DHCP（Dynamic Host Configuration Protocol，\u52a8\u6001\u4e3b\u673a\u914d\u7f6e\u534f\u8bae）\u662f\u4e00\u79cd\u8fd0\u884c\u5728\u5e94\u7528\u5c42\u7684\u7f51\u7edc\u534f\u8bae，\u4e3b\u8981\u7528\u4e8e\u4e3a\u5c40\u57df\u7f51\u5185\u7684\u8bbe\u5907（\u5982\u8ba1\u7b97\u673a\u3001\u624b\u673a\u3001\u7269\u8054\u7f51\u8bbe\u5907\u7b49）\u81ea\u52a8\u5206\u914d IP \u5730\u5740\u53ca\u5176\u4ed6\u7f51\u7edc\u914d\u7f6e\u53c2\u6570，\u7b80\u5316\u7f51\u7edc\u7ba1\u7406\u5e76\u907f\u514d IP \u5730\u5740\u51b2\u7a81\u3002<\/p>\n
\u8bbe\u5907\u63a5\u5165\u7f51\u7edc\u540e，\u901a\u8fc7\u4ee5\u4e0b\u56db\u4e2a\u6b65\u9aa4\u83b7\u53d6\u7f51\u7edc\u914d\u7f6e，\u79f0\u4e3a \u201cDHCP \u4f1a\u8bdd\u201d：<\/p>\n
DHCP Discover（\u53d1\u73b0\u9636\u6bb5）<\/p>\n
DHCP Offer（\u63d0\u4f9b\u9636\u6bb5）<\/p>\n
DHCP Request（\u8bf7\u6c42\u9636\u6bb5）<\/p>\n
DHCP Acknowledge（\u786e\u8ba4\u9636\u6bb5）<\/p>\n
dhcp\u8f6f\u4ef6\u5305\u5b89\u88c5： dnf -y install dhcp-server<\/p>\n<\/li>\n
dhcp\u914d\u7f6e\u6587\u4ef6：\/usr\/share\/doc\/dhcp-*\/dhcpd.conf.example\u653e\u5230\/etc\/dhcp\/dhcp.conf<\/p>\n<\/li>\n
dhcop -t：\u9a8c\u8bc1\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5，echo$? \u8f93\u51fa0\u4ee3\u8868\u6ca1\u6709\u95ee\u9898<\/p>\n<\/li>\n
dhcpd\u914d\u7f6e\u6587\u4ef6：<\/p>\n<\/li>\n<\/ul>\n
[root@server ~]# cat \/etc\/dhcp\/dhcpd.conf
\n# A slightly different configuration for an internal subnet.
\n#\u914d\u7f6e\u7f51\u6bb5，\u5b50\u7f51\u63a9\u7801
\nsubnet 10.1.8.0 netmask 255.255.255.0 {
\n#\u5206\u914d\u8303\u56f4
\n range 10.1.8.150 10.1.8.254;
\n#DNS
\n option domain-name-servers 223.5.5.5,223.6.6.6;
\n#\u57df\u540d
\n option domain-name "zhiqiang.cloud";
\n#\u8def\u7531\u7f51\u5173
\n option routers 10.1.8.2;
\n#\u5e7f\u64ad\u57df
\n option broadcast-address 10.1.8.255;
\n#\u4f7f\u7528\u6700\u5c11\u65f6\u95f4
\n default-lease-time 600;
\n#\u4f7f\u7528\u6700\u5927\u65f6\u95f4
\n max-lease-time 7200;
\n}<\/p>\n
# \u8bbe\u7f6e\u9759\u6001\u5730\u5740，\u52a8\u6001\u5730\u5740\u4e0d\u7528\u5206\u914d
\n# \u5206\u914d\u5ba2\u6237\u7aef\u4e3b\u673a
\nhost client {
\n#\u5ba2\u6237\u7aefMAC\u5730\u5740
\n hardware ethernet 00:0c:29:a4:5f:a8;
\n#\u6307\u5b9a\u5206\u914dIP\u5730\u5740：
\n fixed-address 10.1.8.122;
\n}<\/p>\n
DNS（Domain Name System，\u57df\u540d\u7cfb\u7edf）\u662f\u4e92\u8054\u7f51\u7684\u6838\u5fc3\u57fa\u7840\u8bbe\u65bd\u4e4b\u4e00，\u5176\u6838\u5fc3\u4f5c\u7528\u662f\u5c06\u4eba\u7c7b\u6613\u8bb0\u7684\u57df\u540d（\u5982www.baidu.com）\u8f6c\u6362\u4e3a\u8ba1\u7b97\u673a\u53ef\u8bc6\u522b\u7684 IP \u5730\u5740（\u5982180.101.50.242），\u5b9e\u73b0\u57df\u540d\u4e0e IP \u5730\u5740\u7684\u6620\u5c04，\u4ece\u800c\u8ba9\u7528\u6237\u65e0\u9700\u8bb0\u5fc6\u590d\u6742\u7684 IP \u5730\u5740\u5373\u53ef\u8bbf\u95ee\u7f51\u7edc\u8d44\u6e90\u3002<\/p>\n
DNS \u670d\u52a1\u5668\u6309\u5c42\u7ea7\u5212\u5206，\u5f62\u6210\u6811\u72b6\u7ed3\u6784，\u4ece\u4e0a\u5230\u4e0b\u4f9d\u6b21\u4e3a：<\/p>\n
\u672c\u5730\u7f13\u5b58\u67e5\u8be2<\/p>\n
\u672c\u5730 DNS \u670d\u52a1\u5668\u67e5\u8be2<\/p>\n
\u6839\u57df\u540d\u670d\u52a1\u5668\u67e5\u8be2<\/p>\n
\u9876\u7ea7\u57df\u540d\u670d\u52a1\u5668\u67e5\u8be2<\/p>\n
\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u67e5\u8be2<\/p>\n
\u7ed3\u679c\u8fd4\u56de\u4e0e\u7f13\u5b58<\/p>\n
\u5b89\u88c5\u8f6f\u4ef6\u5305: dnf install -y bind bind-utils<\/p>\n<\/li>\n
\u914d\u7f6e\u6587\u4ef6： \/etc\/named.conf<\/p>\n<\/li>\n<\/ul>\n
[root@server ~]# cat \/etc\/named.conf
\n …
\n …
\n options {
\n listen-on port 53 { 127.0.0.1;10.1.8.10; };
\n listen-on-v6 port 53 { ::1; };
\n directory "\/var\/named";
\n dump-file "\/var\/named\/data\/cache_dump.db";
\n statistics-file "\/var\/named\/data\/named_stats.txt";
\n memstatistics-file "\/var\/named\/data\/named_mem_stats.txt";
\n secroots-file"\/var\/named\/data\/named.secroots";
\n recursing-file"\/var\/named\/data\/named.recursing";
\n \/\/allow-query { localhost; };
\n allow-query { any; };
\n …
\n …<\/p>\n
# \u4e5f\u53ef\u7ed3\u5408acl\u4f7f\u7528：acl\u5141\u8bb8\u53ef\u8bbf\u95ee\u7684\u4e3b\u673a
\n # acl：\u5b9a\u4e49\u7f51\u6bb5\/\u4e3b\u673a\u5141\u8bb8\u8bbf\u95ee
\n …
\n …
\n [root@server ~]# cat \/etc\/named.conf
\n acl interfaces { 127.0.0.1;10.1.8.10; }
\n acl interfacesv6 { ::1; 2001:db8:2020::5300; }
\n options {
\n listen-on port 53 { interfaces; };
\n listen-on-v6 port 53 { interfacesv6; };
\n directory "\/var\/named";
\n dump-file "\/var\/named\/data\/cache_dump.db";
\n statistics-file "\/var\/named\/data\/named_stats.txt";
\n memstatistics-file "\/var\/named\/data\/named_mem_stats.txt";
\n secroots-file"\/var\/named\/data\/named.secroots";
\n recursing-file"\/var\/named\/data\/named.recursing";
\n \/\/allow-query { localhost; };
\n allow-query { any; };
\n …
\n …<\/p>\n
\u914d\u7f6e\u4e3b\u673adns\u89e3\u6790<\/p>\n
[root@server ~]# cat \/etc\/named.conf
\n# \u6b63\u5411\u89e3\u6790：
\n# \u8f93\u5165\u89e3\u6790\u57df\u540d
\nzone "zhiqiang.cloud" IN {
\n type master;
\n# \u89e3\u6790\u57df\u540d\u7684\u6587\u4ef6
\n file "zhiqiang.cloud.zone";
\n # allow-transfer {10.1.8.21;}; # \u5141\u8bb8\u8c01\u6765\u4e0b\u8f7d\u6211\u7684\u6570\u636e\u5e93\u6587\u4ef6
\n};<\/p>\n
# \u53cd\u5411\u89e3\u6790
\n# \u8f93\u5165\u89e3\u6790\u7684\u53cd\u5411IP\u5730\u5740：.in-addr.arpa\u56fa\u5b9a\u683c\u5f0f
\nzone "8.1.10.in-addr.arpa" IN {
\n type master;
\n# \u89e3\u6790\u57df\u540d\u7684\u6587\u4ef6
\n file "8.1.10.zone";
\n};<\/p>\n
# \u6b63\u5411\u89e3\u6790\u6587\u4ef6
\n[root@server ~]# vim \/var\/named\/zhiqiang.cloud.zone
\n$TTL 1D # \u89e3\u6790\u57df\u7684\u4e3b\u673a\u5b8c\u6574\u540d\u79f0 # \u90ae\u7bb1
\n@ IN SOA server.zhiqiang.cloud. root.zhiqiang.cloud. (
\n 0 ; serial #
\n 1D ; refresh
\n 1H ; retry
\n 1W ; expire
\n 3H ) ; minimum
\n# \u63d0\u4f9b\u8fd9\u4e2a\u57df\u7684DNS\u670d\u52a1\u5668
\n IN NS server.zhiqiang.cloud.
