后端开发实战

Appearance

上传相关： ​

默认上传文件大小 1m
413 Request Entity Too Large 需要将其修改至合适大小 client_max_body_size 200m   ;

windows 操作命令 ​

powershell
启动
start nginx
停止  
nginx -s stop

重载 
nginx  -s  reload

keepalived ​

机器安装软件
192.168,83.128nginxkeepalived
192.168,83.129nginxkeepalived
虚拟ip
192.168.83.130

安装 keepalived ​

yum install -y keepalived

安装nginx ​

shell
yum -y install make zlib zlib-devel gcc-c++ libtool openssl openssl-devel

tar -zxvf nginx-1.12.2.tar.gz
cd nginx-1.12.2
./configure
make && make install
# 进入 /usr/local/nginx/sbin/nginx 启动服务
# 相关命令
./nginx -v # 查看 nginx verison
./nginx # 启动nginx
./nginx -s stop # 停止nginx
./nginx -s reload # 重新加载

ln -s  /usr/local/nginx/sbin/nginx   /usr/local/bin/nginx

##安装额外的模块
./configure --with-http_stub_status_module
## make  make  install

-------------
###  关闭版本提示
nginx  关闭版本提示
 http{
 # 客户端上传文件控制大小
client_max_body_size 200m   ;
关闭版本提示
server_tokens off;
 
 }

配置 keepalived ​

shell
vi /etc/keepalived/keepalived.conf
! Configuration File for keepalived

 # 主机
global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
   
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

vrrp_instance VI_1 {
#  主机  MASTER  备机 BACKUP
    state MASTER  
    # 网卡
    interface ens33
    # 主备机保持一致
    virtual_router_id 60
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
      # 虚拟ip
        192.168.83.130/24
    }
}

-------------------------------------
备机

! Configuration File for keepalived

global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
  
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

vrrp_instance VI_1 {
    state BACKUP
    interface ens33
    virtual_router_id 60
    #  备机 需要小于 主机的
    priority 90
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.83.130/24
    }
}

---------------------
# 启动主机
systemctl start keepalived
# 查看日志
tail -f -n 1000 /var/log/messages
#  查看是否绑定了虚拟ip
ip addr |  grep  192.168.83.130
-----
# 停止  按照进程名称杀死进程   最有效果  用来修改配置文件
pkill  keepalived
#  主机停止后 虚拟ip 会漂移到 备机  当主机恢复后自动漂移到主机
#  重启网络  之后 再重启 keepalived，否则失败
 systemctl restart network.service

open registy https ​

https://www.cnblogs.com/liuxm2017/p/10921512.htmlhttps://blog.csdn.net/qq_27575627/article/details/126724230 letsencrypt 实现 https https://letsencrypt.org/zh-cn/

shell
# 安装  certbot 
# 执行命令  -w  root  -d  域名      -m  邮箱
 certbot certonly --webroot -w /opt/projects/XXXXX/  -d mt.xxx.cn -m XXX@qq.com

配置文件

shell
server {
    listen 80;
    server_name www.xxx.com;
    location / {
        try_files $uri $uri/ /index.html;
        root /opt/xxx/xxx;
        index index.html index.htm;
    }
}





server {
    listen 80;
    server_name www.xxx.com;
    rewrite  ^/(.*)$  https://www.xxx.com/$1 permanent;
}

server {
    listen 443 ssl;
    server_name www.xxx.com;

    ssl_prefer_server_ciphers on;
    ssl_ciphers HIGH:!ADH:!MD5:!aNULL:!eNULL:!MEDIUM:!LOW:!EXP:!kEDH;
    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:50m;
    ssl_stapling on;
    ssl_stapling_verify on;
    add_header Strict-Transport-Security max-age=15768000;

    ssl_certificate /etc/letsencrypt/live/www.xxx.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/www.xxx.com/privkey.pem;


    location / {
        try_files $uri $uri/ /index.html;
        root /opt/xxx/xxx;
        index index.html index.htm;
    }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
                root   html;
        }
}

