1
1)自建 CA 证书
2
root@Elk01 ~# /usr/share/elasticsearch/bin/elasticsearch-certutil ca --out /etc/elasticsearch/elastic-stack-ca.p12 --pass "" --days 36500
3
--pass "": # 空密码，生产环境建议设密码
4
--days 36500: # 100 年有效期
5
root@Elk01 ~# ls -l /etc/elasticsearch/elastic-stack-ca.p12
6
-rw------- 1 root elasticsearch 2672 Aug  2 09:08 elastic-stack-ca.p12
7

8
2)基于自建 CA 生成 ES HTTPS 证书
9
root@Elk01 ~# /usr/share/elasticsearch/bin/elasticsearch-certutil cert \
10
    --ca /etc/elasticsearch/elastic-stack-ca.p12 \
11
    --out /etc/elasticsearch/elastic-certificates-https.p12 \
12
    --pass "" --days 36500 --ca-pass ""
13
root@Elk01 ~# ls -l /etc/elasticsearch/elastic-*.p12
14
-rw------- 1 root elasticsearch 3596 Aug  2 09:08 elastic-certificates-https.p12  # HTTPS
15
-rw-r----- 1 root elasticsearch 3596 Aug  1 09:31 elastic-certificates.p12        # transport（已有）
16
-rw------- 1 root elasticsearch 2672 Aug  2 09:08 elastic-stack-ca.p12            # CA
17

18
3)修改权限
19
root@Elk01 ~# chmod 640 /etc/elasticsearch/elastic-certificates-https.p12
20
# CA 证书只给 root 用（签发新证书时），ES 进程不读它；保持默认的 600 就行

1
1)三台同时重启
2
root@Elk01 ~# systemctl restart elasticsearch.service
3
root@Elk02 ~# systemctl restart elasticsearch.service
4
root@Elk03 ~# systemctl restart elasticsearch.service
5

6
2)使用 HTTPS 访问
7
root@Elk01 ~# curl -s -u elastic:passwd -k https://10.0.0.6:9200/_cat/nodes?v
8
-s: # 静默，不显示 curl 进度条和连接信息
9
-k: # 跳过自签名证书校验
10
ip       heap.percent ram.percent cpu node.role   master name
11
10.0.0.7           54          77  24 cdfhilmrstw -      Elk02
12
10.0.0.6           31          92  21 cdfhilmrstw *      Elk01
13
10.0.0.8           72          76  32 cdfhilmrstw -      Elk03
14
✅️ 3 节点在线，HTTPS 已生效
15

16
3)普通 HTTP 已不可用
17
root@Elk01 ~# curl http://10.0.0.6:9200/
18
curl: (52) Empty reply from server
19
# HTTP 返回空连接——TLS 已接管 9200

1
1)查看当前 JVM 堆大小
2
root@Elk01 ~# ps -ef | grep elasticsearch | egrep "Xmx|Xms"
3
-Xms512m
4
-Xmx512m
5
root@Elk01 ~# free -h | grep Mem
6
Mem:           1.8Gi       1.4Gi       128Mi       527Mi       416Mi
7
# 当前是 512m（在 Elk01 时手动设的），内存依然偏紧
8

9
2)创建子目录 & 子配置文件
10
root@Elk01 ~# mkdir -p /etc/elasticsearch/jvm.options.d
11
⚠️ '每台VM都要创建这个目录'
12
# ES 的启动脚本会扫描 jvm.options.d/ 并合并其中的内容
13
# 所以不用改主配置文件（/etc/elasticsearch/jvm.options）
14
root@Elk01 ~# echo -e "-Xms512m\n-Xmx512m" > /etc/elasticsearch/jvm.options.d/heap.options
15

16
3)保持 512m 无需调整
17
root@Elk01 ~# systemctl restart elasticsearch
18
`别忘记重启elasticsearch服务`
19
root@Elk01 ~# egrep 'Xms|Xmx' /etc/elasticsearch/jvm.options.d/heap.options
20
-Xms512m
21
-Xmx512m
22
✅️ `-Xms` 和 `-Xmx` 设成相同值，避免运行时堆扩展带来的性能抖动

1
root@Elk01 ~# curl -s -u elastic:passwd -k -X DELETE 'https://10.0.0.6:9200/kpyun-test*'
2
{"acknowledged":true}
3
# ES 7.x 版本默认是可以使用通配符全部删除
4
# ES 8+（包括9.x） 已经默认禁止使用
5

