684\u670d\u52a1\u5668\u7684ip\u5730\u5740NS \u540e\u9762\u6539\u6210www.example.com.\u6dfb\u52a0\u4e00\u884cwww \u00a0A 192168.1.100\u8981\u89e3\u6790\u7684\u670d\u52a1\u5668IP
\nnamed-checkconf \u00a0\u68c0\u67e5\u4e3b\u914d\u7f6e\u6587\u4ef6\u662f\u5426\u5b58\u5728\u9519\u8bef
\nnamed-checkzone\u00a0\u68c0\u67e5\u533a\u57df\u914d\u7f6e\u6587\u4ef6\u662f\u5426\u5b58\u5728\u9519\u8bef
\n\u4e00\u4e2a\u53cd\u5411\u89e3\u6790\u6587\u4ef6\u53ea\u80fd\u505a\u4e00\u4e2aIP\u89e3\u6790\uff0c\u591a\u4e2a\u8981\u521b\u5efa\u591a\u4e2a\u53cd\u5411\u6587\u4ef6
\n\u6b63\u5411\u533a\u57df\u6587\u4ef6\u53c2\u6570\u8be6\u89e3\uff1aTTL \u00a0\u8868\u793a\u7f13\u5b58\u7684\u65f6\u95f4SOA \u00a0\u8868\u793a\u8be5\u533a\u57df\u7684\u8d77\u59cb\u8bb0\u5f55\uff0c\u4e5f\u5c31\u662f\u8be5\u57df\u4e3a\u6743\u5a01\u57df\u00a0@ \u00a0 \u00a0\u7b2c\u4e8c\u884c\u7b2c\u4e8c\u4e2a@\u8868\u793a\u57df\u540d\uff0c\u8981\u6539\u6210ns.+\u6211\u4eec\u8981\u89e3\u6790\u7684\u57df\u540d\u00a00\uff1a\u8868\u793a\u7248\u672c\u53f7\uff0c\u4f9b\u5907\u4eceDNS\u670d\u52a1\u5668\u786e\u5b9a\u662f\u5426\u540c\u6b65\u4fe1\u606f1D\uff1a\u8868\u793a\u4ece\u670d\u52a1\u5668\u5411\u4e3b\u670d\u52a1\u5668\u540c\u6b65\u6570\u636e\u7684\u95f4\u96941H\uff1a\u8868\u793a\u4ece\u670d\u52a1\u5668\u5411\u4e3b\u670d\u52a1\u5668\u540c\u6b65\u6570\u636e\u7684\u91cd\u8bd5\u95f4\u96941W\uff1a\u8868\u793a\u4ece\u670d\u52a1\u5668\u5224\u65ad\u4e3b\u670d\u52a1\u5668\u662f\u5426\u5931\u6548\u7684\u65f6\u95f4\u6bb5\uff0c\u4f8b\u5982\uff0c1W\u8868\u793a\u5982\u679c\u4ece\u670d\u52a1\u5668\u57281\u5468\u90fd\u65e0\u6cd5\u548c\u4e3b\u670d\u52a1\u5668\u540c\u6b65\u6570\u636e\uff0c\u5219\u8ba4\u4e3a\u5176\u5df2\u5931\u65483H\uff1a\u65e0\u6548\u57df\u540d\u7f13\u5b58\u7684\u65f6\u957f\uff0c\u5728\u6b64\u65f6\u95f4\u5185\uff0c\u5982\u679c\u7528\u6237\u518d\u6b21\u67e5\u8be2\u65e0\u6548\u57df\u540d\u89e3\u6790\uff0c\u670d\u52a1\u5668\u5c06\u76f4\u63a5\u8fd4\u56de\u65e0\u6cd5\u89e3\u6790\u7684\u54cd\u5e94\uff0c\u4e0d\u5728\u8fdb\u884c\u67e5\u8be2
\n\u89e3\u6790\u8bb0\u5f55\uff1aA \u8bb0\u5f55 \u662f\u5c06 \u57df\u540d\u89e3\u6790\u6210Ipv4\u5730\u5740 \u00a0AAAA \u00a0\u89e3\u6790\u6210ipv6\u5730\u5740CNAME \u00a0 \u00a0\u89e3\u6790\u6210\u522b\u540d\uff08CDN\uff09MX \u00a0 \u00a0 \u00a0 \u00a0\u90ae\u4ef6\u4ea4\u6362\u8bb0\u5f55txt \u00a0 \u00a0 \u00a0 \u00a0 \u57df\u540d\u9a8c\u8bc1\u8bb0\u5f55NS \u00a0 \u00a0 \u00a0 \u00a0 \u5c06\u5b50\u57df\u4ea4\u7ed9\u5176\u4ed6DNS\u8fdb\u884c\u89e3\u6790CAA \u00a0 \u00a0 \u00a0 \u00a0CA\u9a8c\u8bc1\u8bb0\u5f55\u53ef\u4ee5\u901a\u8fc7DSN\u533a\u57df\u89c6\u56fe\uff0c\u6240\u8c13\u7684\u533a\u57df\u89c6\u56fe\u6307\u7684\u662f\u53ef\u4ee5\u5c06\u7528\u6237\u7684\u4e0d\u540c\u6765\u8def\uff0c\u89e3\u6790\u6210\u4e0d\u540c\u7684\u8bb0\u5f55\uff08\u5546\u4e1a\u5316\u529f\u80fd\uff0cbind\u53ef\u4ee5\u5b9e\u73b0\uff09<\/p>\n
DNS\u7684\u5ba2\u6237\u7aef\u5de5\u5177\uff1anslookup \u8be5\u5de5\u5177\u6765\u81ea\u4e8ebind-utils\u00a0nslookup www.example.com \u00a0\u67e5\u8be2\u53cd\u5411\u548c\u6b63\u5411\u8bb0\u5f55hosthost \u00a0example.com
