CDN原理
BIND 视图技术实现DNS，Squid做前端缓存
简单的CDN的搭建：
1、CDN的工作原理：当外网访问内网域名的时候，外网先经过本地的dns查询，然后dns向内网搭建的dns发出申请，内网dns读取配置文件named.conf中包含IP列表的include，如果IP列表中有
该地的IP记录则对应IP列表寻找对应的视图，如没有记录则拒绝返回信息。视图将解析你访问的域名到squid缓存服务器，squid再向对应的web服务器拿取数据。
2、准备工作： 实现简单的CDN只需要4台服务器，squid，web服务器，dns，客服机。客服机、dns和squid中的一个网卡模拟外网，web和squid中的另一个网卡模拟内网。
squid：eth0:192.168.247.13 eth1:192.168.75.131
web : 192.168.75.129
dns : 192.168.247.14
xp : 192.168.247.128
3、搭建web服务： tar zxvf pcre-8.01.tar.gz
cd pcre-8.01
./configure --prefix=/usr && make && make install
tar xvf nginx-0.8.54.tar.gz -C /usr/local/src
cd /usr/local/src
./configure --prefix=/usr/local/nginx
make && make install
vim /usr/local/nginx/conf/nginx.conf
server {
listen 80 ;
server_name www.fengtao5968.com;
index index.html index.htm;
root /usr/local/www/; <--创建www文件夹，存放网页目录
error_page 404 /404.htm;
autoindex_exact_size on;
access_log /usr/local/nginx/logs/ft5968.logs combined;
}
/usr/local/nginx/sbin/nginx 启动nginx
4、搭建squid： vim /etc/security/limits.conf
- nproc 20480
- nofile 204800
ulimit -SHu 20480
ulimit -SHn 204800
tar zxvf squid-3.0.STABLE20.tar.gz -C /usr/local/src
cd /usr/local/src/squid-3.0.STABLE20
./configure --prefix=/usr/local/squid && make && make install
vim /usr/local/squid/etc/squid.conf
http_port 80 accel vhost vport
cache_peer 192.168.75.129 parent 80 0 originserver name=web1
cache_peer_domain web1 www.fengtao5968.com
cache_mem 512 MB
maximum_object_size_in_memory 32 KB
cache_dir diskd /usr/local/squid/var/cache 10240 16 256 Q1=64 Q2=72
maximum_object_size 200 MB
logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
access_log /usr/local/squid/var/logs/access.log combined
cache_effective_user squid <--如果没有squid用户创建squid用户
cache_effective_group squid
visible_hostname sso.ft2022.com <--squid机器的主机名
http_access allow all
mkdir -p /usr/local/squid/var/cache
chown squid:squid /usr/local/squid/var/cache
mkdir -p /usr/local/squid/var/logs/
chown squid:squid /usr/local/squid/var/logs/
/usr/local/squid/sbin/squid -z -X <--初始化缓存目录
/usr/local/squid/sbin/squid -D <--doman模式下启动
测试：客服机需要在host中绑定192.168.247.13 www.fengtao5968.com
5、搭建dns： tar zxvf bind-9.6.0.tar.gz -C /usr/local/src/
cd /usr/local/src/bind-9.6.0/
./configure --prefix=/usr/local/named && make && make install
cd /usr/local/named/
sbin/rndc-confgen -a <--生成rndc.key
cd etc/
../sbin/dnssec-keygen -a hmac-md5 -b 128 -n HOST fengtao5968 <--生成一个秘钥，提供给视图使用。该实验没有使用视图的秘钥。
dig > named.ca
vim named.conf
options {
directory "/usr/local/named/etc"; <--要写named安装路径下的named.conf
allow-query-cache {any;};
pid-file "named.pid";
include "rndc.key";
controls {
inet 127.0.0.1 allow { localhost; } keys { rndc-key; };
};
logging {
channel query_log {
file "query.log" versions 3 size 20m;
severity info;
print-time yes;
print-category yes;
};
category queries {
query_log;
};
};
include "ip.fengtao5968"; vim /usr/local/named/etc/ip.fengtao5968
view "view_fengtao5968" { acl "FENGTAO5968" {
match-clients { FENGTAO5968; }; 192.168.24.0/24;
recursion yes; 192.168.247.0/24;<-- 一定要包含本机的网段，否则dns无法解析到视图。
zone "." IN { };
type hint;
file "named.ca";
};
zone "localhost" IN { vim /usr/local/named/etc/localhost.zone
type master;ORIGIN localhost.
allow-update { none; }; @ 1D IN SOA @ root (
}; 42 ; serial (d. adams)
zone "0.0.127.in-addr.arpa" IN { 3H;
type master; 15M;
file "named.local"; 1W;
allow-update { none; }; 1D )
}; 1D IN NS @
zone "fengtao5968.com" IN{ 1D IN A 127.0.0.1
type master;
file "fengtao5968.conf";
allow-update { none; };
};
};
vim /usr/local/named/etc/named.local
TTL 180
$ORIGIN fengtao5968.com.
@ IN SOA @ root. ( 实验中不要用域名替代第二个@，否则会出现找不到相应域名的错误日志。
2013040610
180
900
3600000
3600 )
NS @
www CNAME ftp.fengtao5968.com.
ftp.fengtao5968.com. IN A 192.168.247.13
测试：/usr/local/named/sbin/named-checkconf /usr/local/named/etc/named.conf
启动：/usr/local/named/sbin/named
查看系统日志：tail -f /var/log/messages 若无错误实验基本上成功
检测域名是否可用：dig www.fengtao5968.com 若被检测到squid的IP上去就表示成功
6、测试： 将客服机的dns指向dns服务器即可。
- nofile 204800
