{"id":839,"date":"2012-08-08T10:20:49","date_gmt":"2012-08-08T02:20:49","guid":{"rendered":"http:\/\/notes.zerobox.org\/?p=839"},"modified":"2012-08-08T10:20:49","modified_gmt":"2012-08-08T02:20:49","slug":"mysql%e7%9a%84%e5%a4%8d%e5%88%b6%e4%b8%bb%e4%bb%8e%e4%b8%bb%e4%b8%bb%e5%9f%ba%e4%ba%8essl","status":"publish","type":"post","link":"http:\/\/zerobox.org\/notes\/839.html","title":{"rendered":"MySQL\u7684\u590d\u5236(\u4e3b\u4ece,\u4e3b\u4e3b,\u57fa\u4e8essl)"},"content":{"rendered":"<div>1.\u51c6\u5907\u7684\u4e3b\u673a<br \/>\nnode1:172.16.133.11<br \/>\nnode2:172.16.133.12<br \/>\n\u5747\u5df2\u5b89\u88c5\u597dMySQL<br \/>\nMySQL\u5b89\u88c5\u89c1:http:\/\/5142926.blog.51cto.com\/5132926\/935652<br \/>\n2.mysql\u4e3b\u4ece\u590d\u5236<br \/>\nnode1:\u4e3b\u670d\u52a1\u5668<br \/>\nnode2:\u4ece\u670d\u52a1\u5668<br \/>\n(1)node1:<br \/>\n\u00a0\u00a0\u00a0 \u542f\u7528\u4e8c\u8fdb\u5236\u65e5\u5fd7(\u9ed8\u8ba4\u5c31\u662f\u542f\u7528\u7684)<br \/>\n\u00a0\u521b\u5efa\u5177\u6709\u590d\u5236\u6743\u9650\u7684\u7528\u6237<br \/>\n\u00a0\u8bbe\u7f6eserver-id<br \/>\nnode2:<br \/>\n\u00a0\u00a0\u00a0 \u542f\u7528\u4e2d\u7ee7\u65e5\u5fd7(\u9ed8\u8ba4\u662f\u7981\u7528\u7684,\u5982\u679c\u4e0d\u9700\u8981\u7684\u8bdd,\u53ef\u4ee5\u624b\u52a8\u5173\u95ed\u4e8c\u8fdb\u5236\u65e5\u5fd7)<br \/>\n\u00a0\u8bbe\u7f6eserver-id<br \/>\n\u00a0\u542f\u52a8\u4ece\u670d\u52a1,\u5e76\u6307\u5b9a\u4e3b\u670d\u52a1\u5668\u53c2\u6570<br \/>\nnode1:node1\u4e2dmysql\u670d\u52a1\u5668binary log\u9ed8\u8ba4\u5c31\u662f\u5f00\u542f\u7684,server-id\u4e5f\u4e0d\u7528\u4fee\u6539,\u9ed8\u8ba4\u5373\u53ef<br \/>\n\u521b\u5efa\u5177\u6709\u590d\u5236\u6743\u9650\u7684\u7528\u6237<br \/>\n\u00a0<\/div>\n<div>\n<ol>\n<li>mysql&gt;grant\u00a0replication\u00a0slave,replication\u00a0client\u00a0on\u00a0*.*\u00a0to\u00a0repluser@&#8217;172.16.133.%&#8217;\u00a0identified\u00a0by\u00a0&#8216;redhat&#8217;\u00a0<\/li>\n<li>mysql&gt;flush\u00a0privileges; \u00a0<\/li>\n<\/ol>\n<p>node2:\u4fee\u6539mysql\u4e3b\u914d\u7f6e\u6587\u4ef6my.cnf\u4e2d\u7684server-id\u4e3a21,\u6ce8\u91ca\u6389log-bin=mysql-bin<br \/>\n\u5e76\u5728\u5176\u540e\u6dfb\u52a0relay-log=mysql-relay<br \/>\n\u5b8c\u6210\u540e,\u8fdb\u5165mysql,\u67e5\u8be2\u4e0b\u5168\u5c40\u53d8\u91cfshow global variables like &#8216;%log%;<br \/>\n\u00a0<\/p>\n<ol>\n<li>mysql&gt;change\u00a0master\u00a0to\u00a0master_host=&#8217;172.16.133.11&#8242;,master_user=&#8217;repluser&#8217;,master_password=&#8217;redhat&#8217;,master_log_file=&#8217;mysql-bin.000003&#8242;,master_log_pos=356; \u00a0<\/li>\n<\/ol>\n<p>mysql&gt;show slave status\/G\u67e5\u770b\u4ece\u670d\u52a1\u5668\u5de5\u4f5c\u72b6\u6001,\u53ef\u4ee5\u770b\u5230Slave_IO_Running: No\u548cSlave_SQL_Running: No\u8fd8\u662fno,\u542f\u7528\u8fd9\u4e24\u9879<br \/>\n\u00a0<\/p>\n<ol>\n<li>mysql&gt;start\u00a0slave; \u00a0<\/li>\n<li>mysql&gt;set\u00a0global\u00a0read_only=1; \u00a0<\/li>\n<li>mysql&gt;show\u00a0slave\u00a0status\/G \u00a0<\/li>\n<\/ol>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/233700199.