\ndig \u00a0\u7528\u6cd5\uff1adig \u00a0 @DNS\u670d\u52a1\u5668\uff08\u4e0d\u8bbe\u7f6e\u9ed8\u8ba4\u5c31\u662f\u672c\u673a\uff09 \u57df\u540d \u00a0\u7c7b\u578beg. dig @172.18.0.134 example.com \u00a0MX<\/p>\n
\u5341\u3001\u96c6\u7fa4\u7ba1\u7406\u96c6\u7fa4\u7684\u5206\u7c7b\u6240\u8c13\u7684\u96c6\u7fa4\uff0c\u5c31\u662f\u6307\u4f7f\u7528\u4e00\u7ec4\u8ba1\u7b97\u673a\u6765\u5b8c\u6210\u67d0\u4e00\u4e2a\u5e94\u7528\u6216\u8005\u573a\u666f\u4e0b\u7684\u4e1a\u52a1\u627f\u8f7d\u95ee\u9898\u6839\u636e\u4e0d\u540c\u7684\u4f7f\u7528\u573a\u666f\uff0c\u5c06\u96c6\u7fa4\u5206\u6210\u4e09\u7c7b1. LB\u7684\u96c6\u7fa4\uff08Load Balance Cluster\uff09\u8d1f\u8f7d\u5747\u8861\u96c6\u7fa4\uff0c\u7528\u6765\u5c06\u7528\u6237\u8bf7\u6c42\u8c03\u5ea6\u5230\u4e0d\u540c\u7684\u8282\u70b9\u4e0a\uff0c\u8ba9\u6574\u4e2a\u96c6\u7fa4\u5185\u673a\u5668\u7684\u6027\u80fd\u5904\u4e8e\u4e00\u4e2a\u76f8\u5bf9\u5e73\u8861\u7684\u72b6\u6001
\n2.HA \u9ad8\u53ef\u9760\u96c6\u7fa4\uff08Highly Available Cluster\uff09\u9ad8\u53ef\u9760\u96c6\u7fa4\uff0c\u91cd\u70b9\u7528\u6765\u4fdd\u969c\u4e1a\u52a1\u7684\u8fde\u7eed\u8fd0\u884c\uff0c\u901a\u8fc7\u5fc3\u8df3\uff0c\u6d6e\u52a8IP\u3001\u8d44\u6e90\u9501\u7b49\u4e00\u7cfb\u5217\u65b9\u5f0f\u4fdd\u969c\u5728\u96c6\u7fa4\u8282\u70b9\u51fa\u73b0\u6545\u969c\u65f6\uff0c\u4e1a\u52a1\u7684\u6301\u7eed\u7a33\u5b9a\u8fd0\u884c
\n3.HPC \u9ad8\u6027\u80fd\u8ba1\u7b97\u96c6\u7fa4\uff08High Performance Computing\uff09\u9ad8\u6027\u80fd\u8ba1\u7b97\u96c6\u7fa4\uff0c\u6307\u7684\u662f\u5229\u7528\u5206\u5e03\u5f0f\u8282\u70b9\u6765\u5e76\u884c\u8ba1\u7b97\u79d1\u5b66\u6570\u636e\u6700\u7ec8\u5f97\u5230\u4e00\u4e2a\u503c
\n\u96c6\u7fa4\u7684\u5178\u578b\u4ee3\u8868\uff1aLB\u7684\u96c6\u7fa4\uff1a LVS\uff08Linux \u00a0Virtual Sever\uff09\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u56db\u5c42\uff08\u4f20\u8f93\u5c42\uff09\u8d1f\u8f7d\u5747\u8861\u8f6f\u4ef6LVS\u4f7f\u7528\u4e86Linux\u5185\u6838\u7684\u6a21\u5757\u7279\u6027\uff0c\u4f7f\u7528\u7684\u662fnetfilter\u7684\u6846\u67b6Nginx \u00a0 LVS\u652f\u6301\u56db\u5c42\u53ca\u4e03\u5c42\u8d1f\u8f7d\uff0c\u914d\u7f6e\u6700\u7b80\u5355\uff0cNginx\u53ef\u4ee5\u6839\u636ehttp\u7684\u6765\u6e90\u8fdb\u884c\u8f6c\u53d1\u00a0Haproxy \u00a0 \u540c\u65f6\u63d0\u4f9b\u56db\u5c42\u548c\u4e03\u5c42\u7684\u8d1f\u8f7d\u5747\u8861\uff0c\u6700\u5f3a\u5927
\nHA\u7684\u96c6\u7fa4\uff1akeepalived \u53ef\u4ee5\u901a\u8fc7VRRP\u534f\u8bae\u6765\u5b9e\u73b0\u6d6e\u52a8\u7684IP\u6f02\u79fbHeartbeat \u00a0 \u00a0\u7528\u5728\u96c6\u7fa4\u8282\u70b9\u4e4b\u95f4\u8fdb\u884c\u5fc3\u8df3\u68c0\u6d4bPacemaker \u00a0 \u00a0\u901a\u8fc7\u548c\u5176\u4ed6\u5fc3\u8df3\u63d2\u4ef6\u96c6\u6210\u6765\u5b9e\u73b0\u9ad8\u53ef\u7528\uff08\u53ea\u80fd\u505a\u96c6\u7fa4\u8d44\u6e90\u7684\u7ba1\u7406\uff09
\nLVS\u7684\u529f\u80fd\uff1a\u6570\u636e\u5305\u7684IP\u8f6c\u53d1\u4fee\u6539\u6570\u636e\u5305\u7684\u76ee\u7684mac\u5c01\u88c5IP\u96a7\u9053\u4fe1\u606f
\nnginx\u7684\u529f\u80fd\uff1a\u6839\u636eURL\u5730\u5740\u8fdb\u884c\u8d1f\u8f7d<\/p>\n
