hghac和hgproxy版本升级相关操作和注意事项

瀚高PG实验室 2025-06-12

本文档用于高可用集群环境中hghac组件和hgproxy组件替换和升级操作

1.关闭服务

所有数据节点都执行

1、关闭hgproxy服务

[root@hgdb01 tools]# systemctl stop hgproxy.service
[root@hgdb02 tools]# systemctl stop hgproxy.service

（左右滑动查看完整内容）

2、关闭hghac服务

[root@hgdb01 tools]# systemctl stop hghac.service
[root@hgdb02 tools]# systemctl stop hghac.service

（左右滑动查看完整内容）

3、关闭etcd服务

[root@hgdb01 tools]# systemctl stop etcd.service
[root@hgdb02 tools]# systemctl stop etcd.service
[root@localhost ~]# systemctl stop etcd.service

（左右滑动查看完整内容）

2.升级过程

操作前请先备份原集群配置文件。

1、安装软件包

验证md5值

[root@hgdb01 tools]# md5sum hghac4.2.3.3-see-17f931d-20240620.x86_64.rpm
0d960d0ac4925b272c30849e415031fd  hghac4.2.3.3-see-17f931d-20240620.x86_64.rpm

（左右滑动查看完整内容）

安装软件包

[root@hgdb01 tools]# rpm -ivh hghac4.2.3.3-see-17f931d-20240620.x86_64.rpm 
准备中...                          ################################# [100%]
正在升级/安装...
1:hghac-4.2.3.3-17f931d            ################################# [100%]
Created symlink from /etc/systemd/system/multi-user.target.wants/hghac.service to usr/lib/systemd/system/hghac.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/etcd.service to usr/lib/systemd/system/etcd.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/vip-manager.service to usr/lib/systemd/system/vip-manager.service.

（左右滑动查看完整内容）

2、配置并启动etcd

01节点：

[root@hgdb01 tools]# vim /usr/local/hghac/etcd/etcd.yml 
# This is the configuration file for the etcd server.
# Human-readable name for this member.
name: 'etcd_01'
# Path to the data directory.
data-dir: /usr/local/hghac/etcd/etcd01
# Path to the dedicated wal directory.
wal-dir:
# Number of committed transactions to trigger a snapshot to disk.
snapshot-count: 10000
# Time (in milliseconds) of a heartbeat interval.
heartbeat-interval: 100
# Time (in milliseconds) for an election to timeout.
election-timeout: 1000
# Raise alarms when backend size exceeds the given quota. 0 means use the
# default quota.
quota-backend-bytes: 0
# List of comma separated URLs to listen on for peer traffic.
listen-peer-urls: http://x.x.0.101:2380
# List of comma separated URLs to listen on for client traffic.
listen-client-urls: http://x.x.0.101:2379,http://127.0.0.1:2379
# Maximum number of snapshot files to retain (0 is unlimited).
max-snapshots: 5
# Maximum number of wal files to retain (0 is unlimited).
max-wals: 5
# Comma-separated white list of origins for CORS (cross-origin resource sharing).
cors:
# List of this member's peer URLs to advertise to the rest of the cluster.
# The URLs needed to be a comma-separated list.
initial-advertise-peer-urls: http://x.x.0.101:2380
# List of this member's client URLs to advertise to the public.
# The URLs needed to be a comma-separated list.
advertise-client-urls: http://x.x.0.101:2379
# Discovery URL used to bootstrap the cluster.
discovery:
# Valid values include 'exit', 'proxy'
discovery-fallback: 'proxy'
# HTTP proxy to use for traffic to discovery service.
discovery-proxy:
# DNS domain used to bootstrap initial cluster.
discovery-srv:
# Initial cluster configuration for bootstrapping.
initial-cluster: etcd_01=http://x.x.0.101:2380,etcd_02=http://x.x.0.102:2380,etcd_03=http://x.x.0.103:2380
# Initial cluster token for the etcd cluster during bootstrap.
initial-cluster-token: 'etcd-cluster'
# Initial cluster state ('new' or 'existing').
initial-cluster-state: 'new'
# Reject reconfiguration requests that would cause quorum loss.
strict-reconfig-check: false
# Accept etcd V2 client requests
enable-v2: true
# Enable runtime profiling data via HTTP server
enable-pprof: false
# Valid values include 'on', 'readonly', 'off'
proxy: 'off'
# Time (in milliseconds) an endpoint will be held in a failed state.
proxy-failure-wait: 5000
# Time (in milliseconds) of the endpoints refresh interval.
proxy-refresh-interval: 30000
# Time (in milliseconds) for a dial to timeout.
proxy-dial-timeout: 1000
# Time (in milliseconds) for a write to timeout.
proxy-write-timeout: 5000
# Time (in milliseconds) for a read to timeout.
proxy-read-timeout: 0
client-transport-security:
  # DEPRECATED: Path to the client server TLS CA file.
  ca-file:
  # Path to the client server TLS cert file.
  cert-file:
  # Path to the client server TLS key file.
  key-file:
  # Enable client cert authentication.
  client-cert-auth: false
  # Path to the client server TLS trusted CA cert file.
  trusted-ca-file:
  # Client TLS using generated certificates
  auto-tls: false
peer-transport-security:
  # DEPRECATED: Path to the peer server TLS CA file.
  ca-file:
  # Path to the peer server TLS cert file.
  cert-file:
  # Path to the peer server TLS key file.
  key-file:
  # Enable peer client cert authentication.
  peer-client-cert-auth: false
  # Path to the peer server TLS trusted CA cert file.
  trusted-ca-file:
  # Peer TLS using generated certificates.
  auto-tls: false
# Enable debug-level logging for etcd.
debug: false
# Specify a particular log level for each etcd package (eg: 'etcdmain=CRITICAL,etcdserver=DEBUG'.
log-package-levels:
# Specify 'stdout' or 'stderr' to skip journald logging even when running under systemd.
log-output: default
# Force to create a new one member cluster.
force-new-cluster: false

