MongoDB 管理

 

1.MongoDB的启动和停止

启动部分

:\mysoft\mongo\bin>mongod.exe --help

 

** NOTE: when using MongoDB 32 bit, you are limited to about 2 gigabytes of data

 

** see http://blog.mongodb.org/post/137788967/32-bit-limitations

** with --dur, the limit is lower

 

Allowed options:

 

General options:

-h [ --help ] show this usage information

--version show version information

-f [ --config ] arg configuration file specifying additional options

-v [ --verbose ] be more verbose (include multiple times for more

verbosity e.g. -vvvvv)

--quiet quieter output

--port arg specify port number

--bind_ip arg comma separated list of ip addresses to listen on - all

local ips by default

--maxConns arg max number of simultaneous connections

--logpath arg log file to send write to instead of stdout - has to be

a file, not directory

--logappend append to logpath instead of over-writing

--pidfilepath arg full path to pidfile (if not set, no pidfile is

created)

--keyFile arg private key for cluster authentication (only for

replica sets)

--auth run with security

--cpu periodically show cpu and iowait utilization

--dbpath arg directory for datafiles

--diaglog arg 0=off 1=W 2=R 3=both 7=W+some reads

--directoryperdb each database will be stored in a separate directory

--journal enable journaling

--journalOptions arg journal diagnostic options

--ipv6 enable IPv6 support (disabled by default)

--jsonp allow JSONP access via http (has security implications)

--noauth run without security

--nohttpinterface disable http interface

--noprealloc disable data file preallocation - will often hurt

performance

--noscripting disable scripting engine

--notablescan do not allow table scans

--nssize arg (=16) .ns file size (in MB) for new databases

--objcheck inspect client data for validity on receipt

--profile arg 0=off 1=slow, 2=all

--quota limits each database to a certain number of files (8

default)

--quotaFiles arg number of files allower per db, requires --quota

--rest turn on simple rest api

--repair run repair on all dbs

--repairpath arg root directory for repair files - defaults to dbpath

--slowms arg (=100) value of slow for profile and console log

--smallfiles use a smaller default file size

--syncdelay arg (=60) seconds between disk syncs (0=never, but not

recommended)

--sysinfo print some diagnostic system information

--upgrade upgrade db if needed

 

Windows Service Control Manager options:

--install install mongodb service

--remove remove mongodb service

--reinstall reinstall mongodb service (equivilant of mongod

--remove followed by mongod --install)

--serviceName arg windows service name

--serviceDisplayName arg windows service display name

--serviceDescription arg windows service description

--serviceUser arg user name service executes as

--servicePassword arg password used to authenticate serviceUser

 

Replication options:

--fastsync indicate that this instance is starting from a dbpath

snapshot of the repl peer

--autoresync automatically resync if slave data is stale

--oplogSize arg size limit (in MB) for op log

 

Master/slave options:

--master master mode

--slave slave mode

--source arg when slave: specify master as <server:port>

--only arg when slave: specify a single database to replicate

--slavedelay arg specify delay (in seconds) to be used when applying

master ops to slave

 

Replica set options:

--replSet arg arg is <setname>[/<optionalseedhostlist>]

 

Sharding options:

--configsvr declare this is a config db of a cluster; default port

27019; default dir /data/configdb

--shardsvr declare this is a shard db of a cluster; default port

27018

--noMoveParanoia turn off paranoid saving of data for moveChunk. this

is on by default for now, but default will switch

停止方式有多种，可以以杀死进程的方式，也可以使用如下的命令

>use admin

>db.shutdownServer();

2.监控

2.1使用WEB管理接接口，在浏览器中输入http://ip:28017(默认的端口)

2.2使用serverStatus命令

 

> db.runCommand({"serverStatus":1})

