永汇博客 http://blog.tianbaoyong.com 永汇人气，永汇资源！永汇博客。 Fri, 01 Jul 2011 05:56:53 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 安装和卸载Windows服务 http://blog.tianbaoyong.com/defaultcat/install-and-uninstall-windows-service.html http://blog.tianbaoyong.com/defaultcat/install-and-uninstall-windows-service.html#comments Fri, 01 Jul 2011 05:56:53 +0000 tian5258 http://blog.tianbaoyong.com/defaultcat/install-and-uninstall-windows-service.html 在windows下安装了nginx, 郁闷是发现它没有以服务方式运行, 也就是说当用户注销后,程序
会终止.因此需要将nginx作为服务运行.

假设nginx安装在c:\nginx\下:

1.下载微软服务注册工具srvany.exe, instsrv.exe, 存放到c:\nginx\目录下
http://eastedu.bl-changjiang.com/UploadFiles/2006-5/511179043.rar

2.安装NGINX服务, 将命令行切换到c:\nginx\,执行下列命令
instsrv NGINX c:\nginx\srvany.exe
复制代码

3.在c:\nginx\下,编辑一个nginx.reg文件
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NGINX\Parameters]

"Application"="C:\\nginx\\nginx.exe"

"AppParameters"=""

"AppDirectory"="C:\\nginx\\"
复制代码

5.让服务与程序关联起来, 命令行执行
regedit /s nginx.reg
复制代码

6.编辑启动nginx脚本start-nginx.bat(关闭脚本不用变), 让程序以服务方式运行
@ECHO OFF

net stop nginx

net start nginx

EXIT
复制代码

]]> http://blog.tianbaoyong.com/defaultcat/install-and-uninstall-windows-service.html/feed 0 Ubuntu+apache+svn配置备忘 http://blog.tianbaoyong.com/ittechposts/ubuntu-apache-svn-configuration-notes.html http://blog.tianbaoyong.com/ittechposts/ubuntu-apache-svn-configuration-notes.html#comments Fri, 01 Jul 2011 05:33:21 +0000 tian5258 http://blog.tianbaoyong.com/ittechposts/ubuntu-apache-svn-configuration-notes.html 此配置按照ubuntu登录用户为administrator，项目名为hwjn配置，如需配置其他项目，修改替换即可。userName = administrator
projectName = hwjn

sudo apt-get install subversion
sudo apt-get install libapache2-svn

sudo addgroup subversion
sudo usermod -G subversion -a www-data
sudo usermod -G subversion -a administrator

sudo mkdir /home/svn
cd /home/svn
sudo svnadmin create hwjn
sudo chown -R administrator:subversion hwjn
sudo chmod -R g+rws hwjn

echo '<Location /svn/hwjn>
DAV svn
SVNPath /home/svn/hwjn
AuthType Basic
AuthName "pro1 Subversion Repository"
AuthUserFile /home/svn/hwjn/conf/passwd
AuthzSVNAccessFile /home/svn/hwjn/conf/authz
Require valid-user
</Location>' | sudo tee -a /etc/apache2/apache2.conf

htpasswd -cb /home/svn/hwjn/conf/passwd super super
htpasswd -b /home/svn/hwjn/conf/passwd admin admin

echo "[/]
super = rw
admin = rw" | tee -a /home/svn/hwjn/conf/authz

操作需要重启apache：
sudo service apache2 restart
sudo chmod -R g+rws hwjn

创建目录结构：sh -c | cat list.txt

svn import -m " " /home/administrator/pro file:///home/svn/hwjn

在线修改密码：
sudo mkdir -p /home/www/hwjn/

echo '
Alias /hwjn/ "/home/www/hwjn/"
<Directory "/home/www/hwjn/">
    AuthType Basic
    AuthName "svntools repository"
    AuthUserFile /home/svn/hwjn/conf/passwd
    Require valid-user
</Directory>
' | tee -a /etc/apache2/apache2.conf

sudo chown -R administrator:subversion /home/svn/hwjn
sudo chmod -R g+rws /home/svn/hwjn

操作需要重启apache：
sudo service apache2 restart

echo '
<?
$auth_user = $_SERVER["PHP_AUTH_USER"];
$auth_pass = $_SERVER["PHP_AUTH_PW"];
?>
<html>
<head>
<title>Change SVN Password</title>
</head>
<body>
<?
if ($_REQUEST["action"] != "modify") {
?>
<script language = "javaScript"><!--
function check_and_submit(myform) {
    var oldpass = myform.oldpass.value;
    var newpass = myform.newpass.value;
    var repeatpass = myform.repeatpass.value;
    if (oldpass == "") {
        alert("Old password is empty!");
        myform.oldpass.focus();
    }
    else if (newpass == "") {
        alert("New password is empty!");
        myform.newpass.focus();
    }
    else if (repeatpass == "" || repeatpass != newpass) {
        alert("Repeat password is empty or not same as new password!");
        myform.repeatpass.focus();
    }
    else
        myform.submit();
}
// --></script>
<form method="post">
<input type="hidden" name="action" value="modify"/>
<table>
<tr>
<td>User Name</td>
<td align="left"><?=$auth_user?></td>
</tr>
<tr>
<td>Old Password</td>
<td><input type="password" size=20 name=oldpass></td>
</tr>
<tr>
<td>New Password</td>
<td><input type="password" size=20 name=newpass></td>
</tr>
<tr>
<td>Repeat Password</td>
<td><input type="password" size=20 name=repeatpass></td>
</tr>
<tr>
<td colspan=2>
<input type="button" value="Change" onclick="check_and_submit(this.form)">
<input type="reset" value="Reset">
</td>
</tr>
</table>
</form>
<?
} else {
$old_pass = $_REQUEST["oldpass"];
$new_pass = $_REQUEST["newpass"];
if ($old_pass != $auth_pass)
    $msg = "Old password is wrong!";
else
{
    # change here
    $cmd = "htpasswd -b /home/svn/hwjn/conf/passwd $auth_user $new_pass";
    system($cmd, $res);
    if ($res == 0)
        $msg = "Change password for [$auth_user] succeed! Please login again.";
    else
        $msg = "Change password for [$auth_user] failed! Please contact server administrator.";
}
?>
<script language="javaScript"><!--
alert("<?=$msg?>");
window.location.href="<?=$_SERVER["PHP_SELF"]?>"
// --></script>}
<?
}
?>
</body>
</html>' | tee -a /home/www/hwjn/index.php
]]> http://blog.tianbaoyong.com/ittechposts/ubuntu-apache-svn-configuration-notes.html/feed 0 Apache2.2和Tomcat 6.0.18的整合 http://blog.tianbaoyong.com/systemconfig/apache2-2-and-the-integration-of-tomcat-6-0-18.html http://blog.tianbaoyong.com/systemconfig/apache2-2-and-the-integration-of-tomcat-6-0-18.html#comments Wed, 08 Jun 2011 08:27:07 +0000 tian5258 http://blog.tianbaoyong.com/systemconfig/apache2-2-and-the-integration-of-tomcat-6-0-18.html 1、下载安装apache2.2和tomcat6
2、http://mirror.bjtu.edu.cn/apache/tomcat/tomcat-connectors/jk/binaries/win32/jk-1.2.31/下载mod_jk-1.2.31-httpd-2.2.3.so
3、将mod_jk-1.2.31-httpd-2.2.3.so文件拷贝到apache的modules目录，改名为mod_jk2.so
4、在apache的config文件中添加如下行：
    LoadModule jk_module modules/mod_jk2.so
    JkWorkersFile conf/workers.properties
    JkLogFile "mod_jk2.log"
    JkLogLevel info

5、配置虚拟主机：在配置文件的末尾添加

NameVirtualHost *:80
    <VirtualHost *:80>
        DocumentRoot "C:/Program Files/Apache Software Foundation/Tomcat 6.0/webapps/wapGPS"
        DirectoryIndex index.html index.htm login.jsp
        ServerName www.unite.com
        ErrorLog "logs/a.xingchetong.com-error.log"
        CustomLog "logs/a.xingchetong.com-access.log" common
        <Directory "C:/Program Files/Apache Software Foundation/Tomcat 6.0/webapps/wapGPS"> 
            Options Indexes FollowSymLinks
            AllowOverride None
            Order allow,deny
            Allow from all
        </Directory>
        JkMount     "/*Servlet*"     "ajp13" 
        JkMount     "/*.jsp"     "ajp13"
        JkMount     "/*.action"     "ajp13"
    </VirtualHost>

6、配置tomcat的虚拟主机
<Host name="www.unite.com"  appBase="webapps"
       unpackWARs="true" autoDeploy="true"
        xmlValidation="false" xmlNamespaceAware="false">
<Context path="" reloadable="true" docBase="wapGPS"/>
</Host>   
    </Host>   
7、在apache的conf目录下创建文件：workers.properties
内容如下：
workers.tomcat_home="C:/Program Files/Apache Software Foundation/Tomcat 6.0"
    workers.java_home="C:/Program Files/Java/jdk1.6.0_06/jre"
    ps=\
    worker.list=ajp13
    worker.ajp13.port=8009
    worker.ajp13.host=localhost
    worker.ajp13.type=ajp13
    worker.ajp13.lbfactor=1

]]> http://blog.tianbaoyong.com/systemconfig/apache2-2-and-the-integration-of-tomcat-6-0-18.html/feed 0 Cacti配置监控Apache服务 http://blog.tianbaoyong.com/systemconfig/cacti-apache-configuration-monitoring-service.html http://blog.tianbaoyong.com/systemconfig/cacti-apache-configuration-monitoring-service.html#comments Tue, 12 Apr 2011 02:29:05 +0000 tian5258 http://blog.tianbaoyong.com/systemconfig/cacti-apache-configuration-monitoring-service.html 我们平时使用apache常常了解他的性能只能使用ps aux|grep httpd|wc -l查看有多少个进程,但处理了多少http的请求我们不清楚,进程是不是在工作,还是在等都不是很明白,要了解apache的性能,我们需要使用Apache Server Status的模块来详细了解apache工作的怎么样.

