Apisix离线安装

楠奕

于 2024-09-14 11:20:34 发布

阅读量830

点赞数 17

分类专栏： bigData Linux 文章标签：服务器 linux 运维

本文链接：https://blog.csdn.net/red_sky_blue/article/details/142252228

版权

Linux 同时被 2 个专栏收录

36 篇文章 0 订阅

订阅专栏

bigData

23 篇文章 0 订阅

订阅专栏

上传离线包

#ll
apisix-3.2.2-0.el7.x86_64.rpm
apisix-base-1.21.4.1.8-0.el7.x86_64.rpm
apisix-dashboard-3.0.1-0.el7.x86_64.rpm
cyrus-sasl-2.1.26-24.el7_9.x86_64.rpm
cyrus-sasl-devel-2.1.26-24.el7_9.x86_64.rpm
cyrus-sasl-gssapi-2.1.26-24.el7_9.x86_64.rpm
cyrus-sasl-lib-2.1.26-24.el7_9.x86_64.rpm
cyrus-sasl-plain-2.1.26-24.el7_9.x86_64.rpm
openldap-2.4.44-25.el7_9.x86_64.rpm
openldap-devel-2.4.44-25.el7_9.x86_64.rpm
openresty-openssl111-1.1.1s-1.el7.x86_64.rpm
openresty-openssl111-devel-1.1.1s-1.el7.x86_64.rpm
openresty-pcre-8.45-1.el7.x86_64.rpm
openresty-zlib-1.2.13-1.el7.x86_64.rpm

执行安装

sudo rpm -ivh openresty-zlib-1.2.13-1.el7.x86_64.rpm 
warning: openresty-zlib-1.2.13-1.el7.x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID d5edeb74: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:openresty-zlib-1.2.13-1.el7      ################################# [100%]
[apisix@apisix-node1 apisix]$ 
[apisix@apisix-node1 apisix]$ sudo rpm -ivh openresty-pcre-8.45-1.el7.x86_64.rpm 
warning: openresty-pcre-8.45-1.el7.x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID d5edeb74: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:openresty-pcre-8.45-1.el7        ################################# [100%]
[apisix@apisix-node1 apisix]$ 
[apisix@apisix-node1 apisix]$ sudo rpm -ivh openresty-openssl111-1.1.1s-1.el7.x86_64.rpm 
warning: openresty-openssl111-1.1.1s-1.el7.x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID d5edeb74: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:openresty-openssl111-1.1.1s-1.el7################################# [100%]
[apisix@apisix-node1 apisix]$ 
[apisix@apisix-node1 apisix]$ sudo rpm -ivh cyrus-sasl-lib-2.1.26-24.el7_9.x86_64.rpm 
Preparing...                          ################################# [100%]
        file /usr/lib64/libsasl2.so.3.0.0 from install of cyrus-sasl-lib-2.1.26-24.el7_9.x86_64 conflicts with file from package cyrus-sasl-lib-2.1.26-23.el7.x86_64
        file /usr/lib64/sasl2/libanonymous.so.3.0.0 from install of cyrus-sasl-lib-2.1.26-24.el7_9.x86_64 conflicts with file from package cyrus-sasl-lib-2.1.26-23.el7.x86_64
        file /usr/lib64/sasl2/libsasldb.so.3.0.0 from install of cyrus-sasl-lib-2.1.26-24.el7_9.x86_64 conflicts with file from package cyrus-sasl-lib-2.1.26-23.el7.x86_64
        file /usr/sbin/sasldblistusers2 from install of cyrus-sasl-lib-2.1.26-24.el7_9.x86_64 conflicts with file from package cyrus-sasl-lib-2.1.26-23.el7.x86_64
        file /usr/sbin/saslpasswd2 from install of cyrus-sasl-lib-2.1.26-24.el7_9.x86_64 conflicts with file from package cyrus-sasl-lib-2.1.26-23.el7.x86_64