#  
# 1. 打开定时任务配置
 crontab -e
# 2. 增加定时刷新的配置
30 3 * */2 * /usr/bin/certbot renew --quiet >> /var/log/cerbot.log

注意 ： 反向代理 内部必须是http

日志配置： ​

https://blog.csdn.net/qq_34399969/article/details/120308446https://blog.csdn.net/Yue_zuozuo/article/details/136044779

nginx
http{
	log_format  main  '$year'
	                   '-$month'
					   '-$day $hour:$minutes:$seconds;' 
					   '$remote_user;'
					   '$remote_addr;'
					   '$request_uri;' 
                      '$status;' 
                      '$http_x_forwarded_for;'
					  '$http_host;'
					  '$http_referer;'
					  '$body_bytes_sent;'
					  '$http_user_agent;'
					  '$request';
  access_log  logs/access.log  main;	
  error_log   logs/error.log  error;	
  server{

		if ($time_iso8601 ~ "^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})") {
			set $year $1;
			set $month $2;
			set $day $3;
			set $hour $4;
			set $minutes $5;
			set $seconds $6;
		}
    #access_log  logs/access.log  main;	
    location / {
      #  请求头携带 请求ip      
			proxy_set_header real-host $host;
			proxy_set_header real-ip $remote_addr;
			proxy_pass http://localhost:8081/;
    }
    
  }
}

搭建文件服务器 ​

https://cloud.tencent.com/developer/article/1498209

nginx
 server {
        listen       80;
        server_name  localhost;
        root /usr/local/static/;
        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            autoindex on;             #开启索引功能
            autoindex_exact_size off; # 关闭计算文件确切大小（单位bytes），只显示大概大小（单位kb、mb、gb）
            autoindex_localtime on;   # 显示本机时间而非 GMT 时间
            charset utf-8; # 避免中文乱码
            #root   html;
            #index  index.html index.htm;
        }
｝

nginx rtmp 实现 视频推流拉流 ​

https://www.cnblogs.com/ydqblogs/p/17970146 建议使用 openresty openresty 自带了很多插件 需要 nginx-rtmp-module

rtmp1.pngrtmp.png

nginx 配置

sh
rtmp{
  server {
	listen 1935;
	chunk_size 4096;
  #  直播推流
	application live{
	    live on;
	}
  # hls 推流
	application hls1{
		live on;
		hls on;
		hls_path  /usr/local/nginx/html/hls1/ ;
	}
  ##  静态资源文件   MP4 格式
	application vod{
		play /usr/local/nginx/html/vod;

	}
  }
}

前端

html
<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<title></title>
		 <link href="https://vjs.zencdn.net/8.10.0/video-js.css" rel="stylesheet" />
		  <script src="https://vjs.zencdn.net/8.10.0/video.min.js"></script>
	</head>
	<body>
		 <video
    id="my-video"
    class="video-js"
    controls
    preload="auto"
    width="640"
    height="264"
   
    data-setup="{}"
  >
  <!-- http://192.168.83.137/vod/1.mp4 -->
    <source src="http://192.168.83.137/hls1/1.m3u8" />
   
    <p class="vjs-no-js">
      To view this video please enable JavaScript, and consider upgrading to a
      web browser that
      <a href="https://videojs.com/html5-video-support/" target="_blank"
        >supports HTML5 video</a
      >
    </p>
  </video>

 

	</body>
</html>

ffmpeg 推流 ​

ffmpeg1

sh
ffmpeg -re -i  1.mp4 -vcodec libx264 -acodec  aac  -f   flv   rtmp://192.168.83.137:1935/hls1/1

goaccess 监控 nginx ​

https://www.goaccess.cc/?mod=man

sh
yum install goaccess 
##  输出  监控报告 
goaccess -f access.log -o report.html --log-format=COMBINED
## 中文 
LANG="zh_CN.UTF-8" goaccess -f access.log --log-format=COMBINED  -o report.html

nginx 的用途： ​

根据 header 的host 路由到不同的机房 ​

nginx
server {
    listen 80;
    server_name admin.test.com;

    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

server {
    listen 80;
    server_name admin.prod.com;

    location / {
        proxy_pass http://127.0.0.1:8086;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

灰度发布 ​

nginx
# ============================================================
# 方案一：基于权重的灰度（最常用）
# 按比例将流量分配到新旧版本
# ============================================================
upstream backend {
    server 127.0.0.1:8080 weight=90;  # 旧版本，90% 流量
    server 127.0.0.1:8086 weight=10;  # 新版本，10% 流量
}

server {
    listen 80;


    location / {
        proxy_pass http://backend;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

