Godaddy如何建设网站,做个自己的影院网站怎么做,在线营销型网站,网站定位1.wgcloud监控介绍
1.1 介绍
这是一款开源的主机监控系统#xff0c;可以支持主机各种指标监测#xff08;cpu使用率#xff0c;cpu温度#xff0c;内存使用率#xff0c;磁盘容量空间#xff0c;磁盘IO#xff0c;硬盘SMART健康状态#xff0c;系统负载#xff…
1.wgcloud监控介绍
1.1 介绍
这是一款开源的主机监控系统可以支持主机各种指标监测cpu使用率cpu温度内存使用率磁盘容量空间磁盘IO硬盘SMART健康状态系统负载连接数量网卡流量硬件系统信息等。支持监测服务器上的进程应用、文件、端口、日志、DOCKER容器、数据库、数据表等资源。支持监测服务接口API、数通设备如交换机、路由器、打印机PING和SNMP监测、自定义监控指令等。自动生成网络拓扑图大屏可视化web SSH统计分析报表指令下发批量执行FTP监测资产管理设备账号管理故障告警信息推送如邮件、钉钉、微信、短信等
1.2 支持监控的主机
支持监测LinuxDebianRedHatCentOSUbuntuFedoraSUSE麒麟统信(UOS)龙芯(mips)等支持监测WindowsWindows Server 2008 R2Windows Server 2012201620192022Windows 7Windows 8Windows 10Windows 11支持监测UnixSolarisFreeBSDOpenBSDAIX支持监测MacOSMacOS amd64MacOS arm64其他支持ARMAndroid(安卓)Riscv64S390x树莓派等
2.wgcloud的搭建
2.1 Server端的搭建
2.1.1 监控机安装JDK 爪哇下载 |甲骨文中国 (oracle.com) 查看主机中是否安装了Java
[rootlocalhost ~]# rpm -qa | grep java
查看仓库中的java软件包
[rootlocalhost ~]# yum -y list java*
下载开发者版本
[rootlocalhost ~]# yum install java-1.8.0-openjdk-devel.x86_64
查看是否下载成功
[rootlocalhost ~]# java -version通过Yum安装的jdk一般在/usr/lib/jvm配置环境变量
[rootlocalhost ~]# cat /etc/profile.d/jdk.sh EOFJAVA_HOME/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.322.b06-1.el7_9.x86_64JRE_HOME$JAVA_HOME/jreCLASS_PATH.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar:$JRE_HOME/libPATH$PATH:$JAVA_HOME/bin:$JRE_HOME/binexport JAVA_HOME JRE_HOME CLASS_PATH PATHEOF初始化环境变量,让环境变量永久生效
[rootlocalhost ~]# source /etc/profile.d/jdk.sh 2.1.2 监控机安装MySQL数据库
使用Yum安装Mariadb
[rootlocalhost ~]# yum -y install mariadb*
启动数据库并设置为自启动
[rootlocalhost ~]# systemctl start mariadb.service;systemctl enable mariadb.service
初始化数据库并设置密码
[rootlocalhost ~]# mysqladmin -uroot password ******添加远程访问权限
MariaDB [(none)] use mysql;
MariaDB [mysql] grant all privileges on *.* to root% identified by 123456;
MariaDB [mysql] flush privileges;2.1.3 监控机安装wgcloud [rootlocalhost ~]# wget https://www.wgstart.com/download/3.4.6/wgcloud-v3.4.6.tar.gz
[rootlocalhost ~]# tar -zxf wgcloud-v3.4.6.tar.gz -C /usr/local/在服务端进行初始化数据库,导入或运行SQL语句
第一步:创建数据库,名称为wgcloud,字符集设置为UTF-8
[rootlocalhost ~]# mysql -uroot -p12345
MariaDB [(none)] create database if not exists wgcloud character set utf8 collate utf8_general_ci;
MariaDB [(none)] create user wgcloudlocalhost identified by wgcloud123;
MariaDB [(none)] grant all privileges on wgcloud.* to wgcloudlocalhost;
MariaDB [(none)] flush privileges;第二步:在wgcloud数据库导入或运行/usr/local/wgcloud-v3.4.6文件夹中的wgcloud-MySQL.sql文件
MariaDB [none] use wgcloud;
MariaDB [wgcloud] source /usr/local/wgcloud-v3.4.6/wgcloud-MySQL.sql;2.1.4 在服务端进行Server配置及启动