\n# \u5c06\u540d\u79f0\u6620\u5c04\u7ed9ip
\nserver IN A 10.1.8.10
\ndns IN A 10.1.8.10
\nclient IN A 10.1.8.11
\n# \u7ed9\u6307\u5b9a\u4e3b\u673a\u8d77\u522b\u540d
\nstudent IN CNAME client.zhiqiang.cloud.
\nwww IN A 10.1.8.200
\n# \u90ae\u7bb1\u670d\u52a1\u5668，\u6307\u5b9a\u4f7f\u7528\u7684\u63a5\u6536\u6587\u4ef6\u7684\u90ae\u7bb1
\n@ IN MX 10 mail.zhiqiang.cloud.
\nmail IN A 10.1.8.253<\/p>\n
# \u53cd\u5411\u89e3\u6790\u6587\u4ef6
\n[root@server ~]# vim \/var\/named\/8.1.10.zone
\n$TTL 1D # \u89e3\u6790\u57df\u7684\u4e3b\u673a\u5b8c\u6574\u540d\u79f0
\n@ IN SOA server.zhiqiang.cloud. root.zhiqiang.cloud. (
\n 0 ; serial
\n 1D ; refresh
\n 1H ; retry
\n 1W ; expire
\n 3H ) ; minimum
\n# \u63d0\u4f9b\u8fd9\u4e2a\u57df\u7684DNS\u670d\u52a1\u5668
\n IN NS server.zhiqiang.cloud.
\n# PTR \u7528\u4e8e\u53cd\u5411\u89e3\u6790DNS
\n10 IN PTR server.zhiqiang.cloud.
\n10 IN PTR dns.zhiqiang.cloud.
\n11 IN PTR student.zhiqiang.cloud.
\n11 IN PTR client.zhiqiang.cloud.
\n100 IN PTR ns1.zhiqiang.cloud.
\n200 IN PTR www.zhiqiang.cloud.
\n253 IN PTR mail.zhiqiang.cloud.<\/p>\n
# zone \u6587\u4ef6\u9700\u8981named\u7ec4\u62e5\u6709\u8bfb\u5199\u6743\u9650
\n[root@server ~]# chown root:named \/var\/named\/*.zone<\/p>\n
# \u68c0\u67e5named zone \u6587\u4ef6
\n[root@server ~]# named-checkzone zhiqiang.cloud \\\\n \/var\/named\/zhiqiang.cloud.zone<\/p>\n
[root@server ~]# named-checkzone zhiqiang.cloud \\\\n \/var\/named\/zhiqiang.cloud.zone
\nzone zhiqiang.cloud\/IN: loaded serial 0
\nOK<\/p>\n
# \u68c0\u67e5named conf \u6587\u4ef6
\n[root@server ~]# named-checkconf \/etc\/named.conf<\/p>\n
# \u91cd\u542f\u670d\u52a1
\n[root@server ~]# systemctl restart named<\/p>\n
vsftpd（Very Secure FTP Daemon）\u662f\u4e00\u6b3e\u8fd0\u884c\u5728 Linux \u7cfb\u7edf\u4e0a\u7684\u8f7b\u91cf\u3001\u5b89\u5168\u3001\u9ad8\u6548\u7684 FTP（File Transfer Protocol，\u6587\u4ef6\u4f20\u8f93\u534f\u8bae）\u670d\u52a1\u5668\u8f6f\u4ef6，\u4e3b\u8981\u7528\u4e8e\u5728\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u4e4b\u95f4\u901a\u8fc7\u7f51\u7edc\u4f20\u8f93\u6587\u4ef6（\u4e0a\u4f20\u3001\u4e0b\u8f7d）\u3002\u5176\u6838\u5fc3\u8bbe\u8ba1\u76ee\u6807\u662f\u5b89\u5168\u6027\u548c\u7a33\u5b9a\u6027，\u5e7f\u6cdb\u5e94\u7528\u4e8e\u4f01\u4e1a\u548c\u4e2a\u4eba\u7684\u6587\u4ef6\u5171\u4eab\u573a\u666f\u3002<\/p>\n
vsftpd \u57fa\u4e8e FTP \u534f\u8bae\u5de5\u4f5c，\u901a\u8fc7\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u4e4b\u95f4\u7684\u547d\u4ee4\u4ea4\u4e92\u548c\u6570\u636e\u4f20\u8f93，\u5b9e\u73b0\u6587\u4ef6\u7684\u4e0a\u4f20\u3001\u4e0b\u8f7d\u3001\u5220\u9664\u3001\u91cd\u547d\u540d\u7b49\u64cd\u4f5c\u3002FTP \u534f\u8bae\u91c7\u7528\u53cc\u8fde\u63a5\u6a21\u5f0f，\u5373 \u201c\u547d\u4ee4\u8fde\u63a5\u201d \u548c \u201c\u6570\u636e\u8fde\u63a5\u201d \u5206\u79bb，\u8fd9\u662f\u7406\u89e3\u5176\u5de5\u4f5c\u539f\u7406\u7684\u5173\u952e<\/p>\n<\/p>\n
# \u5b89\u88c5\u8f6f\u4ef6\u5305
\n[root@server ftp]# dnf -y install vsftpd
\n[root@server ftp]# systemctl enable vsftpd.service –now<\/p>\n
# \u914d\u7f6e\u6587\u4ef6\u914d\u7f6e
\n[root@server ftp]# cat \/etc\/vsftpd\/vsftpd.conf
\n# \u5141\u8bb8\u533f\u540d\u7528\u6237\u767b\u5f55
\nanonymous_enable=YES
\n#
\nlocal_enable=YES
\n#
\nwrite_enable=YES
\n# \u672c\u5730\u7528\u6237\u4f20\u8f93umask
\nlocal_umask=022
\n# \u5141\u8bb8\u4e0a\u4f20\u6587\u4ef6
\nanon_upload_enable=YES
\n# \u5141\u8bb8\u8bfb\u5199\u76ee\u5f55
\nanon_mkdir_write_enable=YES
\ndirmessage_enable=YES
\nxferlog_enable=YES
\nconnect_from_port_20=YES
\nxferlog_std_format=YES
\n# \u76d1\u542c
\nlisten=NO
\n# \u76d1\u542cipv6
\nlisten_ipv6=YES<\/p>\n
pam_service_name=vsftpd
\nuserlist_enable=YES<\/p>\n
# \u8bbe\u7f6eftp\u5171\u4eab\u76ee\u5f55，\u9ed8\u8ba4\u503c\u4e3a\/var\/ftp
\nlocal_root=\/var\/ftp<\/p>\n
# \u542f\u7528\u7528\u6237\u767b\u5f55\u6e05\u5355
\nuserlist_enable=YES<\/p>\n
# \u6307\u5b9a\u7528\u6237\u6e05\u5355\u6587\u4ef6\u4f4d\u7f6e，\u8be5\u6587\u4ef6\u4e2d\u7528\u6237\u7981\u6b62\u767b\u5f55
\n# \u9ed8\u8ba4\/etc\/vsftpd\/ftpusers\u548c\/etc\/vsftpd\/user_list\u4e2d\u7684\u7528\u6237\u90fd\u65e0\u6cd5\u767b\u5f55
\nuserlist_file=\/etc\/vsftpd\/user_list<\/p>\n
# \u5141\u8bb8\u7528\u6237\u8bfb\u5199\u91cd\u547d\u540d
\nanon_other_write_enable=YES<\/p>\n
# \u91cd\u542fvsftpd\u670d\u52a1
\n[root@server ftp]# systemctl restart vsftpd.service<\/p>\n
