Ansible实战—使用playbook部署lamp
Ansible实战—使用playbook部署lamp
本次环境说明：
| 系统平台 | 主机的IP地址 | 需要安装的服务 |
|---|---|---|
| redhat8 | 192.168.110.10 | ansible |
| redhat8 | 192.168.110.20 | httpd |
| redhat8 | 192.168.110.30 | mysql |
| redhat8 | 192.168.110.40 | php |
准备工作
给Ansible主控机配置yum源（阿里云官方镜像网站）
//配置centos源
[root@ansible ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo
[root@ansible ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
[root@ansible ~]# sed -i 's|$releasever|8|' /etc/yum.repos.d/CentOS-Base.repo
//配置epel源
[root@ansible ~]# yum install -y https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
[root@ansible ~]# sed -i 's|^#baseurl=https://download.fedoraproject.org/pub|baseurl=https://mirrors.aliyun.com|' /etc/yum.repos.d/epel*
[root@ansible ~]# sed -i 's|^metalink|#metalink|' /etc/yum.repos.d/epel*
[root@ansible ~]# sed -i 's|$releasever|8|' /etc/yum.repos.d/epel*
//清理yum缓存，建立缓存
[root@ansible ~]# yum clean all
[root@ansible ~]# yum makecach
在Ansible主控机上设置三台受控机
//映射主机名
[root@ansible ~]# vim /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.110.10 ansible
192.168.110.20 httpd
192.168.110.30 mysql
192.168.110.40 php
//修改清单位置
[root@ansible ~]# vim /etc/ansible/ansible.cfg
# some basic default values...
inventory = ./inventory
//定义清单
[root@ansible ~]# vim /etc/ansible/inventory
[web_group]
httpd
[databases_group]
mysql
[app_group]
php
生成密钥，给三台受控机设置免密登录
[root@ansible ~]# ssh-keygen -t rsa //生成密钥，直接回车即可
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:OFB9SUGgUTf2KbgfrEnnDe5vDh0OE2AmqeOjC7UMsqw root@ansible
The key's randomart image is:
+---[RSA 3072]----+
| ++*+Bo |
| ..*.=oo . |
| ... ..o o |
| o. . o o |
|o .. .o S B . |
|o= .o o B O . |
|o.o. . o = + |
|... . .. |
|E .. .+o |
+----[SHA256]-----+
//设置主机免密登录
[root@ansible ~]# ssh-copy-id root@httpd //httpd主机
[root@ansible ~]# ssh-copy-id root@mysql //mysql主机
[root@ansible ~]# ssh-copy-id root@php //php主机
测试能否ping通三台受控机
[root@ansible ~]# ansible all -m ping
mysql | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
httpd | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
php | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
创建本次项目的目录
//创建project文件夹
[root@ansible ~]# mkdir /project
[root@ansible ~]# cd /project/
[root@ansible project]# ls
[root@ansible project]# mkdir -p modules/yum/files
[root@ansible project]# mkdir -p modules/webs/apache modules/databases/mysql modules/apps/php
//把配置清单文件拷贝到当前目录，使project目录可以单独使用ansible命令
[root@ansible project]# cp /etc/ansible/ansible.cfg .
[root@ansible project]# cp /etc/ansible/inventory .
//可以ping通
[root@ansible project]# ansible all -m ping
mysql | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
httpd | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
php | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
项目结构
[root@ansible project]# tree .
.
├── ansible.cfg
├── inventory
├── lamp
│ └── lamp.yml
└── modules
├── apps
│ └── php
│ ├── php_install.yml
│ └── vars
│ └── var.yml
├── databases
│ └── mysql
│ ├── files
│ │ └── mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
│ ├── mysql_install.yml
│ ├── templates
│ │ ├── my.cnf.j2
│ │ └── mysqld.service.j2
│ └── vars
│ └── var.yml
├── webs
│ └── apache
│ ├── files
│ │ ├── apr-1.7.0.tar.gz
│ │ ├── apr-util-1.6.1.tar.gz
│ │ └── httpd-2.4.46.tar.bz2
│ ├── httpd_install.yml
│ ├── scripts
│ │ └── install.sh
│ ├── templates
│ │ ├── httpd.conf.j2
│ │ └── httpd.service.j2
│ └── vars
│ └── var.yml
└── yum
├── files
│ ├── Centos6-base.repo
│ ├── Centos7-base.repo
│ ├── Centos8-base.repo
│ ├── epel-6.repo
│ ├── epel-7.repo
│ └── epel-8.repo
└── main.yml
开始部署
给三台受控主机配置yum源
本次使用的是阿里云的网络源
//下载centos源
[root@ansible files]# wget https://mirrors.aliyun.com/repo/Centos-6.repo
[root@ansible files]# wget https://mirrors.aliyun.com/repo/Centos-7.repo
[root@ansible files]# wget https://mirrors.aliyun.com/repo/Centos-8.repo
//下载epel源
[root@ansible files]# wget epel-6.repo http://mirrors.aliyun.com/repo/epel-6.repo
[root@ansible files]# wget epel-7.repo http://mirrors.aliyun.com/repo/epel-7.repo
[root@ansible files]# wget epel-release-latest-8.noarch.rpm https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
//查看下载好的源
[root@ansible files]# ls
Centos-6.repo Centos-8.repo epel-7.repo
Centos-7.repo epel-6.repo epel-release-latest-8.noarch.rpm
//安装centos8的epel的rpm包
[root@ansible files]# rpm -ivh epel-release-latest-8.noarch.rpm
Verifying... ################################# [100%]
Preparing... ################################# [100%]
package epel-release-8-10.el8.noarch is already installed //因为本机是安装了centos8的epel源
//拷贝到当前目录
[root@ansible files]# cp /etc/yum.repos.d/epel.repo .
