RHEL 6.5----Varnish缓存服务器

主机名	IP	服务
master	192.168.30.130	varnish
slave	192.168.30.131	httpd
WebServer	192.168.30.132

官网：

http://www.varnish-cache.org/releases/index.html

软件包官方下载地址：

https://packagecloud.io/varnishcache/varnish41?page=1

https://packagecloud.io/varnishcache/varnish41

官方安装说明：

https://packagecloud.io/varnishcache/varnish41/install#bash-rpm

https://packagecloud.io/varnishcache/varnish60/install#manual-rpm

GitHub地址：

https://github.com/varnishcache/varnish-cache

软件包库：

https://github.com/varnishcache/pkg-varnish-cache

准备安装文件

安装epel-release（官方给出的epel源地址是fedora：https://fedoraproject.org/wiki/EPEL，我使用的是中科大的）

[root@master ~]# wget http://mirrors.ustc.edu.cn/epel/epel-release-latest-6.noarch.rpm
[root@master ~]# rpm -ivh epel-release-latest-.noarch.rpm
或者直接
[root@master ~]# rpm -ivh http://mirrors.ustc.edu.cn/epel/epel-release-latest-6.noarch.rpm
Retrieving http://mirrors.ustc.edu.cn/epel/epel-release-latest-6.noarch.rpm
warning: /var/tmp/rpm-tmp.TB6RfW: Header V3 RSA/SHA256 Signature, key ID 0608b895: NOKEY
Preparing...                ########################################### [%]
   :epel-release           ########################################### [%]
[root@master ~]# ls /etc/yum.repos.d/ | grep epel
epel.repo
epel-testing.repo

准备varnish的yum源

[root@master ~]# curl -s https://packagecloud.io/install/repositories/varnishcache/varnish41/script.rpm.sh | sh    //这个脚本会去检测一些依赖，没有回自动安装，前提是配置好YUM源
Detected operating system as redhatenterpriseserver/.
Checking for curl...
Detected curl...
Downloading repository file: https://packagecloud.io/install/repositories/varnishcache/varnish41/config_file.repo?os=redhatenterpriseserver&dist=6&source=script
done.
Installing pygpgme to verify GPG signatures...
Loaded plugins: product-id, refresh-packagekit, security, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
epel/metalink                                               | 5.1 kB     :
epel                                                        | 4.7 kB     :
epel/primary_db                                             | 6.0 MB     :
rhel-source                                                 | 3.9 kB     : ...
rhel-source/primary_db                                      | 3.1 MB     : ...
https://packagecloud.io/varnishcache/varnish41/el/6/SRPMS/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2600:1fa0:c040:111:34db:182c::: Network is unreachable"
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository: varnishcache_varnish41-source. Please verify its path and try again
Installing yum-utils...
Loaded plugins: product-id, refresh-packagekit, security, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
varnishcache_varnish41-source/signature                     |   B     :
Retrieving key from https://packagecloud.io/varnishcache/varnish41/gpgkey
Importing GPG key 0xCBF5C49E:
 Userid: "https://packagecloud.io/varnishcache/varnish41 (https://packagecloud.io/docs#gpg_signing) <support@packagecloud.io>"
 From  : https://packagecloud.io/varnishcache/varnish41/gpgkey
varnishcache_varnish41-source/signature                     | 1.0 kB     : ...
varnishcache_varnish41-source/primary                       | 2.3 kB     :
varnishcache_varnish41-source                                                /
Setting up Install Process
Package yum-utils-1.1.-.el6.noarch already installed and latest version
Nothing to do
Generating yum cache for varnishcache_varnish41...
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Importing GPG key 0xCBF5C49E:
 Userid: "https://packagecloud.io/varnishcache/varnish41 (https://packagecloud.io/docs#gpg_signing) <support@packagecloud.io>"
 From  : https://packagecloud.io/varnishcache/varnish41/gpgkey

The repository is setup! You can now install packages.
[root@master ~]# ls /etc/yum.repos.d/ | grep varnish
varnishcache_varnish41.repo
[root@master ~]# cat /etc/yum.repos.d/varnishcache_varnish41.repo
[varnishcache_varnish41]
name=varnishcache_varnish41
baseurl=https://packagecloud.io/varnishcache/varnish41/el/6/$basearch
repo_gpgcheck=
gpgcheck=
enabled=
gpgkey=https://packagecloud.io/varnishcache/varnish41/gpgkey
sslverify=
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=

[varnishcache_varnish41-source]
name=varnishcache_varnish41-source
baseurl=https://packagecloud.io/varnishcache/varnish41/el/6/SRPMS
repo_gpgcheck=
gpgcheck=
enabled=
gpgkey=https://packagecloud.io/varnishcache/varnish41/gpgkey
sslverify=
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=

安装varnish

[root@master ~]# yum install -y varnish   //国外的网站可能会有些慢，依个人网络环境不同，可能有时会因为连接超时而失败，这时候只能去一个一个下载，然后使用rpm一个一个安装
[root@master ~]# varnish    //安装完成后的一些命令
varnishadm varnishlog varnishstat
varnishd varnishncsa varnishtest
varnishhist varnish_reload_vcl varnishtop
[root@master ~]# varnishd -V    //查看varnish的版本号
varnishd (varnish-4.1. revision 1d090c5a08f41c36562644bafcce9d3cb85d824f)
Copyright (c)  Verdens Gang AS
Copyright (c) - Varnish Software AS