NFS（Network File System，\u7f51\u7edc\u6587\u4ef6\u7cfb\u7edf）\u662f\u4e00\u79cd\u57fa\u4e8e TCP\/IP \u534f\u8bae\u7684\u7f51\u7edc\u6587\u4ef6\u5171\u4eab\u534f\u8bae，\u5141\u8bb8\u4e0d\u540c\u64cd\u4f5c\u7cfb\u7edf\u7684\u8ba1\u7b97\u673a（\u4e3b\u8981\u662f\u7c7b Unix \u7cfb\u7edf，\u5982 Linux\u3001Solaris）\u901a\u8fc7\u7f51\u7edc\u5171\u4eab\u6587\u4ef6\u548c\u76ee\u5f55，\u8ba9\u8fdc\u7a0b\u4e3b\u673a\u53ef\u4ee5\u50cf\u8bbf\u95ee\u672c\u5730\u6587\u4ef6\u4e00\u6837\u8bbf\u95ee\u5171\u4eab\u8d44\u6e90\u3002\u5176\u6838\u5fc3\u539f\u7406\u662f\u901a\u8fc7\u8fdc\u7a0b\u8fc7\u7a0b\u8c03\u7528（RPC，Remote Procedure Call）\u00a0\u5b9e\u73b0\u8de8\u7f51\u7edc\u7684\u6587\u4ef6\u64cd\u4f5c，\u7b80\u5316\u5206\u5e03\u5f0f\u7cfb\u7edf\u4e2d\u7684\u6587\u4ef6\u7ba1\u7406\u3002<\/p>\n
NFS \u7684\u5de5\u4f5c\u4f9d\u8d56\u4e8e\u5ba2\u6237\u7aef – \u670d\u52a1\u5668\u67b6\u6784\u548cRPC \u534f\u8bae，\u901a\u8fc7\u5c06\u8fdc\u7a0b\u6587\u4ef6\u7cfb\u7edf\u6302\u8f7d\u5230\u672c\u5730，\u5b9e\u73b0\u6587\u4ef6\u64cd\u4f5c\u7684\u900f\u660e\u5316（\u7528\u6237\u65e0\u9700\u611f\u77e5\u6587\u4ef6\u4f4d\u4e8e\u8fdc\u7a0b\u670d\u52a1\u5668）\u3002<\/p>\n
#\u5b89\u88c5nfs\u8f6f\u4ef6\u5305
\n[root@server ~]# dnf -y install nfs-untils
\n[root@server ~]# systemctl enable nfs –now
\n# \u521b\u5efa\u5171\u4eab\u76ee\u5f55
\n[root@server ~]# mkdir \/shares\/web<\/p>\n
# \u5171\u4eab\u76ee\u5f55
\n[root@server ~]# cat > \/etc\/exports << EOF
\n\/shares\/web 10.1.8.0\/24(rw)
\nEOF<\/p>\n
# \u91cd\u542fnfs\u670d\u52a1
\n[root@server ~]# systemctl restart nfs-server.service<\/p>\n
# \u521b\u5efa\u53ef\u8bfb\u5199\u7684\u7528\u6237
\n[root@server ~]# useradd zhiqiang <\/p>\n
# \u4fee\u6539\u6307\u5b9a\u7528\u6237\u8bfb\u5199\u6743\u9650
\n[root@server ~]# chown root:zhiqiang \/shares\/web<\/p>\n
# \u5b89\u88c5nfs\u8f6f\u4ef6\u5305
\n[root@client ~]# dnf -y install nfs-untils
\n# \u67e5\u770b\u670d\u52a1\u7aef\u5171\u4eab\u76ee\u5f55
\n[root@client ~]# showmount -e server
\nExport list for server:
\n\/shares\/web 10.1.8.0\/24<\/p>\n
# \u521b\u5efa\u6302\u8f7d\u76ee\u5f55
\n[root@client ~]# mkdir \/web<\/p>\n
# \u6302\u8f7d\u670d\u52a1\u7aef\u5171\u4eab\u76ee\u5f55
\n[root@client ~]# mount -t nfs server:\/shares\/web<\/p>\n
# \u6c38\u4e45\u6302\u8f7d
\n[root@client ~]# vim \/etc\/fstab
\nserver:\/shares\/web \/web nfs defaults 0 0<\/p>\n
# \u6d4b\u8bd5\u6302\u8f7d\u76ee\u5f55
\n[root@client ~]# touch \/web\/1<\/p>\n
iSCSI（Internet Small Computer System Interface，\u4e92\u8054\u7f51\u5c0f\u578b\u8ba1\u7b97\u673a\u7cfb\u7edf\u63a5\u53e3）\u662f\u4e00\u79cd\u57fa\u4e8e TCP\/IP \u534f\u8bae\u7684\u5b58\u50a8\u7f51\u7edc\u6280\u672f，\u5176\u6838\u5fc3\u539f\u7406\u662f\u901a\u8fc7\u5c06 SCSI（\u5c0f\u578b\u8ba1\u7b97\u673a\u7cfb\u7edf\u63a5\u53e3，\u7528\u4e8e\u672c\u5730\u5b58\u50a8\u8bbe\u5907\u901a\u4fe1\u7684\u534f\u8bae）\u547d\u4ee4\u5c01\u88c5\u5230 IP \u6570\u636e\u5305\u4e2d，\u5b9e\u73b0\u8fdc\u7a0b\u5b58\u50a8\u8bbe\u5907（\u5982\u786c\u76d8\u3001\u78c1\u76d8\u9635\u5217）\u4e0e\u4e3b\u673a\u4e4b\u95f4\u7684\u9ad8\u6548\u6570\u636e\u4f20\u8f93，\u8ba9\u4e3b\u673a\u5c06\u8fdc\u7a0b\u5b58\u50a8\u8bc6\u522b\u4e3a\u672c\u5730\u7269\u7406\u786c\u76d8\u8fdb\u884c\u64cd\u4f5c\u3002<\/p>\n
\u4f20\u7edf\u7684 SCSI \u534f\u8bae\u4ec5\u652f\u6301\u672c\u5730\u5b58\u50a8\u8bbe\u5907（\u5982\u4e3b\u673a\u76f4\u63a5\u8fde\u63a5\u7684\u786c\u76d8\u3001U \u76d8），\u800c iSCSI \u901a\u8fc7 IP \u7f51\u7edc\u6269\u5c55\u4e86 SCSI \u7684\u5e94\u7528\u8303\u56f4，\u4f7f\u4e3b\u673a\u53ef\u4ee5\u901a\u8fc7\u4ee5\u592a\u7f51\u8fdc\u7a0b\u8bbf\u95ee\u5b58\u50a8\u8bbe\u5907，\u5b9e\u73b0 \u201c\u5b58\u50a8\u8bbe\u5907\u7f51\u7edc\u5316\u201d，\u89e3\u51b3\u4e86\u4f20\u7edf\u672c\u5730\u5b58\u50a8\u96be\u4ee5\u6269\u5c55\u3001\u4e0d\u4fbf\u5171\u4eab\u7684\u95ee\u9898\u3002<\/p>\n
iSCSI \u7684\u5de5\u4f5c\u6d41\u7a0b\u53ef\u5206\u4e3a \u201c\u8fde\u63a5\u5efa\u7acb\u201d \u548c \u201c\u6570\u636e\u4f20\u8f93\u201d \u4e24\u4e2a\u9636\u6bb5，\u6838\u5fc3\u662f SCSI \u547d\u4ee4\u4e0e IP \u534f\u8bae\u7684\u5c01\u88c5 \/ \u89e3\u5c01\u88c5：<\/p>\n
\u76ee\u6807\u7aef\u914d\u7f6e<\/p>\n
\u53d1\u8d77\u7aef\u53d1\u73b0\u76ee\u6807<\/p>\n
\u8eab\u4efd\u9a8c\u8bc1\u4e0e\u8fde\u63a5\u5efa\u7acb<\/p>\n
\u5f53\u53d1\u8d77\u7aef\u6210\u529f\u8fde\u63a5\u76ee\u6807\u7aef\u540e，\u5bf9 LUN \u7684\u64cd\u4f5c（\u5982\u8bfb\u5199\u6587\u4ef6）\u4f1a\u89e6\u53d1\u4ee5\u4e0b\u6d41\u7a0b：<\/p>\n<\/p>\n
SCSI \u547d\u4ee4\u5c01\u88c5<\/p>\n
IP \u6570\u636e\u5305\u4f20\u8f93<\/p>\n
\u89e3\u5c01\u88c5\u4e0e SCSI \u547d\u4ee4\u6267\u884c<\/p>\n