HA\u7684\u6838\u5fc3\u5b9e\u73b0\uff1a\u6d6e\u52a8IP\uff08\u5f39\u6027IP\/VIP\uff09\u00a0\u5fc3\u8df3\u7f51\u7edcfence\u673a\u5236\u9632\u6b62\u8111\u88c2\u53cc\u4e3b\u7684\u95ee\u9898\uff0c\u4e00\u822c\u7528BMC\u5361
\n\u8d1f\u8f7d\u5747\u8861\u96c6\u7fa4LVS\u7684\u6982\u5ff5\uff1aVIP\uff1a \u6d6e\u52a8IP \u2014\u2014> \u5ba2\u6237\u8bbf\u95ee\u7684\u4e1a\u52a1IPDIP\uff1aLVS\u4e0a\u8bbf\u95ee\u771f\u5b9e\u670d\u52a1\u5668\u7684\u63a5\u53e3IPRIP\uff1a\u4e1a\u52a1\u670d\u52a1\u5668\uff08\u771f\u5b9e\u670d\u52a1\u5668\uff09\u7684IP\u5730\u5740
\nLVS\u7684\u67b6\u6784\uff1a\u7528\u6237\u6001\u7ba1\u7406\u7a0b\u5e8f\uff1a ipvsadm\u8fd9\u4e2a\u5de5\u5177\u6765\u7ba1\u7406lvs\u96c6\u7fa4\u5185\u6838\u6001\u6570\u636e\u5305\u6a21\u5757\uff1a ip_vs
\nLVS\u7684\u5b89\u88c5\uff1ayum install ipvsadm -y
\nLVS\u7684\u7ba1\u7406\u65b9\u5f0f\uff1aipvsadm\u7684\u5de5\u5177\u6765\u8fdb\u884c\u7ba1\u7406\uff0c\u552f\u4e00\u7684\u96c6\u7fa4\u914d\u7f6e\u6587\u4ef6\u5728\/etc\/sysconfig\/ipvsadm-conf\u4e2d\u4fdd\u5b58\u5982\u679c\u542f\u52a8ipvsadm\u7684\u670d\u52a1\u5c06\u4f1a\u81ea\u52a8\u52a0\u8f7d\u8be5\u914d\u7f6e\u6587\u4ef6
\nipvsadm –help\u00a0 \u67e5\u8be2\u9009\u9879
\nLVS\u7684\u5de5\u4f5c\u6a21\u5f0f\u548c\u8c03\u5ea6\u7b97\u6cd5\u4e00\u5171\u6709\u56db\u79cd\u5de5\u4f5c\u6a21\u5f0f\uff0c\u5341\u4e8c\u79cd\u8c03\u5ea6\u7b97\u6cd5
\nNAT\u6a21\u5f0fDR \u76f4\u8fde\u8def\u7531\u6a21\u5f0fTUN IP\u96a7\u9053\u6a21\u5f0fFULL-Tun \u5168\u96a7\u9053\u6a21\u5f0f(\u6536\u8d39\u7684)
\nLVS\u7684\u914d\u7f6e\uff1ahostnamectl set-hostname lvsyum install bash-com* -yyum install ipvsadm -ynmcli connection \u00a0modify \u00a0ens33 \u00a0ipv4.method manual \u00a0ipv4.addresses 172.18.0.10\/24 autoconnect\u00a0yesnmcli connection \u00a0modify \u00a0ens37 \u00a0ipv4.method manual \u00a0ipv4.addresses 192.168.66.100\/24 ipv4.gateway \u00a0192.168.66.254 ipv4.dns 114.114.114.114 autoconnect \u00a0yessystemctl \u00a0disable\u00a0–now \u00a0firewalldsysctl \u00a0-w net.ipv4.ip_forward=1 \u00a0\u4e34\u65f6\u5f00\u542fIP\u8f6c\u53d1\u5185\u6838\u53c2\u6570\u00a0vi \/etc\/sysctl.conf \u00a0\u5c06\u5176\u53c2\u6570\u6539\u4e3a1 \u7136\u540e\u4f7f\u7528sysctl -p \u5237\u65b0\u5185\u6838\u53c2\u6570
\n\u914d\u7f6e\u96c6\u7fa4\u7684\u6b65\u9aa4\uff1aipvsadm -A -t 192.168.66.100:80 -s rr \u00a0 \u521b\u5efa\u96c6\u7fa4\u670d\u52a1\u5e76\u6307\u5b9a\u8c03\u5ea6\u7b97\u6cd5\u4e3arripvsadm -a -t 192.168.66.100:80 -r 172.18.0.100 -mipvsadm -a -t 192.168.66.100:80 -r 172.18.0.200 -m\u5411\u96c6\u7fa4\u5185\u6dfb\u52a0\u771f\u5b9e\u670d\u52a1\u5668\u5e76\u6307\u5b9a\u5de5\u4f5c\u6a21\u5f0f\u4e3anat<\/p>\n
\u5341\u4e00\u3001\u6570\u636e\u5e93yum install mariadb\u00a0yum install mysql*
\nmariadb\u6570\u636e\u5e93\u88c5\u5b8c\u914d\u7f6e\u6587\u4ef6\u5728\u8fd9vim \/etc\/my.cnf[mariadb]#\u7ed1\u5b9aIPv4\u548c3306\u7aef\u53e3bind-address = l0.0.0.0port = 3306#\u8bbe\u7f6emysql\u7684\u5b89\u88c5\u76ee\u5f55basedir=\/db#\u8bbe\u7f6emysql\u6570\u636e\u5e93\u7684\u6570\u636e\u7684\u5b58\u653e\u76ee\u5f55datadir=\/dbs#\u5141\u8bb8\u6700\u5927\u8fde\u63a5\u6570max_connections=200<\/p>\n