下载用于监控apache的php脚本和模板：点击下载

在上面的地址下载一个叫 ApacheStats08.zip的,中间有二个文件，一个处理脚本php的，另一个是xml的文件。其中的ss_apache_stats.php是脚本文件，它是一个php的文件，放到你的cacti/scripts/下面。接下来在cacti界面导入cacti_host_template_webserver_-_apache.xml这个文件。

配置apache，添加虚拟主机，如果不希望被外部用户访问，可以监听内部地址或127.0.0.1（这个只是在自己的机器上监控自己）。

Listen 127.0.0.1:80

载入模块：

LoadModule status_module modules/mod_status.so

打开配置

ExtendedStatus On

建立虚拟主机（127.0.0.1，其他主机自己设定即可）

<VirtualHost 127.0.0.1:80>
              <location /server-status>
              SetHandler server-status
              Order Deny,Allow
              Deny from all
              Allow from 127.0.0.1
             </location>
       </VirtualHost>

重启apache服务

测试：http://127.0.0.1/server-status/

如果出现如下类似结果说明配置成功，在cacti中添加主机或图形即可。

image

]]> http://blog.tianbaoyong.com/systemconfig/cacti-apache-configuration-monitoring-service.html/feed 0 Mediawiki和Cacti从Windows迁移到Linux的注意事项 http://blog.tianbaoyong.com/systemconfig/cacti-mediawiki-and-migrate-to-linux-from-windows-notes.html http://blog.tianbaoyong.com/systemconfig/cacti-mediawiki-and-migrate-to-linux-from-windows-notes.html#comments Fri, 08 Apr 2011 08:43:07 +0000 tian5258 http://blog.tianbaoyong.com/systemconfig/cacti-mediawiki-and-migrate-to-linux-from-windows-notes.html Mediawiki的迁移非常简单，Linux平台和Windows平台没有什么区别，主要注意大小写和数据库配置即可。

Cacti的迁移就需要注意，配置路径要确认好。安装各种支持包时，需要加入新的源，具体步骤参考http://wiki.centos.org/AdditionalResources/Repositories/RPMForge#head-5aabf02717d5b6b12d47edbc5811404998926a1b即可。结合前面的博文http://blog.tianbaoyong.com/defaultcat/cacti-nagios-ntop-detailed-steps-to-install.html就可以了。

]]> http://blog.tianbaoyong.com/systemconfig/cacti-mediawiki-and-migrate-to-linux-from-windows-notes.html/feed 0 CentOS配置SNMPV3进行安全的监控 http://blog.tianbaoyong.com/systemconfig/centos-safety-monitoring-configuration-snmpv3.html http://blog.tianbaoyong.com/systemconfig/centos-safety-monitoring-configuration-snmpv3.html#comments Wed, 23 Mar 2011 14:54:47 +0000 tian5258 http://blog.tianbaoyong.com/systemconfig/centos-safety-monitoring-configuration-snmpv3.html 前提条件：
安装net-snmp net-snmp-utils net-snmp-devel

具体步骤：
1. 停止snmpd服务
service snmpd stop
2. 执行如下命令，按照提示输入用户名和密码，并确认密码
net-snmp-config –create-snmpv3-user
3. 启动snmpd服务
service snmpd start
4. 利用下面的命令测试。
snmpget -v 3 -u username -l authNoPriv -A "password" -X "password" 60.216.52.53 sysUpTime.0

]]> http://blog.tianbaoyong.com/systemconfig/centos-safety-monitoring-configuration-snmpv3.html/feed 0 Oracle 11g R2 Linux X64 安装备忘 http://blog.tianbaoyong.com/databsse/oracle-11g-r2-linux-x64-installation-notes.html http://blog.tianbaoyong.com/databsse/oracle-11g-r2-linux-x64-installation-notes.html#comments Thu, 17 Mar 2011 09:03:03 +0000 tian5258 http://blog.tianbaoyong.com/databsse/oracle-11g-r2-linux-x64-installation-notes.html #######################环境设置###########################
1、安装相关包
yum install \
gcc make binutils openmotif setarch libaio gcc  glibc \
glibc-common glibc-headers glibc-devel \
compat-db compat-gcc-34  compat-gcc-34-c++ compat-glibc \
compat-glibc-headers compat-libgcc-296 compat-libstdc++-33 \
compat-libstdc++-296 avahi-compat-libdns_sd \
java-1.4.2-gcj-compat-devel java-1.4.2-gcj-compat \
java-1.4.2-gcj-compat-src java-1.4.2-gcj-compat-javadoc \
java-1.4.2-gcj-compat-devel libaio-devel unixODBC \
unixODBC-devel pdksh perftest sysstat 

2、修改内核参数 vi /etc/sysctl.conf , 在行末添加以下内容，在CentOs5.5上会看到
kernel.shmmax = 4294967295
kernel.shmall = 268435456
这些参数已经存在并且默认启用了，
需要将原kernel.shmmax与kernel.shmall参数注释掉。并在文件末尾添加以下内容：
echo "
#use for oracle11g
fs.file-max = 6815744
fs.aio-max-nr = 1048576
kernel.shmall = 2097152
kernel.shmmax = 2147483648
kernel.shmmni = 4096
kernel.sem = 250 32000 100 128
net.ipv4.ip_local_port_range = 9000 65500
net.core.rmem_default = 4194304
net.core.rmem_max = 4194304
net.core.wmem_default = 262144
net.core.wmem_max = 1048576 " >> /etc/sysctl.conf

3.
echo "#use for oracle11g
oracle soft nproc 2047
oracle hard nproc 16384
oracle soft nofile 1024
oracle hard nofile 65536 " >> /etc/security/limits.conf

 

5.vi /etc/selinux/config 确保以下内容
SELINUX=disabled
关闭SELIINUX

6.
echo "
if [ $USER = "oracle" ]; then
if [ $SHELL = "/bin/ksh" ]; then
ulimit -p 16384
ulimit -n 65536
else
ulimit -u 16384 -n 65536
fi
fi" >> /etc/profile

7.因为默认centos5.5不支持11.2,0.1,修改配置文件，使CentOs5.5 支持Oracle10g .
vi /etc/redhat-release

echo "#CentOS release 5.5 (Final)
redhat-4 " > /etc/redhat-release

#############################安装过程################################
1.用户
groupadd oinstall
groupadd dba
groupadd oper
useradd -m -g oinstall -G dba oracle
passwd oracle

2、创建安装目录
mkdir /oracle
chown -R oracle:oinstall /oracle
chmod -R 775 /oracle

3、将Oracle原始安装包文件放在/oracle目录下，再运行解压命令。
[root@oracleserver-x64 oracle]#  unzip  linux.x64_11gr2_database_1of2.zip
[root@oracleserver-x64 oracle]#  unzip  linux.x64_11gr2_database_2of2.zip 

3.修改 Oracle 用户 .bash_profile
# su – oracle
$ vi ./.bash_profile   (或 # vi /home/oracle/.bash_profile)
在文件最后添加如下内容

echo "umask 022
export ORACLE_BASE=/oracle
export ORACLE_HOME=$ORACLE_BASE/11g
export ORACLE_SID=ora
export PATH=$PATH:$HOME/bin:$ORACLE_HOME/bin
export LD_LIBRARY_PATH=$ORACLE_HOME/lib:/lib:/usr/lib
export LANG=C" >> .bash_profile

//数据库实例的SID，此处为boson，在图形界面安装过程中要求输入SID与这里保持相同
======================================================================================================================
4.以root身份打开另一个终端窗口，–这步至关重要，不执行这步在以oracle用户运行 # ./runInstaller时会启动不了图型安装界面。
[root@oracleserver-x64 ~]# xhost +
access control disabled, clients can connect from any host
[root@oracleserver-x64 ~]# xhost + localhost
localhost being added to access control list
[root@oracleserver-x64 ~]# su – oracle
-bash: ulimit: max user processes: cannot modify limit: Operation not permitted
[oracle@oracleserver-x64 ~]$ cd /oracle/database/
[oracle@oracleserver-x64 database]$ ./runInstaller
[oracle@oracleserver-x64 database]$ ./runInstaller
Starting Oracle Universal Installer…

Checking Temp space: must be greater than 120 MB.   Actual 43647 MB    Passed
Checking swap space: must be greater than 150 MB.   Actual 4000 MB    Passed
Checking monitor: must be configured to display at least 256 colors.    Actual 16777216    Passed
Preparing to launch Oracle Universal Installer from /tmp/OraInstall2010-12-03_10-26-58AM. Please wait …

将Oracle 11g R2加入到开机自启动

1. 修改dbstart与dbshut脚本：(修改后的文件内容在下面)
# vi $ORACLE_HOME/bin/dbstart
#ORACLE_HOME_LISTNER=$1
ORACLE_HOME_LISTNER=$ORACLE_HOME
#  vi $ORACLE_HOME/bin/dbshut
#ORACLE_HOME_LISTNER=$1
ORACLE_HOME_LISTNER=$ORACLE_HOME

2. 修改/etc/oratab为如下格式：
# vi /etc/oratab
boson:/oracle/10g:N
将N都改写成Y即可。

3. 编辑启动脚本，以实现开机自启动（修改后的源文件在下面）
# vi /etc/rc.d/init.d/oracle
下载脚本文件，不要在windows下编辑它，直接放到 /etc/rc.d/init.d/下即可。
下载地址：http://u.sohu.com/download/2/12913809769017100547076

4、修改所属组和用户
# chown root.root oracle

5、修改访问权限
# chmod 775 /etc/rc.d/init.d/oracle

6、添加服务到自动启动中
# chkconfig –add oracle
# chkconfig oracle on

7、执行命令，看是否可以启动成功
[root@oracleserver init.d]# service oracle start

8、查看日志文件
# tail -f /var/log/oracle

9、查看本地服务端口，看oracle是否有启动。
# nmap -sT localhost

 