\u54cd\u5e94\u8fd4\u56de<\/p>\n
# \u5b89\u88c5\u8f6f\u4ef6\u5305，\u542f\u52a8\u670d\u52a1
\n[root@server ~]# dnf install -y targetcli
\n[root@server ~]# systemctl enable target –now
\n# \u8fdb\u5165\u4ea4\u4e92\u5f0f targetcli
\n[root@server ~]# targetcli<\/p>\n
\/> ls
\no- \/
\n o- backstores # \u914d\u7f6e\u5171\u4eab\u7684\u5185\u5bb9，\u9700\u8981\u81ea\u5df1\u521b\u5efa，\u5171\u4eab\u6210\u5757\u8bbe\u5907
\n | o- block # \u5171\u4eab\u7684\u5757
\n | o- fileio
\n | o- pscsi
\n | o- ramdisk
\n o- iscsi # \u914d\u7f6etarget\u53ef\u8fdb\u884c\u8bbf\u95ee\u7684\u5ba2\u6237\u548c\u5171\u4eab\u7684\u6307\u5b9a\u5757
\n o- loopback <\/p>\n
# \u521b\u5efa\u53ef\u5171\u4eab lv \u5757
\n\/backstores\/block> create zhiqiang01 \/dev\/zhiqiang\/zhiqiang01
\nCreated block storage object zhiqiang01 using \/dev\/zhiqiang\/zhiqiang01.<\/p>\n
# \u521b\u5efa\u53ef\u5171\u4eab\u7684 dev \u5757
\n\/backstores\/block> create sdb \/dev\/sdb
\n4Created block storage object sdb using \/dev\/sdb<\/p>\n
# \u521b\u5efa\u53ef\u5171\u4eab\u914d\u7f6e\u6a21\u5757，\u4f7f\u7528IQN\u8868\u793a，\u914d\u7f6e\u8bbf\u95ee\u7684\u5ba2\u6237\u548c\u63d0\u4f9b\u8bbe\u5907，\u8bbf\u95ee\u7aef\u53e3，\u53ea\u5141\u8bb8\u4e00\u4e2a\u5ba2\u6237\u7aef
\n\/iscsi> create iqn.2025-04.cloud.zhiqiang.storage:zhiqiang01
\nCreated target iqn.2025-04.cloud.zhiqiang.storage:zhiqiang01.
\nCreated TPG 1.
\nGlobal pref auto_add_default_portal=true
\nCreated default portal listening on all IPs (0.0.0.0), port 3260.<\/p>\n
# tpg\/luns\/ \u914d\u7f6e\u53ef\u4ee5\u8bbf\u95ee\u7684\u5757\u8bbe\u5907
\n\/iscsi\/iqn.20…iqiang01\/tpg1> luns\/ create \/backstores\/block\/sdb
\nCreated LUN 0.<\/p>\n
# tpg\/acls\/ \u914d\u7f6e\u5141\u8bb8\u8bbf\u95ee\u7684\u5ba2\u6237\u7aef
\n\/iscsi\/iqn.20…iqiang01\/tpg1> acls\/ create iqn.2025-04.cloud.zhiqiang:client
\nCreated Node ACL for iqn.2025-04.cloud.zhiqiang:client<\/p>\n
# tpg\/ports \u914d\u7f6e\u8bbf\u95eeip\u7aef\u53e3，\u53ef\u914d\u7f6e\u591a\u4e2a\u7aef\u53e3
\n\/iscsi\/iqn.20…iqiang01\/tpg1> ports\/ create 10.1.8.10 3260
\nUsing default IP port 3260
\nCreated network portal 10.1.8.10:3260
\n# exit\u4fdd\u5b58\u9000\u51fa<\/p>\n
# \u5b89\u88c5\u8f6f\u4ef6\u5305
\n[root@client ~]# dnf -y install iscsi-initiator-utils<\/p>\n
# \u8fdb\u884c\u914d\u7f6e\u6587\u4ef6\u914d\u7f6e
\n[root@client ~]# cat \/etc\/iscsi\/initiatorname.iscsi
\nInitiatorName=iqn.2025-04.cloud.zhiqiang:client
\n[root@client ~]# systemctl restart iscsi<\/p>\n
# \u5bfb\u627e\u53d1\u73b0\u8fdc\u7a0b\u5171\u4eab\u7684\u76ee\u6807 discovery：\u53d1\u73b0
\n# -m：\u6a21\u5f0f -t：\u53d1\u73b0\u7684\u7c7b\u578b -p： \u5bfb\u627e\u76ee\u6807\u7684ip\u4ee5\u53ca\u7aef\u53e3
\n[root@client ~]# iscsiadm -m discovery -t sendtargets -p 10.1.8.10:3260
\n10.1.8.10:3260,1 iqn.2025-04.cloud.zhiqiang.storage:zhiqiang01<\/p>\n
# -T：\u6307\u5b9a\u7684iscsi\u7684\u76ee\u6807 -l：login\u767b\u5f55\u76ee\u6807
\n[root@client ~]# iscsiadm -m node -T iqn.2025-04.cloud.zhiqiang.storage:zhiqiang01 -l
\nLogging in to [iface: default, target: iqn.2025-04.cloud.zhiqiang.storage:zhiqiang01, portal: 10.1.8.10,3260]
\nLogin to [iface: default, target: iqn.2025-04.cloud.zhiqiang.storage:zhiqiang01, portal: 10.1.8.10,3260] successful.<\/p>\n
# \u6b63\u5e38\u8fdb\u884c\u78c1\u76d8\u683c\u5f0f\u5316\u6302\u8f7d\u64cd\u4f5c\u5373\u53ef
\n[root@client ~]# lsblk
\nNAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
\nsda 8:0 0 100G 0 disk
\nsdb 8:16 0 50G 0 disk
\nsr0 11:0 1 13.2G 0 rom \/dvd
\nnvme0n1 259:0 0 100G 0 disk
\n\u251c\u2500nvme0n1p1 259:1 0 1G 0 part \/boot
\n\u2514\u2500nvme0n1p2 259:2 0 99G 0 part
\n \u251c\u2500rl-root 253:0 0 61.2G 0 lvm \/
\n \u251c\u2500rl-swap 253:1 0 7.9G 0 lvm [SWAP]
\n \u2514\u2500rl-home 253:2 0 29.9G 0 lvm \/home<\/p>\n
# \u6c38\u4e45\u6302\u8f7d： \u4e0d\u80fd\u4f7f\u7528default \u9700\u8981defults,_netdev \u4e14\u786e\u4fddiscsid\u670d\u52a1\u542f\u52a8,\u4f7f\u7528uuid
\n[root@client ~]# cat \/etc\/fstab
\nUUID=12279361-55c7-4e7e-b880-994be047bcf4xfsdefaults,_netdev0 0<\/p>\n
# \u767b\u5f55\u4e0d\u4e0a\u5904\u7406\u65b9\u6cd5
\n# \u65ad\u5f00\u8fde\u63a5，\u4eceiscsi\u6ce8\u9500
\n[root@client ~]# iscsiadm -m node -T iqn.2025- \\\\n 04.cloud.zhiqiang.storage:zhiqiang01 -p 10.1.8.10:3260 -u
\nLogging out of session [sid: 1, target: iqn.2025-04.cloud.zhiqiang.storage:zhiqiang01, portal: 10.1.8.10,3260]
\nLogout of [sid: 1, target: iqn.2025-04.cloud.zhiqiang.storage:zhiqiang01, portal: 10.1.8.10,3260] successful.