发现有冲突，确保没有其他进程在用冲突包后，直接强制安装

# sudo rpm -ivh cyrus-sasl-lib-2.1.26-24.el7_9.x86_64.rpm  --force --nodeps
Preparing...                          ################################# [100%]
Updating / installing...
   1:cyrus-sasl-lib-2.1.26-24.el7_9   ################################# [100%]

参数说明

1、–nodeps – force
加上那两个参数的意义就在于，安装时不再分析包之间的依赖关系而直接安装，也就不会再提示error: Failed dependencies:这样的错误了
2、–replacefiles
安装提示软件冲突时，添加–replacefiles参数即可。

继续安装

sudo rpm -ivh cyrus-sasl-plain-2.1.26-24.el7_9.x86_64.rpm 
Preparing...                          ################################# [100%]
Updating / installing...
   1:cyrus-sasl-plain-2.1.26-24.el7_9 ################################# [100%]
[apisix@apisix-node1 apisix]$ sudo rpm -ivh cyrus-sasl-gssapi-2.1.26-24.el7_9.x86_64.rpm 
Preparing...                          ################################# [100%]
Updating / installing...
   1:cyrus-sasl-gssapi-2.1.26-24.el7_9################################# [100%]
[apisix@apisix-node1 apisix]$ sudo rpm -ivh openldap-2.4.44-25.el7_9.x86_64.rpm 
Preparing...                          ################################# [100%]
        file /usr/lib64/liblber-2.4.so.2.10.7 from install of openldap-2.4.44-25.el7_9.x86_64 conflicts with file from package openldap-2.4.44-20.el7.x86_64
        file /usr/lib64/libldap-2.4.so.2.10.7 from install of openldap-2.4.44-25.el7_9.x86_64 conflicts with file from package openldap-2.4.44-20.el7.x86_64
        file /usr/lib64/libldap_r-2.4.so.2.10.7 from install of openldap-2.4.44-25.el7_9.x86_64 conflicts with file from package openldap-2.4.44-20.el7.x86_64
        file /usr/lib64/libslapi-2.4.so.2.10.7 from install of openldap-2.4.44-25.el7_9.x86_64 conflicts with file from package openldap-2.4.44-20.el7.x86_64
[apisix@apisix-node1 apisix]$ sudo rpm -ivh openldap-2.4.44-25.el7_9.x86_64.rpm   --force --nodeps
Preparing...                          ################################# [100%]
Updating / installing...
   1:openldap-2.4.44-25.el7_9         ################################# [100%]
[apisix@apisix-node1 apisix]$ 
[apisix@apisix-node1 apisix]$ sudo rpm -ivh cyrus-sasl-2.1.26-24.el7_9.x86_64.rpm 
Preparing...                          ################################# [100%]
Updating / installing...
   1:cyrus-sasl-2.1.26-24.el7_9       ################################# [100%]
[apisix@apisix-node1 apisix]$ sudo rpm -ivh cyrus-sasl-devel-2.1.26-24.el7_9.x86_64.rpm 
Preparing...                          ################################# [100%]
Updating / installing...
   1:cyrus-sasl-devel-2.1.26-24.el7_9 ################################# [100%]
[apisix@apisix-node1 apisix]$ 
[apisix@apisix-node1 apisix]$ sudo rpm -ivh openldap-devel-2.4.44-25.el7_9.x86_64.rpm 
Preparing...                          ################################# [100%]
Updating / installing...
   1:openldap-devel-2.4.44-25.el7_9   ################################# [100%]
[apisix@apisix-node1 apisix]$ sudo rpm -ivh apisix-base-1.21.4.1.8-0.el7.x86_64.rpm 
warning: apisix-base-1.21.4.1.8-0.el7.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 96c07346: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:apisix-base-1.21.4.1.8-0.el7     ################################# [100%]
[apisix@apisix-node1 apisix]$ sudo rpm -ivh apisix-3.2.2-0.el7.x86_64.rpm 
warning: apisix-3.2.2-0.el7.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 96c07346: NOKEY
Preparing...                          ################################# [100%]
Updating / installing...
   1:apisix-3.2.2-0.el7               ################################# [100%]
[apisix@apisix-node1 apisix]$