6
1)修改配置
7
root@Elk01 ~# cat >> /etc/elasticsearch/elasticsearch.yml <<EOF
8
action.destructive_requires_name: true
9
EOF
10
# 禁止使用通配符 * 或 _all 删除索引，防止误操作
11

12
2)同步到其他节点 + 重启
13
root@Elk01 ~# scp /etc/elasticsearch/elasticsearch.yml 10.0.0.7:/etc/elasticsearch/
14
root@Elk01 ~# scp /etc/elasticsearch/elasticsearch.yml 10.0.0.8:/etc/elasticsearch/
15
root@Elk01 ~# systemctl restart elasticsearch
16
# 三台同时重启
17

18
3)验证
19
root@Elk01 ~# curl -s -u elastic:passwd -k -X DELETE 'https://10.0.0.6:9200/kpyun-test*'
20
{"error":{"type":"illegal_argument_exception","reason":"Wildcard expressions or all indices are not allowed"},"status":400}
21
✅️ 通配符删除已被拦截

1
root@Elk01 ~# curl -s -u elastic:passwd -k -X POST 'https://10.0.0.6:9200/kpyun-test-1/_doc' \
2
    -H 'Content-Type: application/json' -d '{"msg":"test"}' | jq
3
{
4
  "_index": "kpyun-test-1",
5
  "_type": "_doc",
6
  "_id": "wK5hwp8BkORV4nxJNCYI",
7
  "_version": 1,
8
  "result": "created",
9
  "_shards": {
10
    "total": 2,
11
    "successful": 1,
12
    "failed": 0
13
  },
14
  "_seq_no": 0,
15
  "_primary_term": 1
16
}
17

18
1)修改配置
19
root@Elk01 ~# cat >> /etc/elasticsearch/elasticsearch.yml <<EOF
20
action.auto_create_index: false
21
EOF
22
# 禁止自动创建不存在的索引
23

24
2)同步 + 重启
25
root@Elk01 ~# scp /etc/elasticsearch/elasticsearch.yml 10.0.0.7:/etc/elasticsearch/
26
root@Elk01 ~# scp /etc/elasticsearch/elasticsearch.yml 10.0.0.8:/etc/elasticsearch/
27
root@Elk01 ~# systemctl restart elasticsearch
28
# 三台同时重启
29

30
3)验证
31
# 这次是kpyun-test-2
32
root@Elk01 ~# curl -s -u elastic:passwd -k -X POST 'https://10.0.0.6:9200/kpyun-test-2/_doc' \
33
    -H 'Content-Type: application/json' -d '{"msg":"test"}' | jq
34
{
35
  "error": {
36
    "root_cause": [
37
    "type": "index_not_found_exception",
38
    "reason": "no such index [kpyun-test-2] and [action.auto_create_index] is [false]",
39
    "index_uuid": "_na_",
40
    "index": "kpyun-test-2"
41
  },
42
  "status": 404
43
}
44
✅️ `索引不存在时拒绝写入，而非自动创建`
45

46
4)手动创建索引后，方可写入
47
root@Elk01 ~# curl -s -u elastic:passwd -k -X PUT 'https://10.0.0.6:9200/kpyun-test-2' \
48
    -H 'Content-Type: application/json' | jq
49
{
50
  "acknowledged": true,
51
  "shards_acknowledged": true,
52
  "index": "kpyun-test-2"
53
}
54
root@Elk01 ~# curl -s -u elastic:passwd -k -X POST 'https://10.0.0.6:9200/kpyun-test-2/_doc' \
55
    -H 'Content-Type: application/json' -d '{"msg":"test"}' | jq
56
{
57
  "_index": "kpyun-test-2",
58
  ......
59
  "result": "created",
60
  ......

1
3)修改网络配置
2
root@ESnew-01 ~# grep network.host /etc/elasticsearch/elasticsearch.yml
3
#network.host: 192.168.0.1
4
root@ESnew-01 ~# sed -i 's@#network.host: 192.168.0.1@network.host: 0.0.0.0@' /etc/elasticsearch/elasticsearch.yml
5

6
4)限制 JVM 堆（2G 内存必须做）
7
root@ESnew-01 ~# ls -lhd /etc/elasticsearch/jvm.options.d/
8
# ES-9.x 默认有这个子目录（无需手动创建）
9
root@ESnew-01 ~# echo -e '-Xms512m\n-Xmx512m' > /etc/elasticsearch/jvm.options.d/heap.options
10