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/233700199.jpg\" alt=\"\" border=\"0\" \/><\/a><\/p>\n<p>\u7136\u540e\u5c31\u7b97\u914d\u7f6e\u5b8c\u6210\u4e86,\u53ef\u4ee5\u5728node1\u4e2d\u5efa\u7acb\u4e00\u4e2a\u6d4b\u8bd5\u6570\u636e\u5e93testdb,\u548c\u4e00\u4e2a\u6d4b\u8bd5\u8868t1<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/233749668.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/233749668.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\n\u8fdb\u5165node2\u7684mysql\u67e5\u770b<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/233800112.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/233800112.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\n(2).\u5982\u679c\u4e0d\u60f3\u8ba9\u4ece\u670d\u52a1\u5668\u7ebf\u7a0b\u5728mysql\u670d\u52a1\u542f\u52a8\u65f6\u81ea\u52a8\u542f\u52a8,\u5219\u53ef\u4ee5\u5728\u4ece\u670d\u52a1\u5668\u4e2d\u8bbe\u7f6eskip-slave-start=1<br \/>\n\u4e3a\u9632\u6b62\u4e3b\u670d\u52a1\u5668\u7a81\u7136\u5d29\u6e83,\u53ef\u4ee5\u5728\u4e3b\u670d\u52a1\u5668\u4e0a\u8bbe\u7f6e<br \/>\nsync_binlog=1<br \/>\ninnodb_flush_logs_at_trx_commit=1<br \/>\n(3).\u6570\u636e\u5e93\u590d\u5236\u8fc7\u6ee4<br \/>\n\u4e3b\u670d\u52a1\u5668<br \/>\n[mysqld]<br \/>\nbinlog-do-db=magedu<br \/>\n\u5728\u4e3b\u670d\u52a1\u5668\u8fc7\u6ee4\uff1a\u4efb\u4f55\u4e0d\u6d89\u53ca\u5230\u6570\u636e\u5e93\u76f8\u5173\u7684\u5199\u64cd\u4f5c\u90fd\u4e0d\u4f1a\u88ab\u8bb0\u5f55\u5230\u4e8c\u8fdb\u5236\u65e5\u5fd7\u5f53\u4e2d,\u6240\u4ee5\u6700\u597d\u4e0d\u8981\u8bbe\u7f6e,\u4e00\u822c\u5728\u4ece\u670d\u52a1\u5668\u4e2d\u8bbe\u7f6e\u5373\u53ef<br \/>\n\u4ece\u670d\u52a1\u5668\uff1a<br \/>\nreplicate_do_db<br \/>\nrpplicate_ignore_db<\/p>\n<p>replicate_do_table<br \/>\nreplicate_ignore_table<\/p>\n<p>replicate_wild_do_table<br \/>\nreplicate_wild_ignore_table<br \/>\n\u5728\u4ece\u670d\u52a1\u5668\u4e0a\u53ea\u590d\u5236testdb\u4e00\u4e2a\u6570\u636e\u5e93\uff1a<br \/>\n[mysqld]<br \/>\nreplicate_do_db=testdb<br \/>\nreplicate_do_db=mysql<br \/>\n(4).\u5982\u679c\u4e3b\u670d\u52a1\u5668\u4ee5\u8fd0\u884c\u5f88\u957f\u65f6\u95f4,\u624d\u63a5\u5165\u4e00\u53f0\u65b0\u7684\u4ece\u670d\u52a1\u5668,\u5982\u679c\u91c7\u53d6\u590d\u5236,\u4f1a\u6bd4\u8f83\u6162,\u53ef\u4ee5\u91c7\u7528\u5907\u4efd\u7684\u65b9\u5f0f<br \/>\nnode1:\u5148\u5bf9mysql\u670d\u52a1\u5668\u65bd\u52a0\u8bfb\u9501<br \/>\nmysql&gt;flush tables with read lock;<br \/>\n\u800c\u540e\u5bf9mysql\u6240\u5728\u6570\u636e\u76ee\u5f55\u7684\u903b\u8f91\u5377,\u8fdb\u884c\u5907\u4efd<br \/>\nlvcreate -L 50M -s -p r -n mydata-snap \/dev\/myvg\/mydata<br \/>\nmysql&gt;show master status;\u67e5\u770b\u73b0\u5728\u6240\u5728\u4f4d\u7f6e<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/233841615.