linux运维实战练习-2016年3月4日-3月19日课程作业

1、搭建LAMP环境，并实践基于DNS做基于域名的虚拟主机。

搭建LAMP环境:

            [root@mini ~]# yum install httpd mariadb-server php php-mysql

    初始化mariadb:

            

            [root@mini ~]# mysql_secure_installation

基于DNS做基于域名的虚拟主机

            [root@mini ~]# vim /etc/httpd/conf.d/myhoust.conf    
            <VirtualHost *:80>
              ServerName www.myhost.com
              DocumentRoot "/web/"
            </VirtualHost>

2、基于1题目中的环境，重新搭建一个同样的环境，要求：

   a)实现web服务文件更新的自动同步到另一台机器上

host1

                    [root@mini ~]# yum install nfs-utils rpcbind            
                    [root@mini ~]# vim /etc/exports
                    /web *(rw,sync)

host2

                    [root@ee-a ~]# mount -t nfs 10.9.9.7:/web /web

   b)数据库实现主从复制

master:ee-o 

                my.cnf                
                log-bin=/tmp/mysql-bin
                server-id=1

slava:ee-a

                    my.cnf                    
                    log-bin=/tmp/mysql-bin
                    server-id=2

2.授权slave

                    MariaDB [ab]> grant replication slave on *.* to 'ee-a'@'10.9.9.16';

3.查看bin日志

                    MariaDB [(none)]> show master logs;                    
                    +-----------------+-----------+
                    | Log_name        | File_size |
                    +-----------------+-----------+
                    | mysql-bi.000001 |       245 |
                    +-----------------+-----------+

4.salve

                MariaDB [(none)]> change master to                    
                    -> master_host='10.9.9.1',
                    -> master_port=3306,
                    -> master_user='ee-a',
                    -> master_password='',
                    -> master_log_file='mysql-bi.000001',
                    -> master_log_pos=245;
                    MariaDB [(none)]> start slave;

   c)通过shell脚本实现网站源代码备份和mysql备份，备份策略包括全量备份、增量备份、差异备份

                    #!bin/bash                    
                    #全量备份
                    tar -cf /bak/web.bak`date +%y%m%d` /web
                    mysqldump -uab -phello -A > mariadb.dump
                    #!bin/bash
                    #增量备份
                    read -p "请输入这是第几次备份" level
                    dupm -l $(( $levle-1 )) -f /bak/web`date +%y%m%d` /web
                    mysqldump -uab -phello -A > mariadb.dump
                    #!bin/bash
                    #差异备份
                    read -p "0：第一次备份；1：非第一次备份" level
                    dupm -l $level -f /bak/web`date +%y%m%d` /web
                    mysqldump -uab -phello -A > mariadb.dump

3、使用压测工具（ab/webbench等）实现搭建的页面压测，要求通过调整apache的工作模式来对比最后性能。

[root@mini ~]# ab -c 1000 -n 100000 http://10.9.9.7/index.html
prefork:
Concurrency Level:      1000
Time taken for tests:   45.518 seconds
Complete requests:      100000
Failed requests:        80
   (Connect: 0, Receive: 0, Length: 80, Exceptions: 0)
Write errors:           0
Non-2xx responses:      99985
Total transferred:      38694195 bytes
HTML transferred:       20796880 bytes
Requests per second:    2196.94 [#/sec] (mean)
Time per request:       455.178 [ms] (mean)
Time per request:       0.455 [ms] (mean, across all concurrent requests)
Transfer rate:          830.16 [Kbytes/sec] received
worker:
Concurrency Level:      1000
Time taken for tests:   37.335 seconds
Complete requests:      100000
Failed requests:        118
   (Connect: 0, Receive: 0, Length: 118, Exceptions: 0)
Write errors:           0
Non-2xx responses:      99998
Total transferred:      38699226 bytes
HTML transferred:       20799584 bytes
Requests per second:    2678.45 [#/sec] (mean)
Time per request:       373.350 [ms] (mean)
Time per request:       0.373 [ms] (mean, across all concurrent requests)
Transfer rate:          1012.24 [Kbytes/sec] received
event:
Concurrency Level:      1000
Time taken for tests:   21.753 seconds
Complete requests:      100000
Failed requests:        0
Write errors:           0
Non-2xx responses:      100000
Total transferred:      38700000 bytes
HTML transferred:       20800000 bytes
Requests per second:    4597.15 [#/sec] (mean)
Time per request:       217.526 [ms] (mean)
Time per request:       0.218 [ms] (mean, across all concurrent requests)
Transfer rate:          1737.40 [Kbytes/sec] received
prefork<worker<event

  

4、基于3步骤过程中的压测，通过脚本实现iptables自动判断来源ip，并作拒绝制定ip访问，要求访问次数1秒超过10次的拒绝掉。

5、基于2中的环境，通过lvs实现负载均衡，要求使用DR模式，并能把其中的原理部分通过自己的理解汇总出来。

[root@ee-o ~]# ip addr add 10.9.9.8/32 dev eno16777736 ##配置vip
[root@ee-o ~]# ip route add 10.9.9.8 dev eno16777736
[root@ee-o ~]# echo 1 >/proc/sys/net/ipv4/ip_forward
[root@ee-o ~]# ipvsadm -C
[root@ee-o ~]# ipvsadm -A -t 10.9.9.9:80 -p 5 -s rr
[root@ee-o ~]# ipvsadm -a -t 10.9.9.9:80 -r 10.9.9.1:80 -g
[root@ee-o ~]# ipvsadm -a -t 10.9.9.9:80 -r 10.9.9.2:80 -g
RS1：10.9.9.1
[root@ee-o ~]# ip addr 10.9.9.8/32 dev lo
[root@ee-o ~]# ip route add 10.9.9.8 dev lo
[root@ee-o ~]# echo 1>/proc/sys/net/ipv4/conf/lo/arp_ignore
[root@ee-o ~]# echo 1>/proc/sys/net/ipv4/conf/all/arp_ignore
[root@ee-o ~]# echo 2>/proc/sys/net/ipv4/conf/lo/arp_announce
[root@ee-o ~]# echo 2>/proc/sys/net/ipv4/conf/all/arp_announce
RS1：10.9.9.2
[root@ee-o ~]# ip addr 10.9.9.8/32 dev lo
[root@ee-o ~]# ip route add 10.9.9.8 dev lo
[root@ee-o ~]# echo 1>/proc/sys/net/ipv4/conf/lo/arp_ignore
[root@ee-o ~]# echo 1>/proc/sys/net/ipv4/conf/all/arp_ignore
[root@ee-o ~]# echo 2>/proc/sys/net/ipv4/conf/lo/arp_announce
[root@ee-o ~]# echo 2>/proc/sys/net/ipv4/conf/all/arp_announce

LVS-DR原理：

利用LAN内主机基于ARP协议通信的原理，当客户端的数据包到达virtual server后修改其二层封装地址为real server，再将数据包转发至ARP表对应的主机，最后real server处理请求直接发回客户端；