#####################################/etc/rc.d/init.d/oracle的文件内容############################：

#!/bin/bash
#
# Copyright (C) 1998-2008 Oracle, Inc.  All Rights Reserved.
#
# This script manages the services needed to run oracle  software
# Basic support for IRIX style chkconfig
# chkconfig: 2345 99 01
# description: ORACLE 10g Server

ORACLE_HOME=/oracle/11g
ORACLE_BASE=/oracle
ORACLE_SID=ora
ORACLE_UNQNAME=ora
PATH=$PATH:$ORACLE_HOME/bin
LD_LIBRARY_PATH=$ORACLE_HOME/lib:/usr/lib
LANG=C
export ORACLE_BASE ORACLE_HOME ORACLE_SID ORACLE_UNQNAME PATH LD_LIBRARY_PATH LANG

if [ ! -f $ORACLE_HOME/bin/dbstart ]
then
echo "ORACLE cannot start"
exit
fi
case "$1" in
‘start’)
echo "Starting Oracle Database…"
echo "————————————————-" >> /var/log/oracle
date +" %T %a %D : Starting Oracle Databasee as part of system up." >> /var/log/oracle
echo "————————————————-" >> /var/log/oracle
su – oracle -c "$ORACLE_HOME/bin/dbstart" >> /var/log/oracle
echo "Done."
echo "Starting Oracle EM Control … "
echo "————————————————-" >> /var/log/oracle
date +" %T %a %D : Starting Oracle EM Control as part of system up." >> /var/log/oracle
echo "————————————————-" >> /var/log/oracle
su – oracle -c "$ORACLE_HOME/bin/emctl start dbconsole" >> /var/log/oracle
echo "Done."
echo ""
echo "————————————————-" >> /var/log/oracle
date +" %T %a %D : Finished." >> /var/log/oracle
echo "————————————————-" >> /var/log/oracle
;;
‘stop’)
echo "Stoping Oracle Database"
su – oracle -c "$ORACLE_HOME/bin/emctl stop dbconsole" >> /var/log/oracle
echo "Stoping Oracle EM Control … "
echo "————————————————-" >> /var/log/oracle
date +" %T %a %D : Stoping Oracle EM Control as part of system down." >> /var/log/oracle
echo "————————————————-" >> /var/log/oracle
su – oracle -c "$ORACLE_HOME/bin/dbshut" >> /var/log/oracle
echo "Done."
echo ""
echo "————————————————-" >> /var/log/oracle
date +" %T %a %D : Finished." >> /var/log/oracle
echo "————————————————-" >> /var/log/oracle
;;
restart)
$0 stop
$0 start
;;
*)
echo "Usage: oracle {start|stop|restart}"
exit 1
esac

 

##########################################dbstart内容##########################################

#!/bin/sh
#
# $Id: dbstart.sh 22-may-2008.05:05:45 arogers Exp $
# Copyright (c) 1991, 2008, Oracle. All rights reserved. 
#

###################################
#
# usage: dbstart $ORACLE_HOME
#
# This script is used to start ORACLE from /etc/rc(.local).
# It should ONLY be executed as part of the system boot procedure.
#
# This script will start all databases listed in the oratab file
# whose third field is a "Y".  If the third field is set to "Y" and
# there is no ORACLE_SID for an entry (the first field is a *),
# then this script will ignore that entry.
#
# This script requires that ASM ORACLE_SID’s start with a +, and
# that non-ASM instance ORACLE_SID’s do not start with a +.
#
# If ASM instances are to be started with this script, it cannot
# be used inside an rc*.d directory, and should be invoked from
# rc.local only. Otherwise, the CSS service may not be available
# yet, and this script will block init from completing the boot
# cycle.
#
# If you want dbstart to auto-start a single-instance database that uses
# an ASM server that is auto-started by CRS (this is the default behavior
# for an ASM cluster), you must change the database’s ORATAB entry to use
# a third field of "W" and the ASM’s ORATAB entry to use a third field of "N".
# These values specify that dbstart auto-starts the database only after
# the ASM instance is up and running.
#
# Note:
# Use ORACLE_TRACE=T for tracing this script.
#
# The progress log for each instance bringup plus Error and Warning message[s]
# are logged in file $ORACLE_HOME/startup.log. The error messages related to
# instance bringup are also logged to syslog (system log module).
# The Listener log is located at $ORACLE_HOME_LISTNER/listener.log
#
# On all UNIX platforms except SOLARIS
# ORATAB=/etc/oratab
#
# To configure, update ORATAB with Instances that need to be started up
#    Entries are of the form:
#    $ORACLE_SID:$ORACLE_HOME:<N|Y|W>:
#    An example entry:
#    main:/usr/lib/oracle/emagent_10g:Y
#
# Overall algorithm:
# 1) Bring up all ASM instances with ‘Y’ entry in status field in oratab entry
# 2) Bring up all Database instances with ‘Y’ entry in status field in
#    oratab entry
# 3) If there are Database instances with ‘W’ entry in status field
#    then
#      iterate over all ASM instances (irrespective of ‘Y’ or ‘N’) AND
#      wait for all of them to be started
#    fi
# 4) Bring up all Database instances with ‘W’ entry in status field in
#    oratab entry
#
#####################################

LOGMSG="logger -puser.alert -s "

trap ‘exit’ 1 2 3

# for script tracing
case $ORACLE_TRACE in
  T) set -x ;;
esac
   
# Set path if path not set (if called from /etc/rc)
SAVE_PATH=/bin:/usr/bin:/etc:${PATH} ; export PATH
SAVE_LLP=$LD_LIBRARY_PATH

# First argument is used to bring up Oracle Net Listener
#ORACLE_HOME_LISTNER=$1
ORACLE_HOME_LISTNER=’/oracle/11g’
if [ ! $ORACLE_HOME_LISTNER ] ; then
  echo "ORACLE_HOME_LISTNER is not SET, unable to auto-start Oracle Net Listener"
  echo "Usage: $0 ORACLE_HOME"
else
  LOG=$ORACLE_HOME_LISTNER/listener.log

  # Set the ORACLE_HOME for the Oracle Net Listener, it gets reset to
  # a different ORACLE_HOME for each entry in the oratab.
  export ORACLE_HOME=$ORACLE_HOME_LISTNER

  # Start Oracle Net Listener
  if [ -x $ORACLE_HOME_LISTNER/bin/tnslsnr ] ; then
    echo "$0: Starting Oracle Net Listener" >> $LOG 2>&1
    $ORACLE_HOME_LISTNER/bin/lsnrctl start >> $LOG 2>&1 &
    VER10LIST=`$ORACLE_HOME_LISTNER/bin/lsnrctl version | grep "LSNRCTL for " | cut -d’ ‘ -f5 | cut -d’.’ -f1`
    export VER10LIST
  else
    echo "Failed to auto-start Oracle Net Listener using $ORACLE_HOME_LISTNER/bin/tnslsnr"
  fi
fi

# Set this in accordance with the platform
ORATAB=/etc/oratab
if [ ! $ORATAB ] ; then
  echo "$ORATAB not found"
  exit 1;
fi

# Checks Version Mismatch between Listener and Database Instance.
# A version 10 listener is required for an Oracle Database 10g database.
# Previous versions of the listener are not supported for use with an Oracle
# Database 10g database. However, it is possible to use a version 10 listener
# with previous versions of the Oracle database.
checkversionmismatch() {
  if [ $VER10LIST ] ; then
    VER10INST=`sqlplus -V | grep "Release " | cut -d’ ‘ -f3 | cut -d’.’ -f1`
    if [ $VER10LIST -lt $VER10INST ] ; then
      $LOGMSG "Listener version $VER10LIST NOT supported with Database version $VER10INST"
      $LOGMSG "Restart Oracle Net Listener using an alternate ORACLE_HOME_LISTNER:"
      $LOGMSG "lsnrctl start"
    fi
  fi
}

# Starts a Database Instance
startinst() {
  # Called programs use same database ID
  export ORACLE_SID

  # Put $ORACLE_HOME/bin into PATH and export.
  PATH=$ORACLE_HOME/bin:${SAVE_PATH} ; export PATH
  # add for bug # 652997
  LD_LIBRARY_PATH=${ORACLE_HOME}/lib:${SAVE_LLP} ; export LD_LIBRARY_PATH
  PFILE=${ORACLE_HOME}/dbs/init${ORACLE_SID}.ora
  SPFILE=${ORACLE_HOME}/dbs/spfile${ORACLE_SID}.ora
  SPFILE1=${ORACLE_HOME}/dbs/spfile.ora

  echo ""
  echo "$0: Starting up database \"$ORACLE_SID\""
  date
  echo ""

  checkversionmismatch

  # See if it is a V6 or V7 database
  VERSION=undef
  if [ -f $ORACLE_HOME/bin/sqldba ] ; then
    SQLDBA=sqldba
    VERSION=`$ORACLE_HOME/bin/sqldba command=exit | awk ‘
      /SQL\*DBA: (Release|Version)/ {split($3, V, ".") ;
      print V[1]}’`
    case $VERSION in
      "6") ;;
      *) VERSION="internal" ;;
    esac
  else
    if [ -f $ORACLE_HOME/bin/svrmgrl ] ; then
      SQLDBA=svrmgrl
      VERSION="internal"
    else
      SQLDBA="sqlplus /nolog"
    fi
  fi

