网站安全架构设计方案

:123451bbs,blog2mysqlmysqlproxy2webbbs,blog3412linuxlvs,keepalivedkeepalivedlvsbbs2mysqlwebmysqlproxy3nagios4webwebGNUtarcrontabmysqldumptar.NFSweb5webapachemysqlproxyApachebbsblogbbsblog6mysqliptables:2(dell1950),web2-3(dell1950),2(dell2950),NAS(5T),4u(5T),1(dell1850).centos5()ipvsadmkeepalived,nagios,webapache+phpmysql,mysqlproxy.1lvs2-32web2-33mysql1-34web15261-272keepalived.conf!ConfigurationFileforkeepalivedglobal_defs{router_idLVS_DEVEL}vrrp_instanceVI_1{statemasterinterfaceeth0virtual_router_id59priority100advert_int1authentication{auth_typePASSauth_pass1111}virtual_ipaddress{61.61.61.100#61.61.61.101}}virtual_server61.61.61.10080{delay_loop6lb_algorrlb_kindDRpersistence_timeout50protocolTCPreal_server61.61.61.10280{weight100TCP_CHECK{connect_timeout3nb_get_retry3delay_before_retry3connect_port80}}real_server61.61.61.10380{weight100TCP_CHECK{connect_timeout3nb_get_retry3delay_before_retry3connect_port80}}}ip#!/bin/bash#description:startrealserverVIP=61.61.61.100./etc/rc.d/init.d/functionscase$1instart)echostartLVSofREALServer/sbin/ifconfiglo:0$VIPbroadcast$VIPnetmask255.255.255.255upecho1/proc/sys/net/ipv4/conf/lo/arp_ignoreecho2/proc/sys/net/ipv4/conf/lo/arp_announceecho1/proc/sys/net/ipv4/conf/all/arp_ignoreecho2/proc/sys/net/ipv4/conf/all/arp_announce;;stop)/sbin/ifconfiglo:0downechocloseLVSDirectorserverecho0/proc/sys/net/ipv4/conf/lo/arp_ignoreecho0/proc/sys/net/ipv4/conf/lo/arp_announceecho0/proc/sys/net/ipv4/conf/all/arp_ignoreecho0/proc/sys/net/ipv4/conf/all/arp_announce;;*)echoUsage:$0{start|stop}exit1esac