11
5)启动服务
12
root@ESnew-01 ~# systemctl enable --now elasticsearch.service
13
root@ESnew-01 ~# ps -ef | grep elastic | egrep 'Xms|Xmx'
14
... -Xms512m -Xmx512m ...
15
root@ESnew-01 ~# ss -lntup | grep -E '9200|9300'
16
LISTEN 0      4096               *:9200            *:*
17
LISTEN 0      4096               *:9300            *:*

1
3)拷贝 ESnew-01 的配置与证书到其他节点
2
root@ESnew-01 ~# scp /etc/elasticsearch/elasticsearch.yml ESnew-02:/etc/elasticsearch/
3
root@ESnew-01 ~# scp /etc/elasticsearch/elasticsearch.yml ESnew-03:/etc/elasticsearch/
4
# TLS 证书（certs/ 目录 + elasticsearch.keystore）也要同步
5
root@ESnew-01 ~# scp -r /etc/elasticsearch/certs ESnew-02:/etc/elasticsearch/
6
root@ESnew-01 ~# scp /etc/elasticsearch/elasticsearch.keystore ESnew-02:/etc/elasticsearch/
7
root@ESnew-01 ~# scp -r /etc/elasticsearch/certs ESnew-03:/etc/elasticsearch/
8
root@ESnew-01 ~# scp /etc/elasticsearch/elasticsearch.keystore ESnew-03:/etc/elasticsearch/
9

10
5)三台同时清数据 + 设置 JVM + 启动
11
root@ESnew-01 ~# echo -e '-Xms512m\n-Xmx512m' > /etc/elasticsearch/jvm.options.d/heap.options
12
root@ESnew-02 ~# echo -e '-Xms512m\n-Xmx512m' > /etc/elasticsearch/jvm.options.d/heap.options
13
root@ESnew-03 ~# echo -e '-Xms512m\n-Xmx512m' > /etc/elasticsearch/jvm.options.d/heap.options
14

15
root@ESnew-01 ~# rm -rf /var/{log,lib}/elasticsearch/* && systemctl restart elasticsearch.service
16
# 把数据和日志全删除了 --> 相当于我没有启动过
17
root@ESnew-02 ~# rm -rf /var/{log,lib}/elasticsearch/* && systemctl enable --now elasticsearch.service
18
root@ESnew-03 ~# rm -rf /var/{log,lib}/elasticsearch/* && systemctl enable --now elasticsearch.service
19
⚠️ 三台同时启动，避免脑裂

1
1)查看当前主节点
2
root@ESnew-01 ~# curl -s -k -u elastic:passwd https://10.0.0.9:9200/_cat/master
3
qZZAe2XpS7aSYVLyZguqrA 10.0.0.10 10.0.0.10 ESnew-02
4
# ESnew-02 是 master
5

6
2)停止 master 节点
7
root@ESnew-02 ~# systemctl stop elasticsearch.service
8

9
3)观察自动切换
10
root@ESnew-01 ~# curl -s -k -u elastic:passwd https://10.0.0.9:9200/_cat/master
11
VZdqXATfRFGBSHkkrJ780w 10.0.0.9 10.0.0.9 ESnew-01
12
✅️ ESnew-01 自动接管为 master
13

14
root@ESnew-01 ~# curl -s -k -u elastic:passwd https://10.0.0.9:9200/_cat/health
15
yellow 2 2 4 3 0 0 2 0 - 66.7%
16
# yellow：因为只有 2/3 节点存活

1
1)安装 Kibana9
2
jiuzhao@Ubuntu ~$ scp kibana-9.4.4-amd64.deb ESnew-01:/tmp
3
root@ESnew-01 ~# dpkg -i /tmp/kibana-9.4.4-amd64.deb
4

5
2)基础配置（只需加两行，其余保持默认）
6
root@ESnew-01 ~# egrep -v '^#|^$' /etc/kibana/kibana.yml
7
logging:
8
  appenders:
9
    file:
10
      type: file
11
      fileName: /var/log/kibana/kibana.log   # Kibana 自身日志 → JSON 格式
12
      layout:
13
        type: json
14
  root:
15
    appenders:
16
      - default                               # 控制台输出
17
      - file                                  # 上面的日志文件
18
pid.file: /run/kibana/kibana.pid              # systemd 判断 Kibana 是否存活
19
server.host: "0.0.0.0"                        # ← 手动添加
20
i18n.locale: "zh-CN"                          # ← 手动添加
21
# ES9 的 Kibana 不需要手动配 elasticsearch.hosts 和密码
22
# 通过 enrollment token + verification code 自动对接 ✅️
23