  STATUS=1
  if [ -f $ORACLE_HOME/dbs/sgadef${ORACLE_SID}.dbf ] ; then
    STATUS="-1"
  fi
  if [ -f $ORACLE_HOME/dbs/sgadef${ORACLE_SID}.ora ] ; then
    STATUS="-1"
  fi
  pmon=`ps -ef | grep -w "ora_pmon_$ORACLE_SID"  | grep -v grep`
  if [ "$pmon" != "" ] ; then
    STATUS="-1"
    $LOGMSG "Warning: ${INST} \"${ORACLE_SID}\" already started."
  fi

  if [ $STATUS -eq -1 ] ; then
    $LOGMSG "Warning: ${INST} \"${ORACLE_SID}\" possibly left running when system went down (system crash?)."
    $LOGMSG "Action: Notify Database Administrator."
    case $VERSION in
      "6")  sqldba "command=shutdown abort" ;;
      "internal")  $SQLDBA $args <<EOF
connect internal
shutdown abort
EOF
        ;;
      *)  $SQLDBA $args <<EOF
connect / as sysdba
shutdown abort
quit
EOF
        ;;
    esac

    if [ $? -eq 0 ] ; then
      STATUS=1
    else
      $LOGMSG "Error: ${INST} \"${ORACLE_SID}\" NOT started."
    fi
  fi

  if [ $STATUS -eq 1 ] ; then
    if [ -e $SPFILE -o -e $SPFILE1 -o -e $PFILE ] ; then
      case $VERSION in
        "6")  sqldba command=startup ;;
        "internal")  $SQLDBA <<EOF
connect internal
startup
EOF
          ;;
        *)  $SQLDBA <<EOF
connect / as sysdba
startup
quit
EOF
          ;;
      esac

      if [ $? -eq 0 ] ; then
        echo ""
        echo "$0: ${INST} \"${ORACLE_SID}\" warm started."
      else
        $LOGMSG ""
        $LOGMSG "Error: ${INST} \"${ORACLE_SID}\" NOT started."
      fi
    else
      $LOGMSG ""
      $LOGMSG "No init file found for ${INST} \"${ORACLE_SID}\"."
      $LOGMSG "Error: ${INST} \"${ORACLE_SID}\" NOT started."
    fi
  fi
}

# Starts an ASM Instance
startasminst() {
  # Called programs use same database ID
  export ORACLE_SID
  ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
  # Called scripts use same home directory
  export ORACLE_HOME

  # For ASM instances, we have a dependency on the CSS service.
  # Wait here for it to become available before instance startup.

  # Is the 10g install intact? Are all necessary binaries present?
  if [ ! -x $ORACLE_HOME/bin/crsctl ]; then
    $LOGMSG "$ORACLE_HOME/bin/crsctl not found when attempting to start"
    $LOGMSG "  ASM instance $ORACLE_SID."

  else
    COUNT=0
    $ORACLE_HOME/bin/crsctl check css
    RC=$?
    while [ "$RC" != "0" ];
      do
      COUNT=`expr $COUNT + 1`
      if [ $COUNT = 15 ] ; then
        # 15 tries with 20 sec interval => 5 minutes timeout
        $LOGMSG "Timed out waiting to start ASM instance $ORACLE_SID"        
        $LOGMSG "  CSS service is NOT available."
        exit $COUNT
      fi
      $LOGMSG "Waiting for Oracle CSS service to be available before starting "
      $LOGMSG " ASM instance $ORACLE_SID. Wait $COUNT."
      sleep 20
      $ORACLE_HOME/bin/crsctl check css
      RC=$?
    done
  fi
  startinst
}

# Start of dbstartup script
#
# Loop for every entry in oratab file and and try to start
# that ORACLE.
#
# ASM instances need to be started before ‘Database instances’
# ASM instance is identified with ‘+’ prefix in ORACLE_SID
# Following loop brings up ASM instance[s]

cat $ORATAB | while read LINE
do
case $LINE in
  \#*)                ;;        #comment-line in oratab
  *)
  ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
  if [ "$ORACLE_SID" = '*' ] ; then
    # same as NULL SID – ignore this entry
    ORACLE_SID=""
    continue
  fi
  # Proceed only if last field is ‘Y’.
  if [ "`echo $LINE | awk -F: '{print $NF}' -`" = "Y" ] ; then
    # If ASM instances
    if [ `echo $ORACLE_SID | cut -b 1` = '+' ]; then
      INST="ASM instance"
      ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
      # Called scripts use same home directory
      export ORACLE_HOME
      # file for logging script’s output
      LOG=$ORACLE_HOME/startup.log
      touch $LOG
      chmod a+r $LOG
      echo "Processing $INST \"$ORACLE_SID\": log file $ORACLE_HOME/startup.log"
      startasminst >> $LOG 2>&1
    fi
  fi
  ;;
esac
done

# exit if there was any trouble bringing up ASM instance[s]
if [ "$?" != "0" ] ; then
  exit 2
fi

#
# Following loop brings up ‘Database instances’
#
cat $ORATAB | while read LINE
do
case $LINE in
  \#*)                ;;        #comment-line in oratab
  *)
  ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
  if [ "$ORACLE_SID" = '*' ] ; then
    # same as NULL SID – ignore this entry
    ORACLE_SID=""
    continue
  fi
  # Proceed only if last field is ‘Y’.
  if [ "`echo $LINE | awk -F: '{print $NF}' -`" = "Y" ] ; then
    # If non-ASM instances
    if [ `echo $ORACLE_SID | cut -b 1` != '+' ]; then
      INST="Database instance"
      ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
      # Called scripts use same home directory
      export ORACLE_HOME
      # file for logging script’s output
      LOG=$ORACLE_HOME/startup.log
      touch $LOG
      chmod a+r $LOG
      echo "Processing $INST \"$ORACLE_SID\": log file $ORACLE_HOME/startup.log"
      startinst >> $LOG 2>&1
    fi
  fi
  ;;
esac
done

#
# Following loop brings up ‘Database instances’ that have wait state ‘W’
#
cat $ORATAB | while read LINE
do
case $LINE in
  \#*)                ;;        #comment-line in oratab
  *)
  ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
  if [ "$ORACLE_SID" = '*' ] ; then
    # same as NULL SID – ignore this entry
    ORACLE_SID=""
    continue
  fi
  # Proceed only if last field is ‘W’.
  if [ "`echo $LINE | awk -F: '{print $NF}' -`" = "W" ] ; then
    W_ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
    # DB instances with ‘W’ (wait state) have a dependency on ASM instances via CRS.
    # Wait here for ‘all’ ASM instances to become available.
    cat $ORATAB | while read LINE
    do
    case $LINE in
      \#*)                ;;        #comment-line in oratab
      *)
      ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
      if [ "$ORACLE_SID" = '*' ] ; then
        # same as NULL SID – ignore this entry
        ORACLE_SID=""
        continue
      fi
      if [ `echo $ORACLE_SID | cut -b 1` = '+' ]; then
        INST="ASM instance"
        ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
        if [ -x $ORACLE_HOME/bin/srvctl ] ; then
          COUNT=0
          NODE=`olsnodes -l`
          RNODE=`srvctl status asm -n $NODE | grep "$ORACLE_SID is running"`
          RC=$?
          while [ "$RC" != "0" ]; # wait until this comes up!
          do
            COUNT=$((COUNT+1))
            if [ $COUNT = 5 ] ; then
              # 5 tries with 60 sec interval => 5 minutes timeout
              $LOGMSG "Error: Timed out waiting on CRS to start ASM instance $ORACLE_SID"        
              exit $COUNT
            fi
            $LOGMSG "Waiting for Oracle CRS service to start ASM instance $ORACLE_SID"
            $LOGMSG "Wait $COUNT."
            sleep 60
            RNODE=`srvctl status asm -n $NODE | grep "$ORACLE_SID is running"`
            RC=$?
          done
        else
          $LOGMSG "Error: \"${W_ORACLE_SID}\" has dependency on ASM instance \"${ORACLE_SID}\""
          $LOGMSG "Error: Need $ORACLE_HOME/bin/srvctl to check this dependency"
        fi
      fi     # asm instance
      ;;
    esac
    done # innner while
  fi
  ;;
esac
done # outer while

# by now all the ASM instances have come up and we can proceed to bring up
# DB instance with ‘W’ wait status

cat $ORATAB | while read LINE
do
case $LINE in
  \#*)                ;;        #comment-line in oratab
  *)
  ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
  if [ "$ORACLE_SID" = '*' ] ; then
    # same as NULL SID – ignore this entry
    ORACLE_SID=""
    continue
  fi
  # Proceed only if last field is ‘W’.
  if [ "`echo $LINE | awk -F: '{print $NF}' -`" = "W" ] ; then
    INST="Database instance"
    if [ `echo $ORACLE_SID | cut -b 1` = '+' ]; then
      $LOGMSG "Error: ${INST} \"${ORACLE_SID}\" NOT started"
      $LOGMSG "Error: incorrect usage: ‘W’ not allowed for ASM instances"
      continue
    fi
    ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
    # Called scripts use same home directory
    export ORACLE_HOME
    # file for logging script’s output
    LOG=$ORACLE_HOME/startup.log
    touch $LOG
    chmod a+r $LOG
    echo "Processing $INST \"$ORACLE_SID\": log file $ORACLE_HOME/startup.log"
    startinst >> $LOG 2>&1
  fi
  ;;
esac
done

 

##########################################dbshut内容##########################################

#!/bin/sh
#
# $Id: dbshut.sh 22-may-2008.05:19:31 arogers Exp $
# Copyright (c) 1991, 2008, Oracle. All rights reserved. 
#

###################################
#
# usage: dbshut $ORACLE_HOME
#
# This script is used to shutdown ORACLE from /etc/rc(.local).
# It should ONLY be executed as part of the system boot procedure.
#
# This script will shutdown all databases listed in the oratab file
# whose third field is a "Y" or "W".  If the third field is set to "Y" and
# there is no ORACLE_SID for an entry (the first field is a *),
# then this script will ignore that entry.
#
# This script requires that ASM ORACLE_SID’s start with a +, and
# that non-ASM instance ORACLE_SID’s do not start with a +.
#
# Note:
# Use ORACLE_TRACE=T for tracing this script.
# Oracle Net Listener is also shutdown using this script.
#
# The progress log for each instance shutdown is logged in file
# $ORACLE_HOME/shutdown.log.
#
# On all UNIX platforms except SOLARIS
# ORATAB=/etc/oratab
#
# To configure, update ORATAB with Instances that need to be shutdown
#    Entries are of the form:
#    $ORACLE_SID:$ORACLE_HOME:<N|Y>:
#    An example entry:
#    main:/usr/lib/oracle/emagent_10g:Y
#
#####################################

trap ‘exit’ 1 2 3
case $ORACLE_TRACE in
  T) set -x ;;
esac

# Set path if path not set (if called from /etc/rc)
SAVE_PATH=/bin:/usr/bin:/etc:${PATH} ; export PATH
SAVE_LLP=$LD_LIBRARY_PATH