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/233841615.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\nmysql&gt;unlocak tables(\u5907\u4efd\u5b8c\u6210\u540e\u8981\u7acb\u5373\u89e3\u9501)<br \/>\nmount \/dev\/myvg\/mydata-snap \/mnt<br \/>\ncd \/mnt<br \/>\nll<br \/>\nfind . | cpio -o -H newc &#8211;quiet | gzip &gt; \/root\/alldatabase.gz<br \/>\ncd<br \/>\numount \/mnt<br \/>\nscp alldatabase.gz node2:\/root<br \/>\nmysql&gt;use testdb<br \/>\nmysql&gt;create table tb2<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/233856190.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/233856190.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\nnode2:<br \/>\ngzip -d \/root\/alldatabase.gz<br \/>\ncp alldatabase \/data\/mydata<br \/>\ncd \/data\/mydata<br \/>\ncpio -id &lt; alldatabase<br \/>\nrm alldatabase<br \/>\n\u7136\u540e\u5c31\u53ef\u4ee5\u76f4\u63a5service mysqld start<br \/>\n\u7136\u540e\u8fdb\u5165mysql,\u91cd\u65b0\u8bbe\u7f6e\u4e3b\u4ece<br \/>\nmysql&gt;change master to master_host=&#8217;172.16.133.11&#8242;,master_user=&#8217;repluser&#8217;,master_password=&#8217;redhat&#8217;,master_log_file=&#8217;mysql-bin.000003&#8242;,master_log_pos=542;<br \/>\nmysql&gt;start slave;<br \/>\nmysql&gt;show slave status\\G<br \/>\nmysql&gt;use testdb;<br \/>\nmysql&gt;show tables<br \/>\n\u5907\u4efd+\u590d\u5236\u5b8c\u6210<br \/>\n(5).\u534a\u540c\u6b65\u4e3b\u4ece\u590d\u5236<br \/>\nnode1:<br \/>\nmysql&gt; INSTALL PLUGIN rpl_semi_sync_master SONAME &#8216;semisync_master.so&#8217;;\u00a0\u00a0<br \/>\nmysql&gt; SET GLOBAL rpl_semi_sync_master_enabled = 1;\u00a0\u00a0<br \/>\nmysql&gt; SET GLOBAL rpl_semi_sync_master_timeout = 1000;<br \/>\nnode2:<br \/>\nmysql&gt; INSTALL PLUGIN rpl_semi_sync_slave SONAME &#8216;semisync_slave.so&#8217;;\u00a0\u00a0<br \/>\nmysql&gt; SET GLOBAL rpl_semi_sync_slave_enabled = 1;\u00a0\u00a0<br \/>\nmysql&gt; STOP SLAVE IO_THREAD; START SLAVE IO_THREAD;<br \/>\n\u4e5f\u53ef\u901a\u8fc7\u8bbe\u7f6e\u5168\u5c40\u53d8\u91cf\u7684\u65b9\u5f0f\u6765\u8bbe\u7f6e,\u5982\u4e0b\uff1a<br \/>\nset global rpl_semi_sync_master_enabled=1\u00a0<br \/>\n\u53d6\u6d88\u52a0\u8f7d\u63d2\u4ef6<br \/>\nmysql&gt; UNINSTALL PLUGIN rpl_semi_sync_master;<br \/>\n\u67e5\u770b\u4ece\u670d\u52a1\u5668\u4e0a\u7684semi_sync\u662f\u5426\u5f00\u542f:<br \/>\nmysql&gt; SHOW GLOBAL STATUS LIKE &#8216;rpl_semi%&#8217;;<br \/>\n\u67e5\u770b\u4e3b\u670d\u52a1\u5668\u4e0a\u7684semi_sync\u662f\u5426\u5f00\u542f\uff0c\u6ce8\u610fclients \u53d8\u4e3a1 \uff0c\u8bc1\u660e\u4e3b\u4ece\u534a\u540c\u6b65\u590d\u5236\u8fde\u63a5\u6210\u529f:<br \/>\n(6).