\n# \u5220\u9664iscsi\u7684\u672c\u5730\u8bb0\u5f55
\n[root@client ~]# iscsiadm -m node -T iqn.2025- \\\\n 04.cloud.zhiqiang.storage:zhiqiang01 -p 10.1.8.10 -o delete
\n[root@client ~]# systemctl restart iscsid<\/p>\n
# \u5f53\u53d1\u73b0\u4e86\u76ee\u6807\u5374\u65e0\u6cd5\u767b\u5f55\u65f6，\u662f\u56e0\u4e3aiscsid\u670d\u52a1\u7f13\u5b58\u4e86\u4e4b\u524d\u5ba2\u6237\u7aef\u626b\u63cf\u65f6\u4f7f\u7528\u7684IQN，\u56e0\u6b64\u9700\u8981\u505c\u6b62ISCSI\u670d\u52a1\u91cd\u65b0\u53d1\u73b0<\/p>\n
# \u5bfb\u627e\u53d1\u73b0\u8fdc\u7a0b\u5171\u4eab\u7684\u76ee\u6807 discovery：\u53d1\u73b0
\n# -m：\u6a21\u5f0f -t：\u53d1\u73b0\u7684\u7c7b\u578b -p： \u5bfb\u627e\u76ee\u6807\u7684ip\u4ee5\u53ca\u7aef\u53e3
\n[root@client ~]# iscsiadm -m discovery -t sendtargets -p 10.1.8.10 -p \\\\n 10.1.1.11<\/p>\n
# -T：\u6307\u5b9a\u7684iscsi\u7684\u76ee\u6807 -l：login\u767b\u5f55\u76ee\u6807
\n[root@client ~]# iscsiadm -m node -T iqn.2025- \\\\n 04.cloud.zhiqiang.storage:zhiqiang01 -l<\/p>\n
# \u5b89\u88c5\u8f6f\u4ef6\u5305
\n[root@server ~]# dnf install -y device-mapper-multipath<\/p>\n
# \u751f\u6210\u591a\u8def\u5f84\u6587\u4ef6
\n[root@client ~]# mpathconf –enable<\/p>\n
# \u5df2\u5b58\u5728\u5219\u4fee\u6539\u6587\u4ef6\u5185\u5bb9
\n[root@client ~]# mpathconf –enable –with_multipathd y –with_chkconfig y<\/p>\n
# \u542f\u52a8multipath\u670d\u52a1
\n[root@client ~]# systemctl enable multipathd –now<\/p>\n
# \u6302\u8f7d\u683c\u5f0f\u5316\u591a\u8def\u5f84\u5757， \u56fa\u5b9a\u5728\/dev\/mapper\/mpatha
\n[root@client ~]# mkfs.xfs \/dev\/mapper\/mpatha
\n[root@client ~]# mount \/dev\/mapper\/mpatha \/data<\/p>\n
# \u76d1\u63a7\u591a\u8def\u5f84
\n[root@client ~]# multipath -ll
\nmpatha (36001405ef96fbed88694d19aa7dbcfa8) dm-3 LIO-ORG,zhiqiang01
\nsize=50G features='0' hwhandler='1 alua' wp=rw
\n|-+- policy='service-time 0' prio=50 status=active
\n| `- 2:0:0:0 sda 8:0 active ready running
\n`-+- policy='service-time 0' prio=50 status=enabled
\n `- 3:0:0:0 sdb 8:16 active ready running<\/p>\n
# \u9632\u706b\u5899，selinux\u9ed8\u8ba4\u5173\u95ed
\n# \u5b89\u88c5\u8f6f\u4ef6\u5305
\n[root@server ~]# dnf -y install httpd<\/p>\n
# \u542f\u52a8\u670d\u52a1\u5668
\n[root@server ~]# systemctl enable httpd<\/p>\n
# hosts\u6dfb\u52a0\u57df\u540d\u89e3\u6790
\n[root@server ~]# echo '10.1.8.10 server.zhiqiang.cloud' > \/etc\/hosts<\/p>\n
# \u51c6\u5907web\u4e3b\u9875
\n[root@server ~]# echo 'Welcome to my apache' > \/var\/www\/html\/index.html<\/p>\n
# \u5ba2\u6237\u7aefhosts\u6dfb\u52a0\u57df\u540d\u89e3\u6790
\n# C:\\\\Windows\\\\System32\\\\drivers\\\\etc\/hosts
\n# 10.1.8.10 server.zhiqiang.cloud<\/p>\n
# \u914d\u7f6e\u6587\u4ef6\u4f4d\u7f6e
\n\/etc\/httpd\/conf\/httpd.conf
\n# \u5b9a\u4e49\u7f51\u7ad9\u4e3b\u76ee\u5f55\u4f4d\u7f6e
\nDocumentRoot "\/var\/www\/html"
\n# \u5b9a\u4e49\u914d\u7f6e\u6587\u4ef6\u6240\u5728\u4f4d\u7f6e
\nServerRoot "\/etc\/httpd"
\n# \u5b9a\u4e49 \u4ece \u914d\u7f6e\u6587\u4ef6
\nInclude conf.modules.d\/*.conf
\n# \u5b9a\u4e49\u76ee\u5f55\u4e2d\u4e3b\u9875\u6587\u4ef6\u540d
\n<IfModule dir_module>
\n DirectoryIndex index.html
\n<\/IfModule><\/p>\n
# Userdir \u53ef\u5171\u4eab\u5bb6\u76ee\u5f55\u4e3b\u9875
\n# \u5982\u9700\u8981\u8bbf\u95eeroot\u9700\u8981\u5728\u52a0\u4e00\u6b21 <Directory "\/root\/public_html">
\n[root@server ~]# cat \/etc\/httpd\/conf.d\/userdir.conf
\n<IfModule mod_userdir.c>
\n UserDir enabled
\n UserDir public_html
\n<\/IfModule>
\n<Directory "\/home\/*\/public_html">
\n AllowOverride FileInfo AuthConfig Limit Indexes
\n Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
\n Require method GET POST OPTIONS
\n<\/Directory><\/p>\n
# \u91cd\u542f\u670d\u52a1\u5668
\n[root@server ~]# systemctl restart httpd<\/p>\n
# \u51c6\u5907\u6d4b\u8bd5\u9875
\n[root@server ~]# useradd zhiqiang
\n[root@server ~]# mkdir \/home\/zhiqiang\/public_html
\n[root@server ~]# chmod 711 \/home\/laoma
\n[root@server ~]# chmod 755 \/home\/laoma\/public_html
\n[root@server ~]# cat << 'EOF' > \/home\/laoma\/public_html\/index.html
\n<html>
\n<body>
\n<div style="width: 100%; font-size: 40px; font-weight: bold; text-align: laomaer;">
\nUserDir Test Page
\n<\/div>
\n<\/body>
\n<\/html>
\nEOF<\/p>\n
# \u57fa\u4e8e\u4e3b\u673a\u540d\u7684\u865a\u62df\u4e3b\u673a
\n# \u8fdb\u884c\u914d\u7f6e\u6587\u4ef6\u914d\u7f6e
\n[root@server www1]# cat > \/etc\/httpd\/conf.d\/vhost-www1.conf << EOF
\n# for www1 virtual domain
\n<VirtualHost *:80>
\n DocumentRoot \/var\/www\/www1\/ # \u4e3b\u9875\u4f4d\u7f6e
\n ServerName www1.zhiqiang.cloud # \u4e3b\u673a\u540d\u79f0
\n ServerAdmin www1@zhiqiang.cloud # \u670d\u52a1\u5668\u7ba1\u7406\u5458
\n ErrorLog logs\/www1.zhiqiang.cloud-error_log
\n CustomLog logs\/www1.zhiqiang.cloud-access_log combined
\n<\/VirtualHost><\/p>\n
<Directory "\/var\/www\/www1">
\n Options Indexes FollowSymLinks
\n AllowOverride None
\n Require all granted
\n<\/Directory>
\nEOF<\/p>\n
[root@server www1]# cat \/etc\/httpd\/conf.d\/vhost-www2.conf
\n# for www2 virtual domain
\n<VirtualHost *:80> # \u76d1\u542c\u7aef\u53e3\u53f7
\n DocumentRoot \/var\/www\/www2\/
\n ServerName www2.zhiqiang.cloud
\n ServerAdmin www2@zhiqiang.cloud
\n ErrorLog logs\/www2.zhiqiang.cloud-error_log
\n CustomLog logs\/www2.zhiqiang.cloud-access_log combined
\n<\/VirtualHost><\/p>\n
<Directory "\/var\/www\/www2">
\n Options Indexes FollowSymLinks
\n AllowOverride None
\n Require all granted
\n<\/Directory><\/p>\n
# \u51c6\u5907\u6d4b\u8bd5\u9875
\n[root@server ~]# mkdir \/var\/www\/www1
\n[root@server ~]# mkdir \/var\/www\/www2