//删除centos8的epel源
[root@ansible files]# rm -f epel-release-latest-8.noarch.rpm
//改名为epel-8.repo
[root@ansible files]# mv epel.repo epel-8.repo
//查看下载好的源
[root@ansible files]# ls
Centos-6.repo Centos-7.repo Centos-8.repo epel-6.repo epel-7.repo epel-8.repo
配置centos源
//配置centos源
[root@ansible files]# sed -i 's|$releasever|6|' Centos-6.repo
[root@ansible files]# sed -i 's|$releasever|7|' Centos-7.repo
[root@ansible files]# sed -i 's|$releasever|8|' Centos-8.repo
[root@ansible files]# ls
Centos-6.repo Centos-7.repo Centos-8.repo epel-6.repo epel-7.repo epel-8.repo
[root@ansible files]# mv Centos-6.repo Centos6-base.repo
[root@ansible files]# mv Centos-7.repo Centos7-base.repo
[root@ansible files]# mv Centos-8.repo Centos8-base.repo
编写yum的playbook
[root@ansible modules]# vim yum/main.yml
---
- hosts: all
tasks:
- name: CentOS 7_base
yum_repository:
name: base
baseurl: https://mirrors.aliyun.com/centos/7/os/x86_64/
enabled: yes
gpgcheck: no
mode: 0644
file: base
description: base
state: present
when:
- ansible_facts["distribution"] == "CentOS"
- ansible_facts["distribution_major_version"] == "7"
- name: CentOS 7_epel
yum_repository:
name: epel
description: epel
file: epel
baseurl: https://mirrors.aliyun.com/epel/7/x86_64
gpgcheck: no
mode: 0644
state: present
when:
- ansible_facts["distribution"] == "CentOS"
- ansible_facts["distribution_major_version"] == "7"
- name: yum_RedHat 8 yum_CentOS 8
loop:
- AppStream
- BaseOS
yum_repository:
name: "{{ item }}"
description: "{{ item }}"
file: "{{ item }}"
baseurl: https://mirrors.aliyun.com/centos/8/{{ item }}/x86_64/os/
gpgcheck: no
mode: 0644
state: present
when: >
( ansible_facts["distribution"] == "RedHat" and
ansible_facts["distribution_major_version"] == "8" )
or
( ansible_facts["distribution"] == "CentOS" and
ansible_facts["distribution_major_version"] == "8" )
- name: epel_RedHat 8 epel_CentOS 8
yum_repository:
name: epel
description: epel
file: epel
baseurl: https://mirrors.aliyun.com/epel/8/Everything/x86_64/
gpgcheck: no
mode: 0644
state: present
when: >
( ansible_facts["distribution"] == "RedHat" and
ansible_facts["distribution_major_version"] == "8" )
or
( ansible_facts["distribution"] == "CentOS" and
ansible_facts["distribution_major_version"] == "8" )
- name: selinux
lineinfile:
path: /etc/selinux/config
regexp: '^SELINUX='
line: SELINUX=disabled
- name: set selinux
command: setenforce 0
安装apache
下载需要的软件包
//当前目录的位置
[root@ansible files]# pwd
/project/modules/webs/apache/files
//开始下载，可以使用wget下载，也可以使用xftp传进来
[root@ansible files]# wget https://mirrors.tuna.tsinghua.edu.cn/apache//apr/apr-1.7.0.tar.gz
[root@ansible files]# wget https://mirrors.tuna.tsinghua.edu.cn/apache//apr/apr-util-1.6.1.tar.gz
[root@ansible files]# wget https://mirrors.tuna.tsinghua.edu.cn/apache/httpd/httpd-2.4.46.tar.bz2
//查看
[root@ansible files]# ls
apr-1.7.0.tar.gz apr-util-1.6.1.tar.gz httpd-2.4.46.tar.bz2
配置变量的yml文件
//创建vars目录
[root@ansible apache]# mkdir vars
//编写var.yml
[root@ansible apache]# vim vars/var.yml
depend_pkg:
- "@Development Tools"
- openssl-devel
- pcre-devel
- expat-devel
- libxml2-devel
- libtool
- gcc
- gcc-c++
- bzip2
- make
编写安装脚本
//创建存放脚本的目录
[root@ansible apache]# mkdir scripts
//编写安装脚本的批处理
[root@ansible apache]# vim scripts/install.sh
#!/bin/bash
if [ ! -d /usr/local/apache ];then
rm -rf /usr/local/apr*
# uzip
cd /usr/src
tar xf apr-1.7.0.tar.gz
tar xf apr-util-1.6.1.tar.gz
tar xf httpd-2.4.46.tar.bz2
cd apr-1.7.0
sed -i '/$RM "$cfgfile"/d' configure
# install apr
./configure --prefix=/usr/local/apr && make && make install && \
cd ../apr-util-1.6.1
# install apr-util
./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr && \
make && make install && \
cd ../httpd-2.4.46
# install httpd
./configure --prefix=/usr/local/apache \
--sysconfdir=/etc/httpd24 \
--enable-so \
--enable-ssl \
--enable-cgi \
--enable-rewrite \
--with-zlib \
--with-pcre \
--with-apr=/usr/local/apr \
--with-apr-util=/usr/local/apr-util/ \
--enable-modules=most \
--enable-mpms-shared=all \
--with-mpm=prefork && \
