第15章 Mosquitto生产环境部署实践

第15章 生产环境部署实践

15.1 部署架构

15.2 安全加固

安全检查清单

配置示例

# 生产环境配置listener8883certfile /etc/mosquitto/certs/server.crt keyfile /etc/mosquitto/certs/server.key cafile /etc/mosquitto/certs/ca.crt require_certificatetruetls_version tlsv1.2 allow_anonymousfalsepassword_file /etc/mosquitto/passwd acl_file /etc/mosquitto/acl max_connections-1max_inflight_messages20

15.3 Docker部署

Docker Compose生产配置

version:'3.8'services:mosquitto:image:eclipse-mosquitto:2restart:alwaysports:-"1883:1883"-"8883:8883"volumes:-./config:/mosquitto/config-./data:/mosquitto/data-./log:/mosquitto/logenvironment:-TZ=Asia/Shanghaideploy:resources:limits:cpus:'2'memory:1Greservations:cpus:'1'memory:512Mhealthcheck:test:["CMD","mosquitto_sub","-t","$$SYS/broker/uptime","-C","1"]interval:30stimeout:10sretries:3

15.4 Kubernetes部署

apiVersion:apps/v1kind:StatefulSetmetadata:name:mosquittospec:serviceName:mosquittoreplicas:3selector:matchLabels:app:mosquittotemplate:metadata:labels:app:mosquittospec:containers:-name:mosquittoimage:eclipse-mosquitto:2ports:-containerPort:1883-containerPort:8883volumeMounts:-name:configmountPath:/mosquitto/config-name:datamountPath:/mosquitto/dataresources:requests:memory:"512Mi"cpu:"500m"limits:memory:"1Gi"cpu:"1000m"volumeClaimTemplates:-metadata:name:dataspec:accessModes:["ReadWriteOnce"]resources:requests:storage:10Gi

15.5 备份与恢复

#!/bin/bash# 备份脚本BACKUP_DIR="/backup/mosquitto/$(date+%Y%m%d)"mkdir-p$BACKUP_DIR# 备份配置cp-r/etc/mosquitto$BACKUP_DIR/# 备份数据cp-r/var/lib/mosquitto$BACKUP_DIR/# 备份密码和ACLcp/etc/mosquitto/passwd$BACKUP_DIR/cp/etc/mosquitto/acl$BACKUP_DIR/# 压缩tar-czf$BACKUP_DIR.tar.gz$BACKUP_DIR# 恢复tar-xzf$BACKUP_DIR.tar.gzcp-r$BACKUP_DIR/* /

15.6 本章小结

掌握了生产环境部署的最佳实践。