mongodb4.0分片集群安装指南
概念介绍
mongodb支持架构有单机(stand-alone)、主从(master-slave)、副本集(replica set)以及分片(sharding), 而最常用的架构莫过于副本集 + 分片。而分片有三大组件，分别为mongos、configsvr、sharding server，他们的功能如下：
mongos: 它是前端路由，应用程序由此接入，且让整个集群看上去像单一数据库，前端应用可以透明使用。它不存储任何数据，只载入configsvr的配置。configsvr: 它是一个mongod 实例，存储了整个 Cluster Metadata，其中包括 chunk 信息。它是存放着分片和数据的对应关系。sharding server: 它是一个mongod 实例，用于存储实际的数据块，实际生产环境中一个shard server角色可由几台机器组个一个replica set承担，防止主机单点故障。
安装环境
本次试验有三台主机，即三个分片和三个副本集，可以保证高可用，即使一台机器全宕机了，服务仍然能够正常访问, 本次环境的主机分别充当另外一个分片的从，他们的角色功能如下：
角色后面的数字为该服务在该主机上占用的端口
| 主机 | IP | 角色 |
|---|---|---|
| mongo1 | 192.168.3.125 | mongos1:20000 configsvr1:21000 shard1:27001 shard2:27002 shard3:27003 |
| mongo2 | 192.168.3.126 | mongos2:20000 configsvr2:21000 shard1:27001 shard2:27002 shard3:27003 |
| mongo3 | 192.168.3.127 | configsvr3:21000 shard1:27001 shard2:27002 shard3:27003 |
环境准备
环境准备的操作在所有主机上执行，除非另有说明。
创建mongod用户
1 |
$ useradd mongod |
下载mongodb二进制文件
1 2 3 |
$ wget https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-rhel70-4.0.10.tgz $ tar zxvf mongodb-linux-x86_64-rhel70-4.0.10.tgz $ cp mongodb-linux-x86_64-rhel70-4.0.10/bin/* /usr/bin |
准备环境目录
1 2 3 |
$ mkdir -pv /usr/local/mongodb/conf # 用于存放集群配置文件
$ mkdir -pv /data/mongos/log # 用于存放mongos日志文件，它本身不存在数据，只是路由
$ mkdir -pv /data/{config,shard1,shard2,shard3}/{data,log} # configsvr和3个分片的数据目录、日志目录
|
关闭Transparent HugePages
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
$ cat > /etc/systemd/system/thpset.service << EOF [Unit] Description="thp set" [Service] User=root PermissionsStartOnly=true Type=oneshot ExecStart=/bin/bash -c 'echo never > /sys/kernel/mm/transparent_hugepage/enabled' ExecStart=/bin/bash -c 'echo never > /sys/kernel/mm/transparent_hugepage/defrag' [Install] WantedBy=multi-user.target EOF $ systemctl start thpset && systemctl enable thpset |
配置ConfigSvr
分别在mongo1、mongo2、mongo3上配置，要修改的地方只有bindIp为本机IP即可：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 |
$ cat > /usr/local/mongodb/conf/config.conf << EOF
## content
systemLog:
destination: file
logAppend: true
path: /data/config/log/config.log
# Where and how to store data.
storage:
dbPath: /data/config/data
journal:
enabled: true
# how the process runs
processManagement:
fork: true
pidFilePath: /data/config/log/configsrv.pid
# network interfaces
net:
port: 21000
bindIp: 192.168.3.125
#operationProfiling:
replication:
replSetName: config
sharding:
clusterRole: configsvr
# configure security
#security:
# authorization: enabled
# keyFile: /usr/local/mongodb/keyfile
EOF
|
分别在mongo1、mongo2、mongo3上配置systemctl文件：
使用
numactl禁用numa需要安装numactl，yum install -y numactl
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
$ cat > /etc/systemd/system/mongo-config.service << EOF [Unit] Description=High-performance, schema-free document-oriented database After=network.target [Service] User=mongod Type=forking ExecStart=/usr/bin/numactl --interleave=all /usr/bin/mongod --config /usr/local/mongodb/conf/config.conf ExecReload=/bin/kill -s HUP $MAINPID ExecStop=/usr/bin/mongod --shutdown --config /usr/local/mongodb/conf/config.conf [Install] WantedBy=multi-user.target EOF |
分别启动三台服务器的config server
1 2 |
$ chown -R mongod /data/ && chown -R mongod /usr/local/mongodb/ $ systemctl start mongo-config && systemctl enable mongo-config |
登录任意一台配置服务器，初始化配置副本集
1 2 3 4 5 6 7 8 9 10 11 |
$ mongo 192.168.3.125:21000
> rs.initiate( {
_id : "config",
members : [
{_id : 0, host : "192.168.3.125:21000" },
{_id : 1, host : "192.168.3.126:21000" },
{_id : 2, host : "192.168.3.127:21000" }
]
}
)
> rs.status(); # 查看当前configsvr副本集状态
|
其中，
"_id":"configs"应与配置文件中配置的 replicaction.replSetName 一致，”members” 中的 “host” 为三个节点的ip和port。