make && make install
# echo path
echo 'export PATH=/usr/local/apache/bin:$PATH' > /etc/profile.d/apache.sh
cd /usr/src
rm -rf apr-1.7.0 apr-util-1.6.1 httpd-2.4.46
fi
编辑httpd.service.j2模板文件
[root@ansible apache]# vim templates/httpd.service.j2
[Unit]
Description=Start httpd
[Service]
Type=forking
ExecStart=/usr/local/apache/bin/apachectl
ExecReload=/usr/local/apache/bin/apachectl -s reload
ExecStop=/usr/local/apache/apachectl -s stop
[Install]
WantedBy=multi-user.target
编写apache的playbook
[root@ansible apache]# vim httpd_install.yml
---
- hosts: httpd
vars_files:
- vars/var.yml
tasks:
- name: install depend on apache
yum:
name: "{{ depend_pkg }}"
state: present
- name: create user apache
user:
name: apache
shell: /sbin/nologin
create_home: false
system: yes
state: present
- name: download packages
copy:
src: files/
dest: /usr/src
- name: install apache
script: scripts/install.sh
- name: start the service
template:
src: templates/httpd.service.j2
dest: /usr/lib/systemd/system/httpd.service
- name: reload daemon for httpd
shell: systemctl daemon-reload
编辑httpd.conf.j2模板文件
[root@ansible apache]# vim templates/httpd.conf.j2
//搜索AddType
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType application/x-httpd-php .php //添加此行
AddType application/x-httpd-php-source .phps //添加此行
//搜索proxy.so
#LoadModule remoteip_module modules/mod_remoteip.so
LoadModule proxy_module modules/mod_proxy.so //取消注释
#LoadModule proxy_connect_module modules/mod_proxy_connect.so
#LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
#LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so //取消注释
//搜索index.html
DirectoryIndex index.php index.html #添加index.php
//在最后一行加上如下配置
<VirtualHost *:80>
DocumentRoot "/usr/local/apache/htdocs/"
ServerName leidazhuang.com
ProxyRequests Off
ProxyPassMatch ^/(.*\.php)$ fcgi://192.168.110.40:9000/var/www/html/$1
<Directory "/usr/local/apache/htdocs/">
Options none
AllowOverride none
Require all granted
</Directory>
</VirtualHost>
安装mysql
下载需要的包
//当前目录的位置
[root@ansible files]# pwd
/project/modules/databases/mysql/files
//下载包
[root@ansible files]# wget https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
//查看一下
[root@ansible files]# ls
mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
配置变量的yml文件
//创建vars目录
[root@ansible mysql]# mkdir vars
//编写var.yml文件
[root@ansible mysql]# vim vars/var.yml
basedir: /usr/local
datadir: /opt/data
depend_pkg:
- ncurses-compat-libs
- ncurses-devel
- openssl-devel
- openssl
- cmake
- mariadb-devel
- ncurses-compat-libs
编辑my.cnf.j2模板文件
[root@ansible mysql]# vim templates/my.cnf.j2
[mysqld]
basedir = {{ basedir }}/mysql
datadir = {{ datadir }}
socket = /tmp/mysql.sock
port = 3306
pid-file = {{ datadir }}/mysql.pid
user = mysql
skip-name-resolve
编辑mysqld.service.j2模板文件
[root@ansible mysql]# vim templates/mysqld.service.j2
[Unit]
Description=MySQL Server
Documentation=man:mysqld(8)
Documentation=http://dev.mysql.com/doc/refman/en/using-systemd.html
After=network.target
After=syslog.target
[Install]
WantedBy=multi-user.target
[Service]
User=mysql
Group=mysql
Type=forking
PIDFile={{ datadir }}/mysqld.pid
TimeoutSec=0
PermissionsStartOnly=true
ExecStart={{ basedir }}/mysql/bin/mysqld --daemonize --pid-file={{ datadir }}/mysqld.pid $MYSQLD_OPTS
LimitNOFILE = 5000
Restart=on-failure
RestartPreventExitStatus=1
PrivateTmp=false
编写mysql的playbook
[root@ansible mysql]# vim mysql_install.yml
---
- hosts: mysql
vars_files:
- vars/var.yml
tasks:
- name: install depend on mysql
yum:
name: "{{ depend_pkg }}"
state: present
- name: create user mysql
user:
name: mysql
system: yes
create_home: false
shell: /sbin/nologin
state: present
- name: unzip package
unarchive:
src: files/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
dest: '{{ basedir }}/'
owner: mysql
group: mysql
- name: create soft link
file:
src: '{{ basedir }}/mysql-5.7.31-linux-glibc2.12-x86_64'
dest: '{{ basedir }}/mysql'
owner: mysql
group: mysql
state: link
- name: create datadir
file:
path: '{{ datadir }}'
owner: mysql
group: mysql