修改配置文件

# sudo vi /usr/local/apisix/conf/config.yaml
apisix:
  node_listen: 9080
  enable_ipv6: true
  ssl:
    enable: false
    listen:
      - port: 9182
  enable_admin: true
  enable_control: false
  control:
    ip: 10.21.10.111
    port: 9284

deployment:
  role: traditional
  role_traditional:
    config_provider: etcd
  etcd:
    host:
      - http://10.21.10.111:2379
    user: root
    password: auyd871477sha
    prefix: "/apisix"
    use_grpc: false
  admin:
    allow_admin:
      - 0.0.0.0/0
    admin_key:
      - name: admin
        role: admin
    admin_listen:
      ip: 0.0.0.0
      port: 9180

参数说明

参数说明：

node_listen：apisix 监听端口(前台页面访问使用的端口)

etcd.host: etcd集群IP端口配置

etcd.user:etcd集群账号

etcd.password:etcd集群密码

admin.admin_key ：admin管理态的用户和认证用户

allow_admin：白名单配置（IP层面控制访问apisix权限），如果不清楚子网掩码等情况下，可以配置成0.0.0.0/0,其余删掉

admin_listen：admin管理态监听端口

其他配置

1.隐藏网页请求时暴露的server版本信息，修改后需重启apisix。建议修改

vi /usr/local/apisix/conf/config-default.yaml

# 修改以下参数后面的值为false

enable_server_tokens: true --> enable_server_tokens: false

2.修改apisix启动的nginx的默认worker process数量。按需修改

默认情况apisix启动的nginx的worker process数据等于当前服务器的cpu核心数，如果需要调整请修改如下配置，修改后需重启apisix

vi /usr/local/apisix/conf/config-default.yaml

# 修改以下参数后面的值为需要的数

# auto为等于当前服务器的cpu核心数 --> 仅开启8个worker process

worker_processes: auto --> worker_processes: 8

启动apisix

初始化：apisix init

启动：apisix start

停止：apisix stop (命令无效的情况可以查看pid ps -ef | grep apisix 然后kill -9 pid 的方式停止。需要注意的是，要同时把nginx的进程也全部kill掉 )

# apisix init
/usr/local/openresty//luajit/bin/luajit /usr/local/apisix/apisix/cli/apisix.lua init

WARNING: using fixed Admin API token has security risk.
Please modify "admin_key" in conf/config.yaml .


[root@apisix-node1 dashboard]# 
[root@apisix-node1 dashboard]# apisix start
/usr/local/openresty//luajit/bin/luajit /usr/local/apisix/apisix/cli/apisix.lua start

WARNING: using fixed Admin API token has security risk.
Please modify "admin_key" in conf/config.yaml .


[root@apisix-node1 dashboard]# 
[root@apisix-node1 dashboard]# apisix status
/usr/local/openresty//luajit/bin/luajit /usr/local/apisix/apisix/cli/apisix.lua status
invalid argument: status
Usage: apisix [action] <argument>

help:       show this message, then exit
init:       initialize the local nginx.conf
init_etcd:  initialize the data of etcd
start:      start the apisix server
stop:       stop the apisix server
quit:       stop the apisix server gracefully
restart:    restart the apisix server
reload:     reload the apisix server
test:       test the generated nginx.conf
version:    print the version of apisix

安装apisix-dashboard

# sudo rpm -ivh apisix-dashboard-3.0.1-0.el7.x86_64.rpm 
Preparing...                          ################################# [100%]
Updating / installing...
   1:apisix-dashboard-local-3.0.1-0.el################################# [100%]