# The  this to bring down Oracle Net Listener
ORACLE_HOME_LISTNER=’/oracle/11g’
if [ ! $ORACLE_HOME_LISTNER ] ; then
  echo "ORACLE_HOME_LISTNER is not SET, unable to auto-stop Oracle Net Listener"
  echo "Usage: $0 ORACLE_HOME"
else
  LOG=$ORACLE_HOME_LISTNER/listener.log

  # Set the ORACLE_HOME for the Oracle Net Listener, it gets reset to
  # a different ORACLE_HOME for each entry in the oratab.
  export ORACLE_HOME=$ORACLE_HOME_LISTNER

  # Stop Oracle Net Listener
  if [ -f $ORACLE_HOME_LISTNER/bin/tnslsnr ] ; then
    echo "$0: Stoping Oracle Net Listener" >> $LOG 2>&1
    $ORACLE_HOME_LISTNER/bin/lsnrctl stop >> $LOG 2>&1 &
  else
    echo "Failed to auto-stop Oracle Net Listener using $ORACLE_HOME_LISTNER/bin/tnslsnr"
  fi
fi

# Set this in accordance with the platform
ORATAB=/etc/oratab
if [ ! $ORATAB ] ; then
  echo "$ORATAB not found"
  exit 1;
fi

# Stops an instance
stopinst() {
  ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
  if [ "$ORACLE_SID" = '*' ] ; then
    ORACLE_SID=""
  fi
# Called programs use same database ID
  export ORACLE_SID
  ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
# Called scripts use same home directory
  export ORACLE_HOME
# Put $ORACLE_HOME/bin into PATH and export.
  PATH=$ORACLE_HOME/bin:${SAVE_PATH} ; export PATH
# add for bug 652997
  LD_LIBRARY_PATH=${ORACLE_HOME}/lib:${SAVE_LLP} ; export LD_LIBRARY_PATH
  PFILE=${ORACLE_HOME}/dbs/init${ORACLE_SID}.ora

# See if it is a V6 or V7 database
  VERSION=undef
  if [ -f $ORACLE_HOME/bin/sqldba ] ; then
    SQLDBA=sqldba
    VERSION=`$ORACLE_HOME/bin/sqldba command=exit | awk ‘
      /SQL\*DBA: (Release|Version)/ {split($3, V, ".") ;
      print V[1]}’`
    case $VERSION in
      "6") ;;
      *) VERSION="internal" ;;
    esac
  else
    if [ -f $ORACLE_HOME/bin/svrmgrl ] ; then
      SQLDBA=svrmgrl
      VERSION="internal"
    else
      SQLDBA="sqlplus /nolog"
    fi
  fi

  case $VERSION in
    "6")  sqldba command=shutdown ;;
    "internal")  $SQLDBA <<EOF
connect internal
shutdown immediate
EOF
     ;;
     *)  $SQLDBA <<EOF
connect / as sysdba
shutdown immediate
quit
EOF
     ;;
  esac

  if test $? -eq 0 ; then
    echo "${INST} \"${ORACLE_SID}\" shut down."
  else
    echo "${INST} \"${ORACLE_SID}\" not shut down."
  fi
}

#
# Loop for every entry in oratab file and and try to shut down
# that ORACLE
#
# Following loop shuts down ‘Database Instance[s]‘ with ‘Y’ entry

cat $ORATAB | while read LINE
do
  case $LINE in
  \#*)                ;;        #comment-line in oratab
  *)
  ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
  if [ "$ORACLE_SID" = '*' ] ; then
      # NULL SID – ignore
      ORACLE_SID=""
      continue
  fi
  # Proceed only if last field is ‘Y’ or ‘W’
  if [ "`echo $LINE | awk -F: '{print $NF}' -`" = "Y" ] ; then
    if [ `echo $ORACLE_SID | cut -b 1` != '+' ]; then
      INST="Database instance"
      ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
      LOG=$ORACLE_HOME/shutdown.log
      echo "Processing $INST \"$ORACLE_SID\": log file $LOG"
      stopinst >> $LOG 2>&1
    fi
  fi
  ;;
  esac
done

#
# Following loop shuts down ‘Database Instance[s]‘ with ‘W’ entry
#
cat $ORATAB | while read LINE
do
  case $LINE in
  \#*)                ;;        #comment-line in oratab
  *)
  ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
  if [ "$ORACLE_SID" = '*' ] ; then
      # NULL SID – ignore
      ORACLE_SID=""
      continue
  fi
  # Proceed only if last field is ‘Y’ or ‘W’
  if [ "`echo $LINE | awk -F: '{print $NF}' -`" = "W" ] ; then
    if [ `echo $ORACLE_SID | cut -b 1` != '+' ]; then
      INST="Database instance"
      ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
      LOG=$ORACLE_HOME/shutdown.log
      echo "Processing $INST \"$ORACLE_SID\": log file $LOG"
      stopinst >> $LOG 2>&1
    fi
  fi
  ;;
  esac
done

#
# Following loop shuts down ‘ASM Instance[s]‘
#

cat $ORATAB | while read LINE
do
  case $LINE in
    \#*)                ;;        #comment-line in oratab
    *)
    ORACLE_SID=`echo $LINE | awk -F: ‘{print $1}’ -`
    if [ "$ORACLE_SID" = '*' ] ; then
      # NULL SID – ignore
      ORACLE_SID=""
      continue
    fi
    # Proceed only if last field is ‘Y’.
    # Entries whose last field is not Y or N are not DB entry, ignore them.
    if [ "`echo $LINE | awk -F: '{print $NF}' -`" = "Y" ] ; then
      if [ `echo $ORACLE_SID | cut -b 1` = '+' ]; then
        INST="ASM instance"
        ORACLE_HOME=`echo $LINE | awk -F: ‘{print $2}’ -`
        LOG=$ORACLE_HOME/shutdown.log
        echo "Processing $INST \"$ORACLE_SID\": log file $LOG"
        stopinst >> $LOG 2>&1
      fi
    fi
  ;;
  esac
done

]]> http://blog.tianbaoyong.com/databsse/oracle-11g-r2-linux-x64-installation-notes.html/feed 0 Linux基于iptables的简单防火墙设置模板 http://blog.tianbaoyong.com/systemconfig/linux-based-iptables-firewall-settings-simple-template.html http://blog.tianbaoyong.com/systemconfig/linux-based-iptables-firewall-settings-simple-template.html#comments Tue, 15 Mar 2011 02:33:33 +0000 tian5258 http://blog.tianbaoyong.com/systemconfig/linux-based-iptables-firewall-settings-simple-template.html #!/bin/bash
# 此脚本根据鸟哥私房菜脚本修改而成
# 设置相关参数，认真阅读说明，慎重填写

  #服务器的公网接口设备名，如果是拨号上网，也可能是 ppp0
  EXTIF="eth0"

  #连接内部网络的网卡设备名，如果没有则留空（INIF=""）则内网资源无法访问                   
  INIF="eth1"               

  #内部主机或网段，如果留空，则内网主机不能根据IP授权上网。如果有多个主机或网段，用空格隔开，
  #多网段：如INNET="192.168.1.0/24 192.168.100.0/24"
  #多主机：如INNET="172.16.15.126 172.16.15.105" 
 
  INNET="172.16.150.101"   

  export EXTIF INIF INNET
 
# 第一部份，本机的基本防火墙设置！

# 1. 核心路由：
  # 开启预防TCP Flooding 的 DoS 攻击，这设置很浪费资源，慎重！！
  echo "1" > /proc/sys/net/ipv4/tcp_syncookies
  # 取消 ping 广播的回应；
  echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
  # 开启逆向路径过滤
  for i in /proc/sys/net/ipv4/conf/*/rp_filter; do
    echo "1" > $i
  done
  # 对错误的包进行日志记录
  # record some problems packets.
  #for i in /proc/sys/net/ipv4/conf/*/log_martians; do
  #    echo "1" > $i
  #done
  # 取消来源路由；
  for i in /proc/sys/net/ipv4/conf/*/accept_source_route; do
    echo "0" > $i
  done
  # 取消重新宣告路径的功能。
  for i in /proc/sys/net/ipv4/conf/*/accept_redirects; do
    echo "0" > $i
  done
  # 取消传送送重新宣告路径的功能。
  for i in /proc/sys/net/ipv4/conf/*/send_redirects; do
    echo "0" > $i
  done
# 2. 清除规则、预定义策略，开放 lo 相关设定
  PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/local/sbin:/usr/local/bin; export PATH
  iptables -F
  iptables -X
  iptables -Z
  iptables -P INPUT   DROP
  iptables -P OUTPUT  ACCEPT
  iptables -P FORWARD ACCEPT
  iptables -A INPUT -i lo -j ACCEPT
  iptables -A INPUT -m state –state RELATED,ESTABLISHED -j ACCEPT
# 4. 允许某些类型的 ICMP 封包近入
  AICMP="0 3 3/4 4 11 12 14 16 18"
  for tyicmp in $AICMP
  do
    iptables -A INPUT -i $EXTIF -p icmp –icmp-type $tyicmp -j ACCEPT
  done
# 5. 允许本机的公网地址的某些服务开放(Example)
# iptables -A INPUT -p TCP -i $EXTIF –dport  公网端口  –sport 1024:65534 -j ACCEPT
# 允许主机的MAC检查
# iptables -A FORWARD -s 内网主机地址 -m mac ! –mac-source 内网主机MAC -j DROP