{

"host" : "mongo_server",

"version" : "1.8.5",

"process" : "mongod",

"uptime" : 29336,

"uptimeEstimate" : 29130,

"localTime" : ISODate("2012-06-01T09:14:55.863Z"),

"globalLock" : {//表示全局写入锁占用了服务器多少时间

"totalTime" : 29336506453,

"lockTime" : 646417,

"ratio" : 0.000022034559603599163,

"currentQueue" : {

"total" : 0,

"readers" : 0,

"writers" : 0

},

"activeClients" : {

"total" : 0,

"readers" : 0,

"writers" : 0

}

},

"mem" : {//包含了服务器内存映射了多少数据，服务器进程的虚拟内存和常驻内存的占情况单位为MB

"bits" : 32,

"resident" : 15,

"virtual" : 72,

"supported" : true,

"mapped" : 32

},

"connections" : {

"current" : 1,

"available" : 19999

},

"extra_info" : {

"note" : "fields vary by platform"

},

"indexCounters" : {/表示B树在磁盘检索和内存检索的次数，如果这个比值开始上升就要考虑添加内存了

"note" : "not supported on this platform"

},

"backgroundFlushing" : {//表示后台做了多少次fsync以及用了多少时间

"flushes" : 488,

"total_ms" : 4850,

"average_ms" : 9.938524590163935,

"last_ms" : 12,

"last_finished" : ISODate("2012-06-01T09:14:00.629Z")

},

"cursors" : {

"totalOpen" : 0,

"clientCursors_size" : 0,

"timedOut" : 0

},

"network" : {

"bytesIn" : 10681,

"bytesOut" : 38570,

"numRequests" : 97

},

"opcounters" : {

"insert" : 30,

"query" : 17,

"update" : 0,

"delete" : 2,

"getmore" : 0,

"command" : 51

},

"asserts" : {//统计了断言的次数

"regular" : 0,

"warning" : 0,

"msg" : 0,

"user" : 0,

"rollovers" : 0

},

"writeBacksQueued" : false,

"ok" : 1

}

也可以使用http的方式获得此Json数据

 

2.3使用mongostat

它采用了实时计数。

2.4第三方插件

如Nagios、Munin、Ganglia、Cacti。

3.安全和认证

可以使用--auth启动数据库这样就需要验证，但在添加之前至少先创建一个管理员。

 

> db

test

> db.addUser("test_root","root")

{

"user" : "test_root",

"readOnly" : false,

"pwd" : "34070e45e4dfae82a29b99492394677d"

}

> db.addUser("read_only","1234",true)//指定为只读用户

{

"user" : "read_only",

"readOnly" : true,

"pwd" : "999ead64210fea33bfcff18fa5d5e5e2"

}

> db.auth("test_root","root") //鉴权

 

> db.system.users.find()//查看所有的用户，用户存储在system.users集合中

{ "_id" : ObjectId("4fc88f839e2a3bef89321b6a"), "user" : "test_root", "readOnly"

: false, "pwd" : "34070e45e4dfae82a29b99492394677d" }

{ "_id" : ObjectId("4fc88fb29e2a3bef89321b6b"), "user" : "read_only", "readOnly"

: true, "pwd" : "999ead64210fea33bfcff18fa5d5e5e2" }

>

4.其他安全策略

建议将MongoDB服务器布置在防火墙后或者布置在只有应用服务器能访问的网络中

如：只能从本机应用服务器访问可以运行“mongod --bindip localhost”

可以使用--nohttpinter-face 将HTTP的管理接口关闭。

使用--noscripting完全禁止服务端JavaScript的执行。

5.备份和修复

1.备份数据库文件，将数据库存储文件备份即可，此情况下要关闭服务器。

2.使用mongodump和mongorestore

C:\mongodb\bin>mongodump.exe --help
options:
--help produce help message
-v [ --verbose ] be more verbose (include multiple times for more
verbosity e.g. -vvvvv)
-h [ --host ] arg mongo host to connect to ( <set name>/s1,s2 for
sets)
--port arg server port. Can also use --host hostname:port
--ipv6 enable IPv6 support (disabled by default)
-u [ --username ] arg username
-p [ --password ] arg password
--dbpath arg directly access mongod database files in the given
path, instead of connecting to a mongod server -
needs to lock the data directory, so cannot be used
if a mongod is currently accessing the same path
--directoryperdb if dbpath specified, each db is in a separate
directory
-d [ --db ] arg database to use
-c [ --collection ] arg collection to use (some commands)
-o [ --out ] arg (=dump) output directory or "-" for stdout
-q [ --query ] arg json query
--oplog Use oplog for point-in-time snapshotting
--repair try to recover a crashed database

