网站集群架构（LVS负载均衡、Nginx代理缓存、Nginx动静分离、Rsync+Inotify全网备份、Zabbix自动注册全网监控）技术流ken...

[root&＃64;ken ~]# ls
arp.sh fileshare.sh inotify7.sh keepalived.conf qimojiagou.tar.gz ssh1.sh zhengti.sh
dongtai5.sh huancun3.sh keep2.sh nginx.conf rsync6.sh static4.sh

[root&＃64;ken ~]# vim ssh1.sh
#!/bin/bash
. /etc/init.d/functions
#下载expect
yum install expect -y &>/dev/null
if [ $? -eq 0 ];thenecho -n "download expect"successecho ""
elseecho -n "download expect"failureecho ""exit 8
fi
#删除保存的秘钥信息
if [ -f id_rsa -o -f id_rsa.pub -o known_hosts ];thenrm -rf /root/.ssh/id*rm -rf /root/.ssh/known*
fi
#自动生成秘钥对
/usr/bin/expect<<eof
spawn ssh-keygen
expect {
"(/root/.ssh/id_rsa)" {send \r;exp_continue}
"passphrase" {send \r;exp_continue}
"again" {send \r}
}
expect eof
exit
eof
#在各个节点分发秘钥
for i in 31 32 34 35 37 38 39 40
do
ken&＃61;10.220.5.1$i
/usr/bin/expect<<eof
spawn ssh-copy-id $ken
expect {
"yes/no" {send yes\r;exp_continue}
"password" {send o\r}
}
expect eof
exit
eof
done

[root&＃64;ken ~]# vim keep2.sh
#!/bin/bash
. /etc/init.d/functions
bash /root/ssh1.sh
yum install nginx keepalived ipvsadm libnl* popt* -y &>/dev/null
if [ $? -ne 0 ];thenecho -n "download error at master"failureecho ""exit 4
fi
#keepalved备节点也下载软件
ssh 10.220.5.132 yum install keepalived ipvsadm libnl* popt* -y &>/dev/null
if [ $? -ne 0 ];thenecho -n "download error at slave"failureecho ""exit 2
fi#把准备好的从节点keepalived文件传送到备节点并启动
scp -q /root/keepalived.conf 10.220.5.132:/etc/keepalived &>/dev/null
ssh 10.220.5.132 systemctl restart keepalived &>/dev/null#准备主keepalived文件并启动
cp -f /root/keepalived.conf /etc/keepalived/
sed -i &＃39;s/router_id id2/router_id id1/&＃39; /etc/keepalived/keepalived.conf &>/dev/null
sed -i &＃39;s/state SLAVE/state MASTER/&＃39; /etc/keepalived/keepalived.conf &>/dev/null
sed -i &＃39;s/priority 100/priority 150/&＃39; /etc/keepalived/keepalived.conf &>/dev/null
systemctl restart keepalived &>/dev/null
#缓存1arp抑制
scp -q /root/arp.sh 10.220.5.134:/root
ssh 10.220.5.134 bash /root/arp.sh#缓存2arp抑制
scp -q /root/arp.sh 10.220.5.135:/root
ssh 10.220.5.135 bash /root/arp.shsystemctl restart nginx
ipvsadm -L -n

#!/bin/bash
. /etc/init.d/functions#配置134代理缓存
ssh 10.220.5.134 yum install nginx -y &>/dev/null
if [ $? -ne 0 ];thenecho -n "download nginx"failureecho ""exit 5
fi
mkdir /k &>/dev/null
mkdir /kenken &>/dev/null
scp -q /root/nginx.conf 10.220.5.134:/etc/nginx &>/dev/null
ssh 10.220.5.134 systemctl restart nginx &>/dev/null
#配置135代理缓存
ssh 10.220.5.135 yum install nginx -y &>/dev/null
if [ $? -ne 0 ];thenecho -n "download nginx"failureecho ""exit 5
fi
scp -q /root/nginx.conf 10.220.5.135:/etc/nginx &>/dev/null
ssh 10.220.5.135 systemctl restart nginx &>/dev/null

[root&＃64;ken ~]# vim static4.sh 
#!/bin/bash
. /etc/init.d/functions
yum install httpd nfs-utils -y &>/dev/null
#mkdir -p /var/www/html/static &>/dev/null
mount -t nfs 10.220.5.139:/ken /var/www/html &>/dev/null
systemctl restart httpd

[root&＃64;ken ~]# vim dongtai5.sh
#!/bin/bash
yum install httpd php php-mysql nfs-utils -y &>/dev/null
#mkdir -p /var/www/html/dongtai &>/dev/null
mount -t nfs 10.220.5.139:/ken /var/www/html/ &>/dev/null
systemctl restart httpd

[root&＃64;ken ~]# vim rsync6.sh
#!/bin/bash
. /etc/init.d/functions
ruser&＃61;user1
vuser&＃61;kenken
file&＃61;/ken
hosts&＃61;10.220.5.139/24
yum install rsync -y &>/dev/null
useradd -r -u 333 -s /sbin/nologin $ruser &>/dev/null
if [ ! -e $file ];thenmkdir $file &>/dev/null
fi
chown -R $ruser $file
cat>/etc/rsyncd.conf<<eof
pid file&＃61;/var/lock/subsys/pidfile
lock file&＃61;/var/lock/subsys/rsync
log file&＃61;/var/log/rsync
uid&＃61;333
gid&＃61;333
timeout&＃61;100
max connections&＃61;199
[ken]
path&＃61;/ken
list&＃61;yes
use chroot&＃61;yes
read only&＃61;no
auth users&＃61;kenken
secrets file&＃61;/etc/rsyncd.pwd
hosts allow&＃61;10.220.5.139/24
eof
echo "$vuser:123" > /etc/rsyncd.pwd
chmod 600 /etc/rsyncd.pwd
rsync --daemon &>/dev/null
if [ $? -eq 0 ];thenecho -n "start rsync..."successecho ""
elseecho -n "start rsync..."failureecho ""
fi