# ============================================================
# 方案二：基于请求头的灰度
# 请求头带 X-Gray: true 的用户访问新版本
# ============================================================
upstream prod {
    server 127.0.0.1:8080;
}

upstream gray {
    server 127.0.0.1:8086;
}

server {
    listen 80;


    # 默认走旧版本
    set $backend prod;

    # 匹配灰度条件
    if ($http_x_gray = "true") {
        set $backend gray;
    }

    location / {
        proxy_pass http://$backend;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

# ============================================================
# 方案三：基于 Cookie 的灰度
# 带 cookie gray=1 的用户访问新版本
# ============================================================
server {
    listen 80;


    set $backend prod;

    if ($cookie_gray = "1") {
        set $backend gray;
    }

    location / {
        proxy_pass http://$backend;
        proxy_set_header Host $host;
    }
}

# ============================================================
# 方案四：基于 IP 的灰度
# 指定 IP 访问新版本（内测用户）
# ============================================================
server {
    listen 80;


    set $backend prod;

    # 灰度 IP 白名单
    if ($remote_addr = "192.168.1.100") {
        set $backend gray;
    }
    if ($remote_addr = "192.168.1.101") {
        set $backend gray;
    }

    location / {
        proxy_pass http://$backend;
        proxy_set_header Host $host;
    }
}

蓝绿发布 ​

nginx
# ============================================================
# 蓝绿发布配置
# blue = 当前生产环境（旧版本）
# green = 新版本环境
# 切换只需改一行 upstream 地址，nginx reload 即可
# ============================================================

# 定义蓝绿两组后端
upstream blue {
    server 127.0.0.1:8080;
}

upstream green {
    server 127.0.0.1:8086;
}

# 当前活跃环境（切换时只改这一行）
# 改成 @green 即切到新版本
upstream active {
    server 127.0.0.1:8080;  # blue
    # server 127.0.0.1:8086;  # green
}

server {
    listen 80;
    server_name admin.test.com;

    location / {
        proxy_pass http://active;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    # 可选：健康检查页面，确认新版本是否就绪
    location /health {
        proxy_pass http://active/actuator/health;
    }
}

# ============================================================
# 方案二：通过变量切换（更灵活，支持文件 include）
# ============================================================

# 在 /etc/nginx/conf.d/env.conf 中维护当前环境
# 内容只有一行：
#   set $current_env "blue";
# 或
#   set $current_env "green";

# include /etc/nginx/conf.d/env.conf;
#
# server {
#     listen 80;
#     server_name admin.test.com;
#
#     location / {
#         if ($current_env = "blue") {
#             proxy_pass http://blue;
#         }
#         if ($current_env = "green") {
#             proxy_pass http://green;
#         }
#         proxy_set_header Host $host;
#     }
# }

流量复制 生产的流量导入到测试 ​

nginx
# ============================================================
# Nginx 流量镜像配置
# 功能：将线上流量复制一份到测试环境，不影响正式响应
# ============================================================

# 正式环境
upstream prod {
    server 127.0.0.1:8080;
}

# 测试环境（镜像目标）
upstream test {
    server 127.0.0.1:8086;
}

server {
    listen 80;


    # ----------------------------------------------------------
    # 全量镜像：所有请求都复制一份到测试环境
    # ----------------------------------------------------------
    location / {
        mirror /mirror;                  # 开启镜像，指定镜像接口
        mirror_request_body on;          # 镜像请求体（POST/PUT 等）

        proxy_pass http://prod;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # 镜像接收端（internal 表示外部无法直接访问）
    location /mirror {
        internal;
        proxy_pass http://test$request_uri;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # ----------------------------------------------------------
    # 可选：只镜像 GET 请求（写操作不镜像，避免数据污染）
    # ----------------------------------------------------------
    # location /api/ {
    #     if ($request_method = GET) {
    #         mirror /mirror;
    #     }
    #     mirror_request_body on;
    #     proxy_pass http://prod;
    # }

    # ----------------------------------------------------------
    # 可选：只镜像特定路径
    # ----------------------------------------------------------
    # location /api/order/ {
    #     mirror /mirror;
    #     mirror_request_body on;
    #     proxy_pass http://prod;
    # }
    #
    # location /api/user/ {
    #     mirror /mirror;
    #     mirror_request_body on;
    #     proxy_pass http://prod;
    # }
    #
    # location /api/ {
    #     proxy_pass http://prod;   # 其他接口不镜像
    # }
}