- http://172.31.116.2/CentOS/72
安装iptables,如果已安装则跳过
yum install -y iptables
安装iptables服务器
yum install -y iptables-services
编辑iptables规则文件
vim /etc/sysconfig/iptables
添加以下内容
# Generated by iptables-save v1.4.21 on Sat May 30 00:47:21 2020
filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -s 172.30.26.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -s 172.30.27.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -s 172.30.6.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -p tcp -m tcp —dport 3306 -j DROP
-A INPUT -m state —state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 60112 -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 3306 -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 10050 -j ACCEPT
-A INPUT -j REJECT —reject-with icmp-host-prohibited
-A FORWARD -j REJECT —reject-with icmp-host-prohibited
COMMIT
设置服务开机自启动
systemctl enable iptables
重启服务
systemctl restart iptables
查看服务状态
systemctl status iptables
创建目录
mkdir -p /data/tools/mysql-8.0.21
进入目录
cd /data/tools
上传mysql安装包
rz -y
解压安装包
tar -xf mysql-8.0.21-1.el7.x86_64.rpm-bundle.tar -C /data/tools/mysql-8.0.21
进入目录
cd mysql-8.0.21
执行以下安装
rpm -ivh mysql-community-common-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-libs-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-libs-compat-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-client-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-server-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-devel-8.0.21-1.el7.x86_64.rpm —force —nodeps
查看是否安装成功,成功会有版本提示
mysqladmin —version
创建mysql数据目录和日志目录
mkdir /data/mysql /data/mysql-log
改变日志目录所有者,否则日志写入失败
chown -R mysql:mysql /data/mysql-log
进入/etc目录
cd /etc
上传对应的配置文件my.cnf
rz -y
启动mysql服务
systemctl start mysqld
查看mysql进程
ps -ef|grep mysqld
查看mysql root用户的初始密码
cat /data/mysql-log/mysqld.log | grep password
登录数据库,输入初始密码
mysql -uroot -p
修改root的密码
ALTER USER root@localhost IDENTIFIED BY ‘Gxtv@2019’;
创建远程连接账户repl和test
CREATE USER ‘repl’@’%’ IDENTIFIED WITH mysql_native_password BY ‘Gxtv@2019’;
CREATE USER ‘test’@’%’ IDENTIFIED WITH mysql_native_password BY ‘Gxtv@2019’;
给repl和test授权
grant all on . to ‘repl’@’%’;
grant all on . to ‘test’@’%’;
刷新权限到内存
flush privileges;
退出数据库,再重新登录,看密码是否修改成功
exit
mysql -uroot -p
###### my.cnf配置文件主要内容####
#每台服务器的id不一样,根据服务器ip后两位来,如27.6服务的id为276
server-id = 276
#开启二进制日志
log-bin = mysql-bin
innodb-file-per-table =ON
#禁止域名解析
skip_name_resolve=ON
# 不同步哪些数据库
binlog-ignore-db = mysql
binlog-ignore-db = information_schema
binlog-ignore-db = sys
#数据目录
datadir=/data/mysql
socket=/var/lib/mysql/mysql.sock
#错误日志目录
log-error=/data/mysql-log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
#开启慢查询日志
slow_query_log = 1
slow_query_log_file = /data/mysql-log/slow-query.log
#慢查询时间2s以上
long_query_time = 2
#最大连接数
max_connections = 10000
#最大打开文件数
open_files_limit = 4096
#非交互连接超时时间(连接池),秒
wait_timeout = 600">############网络和防火墙配置begin########################
停止NetworkManager
systemctl stop NetworkManager
禁用NetworkManager
systemctl disable NetworkManager
查看NetworkManager状态
systemctl status NetworkManager
停止防火墙
systemctl stop firewalld
禁用防火墙
systemctl disable firewalld
查看防火墙状态
systemctl status firewalld
修改eht1路由
vim /etc/sysconfig/network-scripts/route-eth1
添加一行
172.30.6.0/24 via 172.30.27.254
重启网络服务
systemctl restart network
设置定时任务
vim /etc/crontab
添加以下内容,半小时一次时间同步
/30 root ntpdate -u 172.31.116.10