# 第二部份，针对内网主机的防火墙设置！！
# 1. 载入模块
modprobe ip_tables
modprobe iptable_nat
modprobe ip_nat_ftp
modprobe ip_nat_irc
modprobe ip_conntrack
modprobe ip_conntrack_ftp
modprobe ip_conntrack_irc
# 2. 清除NAT规则
iptables -F -t nat
iptables -X -t nat
iptables -Z -t nat
iptables -t nat -P PREROUTING  ACCEPT
iptables -t nat -P POSTROUTING ACCEPT
iptables -t nat -P OUTPUT      ACCEPT
# 3. 开启路由功能
  #允许对内部网络的资源进行访问
  if [ "$INIF" != "" ]; then
      iptables -A INPUT -i $INIF -j ACCEPT
      echo "1" > /proc/sys/net/ipv4/ip_forward
  #允许指定网段或主机通过NAT接入Internet
      if [ "$INNET" != "" ]; then
          for innet in $INNET
          do
              iptables -t nat -A POSTROUTING -s $innet -o $EXTIF -j MASQUERADE
          done
      fi
  fi
# 4. 发布内网主机服务的设置
#第一种写法
# iptables -t nat -A PREROUTING -d 公网地址 -p tcp -m tcp –dport 公网端口 -j DNAT –to-destination 内网地址:内网端口
# iptables -t nat -A POSTROUTING -s 内网网段（172.16.150.96/27） -d 内网地址 -p tcp -m tcp –dport 内网端口 -j SNAT –to-source NAT内网地址
#第二种写法
#iptables -t nat -A PREROUTING  -d 公网地址       -p tcp –dport 公网端口     -j DNAT –to 内网地址:内网端口
#iptables -t nat -A POSTROUTING -d 内网地址     -p tcp –dport 内网端口     -j SNAT –to NAT内网地址

/etc/init.d/iptables save

]]> http://blog.tianbaoyong.com/systemconfig/linux-based-iptables-firewall-settings-simple-template.html/feed 0 MYSQL集群的备份与恢复 http://blog.tianbaoyong.com/defaultcat/mysql-backup-and-recovery-cluster-2.html http://blog.tianbaoyong.com/defaultcat/mysql-backup-and-recovery-cluster-2.html#comments Thu, 10 Mar 2011 12:49:12 +0000 tian5258 http://blog.tianbaoyong.com/defaultcat/mysql-backup-and-recovery-cluster-2.html 1、在管理节点上进行备份。
ndb_mgm> start backup 5
Waiting for completed, this may take several minutes
Node 2: Backup 5 started from node 1
Node 2: Backup 5 started from node 1 completed
StartGCP: 90139 StopGCP: 90142
#Records: 2063 #LogRecords: 0
Data: 51468 bytes Log: 0 bytes

2:测试
（1）
关闭ndbd节点
ndb_mgm> shutdown
Node 3: Cluster shutdown initiated
Node 2: Cluster shutdown initiated
Node 3: Node shutdown completed.
2 NDB Cluster node(s) have shutdown.
Disconnecting to allow management server to shutdown.
Node 2: Node shutdown completed.
（2)重启节点
ndb_mgmd -f /var/lib/mysql-cluster/config.ini
ndbd –initial(清除里以前的数据)
mysql> show tables;
Empty set (0.02 sec)
3:恢复
在NDBD节点上进行恢复。（每个节点都得执行一次，因为数据分散在两个节点上）
在MASTER上备份的时候要加 -m 开关。
在SLAVE上要加-d 而且不要-m开关。
（1)第一个节点
ndb_restore -n2 -b5 -r -m –backup_path=/var/lib/mysql-clusterbak/BACKUP/BACKUP-5/
Nodeid = 2
Backup Id = 5
backup path = /var/lib/mysql-clusterbak/BACKUP/BACKUP-5/
Opening file ‘/var/lib/mysql-clusterbak/BACKUP/BACKUP-5/BACKUP-5.2.ctl’
Backup version in files: ndb-6.3.11 ndb version: mysql-5.1.32 ndb-7.0.5
Stop GCP of Backup: 0
Connected to ndb!!
(2)第二个节点
ndb_restore -n3 -b5 -r -d –backup_path=/var/lib/mysql-clusterbak/BACKUP/BACKUP-5/
(2)查看
mysql> show tables;
+—————-+
| Tables_in_test |
+—————-+
| ctest          |
| example        |
其中
-n, –nodeid=#      Backup files from node with id
-b, –backupid=#    Backup id
-r, –restore_data Restore table data/logs into NDB Cluster using NDBAPI
-m, –restore_meta Restore meta data into NDB Cluster using NDBAPI
-d, –no-restore-disk-objects
                      Dont restore disk objects (tablespace/logfilegroups etc)
[root@bogon BACKUP-5]# ll
total 44
-rw-r–r– 1 root root 26912 May 18 20:23 BACKUP-5-0.2.Data
-rw-r–r– 1 root root 10356 May 18 20:23 BACKUP-5.2.ctl (5,是backupid，2是nodeid)
-rw-r–r– 1 root root    52 May 18 20:23 BACKUP-5.2.log

]]> http://blog.tianbaoyong.com/defaultcat/mysql-backup-and-recovery-cluster-2.html/feed 0 配置MySQL数据库的高可用性和负载均衡 http://blog.tianbaoyong.com/systemconfig/configure-mysql-database-for-high-availability-and-load-balancing.html http://blog.tianbaoyong.com/systemconfig/configure-mysql-database-for-high-availability-and-load-balancing.html#comments Thu, 10 Mar 2011 03:08:49 +0000 tian5258 http://blog.tianbaoyong.com/systemconfig/configure-mysql-database-for-high-availability-and-load-balancing.html MySQL集群是一种分布式设计，目标是要达到没有任何单点故障点。因此，任何组成部分都应该拥有自己的内存和磁盘。通过这种冗余设计，MySQL声称数据的可用度可以达到99。999%。

LVS由前端的负载均衡器(Load Balancer，LB)和后端的真实服务器(Real Server，RS)群组成。RS间可通过局域网或广域网连接。LVS的这种结构对用户是透明的，用户只能看见一台作为LB的虚拟服务器(Virtual Server)，而看不到提供服务的RS群。

image

MySQL Cluster原理图

image

HA+BL原理图

 

MySQL Cluster配置

 

实验环境：
1、操作系统：CentOS 5.5 64bit
2、软件：http://mysql.stu.edu.tw/Downloads/MySQL-Cluster-7.1/mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23.tar.gz
3、环境要求：关闭防火墙和SELinux
4、机器IP及担任角色
                                           MGMId    DataId    SQLId
    172.16.150.124                1                21
    172.16.150.121                2                22
    172.16.150.118                                  11        23
    172.16.150.117                                  12        24

需要执行的命令如下：

 

# 124-MGM-SQL    ##############################################################    

tar -zxvf mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23.tar.gz
mv mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23 /usr/local/mysql
echo "PATH=$PATH:/usr/local/mysql/bin" >> ~/.bash_profile
source ~/.bash_profile
#MGM Node Config
mkdir -p /usr/local/mysql/ndbdata
mkdir /var/lib/mysql-cluster
mkdir /usr/local/mysql/cluster-conf
echo "
[NDB_MGMD DEFAULT]
PortNumber=1186
DataDir=/var/lib/mysql-cluster
ArbitrationRank=1
# Management nodes
[NDB_MGMD]
nodeid = 1
Hostname = 172.16.150.124
[NDB_MGMD]
nodeid = 2
Hostname = 172.16.150.121
# Storage nodes
[NDBD DEFAULT]
DataDir=/var/lib/mysql-cluster
[NDBD]
nodeid=11
Hostname=172.16.150.118
[NDBD]
nodeid=12
Hostname=172.16.150.117
#SQL Nodes
[MYSQLD]
nodeid=21
Hostname=172.16.150.124
[MYSQLD]
nodeid=22
Hostname=172.16.150.121
[MYSQLD]
nodeid=23
Hostname=172.16.150.118
[MYSQLD]
nodeid=24
Hostname=172.16.150.117
"> /usr/local/mysql/cluster-conf/config.ini
#SQL Node Config
groupadd mysql
useradd -g mysql mysql
chown -R mysql:mysql /usr/local/mysql
cp /usr/local/mysql/support-files/my-large.cnf /etc/my.cnf
cd /usr/local/mysql
scripts/mysql_install_db --user=mysql
cp /usr/local/mysql/support-files/mysql.server /etc/rc.d/init.d/mysqld
chkconfig --add mysqld
chkconfig --level 35 mysqld on
echo "
[mysqld]
skip-name-resolve
lower_case_table_names=1
ndbcluster
#connectstring: primary,secondary management nodes
ndb-connectstring=172.16.150.124,172.16.150.121
#Data Node Config
[mysql_cluster]
ndb-connectstring=21,172.16.150.124,172.16.150.121
" >> /etc/my.cnf
echo "/usr/local/mysql/bin/ndb_mgmd -f  /usr/local/mysql/cluster-conf/config.ini "
>> /etc/rc.d/rc.local

