LNMP架构及DISCUZ论坛部署

1）（5分）服务器IP地址规划：client：12.0.0.12/24，网关服务器：ens36:12.0.0.1/24、ens33：172.16.10.1/24，Web1：172.16.10.10/24，Web2：172.16.10.20/24，Nginx：172.16.10.101/24。

2）（5分）在Nginx服务器上搭建LNMP服务，并且能够对外提供Discuz论坛服务。

3）（5分）为Nginx服务配置虚拟主机，新增两个域名 www.kgc.com和 www.benet.com，使用http://www.kgc.com/bbs/index.php可访问Discuz论坛页面。

使用http://www.benet.com则访问/var/www/html目录中的index.html文件的内容，内容可自定义，要求有图片。

1.环境

systemctl stop firewalld

systemctl disable firewalld

setenforce 0

2.安装

yum -y install pcre-devel zlib-devel gcc gcc-c++ make

3.创建运行用户

useradd -M -s /sbin/nologin nginx

4.编译安装

cd /opt

将所需软件包拖入

解压：tar zxvf nginx-1.12.0.tar.gz

cd nginx-1.12.0/

编译：

./configure \

--prefix=/usr/local/nginx \

--user=nginx \

--group=nginx \

--with-http_stub_status_module

安装：

make && make install -j4

5.路径优化

ln -s /usr/local/nginx/sbin/nginx /usr/local/sbin

6.添加 Nginx 系统服务

vim /lib/systemd/system/nginx.service

[Unit]

Description=nginx

After=network.target

[Service] Type=forking

PIDFile=/usr/local/nginx/logs/nginx.pid

ExecStart=/usr/local/nginx/sbin/nginx

ExecReload=/bin/kill -s HUP $MAINPID

ExecStop=/bin/kill -s QUIT $MAINPID

PrivateTmp=true [Install]

WantedBy=multi-user.target

systemctl daemon-reload

systemctl start nginx

MySQL

1.安装依赖环境

yum -y install \

ncurses \

ncurses-devel \

bison \

cmake

2.创建运行用户

useradd -s /sbin/nologin mysql

3.编译安装

cd /opt

将mysql软件包拖入该目录下进行解压

tar -zxf mysql-boost-5.7.20.tar.gz

cd mysql-5.7.20

编译

cmake \

-DCMAKE_INSTALL_PREFIX=/usr/local/mysql \

-DMYSQL_UNIX_ADDR=/usr/local/mysql/mysql.sock \

-DSYSCONFDIR=/etc \

-DSYSTEMD_PID_DIR=/usr/local/mysql \

-DDEFAULT_CHARSET=utf8 \

-DDEFAULT_COLLATION=utf8_general_ci \

-DWITH_INNOBASE_STORAGE_ENGINE=1 \

-DWITH_ARCHIVE_STORAGE_ENGINE=1 \

-DWITH_BLACKHOLE_STORAGE_ENGINE=1 \

-DWITH_PERFSCHEMA_STORAGE_ENGINE=1 \

-DMYSQL_DATADIR=/usr/local/mysql/data \

-DWITH_BOOST=boost \ -DWITH_SYSTEMD=1

安装

make && make install -j4

4.数据库目录进行权限调整

chown -R mysql:mysql /usr/local/mysql

5.调整配置文件

vi /etc/my.cnf

将文件内容删除重新写入以下内容：

[client]

port = 3306

default-character-set=utf8

socket = /usr/local/mysql/mysql.sock

[mysql]

port = 3306

default-character-set=utf8

socket = /usr/local/mysql/mysql.sock

[mysqld]

user = mysql

basedir = /usr/local/mysql

datadir = /usr/local/mysql/data

port = 3306

character_set_server=utf8

pid-file = /usr/local/mysql/mysqld.pid

socket = /usr/local/mysql/mysql.sock server-id = 1

sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES,NO_AUTO_CREATE_USER,NO_AUTO_VALUE_ON_ZERO,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,PIPES_AS_CONCAT,ANSI_QUOTES

