CDN网络架构

忘是亡心i 2022-05-17 09:57 182阅读 0赞

# [CDN网络架构][CDN] #

CDN（content delivery network 内容分发网络）  
本质上就是提供缓存，使得用户总是能访问离他最近的服务器，akamai是世界上的第一家做CDN的公司

实例：构建CDN分发网络架构  
环境：使用7台 Linux主机部署CDN环境架构,使用Nginx作为Web服务器,Squid作为各地区反向代理服务器,Bind作为分离解析DNS服务器

环境如下：  
DNS 服务器(192.168.4.253)：dns253.hydra.com  
反向代理服务器(192.168.4.1)：squid1.hydra.com  
反向代理服务器(192.168.4.2)：squid2.hydra.com  
Web1 服务器(192.168.4.3)：web1.hydra.com  
Web2 服务器(192.168.4..4)：web2.hydra.com  
测试客户机 01(192.168.4..10)：pc01.hydra.com  
测试客户机 02(192.168.4..20)：pc02.hydra.com  
测试时,客户端主机pc01访问http://www.hydra.com 通过DNS解析后,指向，Squid2服务器(192.168.4.2),客户端主机pc02访问http://www.hydra.com通过DNS解析后,指向 Squid1服务器(192.168.4.1)

部署两台Nginx服务器（两台做相同的操作）  
使用 yum 安装基础依赖包并使用源码安装 LNMP 环境软件  
\[root@web1 ~\]\# yum -y groupinstall "Development tools"  
\[root@web1 ~\]\# yum -y install gcc openssl-devel pcre-devel zlib-devel  
\[root@web1 ~\]\# useradd –s /sbin/nologin nginx

使用源码安装 Nginx  
\[root@web1 ~\]\# tar -zxvf nginx-1.2.0.tar.gz  
\[root@web1 nginx-1.2.0\]\# ./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http\_ssl\_module --with-http\_flv\_module --with-http\_stub\_status\_module --with-http\_gzip\_static\_module  
\[root@web1 ~\]\# make && make install  
  
使用源码安装 cmake  
\[root@web1 ~\]\# tar -zxvf cmake-2.8.10.2.tar.gz  
\[root@web1 cmake-2.8.10.2\]\# ./bootstrap --prefix=/usr/local/cmake  
\[root@web1 cmake-2.8.10.2\]\# make && make install  
\[root@web1 cmake-2.8.10.2\]\# /usr/local/cmake/bin/cmake --version  
\[root@web1 ~\]\# useradd –s /sbin/nologin mysql

使用源码安装 mysql  
\[root@web1 ~\]\# tar -zxvf mysql-5.5.13.tar.gz  
\[root@web1 mysql-5.5.13\]\# /usr/local/cmake/bin/cmake  
\\  
> -DCMAKE\_INSTALL\_PREFIX=/usr/local/mysql  
\\  
> -DSYSCONFDIR=/etc  
\-DMYSQL\_DATADIR=/usr/local/mysql/data \\  
> -DMYSQL\_TCP\_PORT=3306 \\  
> -DMYSQL\_UNIX\_ADDR=/tmp/mysqld.sock \\  
> -DMYSQL\_USER=mysql  
\-DEXTRA\_CHARSETS=all \\  
> -DWITH\_SSL=system  
\-DENABLED\_LOCAL\_INFILE=1 \\  
\[root@web1 mysql-5.5.13\]\# make && make install  
\[root@web1 mysql-5.5.13\]\# chown -R mysql.mysql /usr/local/mysql/  
\[root@web1 mysql-5.5.13\]\# cd /usr/local/mysql  
\[root@web1 mysql\]\#./scripts/mysql\_install\_db --user=mysql --datadir=/usr/local/mysql/data