 

C:\mongodb\bin>mongorestore.exe --help
usage: mongorestore.exe [options] [directory or filename to restore from]
options:
--help produce help message
-v [ --verbose ] be more verbose (include multiple times for more
verbosity e.g. -vvvvv)
-h [ --host ] arg mongo host to connect to ( <set name>/s1,s2 for sets)
--port arg server port. Can also use --host hostname:port
--ipv6 enable IPv6 support (disabled by default)
-u [ --username ] arg username
-p [ --password ] arg password
--dbpath arg directly access mongod database files in the given
path, instead of connecting to a mongod server -
needs to lock the data directory, so cannot be used
if a mongod is currently accessing the same path
--directoryperdb if dbpath specified, each db is in a separate
directory
-d [ --db ] arg database to use
-c [ --collection ] arg collection to use (some commands)
--objcheck validate object before inserting
--filter arg filter to apply before inserting
--drop drop each collection before import
--oplogReplay replay oplog for point-in-time restore

 

示例

C:\mongodb\bin>mongodump.exe -d blog -o ../backup
connected to: 127.0.0.1
DATABASE: blog to ../backup/blog
blog.users to ../backup/blog/users.bson
10 objects
blog.system.indexes to ../backup/blog/system.indexes.bson
2 objects
blog.result.txt to ../backup/blog/result.txt.bson
5 objects

C:\mongodb\bin>mongorestore.exe -d test --drop ../backup/blog
connected to: 127.0.0.1
Fri Jun 01 23:41:03 ../backup/blog/result.txt.bson
Fri Jun 01 23:41:03 going into namespace [test.result.txt]
Fri Jun 01 23:41:03 dropping
Fri Jun 01 23:41:03 5 objects found
Fri Jun 01 23:41:03 ../backup/blog/users.bson
Fri Jun 01 23:41:03 going into namespace [test.users]
Fri Jun 01 23:41:03 dropping
Fri Jun 01 23:41:03 10 objects found
Fri Jun 01 23:41:03 ../backup/blog/system.indexes.bson
Fri Jun 01 23:41:03 going into namespace [test.system.indexes]
Fri Jun 01 23:41:03 dropping
Fri Jun 01 23:41:03 { name: "_id_", ns: "test.users", key: { _id: 1 }, v: 0 }
Fri Jun 01 23:41:03 { name: "_id_", ns: "test.result.txt", key: { _id: 1 }, v: 0
}
Fri Jun 01 23:41:03 2 objects found

 

3.fsync和锁

虽然用mongodump和mongorestore能不停机备份，但是我们却失去了获取实时数据视图的能力。MongDB的fsync命令能在MongoDB运行时复制数据目录还不回损毁数据。

fsync命令会强制服务器将所有缓冲区写入磁盘，还可以选择上锁阻止对数据库进一步写入，直至释放锁为止。写入锁是让fsync在备份时发挥作用的关键。下面的例子展示了如何在shell中操作，强制执行了fsync并获得了写入锁。

> db.runCommand({"fsync":1,"lock":1})
{
"info" : "now locked against writes, use db.$cmd.sys.unlock.findOne() to
unlock",
"ok" : 1
}

备份好了就要解锁

> db.$cmd.sys.unlock.findOne();
{ "ok" : 1, "info" : "unlock requested" }
> db.currentOp()
{ "inprog" : [ ] }

6.修复

1.mongod --repair

2,db.repairDatabase()