重新加载配置文件
crontab /etc/crontab
显示定时任务列表
crontab -l
修改yum源地址,172.31.11.230改为172.31.116.2,如果地址是对的就跳过
vim /etc/yum.repos.d/local.repo
这一行改成这样
baseurl=http://172.31.116.2/CentOS/72
安装iptables,如果已安装则跳过
yum install -y iptables
安装iptables服务器
yum install -y iptables-services
编辑iptables规则文件
vim /etc/sysconfig/iptables
添加以下内容
# Generated by iptables-save v1.4.21 on Sat May 30 00:47:21 2020
filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -s 172.30.26.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -s 172.30.27.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -s 172.30.6.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -p tcp -m tcp —dport 3306 -j DROP
-A INPUT -m state —state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 60112 -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 3306 -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 10050 -j ACCEPT
-A INPUT -j REJECT —reject-with icmp-host-prohibited
-A FORWARD -j REJECT —reject-with icmp-host-prohibited
COMMIT
设置服务开机自启动
systemctl enable iptables
重启服务
systemctl restart iptables
查看服务状态
systemctl status iptables
创建目录
mkdir -p /data/tools/mysql-8.0.21
进入目录
cd /data/tools
上传mysql安装包
rz -y
解压安装包
tar -xf mysql-8.0.21-1.el7.x86_64.rpm-bundle.tar -C /data/tools/mysql-8.0.21
进入目录
cd mysql-8.0.21
执行以下安装
rpm -ivh mysql-community-common-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-libs-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-libs-compat-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-client-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-server-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-devel-8.0.21-1.el7.x86_64.rpm —force —nodeps
查看是否安装成功,成功会有版本提示
mysqladmin —version
创建mysql数据目录和日志目录
mkdir /data/mysql /data/mysql-log
改变日志目录所有者,否则日志写入失败
chown -R mysql:mysql /data/mysql-log
进入/etc目录
cd /etc
上传对应的配置文件my.cnf
rz -y
启动mysql服务
systemctl start mysqld
查看mysql进程
ps -ef|grep mysqld
查看mysql root用户的初始密码
cat /data/mysql-log/mysqld.log | grep password
登录数据库,输入初始密码
mysql -uroot -p
修改root的密码
ALTER USER root@localhost IDENTIFIED BY ‘Gxtv@2019’;
创建远程连接账户repl和test
CREATE USER ‘repl’@’%’ IDENTIFIED WITH mysql_native_password BY ‘Gxtv@2019’;
CREATE USER ‘test’@’%’ IDENTIFIED WITH mysql_native_password BY ‘Gxtv@2019’;
给repl和test授权
grant all on . to ‘repl’@’%’;
grant all on . to ‘test’@’%’;
刷新权限到内存
flush privileges;
退出数据库,再重新登录,看密码是否修改成功
exit
mysql -uroot -p
###### my.cnf配置文件主要内容####
#每台服务器的id不一样,根据服务器ip后两位来,如27.6服务的id为276
server-id = 276
#开启二进制日志
log-bin = mysql-bin
innodb-file-per-table =ON
#禁止域名解析
skip_name_resolve=ON
# 不同步哪些数据库
binlog-ignore-db = mysql
binlog-ignore-db = information_schema
binlog-ignore-db = sys
#数据目录
datadir=/data/mysql
socket=/var/lib/mysql/mysql.sock
#错误日志目录
log-error=/data/mysql-log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
#开启慢查询日志
slow_query_log = 1
slow_query_log_file = /data/mysql-log/slow-query.log
#慢查询时间2s以上
long_query_time = 2
#最大连接数
max_connections = 10000
#最大打开文件数
open_files_limit = 4096
#非交互连接超时时间(连接池),秒
wait_timeout = 600
############网络和防火墙配置begin########################
停止NetworkManager
systemctl stop NetworkManager
禁用NetworkManager
systemctl disable NetworkManager
查看NetworkManager状态
systemctl status NetworkManager
停止防火墙
systemctl stop firewalld
禁用防火墙
systemctl disable firewalld
查看防火墙状态
systemctl status firewalld
修改eht1路由
vim /etc/sysconfig/network-scripts/route-eth1