使用源码安装 mhash、libiconv、libmcrypt、PHP  
\[root@web1 ~\]\# tar -zxvf mhash-0.9.9.9.tar.gz  
\[root@web1 mhash-0.9.9.9\]\# ./configure  
\[root@web1 mhash-0.9.9.9\]\# make && make install  
\[root@web1 ~\]\# tar -zxvf libiconv-1.13.tar.gz  
\[root@web1 libiconv-1.13\]\# ./configure  
\[root@web1 libiconv-1.13\]\# make && make install  
\[root@web1 ~\]\# tar -zxvf libmcrypt-2.5.8.tar.gz  
\[root@web1 libmcrypt-2.5.8\]\# ./configure  
\[root@web1 libmcrypt-2.5.8\]\# make && make install  
\[root@web1 libmcrypt-2.5.8\]\# ldconfig -v  
\[root@web1 libmcrypt-2.5.8\]\# cd libltdl  
\[root@web1 libmcrypt-2.5.8\]\# cd ./configure --with-gmetad --enable-gexec --enable-ltdl-install  
\[root@web1 libltdl \]\# make && make install  
\[root@web1 ~\]\# ln -sv /usr/local/lib/libmcrypt\* /usr/lib/  
\[root@web1 ~\]\# ln -sv /usr/local/lib/libmhash.\* /usr/lib/  
\[root@web1 ~\]\# ln -sv /usr/local/lib/libicon.\* /usr/lib/  
\[root@web1 ~\]\# tar -zxvf php-5.4.9.tar.gz  
\[root@web1 ~\]\# cd php-5.4.9  
\[root@web1 php-5.4.9\]\# ./configure \\  
> --prefix=/usr/local/php5 \\  
> --with-config-file-path=/usr/local/php5nginx/etc \\  
> --with-mysql=/usr/local/mysql \\  
> --with-mysqli=/usr/local/mysql/bin/mysql\_config \\  
> --enable-fpm --enable-mbstring  
\[root@web1 php-5.4.9\]\# make ZEND\_EXTRA\_LIBS='-liconv'  
\[root@web1 php-5.4.9\]\# make install  
\[root@web1 php-5.4.9\]\# cp php.ini-production /usr/local/php5/etc/php.ini

启动相关服务  
\[root@web1 ~\]\# /usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf  
\[root@web1 ~\]\# netstat -utnlp | grep :80

启动MySQL,启动前需要拷贝相关配置文件及启动脚本  
\[root@web1 mysql\]\# cp /usr/local/mysql/my.cnf /etc/my.cnf  
\[root@web1 mysql\]\# cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld  
\[root@web1 mysql\]\# chmod +x /etc/init.d/mysqld  
\[root@web1 mysql\]\# chkconfig add mysqld  
\[root@web1 mysql\]\# chkconfig mysqld on  
\[root@web1 ~\]\# service mysqld start  
\[root@web1 ~\]\# echo “/usr/local/mysql/lib/” >> /etc/ld.so.conf  
\[root@web1 ~\]\# ldconfig  
\[root@web1 ~\]\# vim /etc/profile  
.. ..  
PATH=$PATH:$HOME/bin:/usr/local/mysql/bin/  
export PATH  
\[root@web1 ~\]\# source /etc/profil  
  
修改配置文件实现 FastCGI 功能，生成 php-fpm 配置文件,默认安装完php后,会自动生成一个php-fpm参考板  
\[root@web10 ~\]\# cd /usr/local/php5/etc/  
\[root@web10 etc\]\# cp php-fpm.conf.default php-fpm.conf  
\[root@web10 etc\]\# vim /usr/local/php5/etc/php-fpm.conf  
\[global\]  
pid = run/php-fpm.pid  
error\_log = log/php-fpm.log  
log\_level = error  
daemonize = yes  
\[nginx\]  
user = nginx  
group = nginx  
listen = 127.0.0.1:9000  
pm = dynamic  
pm.max\_children = 32  
pm.start\_servers = 15  
pm.min\_spare\_servers = 5  
pm.max\_spare\_servers = 32  
\[root@web1 ~\]\# cd php-5.4.9/sapi/fpm/  
\[root@web1 fpm\]\# cp init.d.php-fpm /etc/rc.d/init.d/php-fpm  
\[root@web1 fpm\]\# chmod +x /etc/rc.d/init.d/php-fpm  
\[root@web1 fpm\]\# chkconfig --add php-fpm  
\[root@web1 fpm\]\# service php-fpm start  
\[root@web1 fpm\]\# ps aux | grep php-fpm  
\[root@web1 etc\]\# /usr/local/php5/sbin/php-fpm --fpm-config /usr/local/php5/etc/php-fpm.conf

修改 nginx 配置文件并启动服务  
\[root@web1 ~\]\# vim /usr/local/nginx/conf/nginx.conf  
location / \{  
root html;  
index index.php index.html index.htm;  
\}  
location ~ \\.php$ \{  
root html;  
fastcgi\_pass 127.0.0.1:9000;  
fastcgi\_index index.php;  
fastcgi\_param SCRIPT\_FILENAME /scripts$fastcgi\_script\_name;  
include fastcgi\_params;  
\}  
\[root@web1 ~\]\# vim /usr/local/nginx/conf/fastcgi\_params  
.. ..  
fastcgi\_param SCRIPT\_FILENAME $document\_root$fastcgi\_script\_name;  
fastcgi\_param SCRIPT\_NAME $fastcgi\_script\_name;  
fastcgi\_param DOCUMENT\_ROOT $document\_  
\[root@web1 ~\]\# /usr/local/nginx/sbin/nginx