6.设置环境变量

1. echo 'PATH=/usr/local/mysql/bin:/usr/local/mysql/lib:$PATH' >> /etc/profile

2. echo 'export PATH' >> /etc/profile

   

7.初始化数据库

cd /usr/local/mysql

bin/mysqld \

--initialize-insecure \

--user=mysql \

--basedir=/usr/local/mysql \

--datadir=/usr/local/mysql/data

cp usr/lib/systemd/system/mysqld.service /usr/lib/systemd/system

8.数据库开启自启、 关闭、状态

systemctl enable mysqld

systemctl start mysqld

systemctl status mysqld

netstat -anpt | grep 3306

9.设置Mysql密码

ln -s /usr/local/mysql/bin/* /usr/local/bin

mysqladmin -u root -p password

10.登录数据库

mysql -u root -p

php

1.安装环境依赖包

yum -y install \

libjpeg \

libjpeg-devel \

libpng libpng-devel \

freetype freetype-devel \

libxml2 \ libxml2-devel \

zlib zlib-devel \

curl curl-devel \

openssl openssl-devel

2.编译安装

cd /opt

将php软件包拖入该目录下进行解压

tar -jxf php-7.1.10.tar.bz2

cd php-7.1.10

编译：

./configure \

--prefix=/usr/local/php \

--with-mysql-sock=/usr/local/mysql/mysql.sock \

--with-mysqli \

--with-zlib \

--with-curl \

--with-gd \

--with-jpeg-dir \

--with-png-dir \

--with-freetype-dir \

--with-openssl \

--enable-fpm \

--enable-mbstring \

--enable-xml \

--enable-session \

--enable-ftp \

--enable-pdo \

--enable-tokenizer \

--enable-zip

安装

make && make install -j4

3.修改配置文件

cp php.ini-development /usr/local/php/lib/php.ini

vim /usr/local/php/lib/php.ini

1. 1170 mysqli.default_socket = /usr/local/mysql/mysql.sock

2. 939 date.timezone = Asia/Shanghai

验证安装

/usr/local/php/bin/php -m

4.配置及优化FPM模块

1. cd /usr/local/php/etc/

2. cp php-fpm.conf.default php-fpm.conf

3. cd /usr/local/php/etc/php-fpm.d/

4. cp www.conf.default www.conf

cd /usr/local/php/etc

1. vi php-fpm.conf

   pid = run/php-fpm.pid #将这一行注释去掉

/usr/local/php/sbin/php-fpm -c /usr/local/php/lib/php.ini

ps aux | grep -c "php-fpm"

5.进入nginx主配置文件

vi /usr/local/nginx/conf/nginx.conf

--65行--取消注释，修改

location ~ \.php$ {

root html;

fastcgi_pass 127.0.0.1:9000;

fastcgi_index index.php;

fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name; #将/scripts修改为nginx的工作目录

include fastcgi_params;

}

systemctl restart nginx.service

6.创建网页文件

vi /usr/local/nginx/html/index.php

<?php

phpinfo();

?>

systemctl restart nginx

http://172.16.10.101/index.php

论坛

登入数据库

mysql -u root -p

CREATE DATABASE bbs;

GRANT all ON bbs.* TO 'bbsuser'@'%' IDENTIFIED BY 'admin123';

GRANT all ON bbs.* TO 'bbsuser'@'localhost' IDENTIFIED BY 'admin123';

flush privileges;

systemctl restart nginx

cd /opt

将discuz软件包拖入该目录下进行解压

unzip Discuz_X3.4_SC_UTF8.zip

cd dir_SC_UTF8/

cp -r upload/ /usr/local/nginx/html/bbs

cd /usr/local/nginx/html/bbs

chown -R root:nginx ./config/

chown -R root:nginx ./data/

chown -R root:nginx ./uc_client/

chown -R root:nginx ./uc_server/

chmod -R 777 ./config/

chmod -R 777 ./data/

chmod -R 777 ./uc_client/

chmod -R 777 ./uc_server/

http://172.16.10.101/bbs/install/index.php

点击“我同意”