\n[root@server ~]# echo hello www1 > \/var\/www\/www1\/index.html
\n[root@server ~]# echo hello www2 > \/var\/www\/www2\/index.html<\/p>\n
# \u5728windows\u4e0elinux\u7684hosts\u4e2d\u5199\u5165\u57df\u540d\u89e3\u6790
\n[root@server ~]# cat \/etc\/hosts
\n127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
\n::1 localhost localhost.localdomain localhost6 localhost6.localdomain6<\/p>\n
10.1.8.10 server.zhiqiang.cloud
\n10.1.8.10 www1.zhiqiang.cloud
\n10.1.8.10 www2.zhiqiang.cloud<\/p>\n
# \u91cd\u542f\u670d\u52a1
\n[root@server ~]# systemctl restart httpd<\/p>\n
# \u6d4b\u8bd5\u8bbf\u95ee
\n[root@server www1]# curl http:\/\/www2.zhiqiang.cloud\/
\nhello www2<\/p>\n
# \u57fa\u4e8e\u7aef\u53e3\u7684\u865a\u62df\u4e3b\u673a
\n# \u914d\u7f6e\u7aef\u53e3\u914d\u7f6e\u6587\u4ef6
\n[root@server ~]# cat \/etc\/httpd\/conf.d\/vhost-port.conf
\nListen 8081 \u76d1\u542c\u7aef\u53e3
\n<VirtualHost *:8081>
\n ServerAdmin site1@zhiqiang.cloud
\n DocumentRoot "\/var\/www\/site1"
\n ServerName server.zhiqiang.cloud
\n ErrorLog "\/var\/log\/httpd\/site1.zhiqiang.cloud-error_log"
\n CustomLog "\/var\/log\/httpd\/site1.zhiqiang.cloud-access_log" common
\n<\/VirtualHost>
\n<Directory "\/var\/www\/site1">
\n AllowOverride None
\n Require all granted
\n<\/Directory><\/p>\n
Listen 8082
\n<VirtualHost *:8082>
\n ServerAdmin site2@zhiqiang.cloud
\n DocumentRoot "\/var\/www\/site2"
\n ServerName server.zhiqiang.cloud
\n ErrorLog "\/var\/log\/httpd\/site2.zhiqiang.cloud-error_log"
\n CustomLog "\/var\/log\/httpd\/site2.zhiqiang.cloud-access_log" common
\n<\/VirtualHost>
\n<Directory "\/var\/www\/site2">
\n AllowOverride None
\n Require all granted
\n<\/Directory><\/p>\n
# \u51c6\u5907\u6d4b\u8bd5\u9875
\n[root@server ~]# mkdir site1
\n[root@server ~]# mkdir site2
\n[root@server ~]# echo 'hello site1' > \/var\/www\/site1\/index.html
\n[root@server ~]# echo 'hello site2' > \/var\/www\/site2\/index.html<\/p>\n
# \u91cd\u542f\u670d\u52a1
\n[root@server ~]# systemctl restart httpd<\/p>\n
# \u6d4b\u8bd5\u7aef\u53e3\u865a\u62df\u673a
\n[root@server ~]# curl server.zhiqiang.cloud:8081
\nhello site1<\/p>\n
# \u5b89\u88c5\u76f8\u5e94\u8f6f\u4ef6\u5305
\n[root@server certs]# dnf -y install mod_ssl<\/p>\n
# \u914d\u7f6e\u6587\u4ef6\u914d\u7f6e
\n[root@server certs]# cat > \/etc\/httpd\/conf.d\/vhost-ssl.conf << EOF
\n<VirtualHost _default_:443>
\n DocumentRoot "\/var\/www\/html"
\n ServerName server.zhiqiang.cloud:443
\n #\u4f7f\u7528\u79c1\u94a5\u7b7e\u540d\u7684\u8bc1\u4e66
\n SSLCertificateFile \/etc\/ssl\/certs\/server.zhiqiang.cloud\/server.crt
\n #\u79c1\u94a5
\n SSLCertificateKeyFile \/etc\/ssl\/certs\/server.zhiqiang.cloud\/server.key
\n<\/VirtualHost>
\nEOF<\/p>\n
# \u521b\u5efa\u8bc1\u4e66\u76ee\u5f55
\n[root@server certs]# mkdir \/etc\/ssl\/certs
\n[root@server certs]# mkdir \/etc\/ssl\/certs\/server.zhiqiang.cloud<\/p>\n
# \u521b\u5efa\u79c1\u94a5
\n[root@server server.zhiqiang.cloud]# openssl genrsa -out server.key 2048<\/p>\n
# \u521b\u5efa\u8bf7\u6c42\u6587\u4ef6csr，\u8be5\u6587\u4ef6\u9700\u8981\u7b7e\u540d
\n[root@server server.zhiqiang.cloud]# openssl req -new -key server.key -out server.csr
\nYou are about to be asked to enter information that will be incorporated
\ninto your certificate request.
\nWhat you are about to enter is what is called a Distinguished Name or a DN.
\nThere are quite a few fields but you can leave some blank
\nFor some fields there will be a default value,
\nIf you enter '.', the field will be left blank.
\n—–
\n# \u6240\u5728\u56fd\u5bb6
\nCountry Name (2 letter code) [XX]:CN
\n# \u6240\u5728\u7701\u4efd
\nState or Province Name (full name) []:JS
\n# \u6240\u5728\u57ce\u5e02
\nLocality Name (eg, city) [Default City]:NJ
\n# \u6240\u5728\u516c\u53f8
\nOrganization Name (eg, company) [Default Company Ltd]:LM
\n# \u6240\u5728\u90e8\u95e8
\nOrganizational Unit Name (eg, section) []:DEVOPS
\n# \u8bf7\u6c42\u57df\u540d
\nCommon Name (eg, your name or your server's hostname) []:server.zhiqiang.cloud
\n# \u90ae\u4ef6\u5730\u5740
\nEmail Address []:zhiqiang@zhiqiang.cloud<\/p>\n
Please enter the following 'extra' attributes
\nto be sent with your certificate request
\nA challenge password []:
\nAn optional company name []:<\/p>\n
# \u4f7f\u7528\u79c1\u94a5\u5bf9\u8bf7\u6c42\u6587\u4ef6\u7b7e\u540d，\u751f\u6210\u8bc1\u4e66
\n[root@server server.zhiqiang.cloud]# openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt<\/p>\n
# \u91cd\u542f\u670d\u52a1
\n[root@server ~]# systemctl restart httpd<\/p>\n
# \u6d4b\u8bd5\u7f51\u9875
\n[root@server ~]# curl -k https:\/\/server.zhiqiang.cloud<\/p>\n
# \u91cd\u5b9a\u5411http\u5230https
\n[root@server ~]# vim \/etc\/httpd\/conf.d\/vhost-Rewrite.conf
\n<VirtualHost *:80>
\n DocumentRoot \/var\/www\/html
\n ServerName server.zhiqiang.cloud
\n RewriteEngine On
\n RewriteCond %{HTTPS} off
\n RewriteRule ^(.*)$ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
\n<\/VirtualHost><\/p>\n
Nginx\u662f\u4e00\u6b3e\u9ad8\u6027\u80fd\u7684 HTTP \u548c\u53cd\u5411\u4ee3\u7406\u670d\u52a1\u5668，\u540c\u65f6\u4e5f\u652f\u6301 IMAP\/POP3\/SMTP \u4ee3\u7406，\u5176\u6838\u5fc3\u4f18\u52bf\u5728\u4e8e\u9ad8\u5e76\u53d1\u5904\u7406\u80fd\u529b\u3001\u4f4e\u5185\u5b58\u5360\u7528\u548c\u6a21\u5757\u5316\u8bbe\u8ba1，\u5e7f\u6cdb\u5e94\u7528\u4e8e\u9759\u6001\u8d44\u6e90\u6258\u7ba1\u3001\u8d1f\u8f7d\u5747\u8861\u3001\u53cd\u5411\u4ee3\u7406\u3001\u52a8\u9759\u5206\u79bb\u7b49\u573a\u666f\u3002<\/p>\n