配置分片、副本集
配置mongo1上的3个分片副本集：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 |
$ vi /usr/local/mongodb/conf/shard1.conf
# where to write logging data.
systemLog:
destination: file
logAppend: true
path: /data/shard1/log/shard1.log
# Where and how to store data.
storage:
dbPath: /data/shard1/data
journal:
enabled: true
wiredTiger:
engineConfig:
cacheSizeGB: 20
# how the process runs
processManagement:
fork: true
pidFilePath: /data/shard1/log/shard1.pid
# network interfaces
net:
port: 27001
bindIp: 192.168.3.125
#operationProfiling:
replication:
replSetName: shard1
sharding:
clusterRole: shardsvr
# configure security
#security:
# authorization: enabled
# keyFile: /usr/local/mongodb/keyfile
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 |
$ vi /usr/local/mongodb/conf/shard2.conf
# where to write logging data.
systemLog:
destination: file
logAppend: true
path: /data/shard2/log/shard2.log
# Where and how to store data.
storage:
dbPath: /data/shard2/data
journal:
enabled: true
wiredTiger:
engineConfig:
cacheSizeGB: 20
# how the process runs
processManagement:
fork: true
pidFilePath: /data/shard2/log/shard2.pid
# network interfaces
net:
port: 27002
bindIp: 192.168.3.125
#operationProfiling:
replication:
replSetName: shard2
sharding:
clusterRole: shardsvr
# configure security
#security:
# authorization: enabled
# keyFile: /usr/local/mongodb/keyfile
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 |
$ vi /usr/local/mongodb/conf/shard3.conf
# where to write logging data.
systemLog:
destination: file
logAppend: true
path: /data/shard3/log/shard3.log
# Where and how to store data.
storage:
dbPath: /data/shard3/data
journal:
enabled: true
wiredTiger:
engineConfig:
cacheSizeGB: 20
# how the process runs
processManagement:
fork: true
pidFilePath: /data/shard3/log/shard3.pid
# network interfaces
net:
port: 27003
bindIp: 192.168.3.125
#operationProfiling:
replication:
replSetName: shard3
sharding:
clusterRole: shardsvr
# configure security
#security:
# authorization: enabled
# keyFile: /usr/local/mongodb/keyfile
|
复制mongo1节点上的shard1.conf、shard2.conf、shard3.conf到mongo2和mongo3主机上。要改动的地方只有bindIp，修改为本机IP即可。
分别在mongo1、mongo2、mongo3上配置分片副本的systemctl文件：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
$ cat > /etc/systemd/system/mongo-27001.service << EOF [Unit] Description=High-performance, schema-free document-oriented database After=network.target [Service] User=mongod Type=forking ExecStart=/usr/bin/numactl --interleave=all /usr/bin/mongod --config /usr/local/mongodb/conf/shard1.conf ExecReload=/bin/kill -s HUP $MAINPID ExecStop=/usr/bin/mongod --shutdown --config /usr/local/mongodb/conf/shard1.conf [Install] WantedBy=multi-user.target EOF |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
$ cat > /etc/systemd/system/mongo-27002.service << EOF [Unit] Description=High-performance, schema-free document-oriented database After=network.target [Service] User=mongod Type=forking ExecStart=/usr/bin/numactl --interleave=all /usr/bin/mongod --config /usr/local/mongodb/conf/shard2.conf ExecReload=/bin/kill -s HUP $MAINPID ExecStop=/usr/bin/mongod --shutdown --config /usr/local/mongodb/conf/shard2.conf [Install] WantedBy=multi-user.target EOF |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