点击“下一步”

点击“下一步”

设置完成后点击下一步

http://172.16.10.101/bbs/index.php

echo "172.16.10.101 www.kgc.com www.benet.com" >>/etc/hosts

mkdir -p /var/www/html

cd /var/www/html

拉入图片(bs.jpg error.png)

vim index.html

<img src="bs.jpg"/

</body>

</html>

vim /usr/local/nginx/conf/nginx.conf

35行修改：

server {
listen 80;
server_name www.kgc.com;

access_log logs/kgc.com.access.log;

location / {
root /usr/local/nginx/html;
index index.html index.htm;
}

81行添加以下内容：

server {
listen 80;
server_name www.benet.com;

charset utf-8;

access_log logs/benet.com.access.log;

location / {
root /var/www/html;
index index.html index.htm;
}

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}

nginx -t

systemctl restart nginx.sevice

http://www.kgc.com/bbs/index.php

http://www.benet.com

4）（5分）对基于www.benet.com域名的虚拟机主机的nginx服务调优：隐藏nginx版本号，缓存静态图片网页时间为1天，设置防盗链功能。根据日期对访问日志进行日志分割，要求每天生成一份日志文件

http模块下加

server_tokens off;

benet server模块下加

location ~*\.(jpg|jpeg)$ {

root /var/www/html;

expires 1d;

}

配置盗链主机

yum install -y httpd

cd /var/www/html

vim index.html

<html>

<body>

<h1>dao lian </h1>

<img src="http://www.benet.com/bs.jpg"/>

</body>

</html>

echo "172.16.10.101 www.benet.com">>/etc/hosts

echo "172.16.10.200 www.aaa.com">>/etc/hosts

systemctl restart httpd

http://www.aaa.com

nginx主机下

cd /var/www/html

拉入图片error.png

vim /usr/local/nginx/conf/nginx.conf

在expires 1d;添加

valid_referers none blocked *.benet.com benet.com;

if ( $invalid_referer ) {

rewrite ^/ http://www.benet.com/error.png;

}

systemctl restart nginx

http://www.aaa.com

5）（5分）要求使用location将请求http://www.kgc.com/index.php的访问跳转到http://www.kgc.com/bbs/index.php。

要求使用rewrite将使用域名www.benet.com请求以 .php 结尾的访问都跳转到域名www.kgc.com上，而且后面的参数保持不变，比如访问http://www.benet.com/bbs/index.php跳转到http://www.kgc.com/bbs/index.php。

vim /usr/local/nginx/conf/ngin.conf

kgc server 模块下加

location = /index.php {

rewrite (.+) http://www.kgc.com/bbs/index.php;

}

benet server模块下加

location ~ \.php$ {

rewrite (.+) http://www.kgc.com/$1 permanent;

}

systemctl restart nginx

http://www.kgc.com/index.php

http://www.benet.com/bbs/index.php

6）（10分）在Web1、Web2服务器上搭建Tomcat服务；在Nginx服务器上对基于www.benet.com域名的虚拟机主机设置动静分离由nginx提供静态页面服务，将对.jsp文件的动态页面请求转发到Tomcat服务器处理，配合2台Tomcat节点实现负载均衡