state: directory
- name: initialize mysql
shell: '{{ basedir }}/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir={{ datadir }}'
ignore_errors: yes
- name: config for mysql
template:
src: templates/my.cnf.j2
dest: /etc/my.cnf
- name: start the service
template:
src: templates/mysqld.service.j2
dest: /usr/lib/systemd/system/mysqld.service
- name: reload daemon for mysql
shell: systemctl daemon-reload
安装php
配置变量的配置文件
[root@ansible php]# vim vars/var.yml
packages:
- libxml2
- libxml2-devel
- openssl
- openssl-devel
- bzip2
- bzip2-devel
- libcurl
- libcurl-devel
- libicu-devel
- libjpeg
- libjpeg-devel
- libpng
- libpng-devel
- openldap-devel
- pcre-devel
- freetype
- freetype-devel
- gmp
- gmp-devel
- libmcrypt
- libmcrypt-devel
- readline
- readline-devel
- libxslt
- libxslt-devel
- mhash
- mhash-devel
- php-mysqlnd
- php-*
编写php的playbook
[root@ansible php]# vim php_install.yml
---
- hosts: php
vars_files:
- vars/var.yml
tasks:
- name: install package
dnf:
name: '{{ packages }}'
state: present
- name: set conf
lineinfile:
path: /etc/php-fpm.d/www.conf
regexp: '^listen = /run/php-fpm/www.sock'
line: 'listen = 0.0.0.0:9000'
state: present
注意：以上都是通用型配置，下面我们要单独部署lamp项目
部署lamp项目
编写lamp项目的架构和playbook
---
- name: yum part
import_playbook: ../modules/yum/main.yml
- name: httpd part
import_playbook: ../modules/webs/apache/httpd_install.yml
- name: mysql part
import_playbook: ../modules/databases/mysql/mysql_install.yml
- name: php part
import_playbook: ../modules/apps/php/php_install.yml
- hosts: httpd
vars_files:
- ../modules/webs/apache/vars/var.yml
tasks:
- name: httpd config file
template:
src: ../modules/webs/apache/templates/httpd.conf.j2
dest: /etc/httpd24/httpd.conf
- name: start httpd
service:
name: httpd
enabled: yes
state: started
- hosts: mysql
vars_files:
- ../modules/databases/mysql/vars/var.yml
tasks:
- name: start mysql
service:
name: mysqld
enabled: yes
state: started
- hosts: php
tasks:
- name: index.php
file:
path: /var/www/html/index.php
owner: apache
group: apache
state: touch
- name: test index
lineinfile:
path: /var/www/html/index.php
line: |
<?php
phpinfo();
?>
state: present
- name: allow access to IP
lineinfile:
path: /etc/php-fpm.d/www.conf
regexp: '^listen.allowed_clients = 127.0.0.1'
line: listen.allowed_clients = 192.168.110.20
- name: start php
service:
name: php-fpm
state: started
enabled: yes
运行lamp的剧本文件
[root@ansible project]# ansible-playbook lamp/lamp.yml
PLAY [all] *************************************************************************
TASK [Gathering Facts] *************************************************************
ok: [php]
ok: [httpd]
ok: [mysql]
TASK [CentOS 7_base] ***************************************************************
skipping: [httpd]
skipping: [mysql]
skipping: [php]
TASK [CentOS 7_epel] ***************************************************************
skipping: [httpd]
skipping: [mysql]
skipping: [php]
TASK [yum_RedHat 8 yum_CentOS 8] ***************************************************
changed: [mysql] => (item=AppStream)
changed: [httpd] => (item=AppStream)
changed: [php] => (item=AppStream)
changed: [mysql] => (item=BaseOS)
changed: [php] => (item=BaseOS)
changed: [httpd] => (item=BaseOS)
TASK [epel_RedHat 8 epel_CentOS 8] *************************************************
changed: [httpd]
changed: [php]
changed: [mysql]
TASK [stop firewalld] **************************************************************
changed: [php]
changed: [mysql]
changed: [httpd]
TASK [selinux] *********************************************************************
changed: [php]
changed: [mysql]
changed: [httpd]
TASK [set selinux] *****************************************************************
changed: [mysql]
changed: [httpd]
changed: [php]
PLAY [httpd] ***********************************************************************
TASK [Gathering Facts] *************************************************************
ok: [httpd]
TASK [install depend on apache] ****************************************************