$ cat > /etc/systemd/system/mongo-27003.service << EOF [Unit] Description=High-performance, schema-free document-oriented database After=network.target [Service] User=mongod Type=forking ExecStart=/usr/bin/numactl --interleave=all /usr/bin/mongod --config /usr/local/mongodb/conf/shard3.conf ExecReload=/bin/kill -s HUP $MAINPID ExecStop=/usr/bin/mongod --shutdown --config /usr/local/mongodb/conf/shard3.conf [Install] WantedBy=multi-user.target EOF |
分别启动三台服务器的分片副本
1 2 3 4 |
$ chown -R mongod /data/ && chown -R mongod /usr/local/mongodb/ $ systemctl start mongo-27001 && systemctl enable mongo-27001 $ systemctl start mongo-27002 && systemctl enable mongo-27002 $ systemctl start mongo-27003 && systemctl enable mongo-27003 |
登录任意一台配置服务器，初始化各个配置副本集
1 2 3 4 5 6 7 8 9 10 11 |
$ mongo 192.168.3.125:27001
> rs.initiate( {
_id : "shard1",
members : [
{_id : 0, host : "192.168.3.125:27001" },
{_id : 1, host : "192.168.3.126:27001" },
{_id : 2, host : "192.168.3.127:27001" }
]
}
)
> rs.status(); # 查看当前shard1副本集状态
|
1 2 3 4 5 6 7 8 9 10 11 12 |
$ mongo 192.168.3.125:27002
> rs.initiate( {
_id : "shard2",
members : [
{_id : 0, host : "192.168.3.125:27002" },
{_id : 1, host : "192.168.3.126:27002" },
{_id : 2, host : "192.168.3.127:27002" }
]
}
)
> rs.status(); # 查看当前shard2副本集状态
|
1 2 3 4 5 6 7 8 9 10 11 |
$ mongo 192.168.3.125:27003
> rs.initiate( {
_id : "shard3",
members : [
{_id : 0, host : "192.168.3.125:27003" },
{_id : 1, host : "192.168.3.126:27003" },
{_id : 2, host : "192.168.3.127:27003" }
]
}
)
> rs.status(); # 查看当前shard3副本集状态
|
如果1分片只需要2副本1仲裁的话，只需要在
rs.initiate命令后对应的host加上, arbiterOnly: true即可让该主机称为仲裁节点。
配置mongos
mongos这里只配置在mongo1和mongo2上，所以只要在这两台主机上配置即可。
注意：先启动配置服务器和分片服务器,后启动路由实例
分别在mongo1、mongo2上配置，要修改的地方只有bindIp为本机IP即可：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 |
$ vi /usr/local/mongodb/conf/mongos.conf systemLog: destination: file logAppend: true path: /data/mongos/log/mongos.log processManagement: fork: true pidFilePath: /data/mongos/log/mongos.pid # network interfaces net: port: 20000 bindIp: 192.168.3.125 #监听的配置服务器,只能有1个或者3个 configs为配置服务器的副本集名字 sharding: configDB: config/192.168.3.125:21000,192.168.3.126:21000,192.168.3.127:21000 # configure security #security: # keyFile: /usr/local/mongodb/keyfile |
分别在mongo1、mongo2上配置systemctl文件：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 |
$ cat > /etc/systemd/system/mongos.service << EOF [Unit] Description=High-performance, schema-free document-oriented database After=network.target [Service] User=mongod Type=forking ExecStart=/usr/bin/mongos --config /usr/local/mongodb/conf/mongos.conf ExecReload=/bin/kill -s HUP $MAINPID [Install] WantedBy=multi-user.target EOF |
分别启动mongo1和mongo2服务器上的mongos
1 2 3 |
$ chown -R mongod /data/ && chown -R mongod /usr/local/mongodb/ $ systemctl start mongos && systemctl enable mongos $ systemctl start mongos && systemctl enable mongos |
至此已经搭建了mongodb配置服务器、路由服务器，各个分片服务器，不过应用程序连接到mongos路由服务器并不能使用分片机制，还需要在程序里设置分片配置，让分片生效。
登录任意一台mongos，设置分片配置。
1 2 3 4 5 |
$ mongo 192.168.3.125:20000
> sh.addShard("shard1/192.168.3.125:27001,192.168.3.126:27001,192.168.3.127:27001")
> sh.addShard("shard2/192.168.3.125:27002,192.168.3.126:27002,192.168.3.127:27002")
> sh.addShard("shard3/192.168.3.125:27003,192.168.3.126:27003,192.168.3.127:27003")
> sh.status() # 查看集群状态