24
3)生成加密密钥（ES9 Kibana 必配）
25
# ES9 的 Kibana 比 ES7 多了加密密钥要求，否则 cases / fleet / reporting 等插件报错
26
root@ESnew-01 ~# /usr/share/kibana/bin/kibana-encryption-keys generate
27
...Settings:...
28
xpack.encryptedSavedObjects.encryptionKey: ba1a8f57b65545d60e87ffdb48de7bebf4c4aeb31548ba397922161324cc0be9
29
xpack.reporting.encryptionKey: 240a397f6cb9126ca6f6b24a6e7b099e0eb4cf32abed7479828db415a51e4774
30
xpack.security.encryptionKey: fa9c723e88d0952cb12fe22bb1388c497cd1bc61ad36367f5c3dbfbd8f8ae865
31
# ↑ 三个 key 分别加密存储对象 / 报表 / 会话，必须手动写回 kibana.yml ⚠️
32
root@ESnew-01 ~# vim /etc/kibana/kibana.yml
33
# 加密密钥不会被 enrollment 自动回填——enrollment 只负责 ES 连接信息
34

35
4)启动 Kibana
36
root@ESnew-01 ~# systemctl enable --now kibana.service
37
root@ESnew-01 ~# ss -lntup | grep 5601
38
LISTEN 0      511          0.0.0.0:5601      0.0.0.0:*
39

40
5)生成 Kibana enrollment token
41
root@ESnew-01 ~# /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana
42
eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTAuMC4wLjk6OTIwMCJdLCJmZ3IiOiI5MmQzYzEzOWUwNzBkMmRhMzI3MDYzNWI1NTM5NzYwNzlhZWYwYjFlNDBmMDQ0YTY3MjlmMDk2OGUyMzAxYWNmIiwia2V5IjoiYTZQSHhaOEJJZUI4N3pXdHpoLUg6a1AtZXhhWHBST19ub0xheWszVnltUSJ9
43

44
6)获取 Kibana verification code
45
root@ESnew-01 ~# /usr/share/kibana/bin/kibana-verification-code
46
Your verification code is:   034 336
47

48
7)访问 WebUI
49
# 浏览器打开 http://10.0.0.9:5601/
50
# ① 输入 enrollment token → ② 输入验证码 034 336 → ③ 登录 elastic:passwd
51
===============================================
52
完成后 Kibana 自动回写 kibana.yml：
53
  elasticsearch.hosts: [https://10.0.0.9:9200]                    # ES 地址
54
  elasticsearch.serviceAccountToken: AAEAAWVsYXN0aWMv...           # 服务账户 token
55
  elasticsearch.ssl.certificateAuthorities: [/var/lib/kibana/...]  # CA 证书路径
56
  xpack.fleet.outputs: [...]                                       # Fleet 输出配置
57
# ↑ 这些全都是 enrollment 自动回填的，不需要手动写

1
root@ESnew-01 ~# cat /etc/kibana/kibana.yml
2
logging:
3
  appenders:
4
    file:
5
      type: file
6
      fileName: /var/log/kibana/kibana.log   # Kibana 自身日志 → JSON 格式
7
      layout:
8
        type: json
9
  root:
10
    appenders:
11
      - default                               # 控制台输出
12
      - file                                  # 上面的日志文件
13
pid.file: /run/kibana/kibana.pid              # systemd 判断 Kibana 是否存活
14
server.host: "0.0.0.0"                        # ← 手动添加
15
i18n.locale: "zh-CN"                          # ← 手动添加
16

17
# ES9 的 Kibana 需要额外设置加密密钥，否则 cases 插件报错
18
xpack.encryptedSavedObjects.encryptionKey: ba1a8f57b65545d60e87ffdb48de7bebf4c4aeb31548ba397922161324cc0be9
19
xpack.reporting.encryptionKey: 240a397f6cb9126ca6f6b24a6e7b099e0eb4cf32abed7479828db415a51e4774
20
xpack.security.encryptionKey: fa9c723e88d0952cb12fe22bb1388c497cd1bc61ad36367f5c3dbfbd8f8ae865
21