\u57fa\u4e8essl\u4f20\u8f93\u7684mysql\u4e3b\u4ece\u590d\u5236<br \/>\n\u2460.\u4fee\u6539\u914d\u7f6e\u6587\u4ef6<br \/>\nnode1:<br \/>\nserver_id=10\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<br \/>\nlog_bin=mysql-bin<br \/>\nsync_binlog=1\u4e8b\u52a1\u63d0\u4ea4\u540e\u7acb\u5373\u5199\u5165\u78c1\u76d8\u4e8c\u8fdb\u5236\u6587\u4ef6,\u4e0d\u518d\u5148\u7f13\u5b58\u518d\u5199<br \/>\nnode2:<br \/>\nread_only=1<br \/>\n\u2461\u51c6\u5907\u8bc1\u4e66,\u79c1\u94a5<br \/>\n\u2160.\u5efa\u7acb\u5b57\u7b7e\u8bc1\u670d\u52a1\u5668<br \/>\nnode1:<br \/>\nvim \/etc\/pki\/tls\/openssl.cnf<br \/>\n\u00a0\u00a0 dir=\/etc\/pki\/CA<br \/>\n(umask 077;openssl genrsa 2048 &gt; private\/cakey.pem)<br \/>\nopenssl req -new -x509 -key private\/cakey.pem -out cacert.pem -days 3655<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/234034267.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/234034267.jpg\" alt=\"\" width=\"650\" border=\"0\" \/><\/a><br \/>\nmkdir certs crl newcerts<br \/>\ntouch index.txt<br \/>\necho 01 &gt; serial<br \/>\n\u2161.\u4e3anode1\u4e0a\u7684mysql\u51c6\u5907\u79c1\u94a5\u53ca\u9881\u53d1\u8bc1\u4e66<br \/>\nmkdir \/usr\/local\/mysql\/ssl<br \/>\ncd ssl\/<br \/>\n(umask 077;openssl genrsa 1024 &gt; mysql.key)<br \/>\nopenssl req -new -key mysql.key -out mysql.csr<br \/>\nopenssl ca -in mysql.csr -out mysql.crt<br \/>\ncp \/etc\/pki\/CA\/cacert.pem \/usr\/local\/mysql\/ssl\/<br \/>\n\u2162.\u4e3anode2\u4e0a\u7684mysql\u51c6\u5907\u79c1\u94a5\u53ca\u9881\u53d1\u8bc1\u4e66<br \/>\nmkdir \/usr\/local\/mysql\/ssl<br \/>\ncd ssl\/<br \/>\n(umask 077;openssl genrsa 1024 &gt; mysql.key)<br \/>\nopenssl req -new -key mysql.key -out mysql.csr<br \/>\nscp .\/mysql.csr node1:\/root<br \/>\n\u2163.\u4e3anode2\u7b7e\u53d1\u8bc1\u4e66<br \/>\nopenssl ca -in mysql.csr -out mysql.crt<br \/>\nscp .\/mysql.crt node2:\/usr\/local\/mysql\/ssl<br \/>\ncd \/etc\/pki\/CA<br \/>\nscp .\/cacert.pem node2:\/usr\/local\/mysql\/ssl<br \/>\n\u5b8c\u6210\u540e,\u786e\u5b9anode1\u548cnode2\u4e2d\u7684\/usr\/local\/mysql\/ssl\u76ee\u5f55\u4e0b,\u6709\u8fd94\u4e2a\u6587\u4ef6<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/170558939.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/170558939.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\n\u2462.\u6253\u5f00mysql\u7684ssl\u529f\u80fd<br \/>\nnode1:<br \/>\nmysql&gt;show variables like &#8216;%ssl%&#8217;;<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/234133832.