|
创建管理员帐号
登陆任意一台mongos，建立管理员账号，赋所有权限（admin和config数据库）
1 2 3 4 5 6 |
$ mongo 192.168.3.125:20000
> use admin
> db.createUser({user: "admin",pwd: "123456",roles: [ { role: "root", db: "admin" } ]}) # root所有权限
> use config
> db.createUser({user: "admin",pwd: "123456",roles: [ { role: "root", db: "admin" } ]}) # root所有权限
> db.auth("admin","123456") # 登陆认证，返回1为验证成功
|
1 2 3 4 5 6 |
$ netstat -ptln | grep mongo tcp 0 0 192.168.3.125:21000 0.0.0.0:* LISTEN 3277/mongod tcp 0 0 192.168.3.125:27001 0.0.0.0:* LISTEN 3974/mongod tcp 0 0 192.168.3.125:27002 0.0.0.0:* LISTEN 3281/mongod tcp 0 0 192.168.3.125:27003 0.0.0.0:* LISTEN 3280/mongod tcp 0 0 192.168.3.125:20000 0.0.0.0:* LISTEN 3251/mongos |
查看集群状态
登陆任意一台mongos查看集群状态
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 |
$ mongo 192.168.3.125:20000
mongos> use admin
mongos> db.auth("admin","123456") # 这里要认证了。不然看不到集群信息
mongos> sh.status();
--- Sharding Status ---
sharding version: {
"_id" : 1,
"minCompatibleVersion" : 5,
"currentVersion" : 6,
"clusterId" : ObjectId("5d208c95fdd1bee8ab631a40")
}
shards:
{ "_id" : "shard1", "host" : "shard1/192.168.3.125:27001,192.168.3.126:27001,192.168.3.127:27001", "state" : 1 }
{ "_id" : "shard2", "host" : "shard2/192.168.3.125:27002,192.168.3.126:27002,192.168.3.127:27002", "state" : 1 }
{ "_id" : "shard3", "host" : "shard3/192.168.3.125:27003,192.168.3.126:27003,192.168.3.127:27003", "state" : 1 }
active mongoses:
"4.0.10" : 2
autosplit:
Currently enabled: yes
balancer:
Currently enabled: yes
Currently running: no
Failed balancer rounds in last 5 attempts: 0
Migration Results for the last 24 hours:
No recent migrations
|
这样mongodb如架构图所示的集群搭建就已经完成了。
集群认证文件
在分片集群环境中，建议副本集内成员之间需要用keyFile认证或者509.x证书认证，mongos与配置服务器，副本集之间也要keyFile认证，集群所有mongod和mongos实例使用内容相同的keyFile文件，我们这里只在mongo1上生成，然后复制到其他节点上。
1 2 3 4 |
$ openssl rand -base64 753 > /usr/local/mongodb/keyfile $ chmod 400 /usr/local/mongodb/keyfile $ scp /usr/local/mongodb/keyfile mongo2:/usr/local/mongodb/keyfile $ scp /usr/local/mongodb/keyfile mongo3:/usr/local/mongodb/keyfile |
然后修改3个configsrv、3个shard、2个mongos实例的配置文件。
- configsrv 和 shard增加如下配置：
1 2 3 4 |
# configure security security: authorization: enabled keyFile: /usr/local/mongodb/keyfile |
- mongos增加如下配置：
1 2 |
security: keyFile: /usr/local/mongodb/keyfile |
mongos比mongod少了authorization：enabled的配置。原因是，副本集加分片的安全认证需要配置两方面的，副本集各个节点之间使用内部身份验证，用于内部各个mongo实例的通信，只有相同keyfile才能相互访问。所以都要开启keyFile: /usr/local/mongodb/keyfile, 然而对于所有的mongod，才是真正的保存数据的分片。mongos只做路由，不保存数据。所以所有的mongod开启访问数据的授权authorization:enabled。这样用户只有账号密码正确才能访问到数据。
重启集群
我们已经配置了用户帐号密码连接集群以及集群内部通过keyfile通信，为了使配置生效，需要重启整个集群，启动的顺序为先启动configsrv，在启动分片，最后启动mongos。
为什么我们要先创建管理员帐号在配置集群内部通信认证？
账号可以在集群认开启认证以后添加。但是那时候添加比较谨慎。只能添加一次，如果忘记了就无法再连接到集群。所以才建议在没开启集群认证的时候先添加好管理员用户名和密码然后再开启认证再重启集群。
插入数据验证分片副本
在案例中，创建appuser用户、为数据库实例appdb启动分片。
1 2 3 4 5 6 7 8 9 10 11 |
$ mongo 192.168.3.125:20000
# 创建appuser用户
mongos> use appdb
mongos> db.createUser({user:'appuser',pwd:'AppUser@01',roles:[{role:'dbOwner',db:'appdb'}]})
mongos> sh.enableSharding("appdb")
# 创建集合book，为其执行分片初始化
mongos> use appdb
mongos> db.createCollection("book")
mongos> db.device.ensureIndex({createTime:1})
mongos> sh.shardCollection("appdb.book", {bookId:"hashed"}, false, { numInitialChunks: 4} )
|
继续往device集合写入1000W条记录，观察chunks的分布情况!