mysql_secure_installation\u521d\u59cb\u5316mysql\u8bbe\u7f6eMySQL\u7684\u65b0\u5bc6\u7801\u5e76\u786e\u8ba4\u3002\u672c\u793a\u4f8b\u8bbe\u7f6e\u5bc6\u7801admin\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u7ee7\u7eed\u4f7f\u7528\u63d0\u4f9b\u7684\u5bc6\u7801\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u79fb\u9664\u533f\u540d\u7528\u6237\u3002\u8bbe\u7f6e\u662f\u5426\u5141\u8bb8\u8fdc\u7a0b\u8fde\u63a5MySQL\u3002\u4e0d\u9700\u8981\u8fdc\u7a0b\u8fde\u63a5\u65f6\uff0c\u8f93\u5165Y\u5e76\u56de\u8f66\u3002\u9700\u8981\u8fdc\u7a0b\u8fde\u63a5\u65f6\uff0c\u8f93\u5165N\u6216\u5176\u4ed6\u4efb\u610f\u975eY\u7684\u6309\u952e\uff0c\u5e76\u56de\u8f66\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u5220\u9664test\u5e93\u4ee5\u53ca\u5bf9test\u5e93\u7684\u8bbf\u95ee\u6743\u9650\u3002\u8f93\u5165Y\u5e76\u56de\u8f66\u91cd\u65b0\u52a0\u8f7d\u6388\u6743\u8868\u3002
\n\u5141\u8bb8\u8fdc\u7a0b\u767b\u9646update user\u00a0set\u00a0user.Host=’%’\u00a0where\u00a0user.User=’root’;flush privileges;
\nmysql\u884c\u6570\u4e00\u822c\u63a7\u5236\u5728100W\u6761\u4ee5\u5185
\n\u521b\u5efa\u6570\u636e\u5e93create database openEuler charset=utf8;
\n\u5907\u4efd\u6570\u636e\u5e931.\u5907\u4efd\u5168\u90e8\u6570\u636e\u5e93\u7684\u6570\u636e\u548c\u7ed3\u6784mysqldump -uroot -p123456 -A > \/data\/mysqlDump\/mydb.sql2.\u5907\u4efd\u5168\u90e8\u6570\u636e\u5e93\u7684\u7ed3\u6784\uff08\u52a0 -d \u53c2\u6570\uff09mysqldump -uroot -p123456 -A -d > \/data\/mysqlDump\/mydb.sql3.\u5907\u4efd\u5168\u90e8\u6570\u636e\u5e93\u7684\u6570\u636e(\u52a0 -t \u53c2\u6570)mysqldump -uroot -p123456 -A -t > \/data\/mysqlDump\/mydb.sql4.\u5907\u4efd\u5355\u4e2a\u6570\u636e\u5e93\u7684\u6570\u636e\u548c\u7ed3\u6784(,\u6570\u636e\u5e93\u540dmydb)mysqldump -uroot-p123456 mydb > \/data\/mysqlDump\/mydb.sql5. \u5907\u4efd\u5355\u4e2a\u6570\u636e\u5e93\u7684\u7ed3\u6784mysqldump -uroot -p123456 mydb -d > \/data\/mysqlDump\/mydb.sql6. \u5907\u4efd\u5355\u4e2a\u6570\u636e\u5e93\u7684\u6570\u636emysqldump -uroot -p123456 mydb -t > \/data\/mysqlDump\/mydb.sql7. \u5907\u4efd\u591a\u4e2a\u8868\u7684\u6570\u636e\u548c\u7ed3\u6784\uff08\u6570\u636e\uff0c\u7ed3\u6784\u7684\u5355\u72ec\u5907\u4efd\u65b9\u6cd5\u4e0e\u4e0a\u540c\uff09mysqldump -uroot -p123456 mydb t1 t2 > \/data\/mysqlDump\/mydb.sql8. \u4e00\u6b21\u5907\u4efd\u591a\u4e2a\u6570\u636e\u5e93mysqldump -uroot -p123456 –databases db1 db2 > \/data\/mysqlDump\/mydb.sql
\n\u8fd8\u539f MySQL \u5907\u4efd\u5185\u5bb9\u6709\u4e24\u79cd\u65b9\u5f0f\u8fd8\u539f\uff0c\u7b2c\u4e00\u79cd\u662f\u5728 MySQL \u547d\u4ee4\u884c\u4e2d\uff0c\u7b2c\u4e8c\u79cd\u662f\u4f7f\u7528 SHELL \u884c\u5b8c\u6210\u8fd8\u539f1.\u5728\u7cfb\u7edf\u547d\u4ee4\u884c\u4e2d\uff0c\u8f93\u5165\u5982\u4e0b\u5b9e\u73b0\u8fd8\u539f\uff1amysql -uroot -p123456 < \/data\/mysqlDump\/mydb.sql2.\u5728\u767b\u5f55\u8fdb\u5165mysql\u7cfb\u7edf\u4e2d,\u901a\u8fc7source\u6307\u4ee4\u627e\u5230\u5bf9\u5e94\u7cfb\u7edf\u4e2d\u7684\u6587\u4ef6\u8fdb\u884c\u8fd8\u539f\uff1amysql>\u00a0source\u00a0\/data\/mysqlDump\/mydb.sql\u5728 Linux\u4e2d\uff0c\u901a\u5e38\u4f7f\u7528BASH\u811a\u672c\u5bf9\u9700\u8981\u6267\u884c\u7684\u5185\u5bb9\u8fdb\u884c\u7f16\u5199\uff0c\u52a0\u4e0a\u5b9a\u65f6\u6267\u884c\u547d\u4ee4crontab\u5b9e\u73b0\u65e5\u5fd7\u81ea\u52a8\u5316\u751f\u6210\u3002\u4ee5\u4e0b\u4ee3\u7801\u529f\u80fd\u5c31\u662f\u9488\u5bf9mysql\u8fdb\u884c\u5907\u4efd\uff0c\u914d\u5408crontab\uff0c\u5b9e\u73b0\u5907\u4efd\u7684\u5185\u5bb9\u4e3a\u8fd1\u4e00\u4e2a\u6708\uff0831\u5929\uff09\u5185\u7684\u6bcf\u5929\u7684mysql\u6570\u636e\u5e93\u8bb0\u5f55\u3002<\/p>\n