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/234133832.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\n\u5176\u4e2dhave_openssl,have_ssl\u663e\u793a\u4e3adisabled,\u8868\u793a\u672a\u5f00\u542fssl<br \/>\n\u7f16\u8f91\u4e3b\u914d\u7f6e\u6587\u4ef6\/etc\/my.cnf\u5728[mysqld]\u4e2d\u6dfb\u52a0<br \/>\nssl<br \/>\n\u5373\u53ef,\u91cd\u542fmysql\u670d\u52a1<br \/>\nmysql&gt;show variables like &#8216;%ssl%&#8217;;<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/234147915.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/234147915.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\nnode2:\u540cnode1<br \/>\n\u2463\u914d\u7f6e\u4e3b\u4ece\u670d\u52a1\u5668\u4e2d\u7684ssl\u529f\u80fd<br \/>\nnode1:<br \/>\n\u4fee\u6539\u4e3b\u914d\u7f6e\u6587\u4ef6,\u5728[mysqld]\u4e2d\u6dfb\u52a0\u5982\u4e0b\u51e0\u9879<br \/>\nvim \/etc\/my.cnf<br \/>\n\u00a0\u00a0\u00a0 ssl-ca=\/usr\/local\/mysql\/ssl\/cacert.pem<br \/>\n\u00a0\u00a0\u00a0 ssl-cert=\/usr\/local\/mysql\/ssl\/mysql.crt<br \/>\n\u00a0\u00a0\u00a0 ssl-key=\/usr\/local\/mysql\/ssl\/mysql.key<br \/>\nmysql&gt;show variables like &#8216;%ssl%&#8217;;<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/170201462.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/170201462.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\nnode2:\u540cnode1<br \/>\n\u2464.\u914d\u7f6e\u4e3b\u4ece\u670d\u52a1<br \/>\nnode1:<br \/>\nmysql&gt; SHOW MASTER STATUS;<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/234223433.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/234223433.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\nnode2:\u8fd9\u91cc\u91cd\u65b0\u5b9a\u4e49\u4e3b\u4ece\u670d\u52a1,\u6240\u4ee5\u4e0a\u9762\u5b9e\u9a8c\u7684\u5185\u5bb9\u9700\u8981\u5220\u9664<br \/>\nmysql&gt;slave stop;<br \/>\nmysql&gt;reset slave;<br \/>\nmysql&gt;change master to master_host=&#8217;172.16.133.11&#8242;,master_user=&#8217;repluser&#8217;,master_password=&#8217;redhat&#8217;,master_log_file=&#8217;mysql-bin.000008&#8242;,master_log_pos=107,master_ssl=1,master_ssl_ca=&#8217;\/usr\/local\/mysql\/ssl\/cacert.pem&#8217;,master_ssl_cert=&#8217;\/usr\/local\/mysql\/ssl\/mysql.crt&#8217;,master_ssl_key=&#8217;\/usr\/local\/mysql\/ssl\/mysql.key&#8217;;<br \/>\nmysql&gt;show slave status\\G<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/234300598.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/234300598.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\nmysql&gt;slave start;<br \/>\nmysql&gt;show slave status\\G<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/234312813.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/234312813.