22
# This section was automatically generated during setup.
23
elasticsearch.hosts: [https://10.0.0.9:9200]
24
elasticsearch.serviceAccountToken: AAEAAWVsYXN0aWMva2liYW5hL2Vucm9sbC1wcm9jZXNzLXRva2VuLTE3ODU3Mjk3MDQ1MTU6SUppcW4ybjZUenk5dzZqdS1xNDBoUQ
25
elasticsearch.ssl.certificateAuthorities: [/var/lib/kibana/ca_1785729704793.crt]
26
xpack.fleet.outputs: [{id: fleet-default-output, name: default, is_default: true, is_default_monitoring: true, type: elasticsearch, hosts: [https://10.0.0.9:9200], ca_trusted_fingerprint: 92d3c139e070d2da3270635b553976079aef0b1e40f044a6729f0968e2301acf}]

1
1)下载软件包
2
jiuzhao@Ubuntu ~$ wget -P /home/jiuzhao/下载 https://dlcdn.apache.org/zookeeper/zookeeper-3.8.6/apache-zookeeper-3.8.6-bin.tar.gz
3

4
2)拷贝并解压
5
jiuzhao@Ubuntu ~$ scp apache-zookeeper-3.8.6-bin.tar.gz Elk01:/tmp
6
root@Elk01 ~# tar xf /tmp/apache-zookeeper-3.8.6-bin.tar.gz -C /usr/local/
7

8
3)配置环境变量
9
root@Elk01 ~# vim /etc/profile.d/zk.sh
10
#!/bin/bash
11
export ZK_HOME=/usr/local/apache-zookeeper-3.8.6-bin
12
export JAVA_HOME=/usr/share/elasticsearch/jdk
13
export PATH=$PATH:${ZK_HOME}/bin:${JAVA_HOME}/bin
14
# 复用 ES7 自带的 JDK，不需要单独安装 Java
15

16
root@Elk01 ~# source /etc/profile.d/zk.sh
17
root@Elk01 ~# java --version
18
openjdk 22.0.2 2024-07-16
19

20
4)准备配置文件
21
root@Elk01 ~# cp /usr/local/apache-zookeeper-3.8.6-bin/conf/zoo_sample.cfg /usr/local/apache-zookeeper-3.8.6-bin/conf/zoo.cfg
22

23
5)启动 + 验证
24
root@Elk01 ~# zkServer.sh start
25
Starting zookeeper ... STARTED
26

27
root@Elk01 ~# zkServer.sh status
28
Mode: standalone

1
1)创建节点
2
root@Elk01 ~# zkCli.sh -server 10.0.0.6:2181
3

4
[zk: 10.0.0.6:2181(CONNECTED) 0] create /school Redhat
5
Created /school
6
# key=/school，value=Redhat
7

8
2)查看节点列表
9
[zk: 10.0.0.6:2181(CONNECTED) 1] ls /
10
[school, zookeeper]
11

12
3)查看节点数据
13
[zk: 10.0.0.6:2181(CONNECTED) 2] get /school
14
Redhat
15

16
4)修改节点数据
17
[zk: 10.0.0.6:2181(CONNECTED) 3] set /school kpyun
18
[zk: 10.0.0.6:2181(CONNECTED) 4] get /school
19
kpyun
20

21
5)删除节点
22
[zk: 10.0.0.6:2181(CONNECTED) 5] delete /school
23
[zk: 10.0.0.6:2181(CONNECTED) 6] ls /
24
[zookeeper]
25

26
6)创建层级节点
27
[zk: 10.0.0.6:2181(CONNECTED) 7] create /school Redhat
28
[zk: 10.0.0.6:2181(CONNECTED) 8] create /school/class test01
29
# /school/class 是 /school 的子节点，路径层级用 '/' 分隔
30
[zk: 10.0.0.6:2181(CONNECTED) 9] ls /school
31
[class]
32

33
7)递归删除（节点下有子节点时，普通 delete 会报错）
34
[zk: 10.0.0.6:2181(CONNECTED) 10] delete /school
35
Node not empty: /school           # ❌ 不能删除非空节点
36
[zk: 10.0.0.6:2181(CONNECTED) 11] deleteall /school
37
# deleteall 会递归删除该节点及其所有子节点
38
[zk: 10.0.0.6:2181(CONNECTED) 12] ls /
39
[zookeeper]

1
1)停单点
2
root@Elk01 ~# zkServer.sh stop
3

4
2)修改集群配置
5
root@Elk01 ~# vim /usr/local/apache-zookeeper-3.8.6-bin/conf/zoo.cfg
6
tickTime=2000
7
initLimit=10
8
syncLimit=5
9
dataDir=/var/lib/zookeeper
10
# 修改数据目录
11
clientPort=2181
12
server.1=10.0.0.6:2888:3888
13
server.2=10.0.0.7:2888:3888
14
server.3=10.0.0.8:2888:3888
15