[root&＃64;ken ~]# vim inotify7.sh
#!/bin/bash
. /etc/init.d/functions
file&＃61;/ken
vuser&＃61;kenken
host&＃61;10.220.5.140
mname&＃61;ken
yum install inotify-tools -y &>/dev/null
echo "123" >/etc/rsync.pwd
chmod 600 /etc/rsync.pwd
inotifywait -mrq --format "%w%f" -e create,delete,modify $file | while read line
do
rsync -rz --delete $file $vuser&＃64;$host::$mname --password-file&＃61;/etc/rsync.pwd
done

[root&＃64;ken ~]# vim fileshare.sh
#!/bin/bash
. /etc/init.d/functions
yum install nfs-utils rpcbind -y &>/dev/null
mkdir -p /ken/static &>/dev/null
mkdir -p /ken/dongtai &>/dev/null
chown -R nfsnobody.nfsnobody /ken
cat>/etc/exports<<eof
/ken 10.220.5.137/24(rw,async,all_squash)
/ken 10.220.5.138/24(rw,async,all_squash)
eof
systemctl restart rpcbind
systemctl restart nfs

# For more information on configuration, see:
# * Official English Documentation: http://nginx.org/en/docs/
# * Official Russian Documentation: http://nginx.org/ru/docs/

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;# Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;events {worker_connections 1024;
}http {log_format main &＃39;$remote_addr - $remote_user [$time_local] "$request" &＃39;&＃39;$status $body_bytes_sent "$http_referer" &＃39;&＃39;"$http_user_agent" "$http_x_forwarded_for"&＃39;;access_log /var/log/nginx/access.log main;sendfile on;tcp_nopush on;tcp_nodelay on;keepalive_timeout 65;types_hash_max_size 2048;include /etc/nginx/mime.types;
default_type application/octet-stream;# Load modular configuration files from the /etc/nginx/conf.d directory.# See http://nginx.org/en/docs/ngx_core_module.html#include# for more information.proxy_cache_path /k levels&＃61;1:2 keys_zone&＃61;scache:30m; #定义静态文件的缓存fastcgi_cache_path /kenken levels&＃61;1:2 keys_zone&＃61;kenken:30m; #定义动态文件的缓存server {listen 80 default_server;listen [::]:80 default_server;server_name _;root /var/www/html;index index.html;# Load configuration files for the default server block.# include /etc/nginx/default.d/*.conf;location / {proxy_pass http://10.220.5.137; #静态文件会被代理到10.220.5.137proxy_set_header host $host;proxy_set_header realip $remote_addr;proxy_cache scache; #使scache缓存proxy_cache_valid any 10m; #定义缓存的类型及时间}location ~ \.php$ { proxy_pass http://10.220.5.138; #动态的文件会被缓存到10.220.5.138proxy_set_header host $host;proxy_set_header realip $remote_addr;fastcgi_cache kenken; #使用动态缓存fastcgi_cache_valid any 10m; fastcgi_cache_key http://$host$request_uri; #定义动态缓存的key}error_page 404 /404.html;location &＃61; /40x.html {}error_page 500 502 503 504 /50x.html;location &＃61; /50x.html {}}
}

[root&＃64;ken ~]# vim zhengti.sh
#!/bin/bash
. /etc/init.d/functions#执行秘钥分发
bash /root/ssh1.sh#实现keepalived&＃43;LVS
bash /root/keep2.sh#实现缓存代理
bash /root/huancun3.sh#实现文件共享
scp -q /root/fileshare.sh 10.220.5.139:/root
ssh 10.220.5.139 bash /root/fileshare.sh#实现静态服务器
scp -q /root/static4.sh 10.220.5.137:/root
ssh 10.220.5.137 bash /root/static4.sh#实现动态服务器
scp -q /root/dongtai5.sh 10.220.5.138:/root
ssh 10.220.5.138 bash /root/dongtai5.sh#实现备份服务器rsync
scp -q /root/rsync6.sh 10.220.5.140:/root
ssh 10.220.5.140 bash /root/rsync6.sh#实现共享文件服务器inotify
scp -q /root/inotify7.sh 10.220.5.139:/root
ssh 10.220.5.139 bash /root/inotify7.sh &iptables -F

[root&＃64;ken ~]# bash zhengti.sh

[root&＃64;ken html]# cat index.html
test for 137ddd

[root&＃64;ken html]# cat index.php
php
phpinfo();
?>

#!/bin/bash
#author:技术流ken
#date:2018-11-15
#desc:this script for downloading zabbix-agent for clients
ip&＃61;10.220.5.1
for i in 31 32 34 35 37 38 39 40
dossh $ip$i yum install zabbix-agent -y &>/dev/nullssh $ip$i sed -i &＃39;s/Server&＃61;127.0.0.1/Server&＃61;10.220.5.137/&＃39; /etc/zabbix/zabbix_agentd.conf &>/dev/nullssh $ip$i systemctl restart zabbix-agent &>/dev/null
done