# 121-MGM-SQL    ##############################################################    

tar -zxvf mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23.tar.gz
mv mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23 /usr/local/mysql
echo "PATH=$PATH:/usr/local/mysql/bin" >> ~/.bash_profile
source ~/.bash_profile
#MGM Node Config
mkdir -p /usr/local/mysql/ndbdata
mkdir /var/lib/mysql-cluster
mkdir /usr/local/mysql/cluster-conf
echo "
[NDB_MGMD DEFAULT]
PortNumber=1186
DataDir=/var/lib/mysql-cluster
ArbitrationRank=1
# Management nodes
[NDB_MGMD]
nodeid = 1
Hostname = 172.16.150.124
[NDB_MGMD]
nodeid = 2
Hostname = 172.16.150.121
# Storage nodes
[NDBD DEFAULT]
DataDir=/var/lib/mysql-cluster
[NDBD]
nodeid=11
Hostname=172.16.150.118
[NDBD]
nodeid=12
Hostname=172.16.150.117
#SQL Nodes
[MYSQLD]
nodeid=21
Hostname=172.16.150.124
[MYSQLD]
nodeid=22
Hostname=172.16.150.121
[MYSQLD]
nodeid=23
Hostname=172.16.150.118
[MYSQLD]
nodeid=24
Hostname=172.16.150.117
"> /usr/local/mysql/cluster-conf/config.ini
#SQL Node Config
groupadd mysql
useradd -g mysql mysql
chown -R mysql:mysql /usr/local/mysql
cp /usr/local/mysql/support-files/my-large.cnf /etc/my.cnf
cd /usr/local/mysql
scripts/mysql_install_db --user=mysql
cp /usr/local/mysql/support-files/mysql.server /etc/rc.d/init.d/mysqld
chkconfig --add mysqld
chkconfig --level 35 mysqld on
echo "
[mysqld]
skip-name-resolve
lower_case_table_names=1
ndbcluster
#connectstring: primary,secondary management nodes
ndb-connectstring=172.16.150.124,172.16.150.121
#Data Node Config
[mysql_cluster]
ndb-connectstring=22,172.16.150.124,172.16.150.121
" >> /etc/my.cnf
echo "/usr/local/mysql/bin/ndb_mgmd -f  /usr/local/mysql/cluster-conf/config.ini "
>> /etc/rc.d/rc.local

# 118-NDB-SQL    ##############################################################    

tar -zxvf mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23.tar.gz
mv mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23 /usr/local/mysql
echo "PATH=$PATH:/usr/local/mysql/bin" >> ~/.bash_profile
source ~/.bash_profile
mkdir /var/lib/mysql-cluster
#SQL Node Config
groupadd mysql
useradd -g mysql mysql
chown -R mysql:mysql /usr/local/mysql
cp /usr/local/mysql/support-files/my-large.cnf /etc/my.cnf
cd /usr/local/mysql
scripts/mysql_install_db --user=mysql
cp /usr/local/mysql/support-files/mysql.server /etc/rc.d/init.d/mysqld
chkconfig --add mysqld
chkconfig --level 35 mysqld on
echo "
[mysqld]
skip-name-resolve
lower_case_table_names=1
ndbcluster
#connectstring: primary,secondary management nodes
ndb-connectstring=172.16.150.124,172.16.150.121
#Data Node Config
[mysql_cluster]
ndb-connectstring=23,172.16.150.124,172.16.150.121
" >> /etc/my.cnf
echo "/usr/local/mysql/bin/ndbd"
>> /etc/rc.d/rc.local

# 117-NDB-SQL    ##############################################################    

tar -zxvf mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23.tar.gz
mv mysql-cluster-gpl-7.1.10-linux-x86_64-glibc23 /usr/local/mysql
source ~/.bash_profile
mkdir /var/lib/mysql-cluster
#SQL Node Config
echo "PATH=$PATH:/usr/local/mysql/bin" >> ~/.bash_profile
groupadd mysql
useradd -g mysql mysql
chown -R mysql:mysql /usr/local/mysql
cp /usr/local/mysql/support-files/my-large.cnf /etc/my.cnf
cd /usr/local/mysql
scripts/mysql_install_db --user=mysql
cp /usr/local/mysql/support-files/mysql.server /etc/rc.d/init.d/mysqld
chkconfig --add mysqld
chkconfig --level 35 mysqld on
echo "
[mysqld]
skip-name-resolve
lower_case_table_names=1
ndbcluster
#connectstring: primary,secondary management nodes
ndb-connectstring=172.16.150.124,172.16.150.121
#Data Node Config
[mysql_cluster]
ndb-connectstring=24,172.16.150.124,172.16.150.121
" >> /etc/my.cnf
echo "/usr/local/mysql/bin/ndbd"
>> /etc/rc.d/rc.local

阶段测试

在MySQL-M计算机上执行：ndb_mgm -e show
        [root@MySQL-M ~]# ndb_mgm -e show
        Connected to Management Server at: 172.16.150.124:1186
        Cluster Configuration
        ---------------------
        [ndbd(NDB)]    2 node(s)
        id=11    @172.16.150.118  (mysql-5.1.51 ndb-7.1.10, Nodegroup: 0, Master)
        id=12    @172.16.150.117  (mysql-5.1.51 ndb-7.1.10, Nodegroup: 0)

        [ndb_mgmd(MGM)]    2 node(s)
        id=1    @172.16.150.124  (mysql-5.1.51 ndb-7.1.10)
        id=2    @172.16.150.121  (mysql-5.1.51 ndb-7.1.10)

        [mysqld(API)]    4 node(s)
        id=21    @172.16.150.124  (mysql-5.1.51 ndb-7.1.10)
        id=22    @172.16.150.121  (mysql-5.1.51 ndb-7.1.10)
        id=23    @172.16.150.118  (mysql-5.1.51 ndb-7.1.10)
        id=24    @172.16.150.117  (mysql-5.1.51 ndb-7.1.10)
在MySQL-S计算机上执行：ndb_mgm -e show
        [root@MySQL-S ~]# ndb_mgm -e show
        Connected to Management Server at: 172.16.150.124:1186
        Cluster Configuration
        ---------------------
        [ndbd(NDB)]    2 node(s)
        id=11    @172.16.150.118  (mysql-5.1.51 ndb-7.1.10, Nodegroup: 0, Master)
        id=12    @172.16.150.117  (mysql-5.1.51 ndb-7.1.10, Nodegroup: 0)

        [ndb_mgmd(MGM)]    2 node(s)
        id=1    @172.16.150.124  (mysql-5.1.51 ndb-7.1.10)
        id=2    @172.16.150.121  (mysql-5.1.51 ndb-7.1.10)

        [mysqld(API)]    4 node(s)
        id=21    @172.16.150.124  (mysql-5.1.51 ndb-7.1.10)
        id=22    @172.16.150.121  (mysql-5.1.51 ndb-7.1.10)
        id=23    @172.16.150.118  (mysql-5.1.51 ndb-7.1.10)
        id=24    @172.16.150.117  (mysql-5.1.51 ndb-7.1.10)
关闭Cluster-SQL或MySQL-SQL2上面的ndbd进程：
    ps -aux | grep ndbd
        [root@Cluster-SQL ~]# ps aux | grep ndbd
        root      3490  0.0  0.1  35884   804 ?        Ss   09:57   0:00 /usr/local/mysql/bin/ndbd
        root      3491  0.3 64.3 417912 328244 ?       Sl   09:57   0:05 /usr/local/mysql/bin/ndbd
        root      3693  0.0  0.1  61144   728 pts/0    S+   10:28   0:00 grep ndbd
    kill 3490
    kill 3491
再次确认MySQL-M或者MySQL-S上面的Cluster的状态
        [root@MySQL-M ~]# ndb_mgm -e show
        Connected to Management Server at: 172.16.150.124:1186
        Cluster Configuration
        ---------------------
        [ndbd(NDB)]    2 node(s)
        id=11 (not connected, accepting connect from 172.16.150.118)
        id=12    @172.16.150.117  (mysql-5.1.51 ndb-7.1.10, Nodegroup: 0, Master)

        [ndb_mgmd(MGM)]    2 node(s)
        id=1    @172.16.150.124  (mysql-5.1.51 ndb-7.1.10)
        id=2    @172.16.150.121  (mysql-5.1.51 ndb-7.1.10)

        [mysqld(API)]    4 node(s)
        id=21    @172.16.150.124  (mysql-5.1.51 ndb-7.1.10)
        id=22    @172.16.150.121  (mysql-5.1.51 ndb-7.1.10)
        id=23    @172.16.150.118  (mysql-5.1.51 ndb-7.1.10)
        id=24    @172.16.150.117  (mysql-5.1.51 ndb-7.1.10)
启动上述关闭的ndbd服务
    /usr/local/mysql/bin/ndbd
再次确认MySQL-M或者MySQL-S上面的Cluster的状态
        [root@MySQL-M ~]# ndb_mgm -e show
        Connected to Management Server at: 172.16.150.124:1186
        Cluster Configuration
        ---------------------
        [ndbd(NDB)]    2 node(s)
        id=11    @172.16.150.118  (mysql-5.1.51 ndb-7.1.10, starting, Nodegroup: 0)
        id=12    @172.16.150.117  (mysql-5.1.51 ndb-7.1.10, Nodegroup: 0, Master)

        [ndb_mgmd(MGM)]    2 node(s)
        id=1    @172.16.150.124  (mysql-5.1.51 ndb-7.1.10)
        id=2    @172.16.150.121  (mysql-5.1.51 ndb-7.1.10)

        [mysqld(API)]    4 node(s)
        id=21    @172.16.150.124  (mysql-5.1.51 ndb-7.1.10)
        id=22    @172.16.150.121  (mysql-5.1.51 ndb-7.1.10)
        id=23    @172.16.150.118  (mysql-5.1.51 ndb-7.1.10)
        id=24    @172.16.150.117  (mysql-5.1.51 ndb-7.1.10)
在SQL节点[172.16.150.124]执行
 
mysql> create database world;
Query OK, 1 row affected (0.09 sec)

mysql> use world;
Database changed

mysql> CREATE TABLE `City` (
 -> `ID` int(11) NOT NULL auto_increment,
 -> `Name` char(35) NOT NULL default '',
 -> `CountryCode` char(3) NOT NULL default '',
 -> `District` char(20) NOT NULL default '',
 -> `Population` int(11) NOT NULL default '0',
 -> PRIMARY KEY (`ID`)
 -> ) ENGINE=NDBCLUSTER DEFAULT CHARSET=utf8;
Query OK, 0 rows affected (0.93 sec)

mysql> INSERT INTO `City` VALUES (1,'Kabul','AFG','Kabol',1780000);
Query OK, 1 row affected (0.00 sec)

mysql> INSERT INTO `City` VALUES (2,'Qandahar','AFG','Qandahar',237500);
Query OK, 1 row affected (0.00 sec)

mysql> INSERT INTO `City` VALUES (3,'Herat','AFG','Herat',186800);
Query OK, 1 row affected (0.00 sec)

mysql> select * from City;
+----+----------+-------------+----------+------------+
| ID | Name | CountryCode | District | Population |
+----+----------+-------------+----------+------------+
| 3 | Herat | AFG | Herat | 186800 |
| 1 | Kabul | AFG | Kabol | 1780000 |
| 2 | Qandahar | AFG | Qandahar | 237500 |
+----+----------+-------------+----------+------------+
3 rows in set (0.00 sec)