Nginx \u7684\u9ad8\u6027\u80fd\u5f97\u76ca\u4e8e\u5176\u72ec\u7279\u7684\u4e8b\u4ef6\u9a71\u52a8\u67b6\u6784\u548c\u5f02\u6b65\u975e\u963b\u585e IO \u6a21\u578b，\u8fd9\u4f7f\u5176\u80fd\u591f\u5728\u5355\u673a\u4e0a\u9ad8\u6548\u5904\u7406\u6570\u4e07\u751a\u81f3\u6570\u5341\u4e07\u5e76\u53d1\u8fde\u63a5，\u800c\u4e0d\u4f1a\u50cf\u4f20\u7edf\u670d\u52a1\u5668（\u5982 Apache \u7684 prefork \u6a21\u578b）\u90a3\u6837\u56e0\u8fdb\u7a0b \/ \u7ebf\u7a0b\u5207\u6362\u5bfc\u81f4\u6027\u80fd\u635f\u8017\u3002<\/p>\n
Nginx \u542f\u52a8\u540e\u4f1a\u751f\u6210\u4e09\u79cd\u8fdb\u7a0b，\u534f\u540c\u5b8c\u6210\u8bf7\u6c42\u5904\u7406：<\/p>\n<\/p>\n
\u4e3b\u8fdb\u7a0b（Master Process）：
\n\u8d1f\u8d23\u7ba1\u7406\u5de5\u4f5c\u8fdb\u7a0b\u548c\u4fe1\u53f7\u5904\u7406，\u4e0d\u76f4\u63a5\u5904\u7406\u5ba2\u6237\u7aef\u8bf7\u6c42\u3002\u4e3b\u8981\u529f\u80fd\u5305\u62ec：\u8bfb\u53d6\u914d\u7f6e\u6587\u4ef6\u3001\u521d\u59cb\u5316\u670d\u52a1\u3001\u521b\u5efa\u5de5\u4f5c\u8fdb\u7a0b\u3001\u63a5\u6536\u5916\u754c\u4fe1\u53f7（\u5982\u91cd\u542f\u3001\u505c\u6b62）\u5e76\u8f6c\u53d1\u7ed9\u5de5\u4f5c\u8fdb\u7a0b\u3001\u76d1\u63a7\u5de5\u4f5c\u8fdb\u7a0b\u72b6\u6001（\u82e5\u5de5\u4f5c\u8fdb\u7a0b\u5f02\u5e38\u9000\u51fa，\u4f1a\u81ea\u52a8\u91cd\u542f\u65b0\u7684\u5de5\u4f5c\u8fdb\u7a0b）\u3002
\n\u4e3b\u8fdb\u7a0b\u901a\u5e38\u4ee5 root \u7528\u6237\u8fd0\u884c（\u4fbf\u4e8e\u76d1\u542c 80\u3001443 \u7b49\u7279\u6743\u7aef\u53e3）\u3002<\/p>\n<\/li>\n
\u5de5\u4f5c\u8fdb\u7a0b（Worker Process）：
\n\u7531\u4e3b\u8fdb\u7a0b\u521b\u5efa（\u6570\u91cf\u53ef\u5728\u914d\u7f6e\u6587\u4ef6\u4e2d\u8bbe\u7f6e，\u901a\u5e38\u4e0e CPU \u6838\u5fc3\u6570\u4e00\u81f4），\u662f\u5b9e\u9645\u5904\u7406\u5ba2\u6237\u7aef\u8bf7\u6c42\u7684\u8fdb\u7a0b\u3002\u6240\u6709\u5de5\u4f5c\u8fdb\u7a0b\u5e73\u7b49\u7ade\u4e89\u5ba2\u6237\u7aef\u8fde\u63a5，\u901a\u8fc7\u5171\u4eab\u5185\u5b58\u5b9e\u73b0\u8fdb\u7a0b\u95f4\u7684\u914d\u7f6e\u4fe1\u606f\u540c\u6b65\u3002
\n\u5de5\u4f5c\u8fdb\u7a0b\u4ee5\u975e root \u7528\u6237（\u5982nginx\u7528\u6237）\u8fd0\u884c，\u964d\u4f4e\u5b89\u5168\u98ce\u9669\u3002<\/p>\n<\/li>\n
\u7f13\u5b58\u52a0\u8f7d\u8fdb\u7a0b（Cache Loader Process）：
\n\u53ef\u9009\u8fdb\u7a0b，\u542f\u52a8\u65f6\u52a0\u8f7d\u78c1\u76d8\u4e0a\u7684\u7f13\u5b58\u5143\u6570\u636e\u5230\u5185\u5b58，\u5b8c\u6210\u540e\u81ea\u52a8\u9000\u51fa，\u4e0d\u53c2\u4e0e\u8bf7\u6c42\u5904\u7406\u3002<\/p>\n<\/li>\n
\u7f13\u5b58\u7ba1\u7406\u8fdb\u7a0b（Cache Manager Process）：
\n\u53ef\u9009\u8fdb\u7a0b，\u5b9a\u671f\u6e05\u7406\u8fc7\u671f\u7684\u7f13\u5b58\u6587\u4ef6，\u786e\u4fdd\u7f13\u5b58\u76ee\u5f55\u4e0d\u4f1a\u5360\u6ee1\u78c1\u76d8\u7a7a\u95f4\u3002<\/p>\n<\/li>\n<\/ul>\n
Nginx \u7684\u9ad8\u5e76\u53d1\u80fd\u529b\u6838\u5fc3\u5728\u4e8e\u4e8b\u4ef6\u9a71\u52a8（Event-Driven）\u00a0\u548c\u5f02\u6b65\u975e\u963b\u585e IO \u6a21\u578b，\u5177\u4f53\u8868\u73b0\u4e3a：<\/p>\n<\/p>\n
\u4f20\u7edf\u670d\u52a1\u5668\u7684\u95ee\u9898：
\n\u4f20\u7edf\u670d\u52a1\u5668（\u5982 Apache \u7684 prefork \u6a21\u578b）\u4e3a\u6bcf\u4e2a\u8fde\u63a5\u521b\u5efa\u4e00\u4e2a\u8fdb\u7a0b\u6216\u7ebf\u7a0b，\u5f53\u5e76\u53d1\u91cf\u8fc7\u9ad8\u65f6，\u8fdb\u7a0b \/ \u7ebf\u7a0b\u5207\u6362\u4f1a\u6d88\u8017\u5927\u91cf CPU \u548c\u5185\u5b58\u8d44\u6e90，\u5bfc\u81f4\u6027\u80fd\u6025\u5267\u4e0b\u964d（\u201cC10K \u95ee\u9898\u201d）\u3002<\/p>\n<\/li>\n
Nginx \u7684\u89e3\u51b3\u65b9\u6848：
\nNginx \u7684\u5de5\u4f5c\u8fdb\u7a0b\u91c7\u7528 \u201c\u4e00\u4e2a\u8fdb\u7a0b\u5904\u7406\u591a\u4e2a\u8fde\u63a5\u201d \u7684\u6a21\u5f0f，\u901a\u8fc7\u4e8b\u4ef6\u9a71\u52a8\u673a\u5236\u9ad8\u6548\u7ba1\u7406\u8fde\u63a5：<\/p>\n
\u5ba2\u6237\u7aef\u8bf7\u6c42\u5230\u8fbe Nginx \u540e，\u5904\u7406\u6d41\u7a0b\u53ef\u5206\u4e3a\u4ee5\u4e0b\u6b65\u9aa4：<\/p>\n<\/p>\n
\u8fde\u63a5\u5efa\u7acb：
\n\u5ba2\u6237\u7aef\u901a\u8fc7 TCP \u534f\u8bae\u4e0e Nginx \u7684\u76d1\u542c\u7aef\u53e3（\u5982 80\u3001443）\u5efa\u7acb\u8fde\u63a5，Nginx \u7684\u5de5\u4f5c\u8fdb\u7a0b\u901a\u8fc7 IO \u591a\u8def\u590d\u7528\u673a\u5236\u611f\u77e5 \u201c\u8fde\u63a5\u5efa\u7acb\u201d \u4e8b\u4ef6\u3002<\/p>\n<\/li>\n
\u8bf7\u6c42\u89e3\u6790：
\n\u5de5\u4f5c\u8fdb\u7a0b\u8bfb\u53d6\u5ba2\u6237\u7aef\u53d1\u9001\u7684 HTTP \u8bf7\u6c42（\u5982\u8bf7\u6c42\u65b9\u6cd5\u3001URL\u3001\u5934\u90e8\u4fe1\u606f），\u6839\u636e\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684server\u5757（\u865a\u62df\u4e3b\u673a\u914d\u7f6e）\u5339\u914d\u5bf9\u5e94\u7684\u7ad9\u70b9（\u5982\u6839\u636eserver_name\u5339\u914dwww.example.com）\u3002<\/p>\n<\/li>\n
\u8def\u7531\u4e0e\u5904\u7406：
\n\u6839\u636e\u8bf7\u6c42\u7684 URL \u548c\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684location\u5757，\u51b3\u5b9a\u8bf7\u6c42\u7684\u5904\u7406\u65b9\u5f0f：<\/p>\n
\u54cd\u5e94\u53d1\u9001：
\n\u5904\u7406\u5b8c\u6210\u540e，Nginx \u5c06\u54cd\u5e94\u6570\u636e（\u9759\u6001\u6587\u4ef6\u5185\u5bb9\u6216\u540e\u7aef\u8fd4\u56de\u7684\u7ed3\u679c）\u901a\u8fc7 TCP \u8fde\u63a5\u53d1\u9001\u7ed9\u5ba2\u6237\u7aef，\u53d1\u9001\u5b8c\u6210\u540e\u5173\u95ed\u8fde\u63a5（\u6216\u4fdd\u6301\u957f\u8fde\u63a5，\u7531keepalive\u914d\u7f6e\u51b3\u5b9a）\u3002<\/p>\n<\/li>\n
Nginx \u7684\u529f\u80fd\u6269\u5c55\u4f9d\u8d56\u4e8e\u6a21\u5757\u5316\u67b6\u6784，\u6838\u5fc3\u6a21\u5757\u548c\u7b2c\u4e09\u65b9\u6a21\u5757\u5171\u540c\u6784\u6210\u5176\u529f\u80fd\u4f53\u7cfb：<\/p>\n<\/p>\n
# \u5b89\u88c5\u670d\u52a1\u5305
\n[root@server ~]# dnf -y install nginx<\/p>\n
# \u67e5\u770b\u914d\u7f6e\u6587\u4ef6
\n[root@server ~]# cat \/etc\/nginx\/conf\/nginx\/conf
\nuser nginx;
\nworker_processes auto;
\nerror_log \/var\/log\/nginx\/error.log;
