nginx的作用是讓后端多個(gè)服務(wù)器來同時(shí)分擔(dān)用戶的流量，從而減少單個(gè)服務(wù)器的壓力。在自動(dòng)化持續(xù)交付的時(shí)候，我們不能采用手工得方式來進(jìn)行灰度發(fā)布，即在nginx服務(wù)器上關(guān)閉發(fā)布服務(wù)器，平滑重啟nginx。這時(shí)引用了consul，通過consul來動(dòng)態(tài)的管理nginx后端服務(wù)器，不需要平滑重啟nginx也能在nginx上關(guān)閉后端服務(wù)器。
安裝依賴
yum -y install gcc gcc-c++ make libtool zlib zlib-devel openssl openssl-devel pcre pcre-devel
下載文件
cd /opt/software
wget https://releases.hashicorp.com/consul/0.7.1/consul_0.7.1_linux_amd64.zip
wget http://nginx.org/download/nginx-1.11.5.tar.gz
wget https://github.com/weibocom/nginx-upsync-module/archive/master.zip
unzip consul_0.7.1_linux_amd64.zip
unzip master.zip
tar zxf nginx-1.11.5.tar.gz
配置nginx
groupadd nginx
useradd -g nginx -s /sbin/nologin nginx
mkdir -p /var/tmp/nginx/client/
mkdir -p /usr/local/nginx
編譯安裝nginx
./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_flv_module --with-http_stub_status_module --with-http_gzip_static_module --with-http_realip_module --http-client-body-temp-path=/var/tmp/nginx/client/ --http-proxy-temp-path=/var/tmp/nginx/proxy/ --http-fastcgi-temp-path=/var/tmp/nginx/fcgi/ --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi --http-scgi-temp-path=/var/tmp/nginx/scgi --with-pcre --add-module=../nginx-upsync-module-master
make && make install
nginx配置文件
# /usr/local/nginx/conf/nginx.conf
#user nobody;
worker_processes 1;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"'
'$upstream_addr $upstream_status $upstream_response_time $request_time';
access_log logs/access.log main;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
#gzip on;
#
vhost_traffic_status_zone;
#proxy_cache_path /tmp/cache_backend keys_zone=cache_backend:10m;
upstream test {
server 127.0.0.1:11111;
upsync 192.168.77.129:8500/v1/kv/upstreams/test upsync_timeout=6m upsync_interval=500ms upsync_type=consul strong_dependency=off;
upsync_dump_path /usr/local/nginx/conf/servers/servers_test.conf;
server 192.168.77.140:8080 backup;
}
upstream bar {
server 192.168.77.139:80 weight=1 fail_timeout=10 max_fails=3;
}
server {
listen 80;
location = / {
proxy_pass http://test;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
add_header real $upstream_addr;
}
location ~ /Content|Scripts/ {
proxy_pass http://test;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location = /bar {
proxy_pass http://bar;
}
location = /upstream_show {
upstream_show;
}
location = /upstream_status {
stub_status on;
access_log off;
}
}
}
創(chuàng)建upsync_dump_path
mkdir /usr/local/nginx/conf/servers/
安裝consul
mkdir /usr/local/consul
mv consul /usr/local/consul/
啟動(dòng)consul
/usr/local/consul/consul agent -server -bootstrap-expect=1 -data-dir=/consul_data -node=one1 -bind=192.168.77.129 -config-dir=/etc/consul.d -client 0.0.0.0 -ui
添加后端服務(wù)
curl -X PUT http://192.168.77.129:8500/v1/kv/upstreams/test/192.168.77.140:80
curl -X PUT http://192.168.77.129:8500/v1/kv/upstreams/test/192.168.77.142:80
關(guān)閉后端服務(wù)
curl -X PUT -d '{"weight":2, "max_fails":2, "fail_timeout":10, "down":0}' http://192.168.77.129:8500/v1/kv/upstreams/test/192.168.77.140:80
開啟后端服務(wù)
curl -X PUT -d '{"weight":2, "max_fails":2, "fail_timeout":10, "down":0}' http://192.168.77.129:8500/v1/kv/upstreams/test/192.168.77.142:80
啟動(dòng)nginx
nginx
查看consul web信息
Paste_Image.png
Paste_Image.png
查看通過consul添加的后端服務(wù)
cat /usr/local/nginx/conf/servers/servers_test.conf
server 192.168.77.142:80 weight=2 max_fails=2 fail_timeout=10s;
server 192.168.77.140:80 weight=2 max_fails=2 fail_timeout=10s;
訪問nginx，測(cè)試下是否代理到后端服務(wù)
Paste_Image.png
real地址就是后端服務(wù)器的地址。