changed: [httpd]
TASK [create user apache] **********************************************************
changed: [httpd]
TASK [download packages] ***********************************************************
changed: [httpd]
TASK [install apache] **************************************************************
changed: [httpd]
TASK [start the service] ***********************************************************
changed: [httpd]
TASK [reload daemon for httpd] *****************************************************
changed: [httpd]
PLAY [mysql] ***********************************************************************
TASK [Gathering Facts] *************************************************************
ok: [mysql]
TASK [install depend on mysql] *****************************************************
changed: [mysql]
TASK [create user mysql] ***********************************************************
changed: [mysql]
TASK [unzip package] ***************************************************************
changed: [mysql]
TASK [create soft link] ************************************************************
changed: [mysql]
TASK [create datadir] **************************************************************
changed: [mysql]
TASK [initialize mysql] ************************************************************
changed: [mysql]
TASK [config for mysql] ************************************************************
changed: [mysql]
TASK [start the service] ***********************************************************
changed: [mysql]
TASK [reload daemon for mysql] *****************************************************
changed: [mysql]
PLAY [php] *************************************************************************
TASK [Gathering Facts] *************************************************************
ok: [php]
TASK [install package] *************************************************************
changed: [php]
TASK [set conf] ********************************************************************
changed: [php]
PLAY [httpd] ***********************************************************************
TASK [Gathering Facts] *************************************************************
ok: [httpd]
TASK [httpd config file] ***********************************************************
changed: [httpd]
TASK [start httpd] *****************************************************************
changed: [httpd]
PLAY [mysql] ***********************************************************************
TASK [Gathering Facts] *************************************************************
ok: [mysql]
TASK [start mysql] *****************************************************************
changed: [mysql]
PLAY [php] *************************************************************************
TASK [Gathering Facts] *************************************************************
ok: [php]
TASK [index.php] *******************************************************************
changed: [php]
TASK [test index] ******************************************************************
changed: [php]
TASK [allow access to IP] **********************************************************
changed: [php]
TASK [start php] *******************************************************************
changed: [php]
PLAY RECAP *************************************************************************
httpd : ok=16 changed=13 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0
mysql : ok=18 changed=15 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0
php : ok=14 changed=11 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0
在三台受控机上验证一下
httpd主机
[root@localhost ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 0.0.0.0:80 0.0.0.0:*
LISTEN 0 128 [::]:22 [::]:*
mysql主机
[root@localhost ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 [::]:22 [::]:*
LISTEN 0 80 *:3306 *:*
php主机
[root@localhost ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 0.0.0.0:9000 0.0.0.0:*
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 [::]:22 [::]:*
测试网页