配置/usr/local/wgcloud-v3.4.6/server/config/application.yaml文件配置/usr/local/wgcloud-v3.4.6/agent/config/application.properties文件注意properties类型文件中的等号后面不需要保留空格。agent主动单向给server上报采集数据agent主机不需要开启任何端口因为server不会访问agent 2.1.5 启动Serveri端和Agent端
[rootlocalhost ~]# cd /usr/local/wgcloud-v3.4.6/server/
[rootlocalhost server]# ./start.sh
./wgcloud-server-release.jarwgcloud-server程序开始启动
./wgcloud-daemon-releasewgcloud-daemon程序开始启动
[rootlocalhost server]# cd ../agent/
[rootlocalhost agent]# ./start.sh
./wgcloud-agent-releasewgcloud-agent程序开始启动
[rootlocalhost agent]# lsof -i:9999 2.1.6 访问http://IP地址:Port/wgcloud 2.2 Agent的搭建
2.2.1 在客户端安装wgcloud
[rootlocalhost ~]# wget https://www.wgstart.com/download/3.4.6/wgcloud-v3.4.6.tar.gz
[rootlocalhost ~]# tar -zxf wgcloud-v3.4.6.tar.gz -C /usr/local/2.2.2 修改Agent配置文件
修改serverUrl为:http://Serverip:port2.2.3 启动Agent
[rootlocalhost ~]# bash /usr/local/wgcloud-v3.4.1/agent/.start.sh2.2.4 查看监控情况 2.3 使用system管理wgcloud
使用system管理wgcloud
[rootlocalhost ~]# cat /usr/lib/systemd/system/wgcloud.service EOF
[Unit]
Descriptionwgcloud sever
Afternetwork.target syslog.target[Service]
Typeforking
Userroot
ExecStart/usr/local/wgcloud/server/start.sh
ExecStop/usr/local/wgcloud/server/stop.sh
ExecReload/usr/local/wgcloud/server/stop.sh;/usr/local/wgcloud/server/start.sh
Restarton-failure[Install]
WantedBymulti-user.target
EOF[rootlocalhost ~]# systemctl daemon-reload 3.使用Nginx服务器管理wgcloud
3.1 配置Nginx基础配置
配置Nginx.conf文件中包括错误日志生成路径,进程限制,访问日志格式
user nginx;
worker_processes auto;
worker_cpu_affinity auto; #CPU亲和配置
worker_rlimit_nofile 1024; #进程限制error_log /data/log/nginx/error.log;
# error_log的级别分为debug,info,notice,warn,error,crit,默认为error
# debug:调试消息
# info:信息性消息
# notice:公告
# warn:警告
# error:处理请求时出错
# alert警告.必须立即采取行动
# emerg: 紧急情况.系统处于无法使用的状态events {worker_connections 1024;use epoll; # 配置事件驱动模块
}http {include mime.types;default_type application/octet-stream;log_format main $remote_addr $host - $remote_user [$time_local] $request $status $body_bytes_sent $http_referer $http_user_agent $http_x_forwarded_for;# remote_addr:客户端IP地址# remote_user:客户端用户名称,用于记录浏览者进行身份验证时提供的名称,如果没有登录则为空# time_local:访问的时间与时区# request:请求的URL和HTTP协议# status:记录返回的HTTP状态码# body_bytes_sent:发送给客户端的文件主体内容的大小# http_referer:表示是从哪个网站上跳转来的# http_user_agent:客户端浏览器标识# http_x_forwarded_for:客户端IP地址列表(包括中间经过的代理IP)#access_log logs/access.log main;sendfile on;tcp_nopush on;# 优化Nginx静态资源的处理keepalive_timeout 65;include /usr/local/nginx/conf/conf.d/*.conf;
}3.2 配置上游服务器
文件路径:/usr/local/nginx/conf/conf.d/upstream.conf
upstream wgcloudServer {server 192.168.65.3:9999 weight10;ip_hash;
}3.3 配置反向代理
文件路径:/usr/local/nginx/conf/conf.d/proxy.conf