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\n\u8bf4\u660e\u57fa\u4e8essl\u7684mysql\u4e3b\u4ece\u590d\u5236\u5df2\u914d\u7f6e\u6210\u529f<br \/>\n\u4f7f\u7528ssrepl\u7528\u6237\u767b\u5f55mysql\u7684\u4e3b\u670d\u52a1\u5668,\u9a8c\u8bc1<br \/>\nmysql &#8211;ssl-ca=\/usr\/local\/mysql\/ssl\/cacert.pem &#8211;ssl-cert=\/usr\/local\/mysql\/ssl\/mysql.crt &#8211;ssl-key=\/usr\/local\/mysql\/ssl\/mysql.key -urepluser -h172.16.133.11 -p<\/p>\n<p>\u767b\u5f55mysql<\/p>\n<p>\u7136\u540e<\/p>\n<p>mysql&gt;\\s<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/170325622.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/170325622.jpg\" alt=\"\" width=\"650\" border=\"0\" \/><\/a><\/p>\n<p>\u5176\u4e2dSSL:Cipher in use is DHE-RSA-AES256-SHA\u8bf4\u660emysql\u5df2\u5efa\u7acb\u5728ssl\u4e0a\u4e86<br \/>\n3.\u4e3b\u4e3b\u590d\u5236<br \/>\n\u7ecf\u5e38\u5bb9\u6613\u51fa\u9519,\u4e0d\u5efa\u8bae\u7528<br \/>\n(1).\u5728\u4e24\u53f0\u670d\u52a1\u5668\u4e0a\u5404\u81ea\u5efa\u7acb\u4e00\u4e2a\u5177\u6709\u590d\u5236\u6743\u9650\u7684\u7528\u6237\uff1b<br \/>\nmysql&gt;grant replication slave,replication client on *.* to\u00a0<a href=\"mailto:repluser@'172.16.133.%'\">repluser@&#8217;172.16.133.%&#8217;<\/a>\u00a0identified by &#8216;redhat&#8217;<br \/>\nmysql&gt;flush privileges;<br \/>\n(2).\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\uff1a<br \/>\nnode1:<br \/>\n[mysqld]<br \/>\nserver-id = 10<br \/>\nlog-bin = mysql-bin<br \/>\nauto-increment-increment = 2<br \/>\nauto-increment-offset = 1<br \/>\nnode2:<br \/>\n[mysqld]<br \/>\nserver-id = 20<br \/>\nlog-bin = mysql-bin<br \/>\nauto-increment-increment = 2<br \/>\nauto-increment-offset = 2<br \/>\n(3).\u5982\u679c\u6b64\u65f6\u4e24\u53f0\u670d\u52a1\u5668\u5747\u4e3a\u65b0\u5efa\u7acb\uff0c\u4e14\u65e0\u5176\u5b83\u5199\u5165\u64cd\u4f5c\uff0c\u5404\u670d\u52a1\u5668\u53ea\u9700\u8bb0\u5f55\u5f53\u524d\u81ea\u5df1\u4e8c\u8fdb\u5236\u65e5\u5fd7\u6587\u4ef6\u53ca\u4e8b\u4ef6\u4f4d\u7f6e\uff0c\u4ee5\u4e4b\u4f5c\u4e3a\u53e6\u5916\u7684\u670d\u52a1\u5668\u590d\u5236\u8d77\u59cb\u4f4d\u7f6e\u5373\u53ef<br \/>\nnode1:<br \/>\nmysql&gt; SHOW MASTER STATUS;<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/233948463.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/233948463.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\nnode2:<br \/>\nmysql&gt; SHOW MASTER STATUS;<\/p>\n<p><a href=\"http:\/\/img1.51cto.com\/attachment\/201208\/233958242.jpg\" target=\"_blank\"><img decoding=\"async\" src=\"http:\/\/img1.51cto.com\/attachment\/201208\/233958242.jpg\" alt=\"\" border=\"0\" \/><\/a><br \/>\n(4).