创建PHP首页文档  
\[root@web1 ~\]\# vim /usr/local/nginx/html/index.php  
<?php  
$links=mysql\_connect("localhost","root","密码");（root为mysql账户名称,密码需要修改为实际mysql密码,无密码则留空）  
if($links)\{  
echo "link db ok!!!";  
\}  
else\{  
echo "link db no!!!";  
\}  
?>

部署两台前端 Squid 服务器（两台做相同的操作）  
\[root@squid1 ~\]\# yum -y install squid  
  
修改/etc/squid/squid.conf配置文件  
\[root@squid1 ~\]\# vim /etc/squid/squid.conf  
.. ..  
http\_port 80 vhost //设置反向代理  
visible\_hostname squid100.tarena.com //设置主机名  
cache\_peer 192.168.4.1 parent 80 0 originserver  
cache\_peer 192.168.4.2 parent 80 0 originserver  
cache\_mem 128 MB //内存缓存  
cache\_dir ufs /var/spool/squid 200 16 128 //硬盘缓存  
http\_access allow localnet //允许本机所在网络中的所以主机使用代理服务器

\[root@squid1 ~\]\# service squid restart; chkconfing squid on（启动 squid 服务,设置为开机启动）

部署 DNS 服务器  
\[root@dns253 ~\]\# yum –y install bind bind-chroot  
  
修改 Bind 配置文件实现分离解析，修改主配置文件,添加视图及区域  
\[root@dns253 ~\]\# vim /var/named/chroot/etc/named.conf  
options  
\{  
directory "/var/named"; //区域数据文件存放路径  
listen-on port 53 \{ any; \};  
allow-query \{ any; \};  
allow-query-cache \{ any; \};  
recursion yes;  
\};  
acl client1 \{ //定义 ACL 指向测试客户端主机 pc01  
192.168.4.10;  
\};  
acl client2 \{ //定义 ACL 指向测试客户端主机 pc02  
192.168.4.20;  
\};  
view "zone1" 定义视图 zone1  
\{  
match-clients \{ client1; \}; //匹配条件为指定 pc01 的 ACL  
zone "hydra.com" IN \{  
tpype master;  
file "hydra.com.zone1";  
\};  
\};  
view "zone2" //定义视图 zone2  
\{  
match-clients \{ client2; \}; //匹配条件为指定 pc02 的 ACL  
zone "hydra.com" IN \{  
type master;  
file "hydra.com.zone2";  
\};  
\};

修改区域数据文件,添加域名解析记录。因为需要实现分离解析,此区域数据文件需要创建两份,并且要求解析记录要有所不同  
\[root@dns253 ~\]\#cp /usr/share/doc/bind-9.8.2/sample/var/named/named.localhost /var/named/chroot/var/named/hydra.com.zone1 //复制模板  
\[root@dns253 ~\]\# vim /var/named/chroot/var/named/hydra.com.zone1  
$TTL 1D  
@ IN SOA @ rname.invalid. (  
0 ; serial  
1D ; refresh  
1H ; retry  
1W ; expire  
3H ) ; minimum  
@ NS dns253.hydra.com.  
dns253 A 192.168.4.253  
www A 192.168.4.2 //将www解析为Squid2主机的IP地址  
squid1 A 192.168.4.1  
squid2 A 192.168.4.2  
web1 A 192.168.4.3  
web2 A 192.168.4.4  
pc01 A 192.168.4.10  
pc02 A 192.168.4.20

\[root@dns254 ~\]\# cd /var/named/chroot/var/named/  
\[root@dns254 ~\]\# vim /var/named/chroot/var/named/hydra.com.zone2  
$TTL 1D  
@ IN SOA @ rname.invalid. (  
0 ; serial  
1D ; refresh  
1H ; retry  
1W ; expire  
3H ) ; minimum  
@ NS dns253.hydra.com.  
dns253 A 192.168.4.253  
www A 192.168.4.1 //将www解析为Squid1主机的IP地址  
squid1 A 192.168.4.1  
squid2 A 192.168.4.2  
web1 A 192.168.4.3  
web2 A 192.168.4.4  
pc01 A 192.168.4.10  
pc02 A 192.168.4.20  
启动 DNS 服务  
\[root@dns253 ~\]\# service named start;chkconfig named on

客户端测试  
\[root@pc01 ~\]\# firefox http://www.hydra.com  
\[root@pc02 ~\]\# firefox http://www.hydra.com

[CDN]: https://www.cnblogs.com/Hydraxx/p/7687738.html