1.环境准备

systemctl stop firewalld

setenforce 0

2.安装jdk

cd /opt

将jdk和tomcat软件包拖入当前目录下进行解压

rpm -ivh jdk-8u201-linux-x64.rpm

3.修改文件

vim /etc/profile

export JAVA_HOME=/usr/java/jdk1.8.0_201-amd64

export CLASSPATH=$JAVA_HOME/lib/tools.jar:$JAVA_HOME/lib/dt.jar

export PATH=$JAVA_HOME/bin:$PATH

source /etc/profile

4.安装tomcat

cd /opt

tar -zxf apache-tomcat-9.0.16.tar.gz

cp -r apache-tomcat-9.0.16 /usr/local/tomcat

5.启动tomcat

1. cd /usr/local/tomcat/

2. /usr/local/tomcat/bin/startup.sh

3. ss -natp |grep 8080

4. http://172.16.10.20:8080/

6.将tomcat添加到服务

/usr/local/tomcat/bin/shutdown.sh

useradd -s /sbin/nologin tomcat

chown tomcat:tomcat /usr/local/tomcat -R

vim /etc/systemd/system/tomcat.service

[Unit]

Description=Tomcat

#After=syslog.target network.target remote-fs.target nss-lookup.target

After=syslog.target network.target

[Service]

Type=forking

ExecStart=/usr/local/tomcat/bin/startup.sh

ExecStop=/usr/local/tomcat/bin/shutdown.sh

RestartSec=3

PrivateTmp=true

User=tomcat

Group=tomcat

[Install]

WantedBy=multi-user.target

重新加载服务，并开启，查看是否成功启动

systemctl daemon-reload

systemctl start tomcat

ss -ntap |grep 8080 (web2)

7.Tomcat服务优化

cd /usr/local/tomcat/webapps

mkdir test

cd test

vim index.jsp(web1)

<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>

<html>

<head> <title>JSP test1page</title> </head>

<body>

<% out.println("动态页面 1，this is dynamic web1");%>

</body>

</html>

vim index.jsp(web2)

<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>

<html>

<head> <title>JSP test2page</title> </head>

<body>

<% out.println("动态页面 2，this is dynamic web2");%>

</body>

</html>

vim /usr/local/tomcat/conf/server.xml

<Host name="localhost" appBase="/usr/local/tomcat/webapps" unpackWARs="true" autoDeploy="true" ​ xmlValidation="false" xmlNamespaceAware="false"> ​ <Context docBase="/usr/local/tomcat/webapps/test" ​ path="" reloadable="true" />

/usr/local/tomcat/bin/shutdown.sh

/usr/local/tomcat/bin/startup.sh

nginx 主机配置

cd /usr/local/nginx/html

<html>

<body>

<h1>这是静态页面</h1>

</body>

</html>

mkdir /usr/local/nginx/html/img

cd /usr/local/nginx/html

拉入图片（cf.jpg）

vim /usr/local/nginx/conf/nginx.conf

server模块上面添加

upstream tomcat_server {

server 172.16.10.10:8080 weight=1;

server 172.16.10.20:8080 weight=1;

}

benet模块内添加

location ~ .*.jsp$ {

proxy_pass http://tomcat_server;

proxy_set_header HOST $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

location ~ .*.(gif|jpg|jpeg|png|bmp|swf|css)$ {

root /usr/local/nginx/html/img;

expires 10d;

}

systemctl restart nginx

http://172.16.10.101

http://172.16.10.101/cf.jpg

http://www.benet.com/index.jsp

7）（5分）在网关服务器上配置DNAT和DNS，使client可以通过www.benet.com域名访问网关服务器的ens36接口的地址即可验证上题结果。

systemctl stop firewalld

setenforce 0

yum install bind bind-utils -y

vim /etc/named.conf

any any

vim /etc/named.rfc1912.zones

zone "benet.com" IN {

type master;

file "benet.com.zone";

};

cd /var/named

cp -p named.localhost benet.com.zone

vim benet.com.zone

$TTL 1D

@ IN SOA @ rname.invalid. (

0

1D

1H

1W

3H )

NS        @

A          172.16.10.101

www A          172.16.10.101

systemctl restart named

host www.benet.com

iptables -t nat -A PREROUTING -i ens37 -d 12.0.0.1 -p tcp --dport 80 -j DANT --to 172.16.10.101

http://www.benet.com/index/jsp