SpringBoot项目在Linux部署用Nginx实现负载均衡Https访问

傷城~ 2023-02-20 08:28 9阅读 0赞

### 在Linux服务器上部署SpringBoot项目，用Nginx实现负载均衡，并通过Https访问该项目 ###

### 一、把SpringBoot项目打包成三个jar包，并指定端口为14341，14342，14343 ###

#### 1、自己可以改成不同的端口号，三个jar包名称分别为myblog01.jar，myblog02.jar，myblog03.jar ####

![在这里插入图片描述][20200626212945239.png]

#### 2、[运行教程][Link 1] ####

### 二、下载腾讯云免费SSL证书(用来https访问的) ###

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70]

#### 1、[具体申请教程][Link 2] ####

#### 2、下载下来的文件： ####

![在这里插入图片描述][20200626213641881.png]

#### 3、我们使用Nginx文件夹下面的crt和key文件 ####

![在这里插入图片描述][20200626213658576.png]

### 三、安装Nginx ###

#### [安装教程][Link 3] ####

### 四、Nginx配置HTTPS域名证书 ###

#### 1、要在Nginx中配置Https，就必须安装SSL模块，也就是: http\_ssl\_module 。 ####

#### 2、进入到Nginx的安装目录： /developer/setup/nginx-1.10.2/新增SSL模块(原来的那些模块需要保存) ####

#### 3、进入安装目录 ####

cd /developer/setup/nginx-1.10.2/

#### 4、安装SSL模块 ####

./configure \
    --prefix=/usr/local/nginx \
    --pid-path=/var/run/nginx/nginx.pid \
    --lock-path=/var/lock/nginx.lock \
    --error-log-path=/var/log/nginx/error.log \
    --http-log-path=/var/log/nginx/access.log \
    --with-http_gzip_static_module \
    --http-client-body-temp-path=/var/temp/nginx/client \
    --http-proxy-temp-path=/var/temp/nginx/proxy \
    --http-fastcgi-temp-path=/var/temp/nginx/fastcgi \
    --http-uwsgi-temp-path=/var/temp/nginx/uwsgi \
    --http-scgi-temp-path=/var/temp/nginx/scgi \
    --with-http_ssl_module

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 1]

#### 5、编译和安装 ####

make
    make install

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 2]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 3]

#### 6、进入objs目录，查看ngx\_modules.c文件，文件里面搜到ssl，说明配置成功 ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 4]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 5]

### 五、SSL文件 ###

#### 把SSL证书 \*.crt 和 私钥 \*.key 拷贝到 /usr/local/nginx/conf 目录中。 ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 6]

### 六、单机部署多应用 ###

#### 1、在/usr/local/nginx/conf 目录中的nginx.conf修改配置 ####

upstream my_blog {  #upstream节点名称，my_blog给后面负载均衡使用
            server 193.112.29.147:14341;# ip+端口号
            server 193.112.29.147:14342;
            server 193.112.29.147:14343;
        }
        server { 
    		listen 443;# 新增443端口
    		server_name xuluowuhen.com www.xuluowuhen.com;# 域名
    		# 开启ssl
    		ssl on;
    		# 配置ssl证书（文件在相同目录下，也可以不同目录，路径要写绝对路径）
    		ssl_certificate 1_www.xuluowuhen.com_bundle.crt;
    		# 配置证书秘钥
    		ssl_certificate_key 2_www.xuluowuhen.com.key;
    		# ssl会话cache
    		ssl_session_cache shared:SSL:1m;
    		# ssl会话超时时间
    		ssl_session_timeout 5m;
    		# 配置加密套件，写法遵循 openssl 标准
    		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    		ssl_prefer_server_ciphers on;
    		location / { 
    			proxy_ssl_server_name on;
    			proxy_pass http://my_blog; # 跟upstream节点名称节点对应
    			index  index.html  index.htm;
    		}
    		error_page  404              /404.html;
    		
    		error_page  403              /403.html;
    	}

#### 注意：Nginx负载后无法登陆界面无法跳转到主页的问题 ####

upstream 中添加 一个配置信息 ip\_hash 即可解决

upstream my_blog { 
    	ip_hash;
        server 193.112.29.147:14341;
        server 193.112.29.147:14342;
        server 193.112.29.147:14343;
    }

#### 2、配置完之后，检测配置是否ok，进行重新加载和查看Nginx状态 ####

进入配置文件目录
    cd /usr/local/nginx/conf/
    检测配置是否ok
    ../sbin/nginx -t
    重新加载
    ../sbin/nginx -s reload
    查看nginx运行状态
    ps -A | grep nginx

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 7]

#### 3、启动服务 ####

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAZXhvZHVzMw_size_20_color_FFFFFF_t_70_g_se_x_16]

### 七、云服务器端口配置安全组 ###

#### 1、把三个端口14341，14342，14343进入到云服务器中的安全组 ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 8]

#### 2、关于安全组的介绍[https://cloud.tencent.com/document/product/213/18197\#typical][https_cloud.tencent.com_document_product_213_18197_typical] ####

### 八、服务器 iptables 配置，需要开放三个端口 ###

#### 1、把三个端口都开放了 ####

iptables -I INPUT -p tcp --dport 14341 -j ACCEPT
    service iptables save

#### 2、tcping - 测试服务器指定端口是否开放 ####

tcping 193.112.29.147 14341 //tcping+ip+端口

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 9]

### 上面的步骤已经完成了负载均衡了，在单个服务器上部署多个应用进行https访问 ###

[20200626212945239.png]: https://img-blog.csdnimg.cn/20200626212945239.png
[Link 1]: https://blog.csdn.net/exodus3/article/details/102880734
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200626213352278.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[Link 2]: https://cloud.tencent.com/developer/article/1522482
[20200626213641881.png]: https://img-blog.csdnimg.cn/20200626213641881.png
[20200626213658576.png]: https://img-blog.csdnimg.cn/20200626213658576.png
[Link 3]: https://blog.csdn.net/exodus3/article/details/102677400
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200626215347785.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200625212501647.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200625212643313.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200626215903433.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20200625213044902.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/20200626220138588.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20200626221342545.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAZXhvZHVzMw_size_20_color_FFFFFF_t_70_g_se_x_16]: https://img-blog.csdnimg.cn/a486a3ed4aca485f9ea7920791d38db3.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAZXhvZHVzMw==,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 8]: https://img-blog.csdnimg.cn/20200626222652688.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70
[https_cloud.tencent.com_document_product_213_18197_typical]: https://cloud.tencent.com/document/product/213/18197#typical
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM_size_16_color_FFFFFF_t_70 9]: https://img-blog.csdnimg.cn/2020062620551354.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V4b2R1czM=,size_16,color_FFFFFF,t_70