添加一行
172.30.6.0/24 via 172.30.27.254
重启网络服务
systemctl restart network
设置定时任务
vim /etc/crontab
添加以下内容,半小时一次时间同步
/30 root ntpdate -u 172.31.116.10
重新加载配置文件
crontab /etc/crontab
显示定时任务列表
crontab -l
修改yum源地址,172.31.11.230改为172.31.116.2,如果地址是对的就跳过
vim /etc/yum.repos.d/local.repo
这一行改成这样
baseurl=http://172.31.116.2/CentOS/72
安装iptables,如果已安装则跳过
yum install -y iptables
安装iptables服务器
yum install -y iptables-services
编辑iptables规则文件
vim /etc/sysconfig/iptables
添加以下内容
# Generated by iptables-save v1.4.21 on Sat May 30 00:47:21 2020
filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -s 172.30.26.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -s 172.30.27.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -s 172.30.6.0/24 -p tcp -m tcp —dport 3306 -j ACCEPT
-A INPUT -p tcp -m tcp —dport 3306 -j DROP
-A INPUT -m state —state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 60112 -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 3306 -j ACCEPT
-A INPUT -p tcp -m state —state NEW -m tcp —dport 10050 -j ACCEPT
-A INPUT -j REJECT —reject-with icmp-host-prohibited
-A FORWARD -j REJECT —reject-with icmp-host-prohibited
COMMIT
设置服务开机自启动
systemctl enable iptables
重启服务
systemctl restart iptables
查看服务状态
systemctl status iptables
创建目录
mkdir -p /data/tools/mysql-8.0.21
进入目录
cd /data/tools
上传mysql安装包
rz -y
解压安装包
tar -xf mysql-8.0.21-1.el7.x86_64.rpm-bundle.tar -C /data/tools/mysql-8.0.21
进入目录
cd mysql-8.0.21
执行以下安装
rpm -ivh mysql-community-common-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-libs-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-libs-compat-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-client-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-server-8.0.21-1.el7.x86_64.rpm —force —nodeps
rpm -ivh mysql-community-devel-8.0.21-1.el7.x86_64.rpm —force —nodeps
查看是否安装成功,成功会有版本提示
mysqladmin —version
创建mysql数据目录和日志目录
mkdir /data/mysql /data/mysql-log
改变日志目录所有者,否则日志写入失败
chown -R mysql:mysql /data/mysql-log
进入/etc目录
cd /etc
上传对应的配置文件my.cnf
rz -y
启动mysql服务
systemctl start mysqld
查看mysql进程
ps -ef|grep mysqld
查看mysql root用户的初始密码
cat /data/mysql-log/mysqld.log | grep password
登录数据库,输入初始密码
mysql -uroot -p
修改root的密码
ALTER USER root@localhost IDENTIFIED BY ‘Gxtv@2019’;
创建远程连接账户repl和test
CREATE USER ‘repl’@’%’ IDENTIFIED WITH mysql_native_password BY ‘Gxtv@2019’;
CREATE USER ‘test’@’%’ IDENTIFIED WITH mysql_native_password BY ‘Gxtv@2019’;
给repl和test授权
grant all on . to ‘repl’@’%’;
grant all on . to ‘test’@’%’;
刷新权限到内存
flush privileges;
退出数据库,再重新登录,看密码是否修改成功
exit
mysql -uroot -p
###### my.cnf配置文件主要内容####
#每台服务器的id不一样,根据服务器ip后两位来,如27.6服务的id为276
server-id = 276
#开启二进制日志
log-bin = mysql-bin
innodb-file-per-table =ON
#禁止域名解析
skip_name_resolve=ON
# 不同步哪些数据库
binlog-ignore-db = mysql
binlog-ignore-db = information_schema
binlog-ignore-db = sys
#数据目录
datadir=/data/mysql
socket=/var/lib/mysql/mysql.sock
#错误日志目录
log-error=/data/mysql-log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
#开启慢查询日志
slow_query_log = 1
slow_query_log_file = /data/mysql-log/slow-query.log
#慢查询时间2s以上
long_query_time = 2
#最大连接数
max_connections = 10000
#最大打开文件数
open_files_limit = 4096
#非交互连接超时时间(连接池),秒
wait_timeout = 600
- 启动:service mysqld start
- 停止:service mysqld stop
- 重启:service mysqld restart
启动 : service mysqld start/restart
停止 : service mysqld stop
查看状态: service mysqld status