[root@candyshop mysql]# ./bin/mysql -u root
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.1.30-ndb-6.3.20-cluster-gpl MySQL Cluster Server (GPL)

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| mysql |
| test |
| world |
+--------------------+
4 rows in set (0.00 sec)

mysql> select * from world.City;
+----+----------+-------------+----------+------------+
| ID | Name | CountryCode | District | Population |
+----+----------+-------------+----------+------------+
| 1 | Kabul | AFG | Kabol | 1780000 |
| 2 | Qandahar | AFG | Qandahar | 237500 |
| 3 | Herat | AFG | Herat | 186800 |
+----+----------+-------------+----------+------------+
3 rows in set (0.07 sec)

发现之前在另外一个SQL节点[172.16.150.124]创建的数据库也出现在节点[172.16.150.121]上面了。
这样整个安装和测试都完结了。
在sql节点创建的数据会保存在数据节点上，所以一个mysql宕机了不影响数据的存储。

 

高可用性和负载均衡环境配置

服务器环境配置：
原MySQL集群环境：
                                 主机名                 Rule         MGMId    DataId    SQLId
172.16.150.124        MySQL-M            DM+AR        1                21
172.16.150.121        MySQL-S            DS+AR         2                22
172.16.150.118        Cluster-SQL        AR                                 11        23
172.16.150.117        MySQL-SQL2      AR                                 12        24
说明：
Access Route = AR
Director(master) = DM
Director(standby) = DS

####################在MySQL-M和MySQL-S两台计算机上分别执行如下命令：###############
modprobe ip_vs_dh
modprobe ip_vs_ftp
modprobe ip_vs
modprobe ip_vs_lblc
modprobe ip_vs_lblcr
modprobe ip_vs_lc
modprobe ip_vs_nq
modprobe ip_vs_rr
modprobe ip_vs_sed
modprobe ip_vs_sh
modprobe ip_vs_wlc
modprobe ip_vs_wrr

echo "ip_vs_dh
ip_vs_ftp
ip_vs
ip_vs_lblc
ip_vs_lblcr
ip_vs_lc
ip_vs_nq
ip_vs_rr
ip_vs_sed
ip_vs_sh
ip_vs_wlc
ip_vs_wrr " >> /etc/modules

vi /etc/sysctl.conf
net.ipv4.ip_forward = 0
改为：
net.ipv4.ip_forward = 1

/sbin/sysctl -p

在MySQL-M和MySQL-S分别安装软件。
yum clean all
yum install heartbeat
yum install heartbeat  （重新安装一下）
yum install heartbeat-ldirectord
yum inyustall ipvsadm

在MySQL-M和MySQL-S分别设置，两台机器设置相同。
vi /etc/ha.d/ha.cf
logfacility local0
bcast eth1
mcast eth1 225.0.0.1 694 1 0
auto_failback off
node MySQL-M
node MySQL-S
respawn root /usr/lib64/heartbeat/ipfail
apiauth ipfail gid=root uid=root

在MySQL-M和MySQL-S分别设置，两台机器设置相同。
vi /etc/ha.d/haresources
MySQL-M \
ldirectord::ldirectord.cf \
LVSSyncDaemonSwap::master \
IPaddr2::172.16.150.116/27/eth0/172.16.150.127

在MySQL-M和MySQL-S分别设置，两台机器设置相同。
vi /etc/ha.d/authkeys
auth 3
3 md5 514a49f83820e34c877ff48770e48ea7

在MySQL-M和MySQL-S分别设置，两台机器设置相同。
vi /etc/ha.d/ldirectord.cf
checktimeout=3
checkinterval=10
autoreload=yes
quiescent=no
virtual = 172.16.150.116:3306
    real=172.16.150.124:3306 gate
    real=172.16.150.121:3306 gate
    real=172.16.150.118:3306 gate
    real=172.16.150.117:3306 gate
    service=mysql
    scheduler=rr
    protocol=tcp
    checktype=connect
    checkport=3306

在MySQL-M和MySQL-S分别设置，两台机器设置相同。
chmod 600 /etc/ha.d/authkeys
chkconfig --level 2345 heartbeat on
chkconfig --del ldirectord
/etc/init.d/ldirectord stop
/etc/init.d/heartbeat start

MySQL-M和MySQL-S分别测试：

ip addr sh eth0

MySQL-M上的结果（注意是绑定了第二个IP地址了）：
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:0c:29:36:19:90 brd ff:ff:ff:ff:ff:ff
    inet 172.16.150.124/27 brd 172.16.150.127 scope global eth0
    inet 172.16.150.116/27 brd 172.16.150.127 scope global secondary eth0
    inet6 fe80::20c:29ff:fe36:1990/64 scope link
       valid_lft forever preferred_lft forever
MySQL-S上的结果（注意只有一个IP地址）：
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:0c:29:2f:1d:d8 brd ff:ff:ff:ff:ff:ff
    inet 172.16.150.121/27 brd 172.16.150.127 scope global eth0
    inet6 fe80::20c:29ff:fe2f:1dd8/64 scope link
       valid_lft forever preferred_lft forever

/usr/sbin/ldirectord ldirectord.cf status

MySQL-M上的结果（正常是运行）：
ldirectord for /etc/ha.d/ldirectord.cf is running with pid: 4113
MySQL-S上的结果（正常是停止）：
ldirectord is stopped for /etc/ha.d/ldirectord.cf

/sbin/ipvsadm -L -n

MySQL-M上的结果（有路由信息）：
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  172.16.150.116:3306 rr
  -> 172.16.150.117:3306          Route   1      0          0
  -> 172.16.150.118:3306          Route   1      0          0
  -> 172.16.150.121:3306          Route   1      0          0
  -> 172.16.150.124:3306          Local   1      0          0
MySQL-S上的结果（无路由信息）：
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn

/etc/ha.d/resource.d/LVSSyncDaemonSwap master status
MySQL-M上的结果：
master running
(ipvs_syncmaster pid: 4199)
MySQL-S上的结果：
master stopped

# Real Server：MySQL-M，MySQL-S，Cluster-SQL，MySQL-SQL2 分别配置######

1、创建脚本
vi /etc/rc.d/init.d/lvs_rs
#!/bin/sh
# chkconfig: 2345 72 08
# description: Config realserver lo:0 port and apply arp patch
VIP=172.16.150.116
. /etc/rc.d/init.d/functions
case $1 in
    start)
    echo "lo:0 port starting"
    /sbin/ifconfig lo:0 $VIP netmask 255.255.255.255 up
    /sbin/route add -host $VIP dev lo:0
    echo "0" >/proc/sys/net/ipv4/ip_forward
    echo "1" > /proc/sys/net/ipv4/conf/lo/arp_ignore
    echo "2" > /proc/sys/net/ipv4/conf/lo/arp_announce
    echo "1" > /proc/sys/net/ipv4/conf/all/arp_ignore
    echo "2" > /proc/sys/net/ipv4/conf/all/arp_announce
    sysctl -p
    ;;
    stop)
    echo "lo:0 port closing"
    /sbin/route del -host $VIP
    /sbin/ifconfig lo:0 down
    echo "1">/proc/sys/net/ipv4/ip_forward
    echo "0">/proc/sys/net/ipv4/conf/lo/arp_ignore
    echo "0">/proc/sys/net/ipv4/conf/lo/arp_announce
    echo "0">/proc/sys/net/ipv4/conf/all/arp_ignore
    echo "0">/proc/sys/net/ipv4/conf/all/arp_announce
    ;;
    status)
        iothere=`/sbin/ifconfig lo:0 | grep $VIP`
        iorthere=`/bin/netstat -rn|grep $VIP`
        if [ ! "$iothere" -o ! "$iorthere" ];then
            echo "LVS Real Server is STOP"
        else
            echo "LVS Real Server is ALIVE"
        fi
    ;;
    *)
    echo "Usage: $0 {start|stop}"
    exit 1
esac

2、注册守护进程
chmod +x /etc/rc.d/init.d/lvs_rs
chkconfig --add lvs_rs
chkconfig --level 2345 lvs_rs on

阶段测试

具体状态测试，可以参考HA+BL配置部分，下面进行可用性的基本测试
    a、连接虚拟ip
        C:\Users\UniteSE>mysql -h 172.16.150.116 -u test -p
        Enter password: ********
        Welcome to the MySQL monitor.  Commands end with ; or \g.
        Your MySQL connection id is 237
        Server version: 5.1.51-ndb-7.1.10-cluster-gpl-log MySQL Cluster Server (GPL)

        Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

        mysql>
    b、进行数据操作（创建表，使用ENGINE=NDB选项）
        mysql> insert into mytable values(1,'zhengbo');
        Query OK, 1 row affected (0.01 sec)
    c、关闭任意一台计算机
        mysql> select * from mytable;
        ERROR 2013 (HY000): Lost connection to MySQL server during query
        mysql> select * from mytable;
        ERROR 2006 (HY000): MySQL server has gone away
        No connection. Trying to reconnect...
        Connection id:    56
        Current database: clusterdb

        +----+---------------+
        | id | name          |
        +----+---------------+
        |  3 | wangxianggang |
        |  5 | zhangjun      |
        |  1 | zhengbo       |
        |  2 | wangdong      |
        |  4 | yangtao       |
        +----+---------------+
        5 rows in set (0.13 sec)
]]> http://blog.tianbaoyong.com/systemconfig/configure-mysql-database-for-high-availability-and-load-balancing.html/feed 0