\u5341\u4e8c\u3001NGINX\u8c03\u5ea6\u7b97\u6cd5 RR\u8f6e\u8be2\u3001LC\u6700\u5c11\u8fde\u63a5\u3001ip\u00a0hash\u6e90\u5730\u5740\u54c8\u5e0c\u3001random\u968f\u673a\u6307\u5b9a\u3001generic\u00a0hash\u6839\u636e\u539f\u59cb\u8bbf\u95ee\u54ea\u4e2a\u670d\u52a1\u5668\u8fd8\u8fd4\u56de\u90a3\u4e2a\u7b97\u6cd5\u3002nginx\u9ed8\u8ba4\u4f7f\u7528\u8f6e\u8be2\u8c03\u5ea6
\nNginx1\u7684\u914d\u7f6e\uff1ahostnamectl \u00a0set-hostname nginx1yum install nginx -ynmcli connection modify \u00a0ens33 ipv4.method manual \u00a0ipv4.addresses 172.18.0.100\/24 ipv4.gateway 172.18.0.10 autoconnect \u00a0yes
\nnginx \u8d1f\u8f7d\u5747\u8861\u914d\u7f6e\u548c\u53cd\u5411\u4ee3\u7406\u540c\u65f6\u5b58\u5728\/usr\/share\/nginx\/modules\/mod-stream.confupstream www.yeng.com{\u00a0server 192.168.1.1:81weight=5;\u00a0server 192168.1.10:82 ;\u00a0server 192.168.1.100:83 backup;\u00a0server 192.168.1.20 max_connes 1000;}
\nserver{\u00a0 listen 8080;\u00a0 location \/ {\u00a0 \u00a0 \u00a0proxy_pass http:\/\/www.yeng.com; \u00a0 \u00a0 \/\/\u8c03\u7528\u6307\u5b9a\u4e0a\u9762\u7684\u5b9a\u4e49\u7684\u57df\u540d\u00a0 }}
\n\u6ce8\u610f\uff1a\u771f\u5b9e\u670d\u52a1\u5668\u7684\u7f51\u5173\u4e00\u5b9a\u8981\u6307\u5411LVS\u7684DIP\u5730\u5740
\necho\u00a0hello Nginx1 > \/usr\/share\/nginx\/html\/index.htmlsystemctl \u00a0enable\u00a0 –now \u00a0nginx.servicesystemctl \u00a0disable\u00a0 –now \u00a0firewalld<\/p>\n
\u53cd\u5411\u4ee3\u7406\u914d\u7f6evim \/etc\/nginx\/nginx.conf
\nserver {\u00a0 listenlisten \u00a0 \u00a080;\u00a0 server_name \u00a0_;\u00a0 \u00a0root \u00a0 \/usr\/share\/nginx\/html;\u00a0 \u00a0 include \/etc\/nginx\/default.d\/*.conf;\u00a0 \u00a0 \u00a0location \/ {\u00a0 \u00a0 \u00a0 \u00a0 proxy_pass http:\/\/172.16.1.100\/; \u00a0\u00a0 \u00a0 \u00a0 \u00a0\u00a0#\u53ea\u8981http:\/\/\u672c\u673aIP :80\u7aef\u53e3\u5c31\u8def\u8f6c\u8fd9\u4e2aIP\u00a0 \u00a0 \u00a0}\u00a0 \u00a0 \u00a0error_page 404 \/404.html;\u00a0 \u00a0 \u00a0 location = \/40x.html {\u00a0 \u00a0 \u00a0 \u00a0}\u00a0 \u00a0 \u00a0 error_page 500 502 503 504 \/50x.html;\u00a0 \u00a0 \u00a0 location = \/50x.html {\u00a0 \u00a0 \u00a0 \u00a0}}<\/p>\n
location\u548cproxy\u662f\u5426\u4ee5\u659c\u6760\u7ed3\u5c3e\uff0c\u8868\u793a\u4e86\u5b8c\u5168\u4e0d\u540c\u7684\u8bbf\u95ee\u8def\u5f84\uff0c\u6b63\u5e38\u5199\u6cd5\u5c31\u662f\u4e24\u76ee\u5f55\u548cIP\u90fd\u5f97\u6709\u659c\u6760location\/test\/{proxy_passhttp:\/\/192.168.1.123\/;}\u6700\u7ec8\u8f6c\u53d1\u8def\u5f84\u4e3a:http:\/\/192.168.1.123\/index.html
\nlocation \/test\/{proxy_pass http:\/\/192.168.1.123;},\u7ec8\u8f6c\u53d1\u8def\u5f84\u4e3a:http:\/\/192.168.1.123\/test\/index.html