server{listen 80;server_name localhost;charset utf-8;location / {proxy_pass http://myApp;proxy_buffer_size 64k;proxy_buffers 32 32k;proxy_busy_buffers_size 128k;proxy_set_header Host $host;proxy_set_header REMOTE-HOST $remote_addr;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_redirect default;proxy_connect_timeout 600s;proxy_send_timeout 600s;proxy_read_timeout 600s; }location /wgcloud {proxy_pass http://wgcloudServer;}
}3.4 配置SSL证书
1.本地做个域名解析(不做域名解析就用IP进行访问)
Linux虚拟机:
[rootlocalhost ~]# vim /etc/hostsWindows主机同样修改hosts文件2.使用Shell脚本一键生成SSL证书(此证书不被CA认可所以浏览器会报不安全)
#!/bin/bash
if [ ! -f /bin/openssl ];thenyum -y install openssl
fi
. /etc/init.d/functionsCERT_INFO([00]/Oheaven/CNca.god.com \[01]cakey.pem \[02]cacert.pem \[03]2048 \[04]3650 \[05]0 \[10]/CCN/SThubei/Lwuhan/OGizaworks/CNwgcloud.haohe.online \[11]master.key \[12]master.crt \[13]2048 \[14]365[15]1 \[16]master.csr \[20]/CCN/SThubei/Lwuhan/OGizaworks/CNhalo.haohe.online \[21]slave.key \[22]slave.crt \[23]2048 \[24]365 \[25]2 \[26]slave.csr )COLORecho -e \\E[1;32m
END\\E[0m
DIR/usr/local/nginx/conf/ssl/
cd $DIR for i in {0..2};doif [ $i -eq 0 ] ;thenopenssl req -x509 -newkey rsa:${CERT_INFO[${i}3]} -subj ${CERT_INFO[${i}0]} \-set_serial ${CERT_INFO[${i}5]} -keyout ${CERT_INFO[${i}1]} -nodes -days ${CERT_INFO[${i}4]} \-out ${CERT_INFO[${i}2]} /dev/nullelse openssl req -newkey rsa:${CERT_INFO[${i}3]} -nodes -subj ${CERT_INFO[${i}0]} \-keyout ${CERT_INFO[${i}1]} -out ${CERT_INFO[${i}6]} /dev/nullopenssl x509 -req -in ${CERT_INFO[${i}6]} -CA ${CERT_INFO[02]} -CAkey ${CERT_INFO[01]} \-set_serial ${CERT_INFO[${i}5]} -days ${CERT_INFO[${i}4]} -out ${CERT_INFO[${i}2]} /dev/nullfi$COLOR**************************************生成证书信息**************************************$ENDopenssl x509 -in ${CERT_INFO[${i}2]} -noout -subject -dates -serialecho
done
chmod 600 *.key
action 证书生成完成3.5修改配置文件
server{listen 80;server_name wgcloud.haohe.online;charset utf-8; return 301 https://$host$request_uri;
}server{# SSL访问的域名为443listen 443 default ssl;# 填写绑定证书的域名server_name wgcloud.haohe.online;# 证书文件名称ssl_certificate /usr/local/nginx/conf/ssl/master.crt;# 私钥文件名称ssl_certificate_key /usr/local/nginx/conf/ssl/master.key;ssl_session_timeout 5m;#请按照以下协议配置ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #请按照以下套件配置配置加密套件写法遵循 openssl 标准。ssl_ciphers HIGH:!aNULL:!MD5;ssl_prefer_server_ciphers on;location /wgcloud {# limit_req zonefive burst10;error_page 503 /503_api.html;proxy_pass http://wgcloudServer;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header X-Forwarded-Host $host;add_header Strict-Transport-Security max-age31536000;}access_log /data/log/nginx/https_access.log main;error_log /data/log/nginx/https_error.log;
}