\npid \/run\/nginx.pid;<\/p>\n
# Load dynamic modules. See \/usr\/share\/doc\/nginx\/README.dynamic.
\ninclude \/usr\/share\/nginx\/modules\/*.conf;<\/p>\n
events {
\n worker_connections 1024;
\n}<\/p>\n
# \u6dfb\u52a0 autoindex on；\u53c2\u6570\u53ef\u5f00\u542f\u76ee\u5f55\u7d22\u5f15，\u8bbf\u95ee\u76ee\u5f55
\nhttp {
\n log_format main '$remote_addr – $remote_user [$time_local] "$request" '
\n '$status $body_bytes_sent "$http_referer" '
\n '"$http_user_agent" "$http_x_forwarded_for"';
\n # \u65e5\u5fd7\u6587\u4ef6\u4f4d\u7f6e
\n access_log \/var\/log\/nginx\/access.log main;<\/p>\n
sendfile on;
\n tcp_nopush on;
\n tcp_nodelay on;
\n keepalive_timeout 65;
\n types_hash_max_size 2048;<\/p>\n
include \/etc\/nginx\/mime.types;
\n default_type application\/octet-stream;<\/p>\n
# \u9ed8\u8ba4\u76ee\u5f55\u914d\u7f6e\u4e0b\u7684\u914d\u7f6e\u6587\u4ef6\u5747\u751f\u6548
\n include \/etc\/nginx\/conf.d\/*.conf;<\/p>\n
server {
\n listen 80 default_server;
\n listen [::]:80 default_server;
\n # \u670d\u52a1\u57df\u540d\u79f0
\n server_name _;
\n # \u9ed8\u8ba4\u8bbf\u95ee\u76ee\u5f55
\n root \/usr\/share\/nginx\/html;<\/p>\n
# Load configuration files for the default server block.
\n include \/etc\/nginx\/default.d\/*.conf;<\/p>\n
location \/ {
\n }<\/p>\n
error_page 404 \/404.html;
\n location = \/40x.html {
\n }<\/p>\n
error_page 500 502 503 504 \/50x.html;
\n location = \/50x.html {
\n }
\n }<\/p>\n
}<\/p>\n
# \u6839\u636e\u57df\u540d\u63d0\u4f9b\u591a\u4e2a\u8bbf\u95ee\u7ad9\u70b9
\n[root@server ~]# cat \/etc\/nginx\/conf.d\/vhost-web.conf
\nserver {
\n server_name web1.zhiqiang.cloud;
\n root \/usr\/share\/nginx\/server1\/;
\n}<\/p>\n
server {
\n server_name web2.zhiqiang.cloud;
\n root \/usr\/share\/nginx\/server2\/;
\n}
\n# \u51c6\u5907\u76f8\u5e94\u76ee\u5f55\u53ca\u8bbf\u95ee\u7f51\u9875
\n[root@server ~]# mkdir \/usr\/share\/nginx\/server1\/
\n[root@server ~]# mkdir \/usr\/share\/nginx\/server2\/
\n[root@server ~]# echo "Welcome to my web1" > \/usr\/share\/nginx\/server1\/index.html
\n[root@server ~]# echo "Welcome to my web2" > \/usr\/share\/nginx\/server2\/index.html<\/p>\n
# \u57fa\u4e8e\u7aef\u53e3\u914d\u7f6e\u591a\u7ad9\u70b9\u8bbf\u95ee
\n[root@server ~]# cat \/etc\/nginx\/conf.d\/vhost-port.conf
\nserver {
\n listen 8081;
\n server_name server.zhiqiang.cloud;
\n root \/usr\/share\/nginx\/server1\/;
\n}<\/p>\n
server {
\n listen 8082;
\n server_name server.zhiqiang.cloud;
\n root \/usr\/share\/nginx\/server2\/;
\n}<\/p>\n
\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb773\u6b21\uff0c\u70b9\u8d5e11\u6b21\uff0c\u6536\u85cf10\u6b21\u3002NFS\uff08Network File System\uff0c\u7f51\u7edc\u6587\u4ef6\u7cfb\u7edf\uff09\u662f\u4e00\u79cd\u57fa\u4e8e TCP\/IP \u534f\u8bae\u7684\u7f51\u7edc\u6587\u4ef6\u5171\u4eab\u534f\u8bae\uff0c\u5141\u8bb8\u4e0d\u540c\u64cd\u4f5c\u7cfb\u7edf\u7684\u8ba1\u7b97\u673a\uff08\u4e3b\u8981\u662f\u7c7b Unix \u7cfb\u7edf\uff0c\u5982 Linux\u3001Solaris\uff09\u901a\u8fc7\u7f51\u7edc\u5171\u4eab\u6587\u4ef6\u548c\u76ee\u5f55\uff0c\u8ba9\u8fdc\u7a0b\u4e3b\u673a\u53ef\u4ee5\u50cf\u8bbf\u95ee\u672c\u5730\u6587\u4ef6\u4e00\u6837\u8bbf\u95ee\u5171\u4eab\u8d44\u6e90\u3002\u4e3b\u8981\u529f\u80fd\u5305\u62ec\uff1a\u8bfb\u53d6\u914d\u7f6e\u6587\u4ef6\u3001\u521d\u59cb\u5316\u670d\u52a1\u3001\u521b\u5efa\u5de5\u4f5c\u8fdb\u7a0b\u3001\u63a5\u6536\u5916\u754c\u4fe1\u53f7\uff08\u5982\u91cd\u542f\u3001\u505c\u6b62\uff09\u5e76\u8f6c\u53d1\u7ed9\u5de5\u4f5c\u8fdb\u7a0b\u3001\u76d1\u63a7\u5de5\u4f5c\u8fdb\u7a0b\u72b6\u6001\uff08\u82e5\u5de5\u4f5c\u8fdb\u7a0b\u5f02\u5e38\u9000\u51fa\uff0c\u4f1a\u81ea\u52a8\u91cd\u542f\u65b0\u7684\u5de5\u4f5c\u8fdb\u7a0b\uff09\u3002\u6240\u6709\u5de5\u4f5c\u8fdb\u7a0b\u5e73\u7b49\u7ade\u4e89\u5ba2\u6237\u7aef\u8fde\u63a5\uff0c\u901a\u8fc7\u5171\u4eab\u5185\u5b58\u5b9e\u73b0\u8fdb\u7a0b\u95f4\u7684\u914d\u7f6e\u4fe1\u606f\u540c\u6b65\u3002<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[58,43,44],"topic":[],"class_list":["post-49066","post","type-post","status-publish","format-standard","hentry","category-server","tag-linux","tag-43","tag-44"],"yoast_head":"\n