\u5404\u670d\u52a1\u5668\u63a5\u4e0b\u6765\u6307\u5b9a\u5bf9\u53e6\u4e00\u53f0\u670d\u52a1\u5668\u4e3a\u81ea\u5df1\u7684\u4e3b\u670d\u52a1\u5668\u5373\u53ef\uff1a<br \/>\nnode1:<br \/>\nmysql&gt;change master to master_host=&#8217;172.16.133.12&#8242;,master_user=&#8217;repluser&#8217;,master_password=&#8217;redhat&#8217;,master_log_file=&#8217;mysql-bin.000004&#8242;,master_log_pos=107;<br \/>\nmysql&gt;slave start;<br \/>\nnode2:<br \/>\nmysql&gt;change master to master_host=&#8217;172.16.133.11&#8242;,master_user=&#8217;repluser&#8217;,master_password=&#8217;redhat&#8217;,master_log_file=&#8217;mysql-bin.000004&#8242;,master_log_pos=107;<br \/>\nmysql&gt;slave start;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>\u53e6:\u57fa\u4e8essl\u7684mysql\u4e3b\u4ece\u590d\u5236\u4e2d\u9047\u5230\u4e00\u4e2a\u95ee\u9898,\u5c31\u662f\u6ca1\u6709\u5728my.cnf\u4e2d\u52a0\u5165ssl\u65f6,<\/p>\n<p>mysql&gt;show variables like &#8216;%ssl%&#8217;;<\/p>\n<p>\u662fdisabled,\u52a0\u4e86\u4e4b\u540e\u5c31\u542f\u7528\u4e86,\u663e\u793a\u4e3ayes,\u95ee\u9898\u6765\u4e86,\u5728\u6211\u6dfb\u52a0\u5b8cssl-ca,ssl-cert,ssl-key\u8def\u5f84\u65f6,\u91cd\u542f\u670d\u52a1\u540e,\u53d1\u73b0\u4ed6\u6709\u81ea\u52a8\u53d8\u4e3adisabled\u4e86,\u5e76\u4e14\u53ea\u6709\u91cd\u65b0\u5220\u6389ssl-ca,ssl-cert,ssl-key\u624d\u53ef\u4ee5\u91cd\u65b0\u542f\u52a8,\u5f88\u662f\u4e0d\u89e3,\u6c42\u6307\u6559<\/p>\n<p>\u8fd9\u4e2a\u95ee\u9898\u4ee5\u89e3\u51b3,\u662f\u6211\u5728\u521b\u5efassl\u76ee\u5f55\u540e,\u6ca1\u6709\u6ce8\u610f\u5176\u4e2dcrt\u7b49\u7684\u6743\u9650,\u5c06ssl\u76ee\u5f55\u4e2d\u76844\u4e2a\u6587\u4ef6\u5c5e\u4e3b,\u5c5e\u7ec4\u6539\u4e3amysql\u5373\u53ef<\/p>\n<p>\u672c\u6587\u51fa\u81ea \u201c<a href=\"http:\/\/5142926.blog.51cto.com\/\">\u5468\u94b0\u94a6<\/a>\u201d \u535a\u5ba2\uff0c\u8bf7\u52a1\u5fc5\u4fdd\u7559\u6b64\u51fa\u5904<a href=\"http:\/\/5142926.blog.51cto.com\/5132926\/956576\">http:\/\/5142926.blog.51cto.com\/5132926\/956576<\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>1.\u51c6\u5907\u7684\u4e3b\u673a node1:172.16.133.11 node2:172.16 &hellip;<\/p>\n<p class=\"read-more\"><a href=\"http:\/\/zerobox.org\/notes\/839.html\">\u7ee7\u7eed\u9605\u8bfb &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[99],"class_list":["post-839","post","type-post","status-publish","format-standard","hentry","tag-mysql"],"views":1097,"_links":{"self":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts\/839","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/comments?post=839"}],"version-history":[{"count":0,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts\/839\/revisions"}],"wp:attachment":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/media?parent=839"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/categories?post=839"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/tags?post=839"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}