配置文件位置

[root@master ~]# ls /etc/sysconfig/varnish
/etc/sysconfig/varnish    //主配置文件

[root@master ~]# ls /etc/varnish/default.vcl
/etc/varnish/default.vcl   //VCL配置文件

修改内容

[root@master ~]# cp /etc/varnish/default.vcl{,.bak}
[root@master ~]# vim /etc/varnish/default.vcl

backend default {
    .host = "192.168.30.131";
    .port = "";
}
..........

sub vcl_deliver {
    # Happens when we have all the pieces we need, and are about to send the
    # response to the client.
    #
    # You can do accounting or modifying the final object here.
    if (obj.hits > ) {
        set resp.http.X-Cache = "HIT from sishen cache";
}
    else {
        set resp.http.X-Cache = "MISS from sishen cache";
}
    return (deliver);
}
[root@master ~]# cp /etc/sysconfig/varnish{,.bak}
[root@master ~]# vim /etc/sysconfig/varnish
.....
 VARNISH_LISTEN_PORT=
.....

重启varnish

[root@master ~]# service varnish restart 

在slave上部署web服务器，进行测试

[root@slave ~]# yum install -y httpd
[root@slave ~]# echo "<h1>This is a varnish test page\! </h1>" > /var/www/html/index.html
重启httpd
[root@slave ~]# service  httpd restart

在物理机上使用Firefox直接访问slave，验证slave是否正常：

ok，没问题。

测试varnish：

刷新再次查看

Linux终端查看

这里如果缓存总是没有命中，需要修改httpd.conf文件，将KeepAlive的原值"off"修改为"on",重启httpd服务再次测试。

使用varnish缓存不同的域名网站，配置第二台web服务器：

[root@WebServer ~]# yum install -y httpd
[root@WebServer ~]# echo "<h1>#######This is the WebServer 192.168.30.132########</h1>" > /var/www/html/index.html
[root@WebServer ~]# service  httpd restart
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]

修改varnish配置文件

[root@master ~]# vim /etc/varnish/default.vcl 
backend www {
    .host = "192.168.30.132";
    .port = "";
}
backend xueji {
    .host = "192.168.30.131";
    .port = "";
}

sub vcl_recv {
    # Happens before we check if we have this in cache already.
    #
    # Typically you clean up the request here, removing cookies you don't need,
    # rewriting the request, etc.
    if (req.http.host ~ "^(www.)?sishen.cn") {
        set req.http.host = "www.sishen.cn";
        set req.backend_hint = www;
        }
    elif (req.http.host ~ "^xueji.sishen.cn") {
        set req.backend_hint = xueji;
        }
    else {
        return (synth(,"Sorry,The Page Not Found"));
        }
}

sub vcl_deliver {
    # Happens when we have all the pieces we need, and are about to send the
    # response to the client.
    #
    # You can do accounting or modifying the final object here.
    if (obj.hits > ) {
        set resp.http.X-Cache = "HIT from sishen cache";}
    else {
        set resp.http.X-Cache = "MISS from sishen cache";}
    return (deliver);
}

重载配置文件

！！！注意：

varnish修改完配置文件后，使用reload方式更方便，如果配置文件有错误，可以直接指出错在哪里（具体到哪一行的那个字段）

在varnish上修改hosts文件

[root@master ~]# vim /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.30.130 master
192.168.30.132 www.sishen.cn
192.168.30.131 xueji.sishen.cn

访问测试

使用物理机测试域名的话需要在C:\Windows\System32\drivers\etc\hosts文件末尾添加

192.168.30.130        xueji.sishen.cn
192.168.30.130        www.sishen.cn

linux终端测试

检测域名准确性

结果与上述default.vcl中的定义相同，即结果解析正确。

测试varnish的错误页面，直接IP访问

如果在default.vcl中不指定错误页面，结果会是怎样呢？

[root@master ~]# vim /etc/varnish/default.vcl

sub vcl_recv {
    # Happens before we check if we have this in cache already.
    #
    # Typically you clean up the request here, removing cookies you don't need,
    # rewriting the request, etc.
    if (req.http.host ~ "^(www.)?sishen.cn") {
        set req.http.host = "www.sishen.cn";
        set req.backend_hint = www;
        }
    elif (req.http.host ~ "^xueji.sishen.cn") {
        set req.backend_hint = xueji;
        }
#    else {
#       return (synth(,"Sorry,The Page Not Found"));
#       }
}

[root@master ~]# /etc/init.d/varnish reload
Loading vcl from /etc/varnish/default.vcl
Current running config name is reload_2018-05-23T172134
Using new config name reload_2018-05-23T173503
VCL compiled.

VCL 'reload_2018-05-23T173503' now active
available auto/cold 0 boot
available auto/cold 0 reload_2018-05-23T170836
available auto/cold 0 reload_2018-05-23T171224
available auto/warm 0 reload_2018-05-23T172134
active auto/warm 0 reload_2018-05-23T173503

Done

结果显示，如果没有制定错误页面，会访问到default.vcl中backend定义的第一个域名对应的页面。

varnish的缓存清理

需要注意的是curl -I www.sishen.cn与curl -I www.sishen.cn/index.html是两种访问方式

上述操作删除的是单个页面，删除所有页面使用通配符 .*$，删除一个目录使用 /admin/*

==  符合条件的  ！=  不符合条件的  ~ 正则匹配  ！~  非正则匹配
值得注意的是 == 、！= 、~、！~后面必须有空格