16
3)同步程序到其他节点
17
root@Elk01 ~# scp -r /usr/local/apache-zookeeper-3.8.6-bin/ 10.0.0.7:/usr/local/
18
# 我一个tar包 -C /usr/local/ 解压在了这里（东西都在这）
19
root@Elk01 ~# scp -r /usr/local/apache-zookeeper-3.8.6-bin/ 10.0.0.8:/usr/local/
20
root@Elk01 ~# scp /etc/profile.d/zk.sh 10.0.0.7:/etc/profile.d/
21
root@Elk01 ~# scp /etc/profile.d/zk.sh 10.0.0.8:/etc/profile.d/
22

23
4)各节点准备 myid（与 zoo.cfg 中的 server.N 对应）
24
root@Elk01 ~# mkdir /var/lib/zookeeper && echo 1 > /var/lib/zookeeper/myid
25
root@Elk02 ~# mkdir /var/lib/zookeeper && echo 2 > /var/lib/zookeeper/myid
26
root@Elk03 ~# mkdir /var/lib/zookeeper && echo 3 > /var/lib/zookeeper/myid

1
5)三台同时启动
2
root@Elk01 ~# source /etc/profile.d/zk.sh && zkServer.sh start
3
root@Elk02 ~# source /etc/profile.d/zk.sh && zkServer.sh start
4
root@Elk03 ~# source /etc/profile.d/zk.sh && zkServer.sh start
5

6
6)查看集群状态
7
root@Elk01 ~# zkServer.sh status
8
Mode: follower
9
root@Elk02 ~# zkServer.sh status
10
Mode: leader
11
root@Elk02 ~# ss -ntl | egrep "2181|2888|3888"
12
LISTEN 0      50     [::ffff:10.0.0.7]:2888             *:*
13
LISTEN 0      50                     *:2181             *:*
14
LISTEN 0      50     [::ffff:10.0.0.7]:3888             *:*
15
# 2888 仅 leader 监听，Elk02 是 leader
16
root@Elk03 ~# zkServer.sh status
17
Mode: follower
18
# Elk02 先于 Elk03 启动，完成了选举——启动顺序也会影响 leader 归属
19
✅️ 1 leader + 2 follower，ZK 集群就绪

1
7)客户端连接测试
2
root@Elk01 ~# zkCli.sh -server 10.0.0.6:2181,10.0.0.7:2181,10.0.0.8:2181
3
[zk: 10.0.0.6:2181,10.0.0.7:2181,10.0.0.8:2181(CONNECTED) 0]  ls /
4
[zookeeper]
5

6
# 在 Elk01 上创建数据
7
[zk: 10.0.0.6:2181,10.0.0.7:2181,10.0.0.8:2181(CONNECTED) 1] create /kpyun-zk test-data
8
Created /kpyun-zk
9

10
# 在 Elk02 上读取（跨节点数据一致）
11
root@Elk02 ~# zkCli.sh -server 10.0.0.7:2181
12
[zk: 10.0.0.7:2181(CONNECTED) 0] get /kpyun-zk
13
test-data
14
✅️ 数据在集群所有节点间自动同步
15

16
8)高可用验证
17
root@Elk02 ~# zkServer.sh stop
18
# 把leader杀死 --> 触发选举
19
root@Elk03 ~# zkServer.sh status
20
ZooKeeper JMX enabled by default
21
Using config: /usr/local/apache-zookeeper-3.8.6-bin/bin/../conf/zoo.cfg
22
Client port found: 2181. Client address: localhost. Client SSL: false.
23
Mode: leader
24
root@Elk03 ~# ss -ntl | egrep "2181|2888|3888"
25
LISTEN 0      50     [::ffff:10.0.0.8]:2888             *:*
26
LISTEN 0      50                     *:2181             *:*
27
LISTEN 0      50     [::ffff:10.0.0.8]:3888             *:*
28
root@Elk01 ~# zkCli.sh -server 10.0.0.6:2181,10.0.0.8:2181
29
# 这里连接的是一整个集群
30
[zk: 10.0.0.6:2181,10.0.0.8:2181(CONNECTED) 0] ls /
31
[kpyun-zk, zookeeper]
32
# 暂停了一个节点后服务依旧可以写入数据
33
[zk: 10.0.0.6:2181,10.0.0.8:2181(CONNECTED) 1] create /Class C413
34
Created /Class
35
[zk: 10.0.0.6:2181,10.0.0.8:2181(CONNECTED) 2] ls /
36
[Class, kpyun-zk, zookeeper]