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 |
mongos> use appdb
mongos> var cnt = 0;
mongos> for(var i=0; i<1000; i++){
var dl = [];
for(var j=0; j<100; j++){
dl.push({
"bookId" : "BBK-" + i + "-" + j,
"type" : "Revision",
"version" : "IricSoneVB0001",
"title" : "Jackson's Life",
"subCount" : 10,
"location" : "China CN Shenzhen Futian District",
"author" : {
"name" : 50,
"email" : "RichardFoo@yahoo.com",
"gender" : "female"
},
"createTime" : new Date()
});
}
cnt += dl.length;
db.book.insertMany(dl);
print("insert ", cnt);
}
|
执行db.book.getShardDistribution(),输出如下：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
mongos> db.book.getShardDistribution() Shard shard2 at shard2/192.168.12.22:27002,192.168.12.25:27002 data : 6.62MiB docs : 24641 chunks : 1 estimated data per chunk : 6.62MiB estimated docs per chunk : 24641 Shard shard1 at shard1/192.168.12.21:27001,192.168.12.24:27001 data : 13.51MiB docs : 50294 chunks : 2 estimated data per chunk : 6.75MiB estimated docs per chunk : 25147 Shard shard3 at shard3/192.168.12.23:27003,192.168.12.26:27003 data : 6.73MiB docs : 25065 chunks : 1 estimated data per chunk : 6.73MiB estimated docs per chunk : 25065 Totals data : 26.87MiB docs : 100000 chunks : 4 Shard shard2 contains 24.64% data, 24.64% docs in cluster, avg obj size on shard : 281B Shard shard1 contains 50.29% data, 50.29% docs in cluster, avg obj size on shard : 281B Shard shard3 contains 25.06% data, 25.06% docs in cluster, avg obj size on shard : 281B |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 |
mongos> mongos> db.book.stats();
{
"sharded" : true,
"capped" : false,
"wiredTiger" : {
"metadata" : {
"formatVersion" : 1
},
"ns" : "appdb.book",
"count" : 100000,
"size" : 28179000,
"storageSize" : 4239360,
"totalIndexSize" : 2957312,
"indexSizes" : {
"_id_" : 999424,
"bookId_hashed" : 1957888
},
"avgObjSize" : 281,
"maxSize" : NumberLong(0),
"nindexes" : 2,
"nchunks" : 4,
"shards" : {
"shard1" : {
"ns" : "appdb.book",
"size" : 14172376,
"count" : 50294,
"avgObjSize" : 281,
"storageSize" : 2129920,
"capped" : false,
"wiredTiger" : {
"metadata" : {
"formatVersion" : 1
},
"shard3" : {
"ns" : "appdb.book",
"size" : 7063001,
"count" : 25065,
"avgObjSize" : 281,
"storageSize" : 1052672,
"capped" : false,
"wiredTiger" : {
"metadata" : {
"formatVersion" : 1
},
"shard2" : {
"ns" : "appdb.book",
"size" : 6943623,
"count" : 24641,
"avgObjSize" : 281,
"storageSize" : 1056768,
"capped" : false,
"wiredTiger" : {
"metadata" : {
"formatVersion" : 1
},
|
可以看到数据分到3个分片，各自分片数量为： shard1 “count”: 50294，shard2 “count”: 24641，shard3 “count”: 25065 。加起来为100000，数据分片已经成功了！