\nlocation \/test{proxy_pass http:\/\/192.168.1.123\/;},\u6700\u7ec8\u8f6c\u53d1\u8def\u5f84\u4e3a:http:\/\/192.168.1.123\/\/index.html
\nlocation\/test{proxy_passhttp:\/\/192.168.1.123;},\u6700\u7ec8\u8f6c\u53d1\u8def\u5f84\u4e3a:http:\/\/192.168.1.123\/test\/index.html<\/p>\n
nginx\u7aef\u53e3\u6620\u5c04\u914d\u7f6e\/ect\/nginx\/nginx.conf \u00a0\u653e\u5230\u6700\u540e\u9762\u5355\u72ec\u653e\uff0c\u4e0d\u8981\u653e\u5230http\u91cc\u9762stream {upstream tcp_test{\u00a0server 192168.1.10:22 ;}
\nserver{\u00a0 listen 9999;\u00a0 proxy_pass tcp_test; \u00a0 \u00a0 \/\/\u8c03\u7528\u6307\u5b9a\u4e0a\u9762\u7684\u5b9a\u4e49\u7684\u57df\u540d\u00a0 }}<\/p>\n
\u5341\u4e09\u3001ansible1\u3001openEuler\u53ef\u4ee5\u76f4\u63a5\u5b89\u88c5yum install ansible
\nyum install epel-release\u5176\u5b83\u7cfb\u7edf\u8981\u5148\u88c5\u8fd9\u4e2a\u6e90
\nansible 2.9 \u662f\u6700\u540e\u4e00\u4e2a\u4f01\u4e1a\u7a33\u5b9a\u7248\uff0c\u6a21\u5757\u591aansible 2.10\u5f00\u59cb\u90fd\u662f\u5bb9\u5668\u7248ansible-core\u7248\uff0c\u81ea\u5e26\u7684\u6a21\u5757\u5c11
\nansible –version\u67e5\u770b\u5b89\u88c5\u7684\u4f4d\u7f6e\u53ca\u6a21\u5757\u4f4d\u7f6e\u7b49\u91cd\u8981\u4fe1\u606f
\n1\u3001ansible\u914d\u7f6e\u6587\u4ef6\u9ed8\u8ba4\u914d\u7f6e\u6587\u4ef6\u5728\/etc\/ansible\/ansible.cfg\u6574\u4e2a\u914d\u7f6e\u6587\u4ef6\u4e00\u5171\u6709\u5341\u4e2a\u6bb5\u843d[defaults] \u00a0\u901a\u7528\u914d\u7f6e\u9879[inventory] \u4e3b\u673a\u6e05\u5355\u914d\u7f6e\u9879[privilege_escalation] \u00a0\u6743\u9650\u63d0\u5347\u914d\u7f6e\u9879[paramiko_connection] \u65e7\u7248\u672cparamiko\u8fde\u63a5\u63d2\u4ef6\u7684\u914d\u7f6e\u9879[ssh_connection] \u00a0ssh\u8fde\u63a5\u7684\u914d\u7f6e\u9879[persistent_connection] \u6301\u4e45\u8fde\u63a5\u914d\u7f6e\u9879[accelerate] \u00a0\u52a0\u901f\u8fde\u63a5\u914d\u7f6e\u9879[selinux] \u00a0selinux\u7684\u914d\u7f6e\u9879[colors] \u00a0 \u4efb\u52a1\u7684\u8f93\u51fa\u989c\u8272\u914d\u7f6e\u9879 \u4f8b\u5982\u9519\u8bef\u662f\u7ea2\u8272[diff] \u00a0\u6253\u5370\u4efb\u52a1\u524d\u540e\u7684\u5dee\u5f02<\/p>\n
2\u3001\u914d\u7f6e\u6587\u4ef6\u8be6\u89e3\uff1a[defaults] \u00a0\u901a\u7528\u914d\u7f6e\u9879\uff1ainventory \u00a0= \/etc\/ansible\/hosts \u00a0\u4e3b\u673a\u6e05\u5355\u7684\u8def\u5f84\uff0c\u4e5f\u5c31\u662f\u6e05\u5355\u5b58\u653e\u5728\u90a3\u4e2a\u6587\u4ef6\u4e2dlibrary \u00a0 \u00a0 \u00a0 \u00a0= \/usr\/share\/my_modules \u00a0Ansible\u7684\u5e93\u6587\u4ef6\u5b58\u653e\u7684\u4f4d\u7f6e\uff0c\u53ef\u4ee5\u4e0d\u7528\u7ba1module_utils \u00a0 = \/usr\/share\/my_module_utils\/ \u00a0\u6a21\u5757\u5b58\u653e\u7684\u4f4d\u7f6e\uff0c\u4e5f\u53ef\u4ee5\u4e0d\u7528\u7ba1remote_tmp \u00a0 \u00a0 = ~\/.ansible\/tmp \u00a0\u5728\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u6267\u884c\u547d\u4ee4\u6a21\u5757\u5b58\u653e\u7684\u4f4d\u7f6e \uff0c\u4e5f\u53ef\u4ee5\u4e0d\u7528\u7ba1forks = 5 \u00a0ansible \u00a0\u4e3b\u673a\u4efb\u52a1\u7684\u5e76\u53d1\u6570\uff0c\u8868\u793a\u540c\u65f6\u53ef\u4ee5\u5728\u4e94\u4e2a\u4e3b\u673a\u4e0a\u6267\u884c\u4efb\u52a1\uff0c\u4e5f\u53ef\u4ee5\u4e0d\u7528\u7ba1ask_pass \u00a0 \u00a0 \u00a0= True \u00a0\u8fdc\u7a0b\u4e3b\u673a\u7684\u8eab\u4efd\u9a8c\u8bc1\u65b9\u5f0f\uff0c\u5982\u679c\u4e3atrue\u5219\u662f\u5bc6\u7801\u8ba4\u8bc1\uff0c\u4e5f\u53ef\u4ee5\u4e0d\u7528\u7ba1false\u5219\u662f\u5bc6\u94a5\u8ba4\u8bc1ask_sudo_pass = True \u00a0\u7528\u6237\u63d0\u6743\u662f\u5426\u9700\u8981\u5bc6\u7801remote_port \u00a0= 22 \u00a0\u88ab\u7ba1\u7406\u7aef\u4e3b\u673a\u7684ssh\u7aef\u53e3remote_user = root \u00a0\u8fde\u63a5\u88ab\u7ba1\u7406\u7aef\u7684\u7528\u6237host_key_checking = False \u00a0\u4e0d\u68c0\u67e5\u88ab\u63a7\u7aef\u7684\u4e3b\u673a\u516c\u94a5
\n\u6743\u9650\u63d0\u5347\u914d\u7f6e\u9879[privilege_escalation] \u00a0\u5728\u751f\u4ea7\u73af\u5883\u901a\u5e38\u4e0d\u4f1a\u4f7f\u7528root\u7528\u6237\u76f4\u63a5ssh\uff0c\u56e0\u6b64\u53ea\u80fd\u4f7f\u7528\u4e00\u4e2a\u666e\u901a\u7528\u6237\u8fde\u63a5\u5230\u88ab\u7ba1\u7406\u7aef\uff0c\u7136\u540e\u5728\u6267\u884c\u63d0\u6743\uff0c\u5c06\u5176\u6743\u9650\u63d0\u5347\u4e3aroot\uff0cansible\u4e5f\u9700\u8981\u914d\u7f6e\u63d0\u6743become=True \u00a0\/\/true\u8868\u793a\u5f00\u542f\u63d0\u6743\uff0c\u53cd\u4e4bfalse\u5219\u5173\u95edbecome_method=sudo\u00a0 \/\/\u63d0\u6743\u7684\u65b9\u5f0f\u4e3asudobecome_user=root \u00a0\/\/\u8868\u793a\u63d0\u6743\u5230root\u7528\u6237become_ask_pass=False \u00a0\/\/\u8868\u793a\u63d0\u6743\u4e0d\u9700\u8981\u9a8c\u8bc1\u5bc6\u7801
\nssh\u8fde\u63a5\u7684\u914d\u7f6e\u9879[ssh_connection] \u00a0ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s \u00a0 ssh \u7684\u8fde\u63a5\u9009\u9879-C\u542f\u7528\u538b\u7f29\u4f20\u8f93\uff0cControlPersist\u7528\u4e8e\u63d0\u5347\u6027\u80fd
\n\u4ee5\u4e0a\u914d\u7f6e\u6587\u4ef6\u7684\u4f18\u5148\u7ea7\uff1a\u914d\u7f6e\u6587\u4ef6\u53ef\u4ee5\u51fa\u73b0\u5728\u56db\u4e2a\u5730\u65b9\uff1a1.\u5f53\u524d\u7528\u6237\u7684\u5bb6\u76ee\u5f55\u4e0b\u7684.ansible.cfg\u7684\u9690\u85cf\u6587\u4ef62.\u7cfb\u7edf\u4e2d\u7684ANSIBLE_CONFIG\u7684\u73af\u5883\u53d8\u91cf3.\u5f53\u524d\u5de5\u4f5c\u76ee\u5f55\u4e0b\u7684ansible.cfg4.\/etc\/ansible.cfg \u662f\u5168\u5c40\u9ed8\u8ba4\u914d\u7f6e\u6587\u4ef6\u4f18\u5148\u7ea7\u7684\u987a\u5e8f\u662f\uff1a\u4f18\u5148\u7ea7\u6700\u9ad8\u7684\u662f\u73af\u5883\u53d8\u91cf > \u5f53\u524d\u5de5\u4f5c\u76ee\u5f55 > \u5bb6\u76ee\u5f55 > \/etc\/ansible\/ansible.cfg
\n3\u3001Ansible\u7684\u7ba1\u7406\u914d\u7f6e\u793a\u4f8b\uff1a\u88ab\u63a7\u7aef\uff1a\u521b\u5efazhangsan\u7528\u6237\u5e76\u8bbe\u7f6e\u5bc6\u7801\u4e3azhangsan\u7528\u6237\u914d\u7f6esudo\u7684\u63d0\u6743\u4e14\u65e0\u9700\u5bc6\u7801\u63d0\u6743
\n\u4e3b\u63a7\u7aef\uff1a1.vim \/etc\/ansible\/ansible.cfg\u7684\u914d\u7f6e\u6587\u4ef6[defaults]inventory \u00a0= .\/hostsremote_user = zhangsanask_pass =\u00a0truehost_key_checking = False \/\/\u907f\u514d\u9996\u6b21\u8fde\u63a5\u8ba9\u586byes
\n[privilege_escalation]become = \u00a0truebecome_method=sudobecome_user=rootbecome_ask_pass=False
\n[ssh_connection]ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s
\n2. \u5b9a\u4e49\u4e3b\u673a\u6e05\u5355vim \/etc\/ansible\/hostsnode1node2node3172.18.0.169
