RabbitMQ

来自Gea-Suan Lin's Wiki
跳到导航 跳到搜索

RabbitMQ是一套软件。

需求

AWS上用t4g.nano安装(512 MB的内存),会在开机后就马上吃到Swap空间(机器上设定512 MB的Swap),这边建议建议开发环境至少用t4g.micro,正式环境的内存可以再往上开大。

要注意RabbitMQ预设要求要有40%(0.4)的内存是空闲的,不然会开始罢工。考虑到这点,建议在正式环境上可以多保留一些内存,或是将0.4调小一点。

安装

RabbitMQ的安装会跨越好几个APT Repository:

curl -1sLf "https://keys.openpgp.org/vks/v1/by-fingerprint/0A9AF2115F4687BD29803A206B73A36E6026DFCA" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/com.rabbitmq.team.gpg > /dev/null; curl -1sLf https://ppa1.novemberain.com/gpg.E495BB49CC4BBE5B.key | sudo gpg --dearmor | sudo tee /usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg > /dev/null; curl -1sLf https://ppa1.novemberain.com/gpg.9F4587F226208342.key | sudo gpg --dearmor | sudo tee /usr/share/keyrings/rabbitmq.9F4587F226208342.gpg > /dev/null; echo "deb [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-erlang/deb/ubuntu jammy main"; echo -e "deb [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-erlang/deb/ubuntu $(lsb_release -cs) main\ndeb-src [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-erlang/deb/ubuntu $(lsb_release -cs) main\ndeb [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-server/deb/ubuntu $(lsb_release -cs) main\ndeb-src [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-server/deb/ubuntu $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/rabbitmq.list; sudo apt update; sudo apt install -y rabbitmq-server

基本设定

通常我们会先打开Web管理界面:

sudo rabbitmq-plugins enable rabbitmq_management

登入的界面是http://x.x.x.x:15672/,预设的账号是guest,密码也是guest,虽然叫做guest,但是这组账号是管理员。所以这边建议先建立admin账号(并且给他adminstrator权限),接着移除guest账号(因为这个名称太雷):

sudo rabbitmqctl add_user admin pa55w0rd
sudo rabbitmqctl set_user_tags admin administrator
sudo rabbitmqctl delete_user guest

另外要注意的是,预设的guest账号只能从本机localhost连线登入,如果不想要删除,而想要开放远端可以连线的话,可以修改/etc/rabbitmq/rabbitmq.conf设定(这个档案有可能不存在,需要自己建立):

loopback_users = none

LDAP

先安装对应的plugin:

sudo apt-get install -y erlang-eldap; sudo rabbitmq-plugins enable rabbitmq_auth_backend_ldap

/etc/rabbitmq/rabbitmq.conf内设定:

#
auth_backends.1 = ldap
auth_backends.2 = internal
auth_ldap.servers.1 = ldap.example.com
auth_ldap.dn_lookup_attribute = uid
auth_ldap.dn_lookup_base = dc=example,dc=com
auth_ldap.user_dn_pattern = uid=${username},ou=People,dc=example,dc=com

另外在/etc/rabbitmq/advanced.config内设定:

[{rabbitmq_auth_backend_ldap,[
  {tag_queries, [{administrator, {in_group, "cn=rabbitmqadmin,ou=Groups,dc=example,dc=com", "member"}},
                 {management, {in_group, "cn=rabbitmqadmin,ou=Groups,dc=example,dc=com", "member"}}]}
]}].

Cluster设定

建议至少三台机器,建议会是奇数(考虑到quorum)。

.erlang.cookie

先把rabbitmq-1-dev上的/var/lib/rabbitmq/.erlang.cookie复制到其他台。

DNS

每一台机器的/etc/hosts内要把其他机器的位置都设定进去,这边有这三台机器:

  • rabbitmq-1-dev
  • rabbitmq-2-dev
  • rabbitmq-3-dev

set_cluster_name

在rabbitmq-1-dev上把Cluster改名成rabbitmq-dev,预设的名称会是主机的名称(在这边的例子就是rabbitmq-1-dev):

sudo rabbitmqctl set_cluster_name rabbitmq-dev

join_cluster

在rabbitmq-2-dev与rabbitmq-3-dev上加入:

sudo rabbitmqctl stop_app; sudo rabbitmqctl join_cluster rabbit@rabbitmq-1-dev; sudo rabbitmqctl start_app

set_policy

在任何一台机器上设定Policy ha-two,设定会同步到其他机器上:

sudo rabbitmqctl set_policy ha-two "^ha\." '{"ha-mode":"exactly","ha-params":2,"ha-sync-mode":"automatic"}'

防火墙设定

这边依照官方所有有列出的TCP port资料[1]

1883,4369,5552,5551,5671,5672,6000-6500,8883,15671,15672,15674,15675,15692,25672,35672-35682,61613,61614

参考资料

  1. Networking and RabbitMQ. [2023-05-17] (English). 

外部链接