修改配置

/usr/local/apisix/dashboard/conf/conf.yaml

less conf/conf.yaml | grep -v "#"

conf:
  listen:


  etcd:
      - 10.21.10.111:2379
    mtls:
  log:
    error_log:
      file_path:
    access_log:
      file_path:

authentication:
  secret:
      password: admin


plugins:
  - api-breaker
  - authz-casbin
  - authz-casdoor
  - authz-keycloak
  - aws-lambda
  - azure-functions
  - basic-auth
  - clickhouse-logger
  - client-control
  - consumer-restriction
  - cors
  - csrf
  - datadog
  - echo
  - error-log-logger
  - ext-plugin-post-req
  - ext-plugin-post-resp
  - ext-plugin-pre-req
  - fault-injection
  - file-logger
  - forward-auth
  - google-cloud-logging
  - grpc-transcode
  - grpc-web
  - gzip
  - hmac-auth
  - http-logger
  - ip-restriction
  - jwt-auth
  - kafka-logger
  - kafka-proxy
  - key-auth
  - ldap-auth
  - limit-conn
  - limit-count
  - limit-req
  - loggly
  - mocking
  - opa
  - openid-connect
  - opentelemetry
  - openwhisk
  - prometheus
  - proxy-cache
  - proxy-control
  - proxy-mirror
  - proxy-rewrite
  - public-api
  - real-ip
  - redirect
  - referer-restriction
  - request-id
  - request-validation
  - response-rewrite
  - rocketmq-logger
  - server-info
  - serverless-post-function
  - serverless-pre-function
  - skywalking
  - skywalking-logger
  - sls-logger
  - splunk-hec-logging
  - syslog
  - tcp-logger
  - traffic-split
  - ua-restriction
  - udp-logger
  - uri-blocker
  - wolf-rbac
  - zipkin
  - elasticsearch-logge
  - openfunction
  - tencent-cloud-cls
  - ai
  - cas-auth

参数说明

listen.host: dashboard部署服务器IP

listen.port: dashboard启动监听端口

etcd.endpoints:部署的ETCD集群信息以及ETCD认证账号密码

authentication.users:dashboard管理页面登录账号密码

启动apisix-dashboard

# 启动apisix-dashboard

systemctl start apisix-dashboard

# 停止apisix-dashboard

systemctl stop apisix-dashboard

# 检查apisix-dashboard运行状态

systemctl status apisix-dashboard

# systemctl status apisix-dashboard
● apisix-dashboard.service - apisix-dashboard
   Loaded: loaded (/usr/lib/systemd/system/apisix-dashboard.service; static; vendor preset: disabled)
   Active: inactive (dead)

Sep 14 11:18:18 apisix-node1 systemd[1]: Dependency Conflicts=apisix-dashboard.service dropped from unit apisix-dashboard.service
[root@apisix-node1 dashboard]# 
[root@apisix-node1 dashboard]# systemctl start apisix-dashboard
[root@apisix-node1 dashboard]# 
[root@apisix-node1 dashboard]# systemctl status apisix-dashboard
● apisix-dashboard.service - apisix-dashboard
   Loaded: loaded (/usr/lib/systemd/system/apisix-dashboard.service; static; vendor preset: disabled)
   Active: active (running) since Sat 2024-09-14 11:18:29 CST; 4s ago
 Main PID: 6662 (manager-api)
   CGroup: /system.slice/apisix-dashboard.service
           └─6662 /usr/local/apisix/dashboard/manager-api -c /usr/local/apisix/dashboard/conf/conf.yaml

Sep 14 11:18:29 apisix-node1 systemd[1]: Started apisix-dashboard.
Sep 14 11:18:30 apisix-node1 manager-api[6662]: The manager-api is running successfully!
Sep 14 11:18:30 apisix-node1 manager-api[6662]: Version : 3.0.1
Sep 14 11:18:30 apisix-node1 manager-api[6662]: GitHash : 397c0cb
Sep 14 11:18:30 apisix-node1 manager-api[6662]: Config File: /usr/local/apisix/dashboard/conf/conf.yaml
Sep 14 11:18:30 apisix-node1 manager-api[6662]: Listen  : 10.21.10.111:9077
Sep 14 11:18:30 apisix-node1 manager-api[6662]: Loglevel: warn
Sep 14 11:18:30 apisix-node1 manager-api[6662]: ErrorLogFile: /usr/local/apisix/dashboard/logs/error.log
Sep 14 11:18:30 apisix-node1 manager-api[6662]: AccessLogFile: /usr/local/apisix/dashboard/logs/access.log