\n3. \u6d4b\u8bd5ansible\u80fd\u5426\u7ba1\u7406\u88ab\u63a7ansible all \u00a0-m ping\u00a0\u5176\u4e2dall \u8868\u793a\u6240\u6709\u4e3b\u673a
\n[WARNING]: Platform linux on host 172.18.0.169 is using the discovered Python interpreter at\/usr\/bin\/python3, but future installation of another Python interpreter could change this. Seehttps:\/\/docs.ansible.com\/ansible\/2.9\/reference_appendices\/interpreter_discovery.html\u00a0for\u00a0moreinformation.\u5728\u6d4b\u8bd5\u8fde\u901a\u6027\u65f6\uff0c\u5982\u679c\u53d1\u751fpython\u7684\u8b66\u544a\u4fe1\u606f\uff0c\u53ef\u4ee5\u4f7f\u7528\u4e24\u4e2a\u65b9\u5f0f\u6765\u89e3\u51b3\uff1a1. \u5728\u4e3b\u673a\u6e05\u5355\u4e2d\u4e3a\u4e3b\u673a\u6307\u5b9a\u7279\u5b9a\u7684python\u7248\u672cvim \/etc\/ansible\/hosts172.18.0.169 \u00a0ansible_python_interpreter=\/usr\/bin\/python3
\n2.\u5728ansible\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\u5c4f\u853d\u6389\u544a\u8b66\u4fe1\u606f[defaults]interpreter_python=auto_legacy_silent<\/p>\n
4\u3001ansible\u6a21\u5757\u7528\u6cd5\u5206\u4e3a\u4e24\u7c7b\u6a21\u5757\uff1a\u4e00\u7c7b\u662f\u547d\u4ee4\u6267\u884c\u6a21\u5757\uff1acommand\u3001 \u00a0shell\u3001 \u00a0raw \u3001script\u3001copy\uff08\u4ece\u4e3b\u63a7\u7aef\u590d\u5236\u8fc7\u53bb\uff09\u3001fetch(\u4ece\u88ab\u63a7\u7aef\u590d\u5236\u8fc7\u6765)\u4e00\u7c7b\u662f\u4efb\u52a1\u6a21\u5757\uff1a\u5f88\u591aansible-doc \u00a0 -l \u00a0\u67e5\u8be2\u652f\u6301\u7684\u6a21\u5757ansible-doc \u6a21\u5757\u540d \u00a0\u67e5\u6a21\u5757\u7528\u6cd5ansible-doc -s \u6a21\u5757\u540d\uff0c\u4ec5\u67e5\u53c2\u6570
\n5\u3001ansible\u5e38\u7528\u53c2\u6570ansible 192168.1.1 -m user -a\u00a0‘name=admin’\u00a0-vvv-k \u6307\u5b9assh\u5bc6\u7801\u8ba4\u8bc1\u65b9\u5f0f-K \u6307\u5b9asudo\u63d0\u6743\u5bc6\u7801-u \u6307\u5b9a\u7528\u6237\u540d-vvv \u67e5\u770b\u8be6\u7ec6\u00a0-C \u6d4b\u8bd5\u6267\u884c<\/p>\n","protected":false},"excerpt":{"rendered":"
HCIP\u4e2d\u7ea7\u90e8\u5206 \u4e00\u3001http\u670d\u52a1\u5e38\u89c4\u539f\u7406https\u8fde\u63a5\u670d\u52a1\u5668\u7528\u7684\u662f\u975e\u5bf9\u79f0\u5bc6\u94a5\uff0c\u6570\u636e\u5b89\u5168\u4f7f\u7528\u5bf9\u79f0\u52a0\u5bc6 trac […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-1801","post","type-post","status-publish","format-standard","hentry","category-openeuler"],"_links":{"self":[{"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/posts\/1801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/comments?post=1801"}],"version-history":[{"count":2,"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/posts\/1801\/revisions"}],"predecessor-version":[{"id":1817,"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/posts\/1801\/revisions\/1817"}],"wp:attachment":[{"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/media?parent=1801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/categories?post=1801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.o6s.net\/index.php\/wp-json\/wp\/v2\/tags?post=1801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}