（左右滑动查看完整内容）

02节点配置

# This is the configuration file for the etcd server.
# Human-readable name for this member.
name: 'etcd_02'
# Path to the data directory.
data-dir: /usr/local/hghac/etcd/etcd02
# Path to the dedicated wal directory.
wal-dir:
# Number of committed transactions to trigger a snapshot to disk.
snapshot-count: 10000
# Time (in milliseconds) of a heartbeat interval.
heartbeat-interval: 100
# Time (in milliseconds) for an election to timeout.
election-timeout: 1000
# Raise alarms when backend size exceeds the given quota. 0 means use the
# default quota.
quota-backend-bytes: 0
# List of comma separated URLs to listen on for peer traffic.
listen-peer-urls: http://x.x.0.102:2380
# List of comma separated URLs to listen on for client traffic.
listen-client-urls: http://x.x.0.102:2379,http://127.0.0.1:2379
# Maximum number of snapshot files to retain (0 is unlimited).
max-snapshots: 5
# Maximum number of wal files to retain (0 is unlimited).
max-wals: 5
# Comma-separated white list of origins for CORS (cross-origin resource sharing).
cors:
# List of this member's peer URLs to advertise to the rest of the cluster.
# The URLs needed to be a comma-separated list.
initial-advertise-peer-urls: http://x.x.0.102:2380
# List of this member's client URLs to advertise to the public.
# The URLs needed to be a comma-separated list.
advertise-client-urls: http://x.x.0.102:2379
# Discovery URL used to bootstrap the cluster.
discovery:
# Valid values include 'exit', 'proxy'
discovery-fallback: 'proxy'
# HTTP proxy to use for traffic to discovery service.
discovery-proxy:
# DNS domain used to bootstrap initial cluster.
discovery-srv:
# Initial cluster configuration for bootstrapping.
initial-cluster: etcd_01=http://x.x.0.101:2380,etcd_02=http://x.x.0.102:2380,etcd_03=http://x.x.0.103:2380
# Initial cluster token for the etcd cluster during bootstrap.
initial-cluster-token: 'etcd-cluster'
# Initial cluster state ('new' or 'existing').
initial-cluster-state: 'new'
# Reject reconfiguration requests that would cause quorum loss.
strict-reconfig-check: false
# Accept etcd V2 client requests
enable-v2: true
# Enable runtime profiling data via HTTP server
enable-pprof: false
# Valid values include 'on', 'readonly', 'off'
proxy: 'off'
# Time (in milliseconds) an endpoint will be held in a failed state.
proxy-failure-wait: 5000
# Time (in milliseconds) of the endpoints refresh interval.
proxy-refresh-interval: 30000
# Time (in milliseconds) for a dial to timeout.
proxy-dial-timeout: 1000
# Time (in milliseconds) for a write to timeout.
proxy-write-timeout: 5000
# Time (in milliseconds) for a read to timeout.
proxy-read-timeout: 0
client-transport-security:
  # DEPRECATED: Path to the client server TLS CA file.
  ca-file:
  # Path to the client server TLS cert file.
  cert-file:
  # Path to the client server TLS key file.
  key-file:
  # Enable client cert authentication.
  client-cert-auth: false
  # Path to the client server TLS trusted CA cert file.
  trusted-ca-file:
  # Client TLS using generated certificates
  auto-tls: false
peer-transport-security:
  # DEPRECATED: Path to the peer server TLS CA file.
  ca-file:
  # Path to the peer server TLS cert file.
  cert-file:
  # Path to the peer server TLS key file.
  key-file:
  # Enable peer client cert authentication.
  peer-client-cert-auth: false
  # Path to the peer server TLS trusted CA cert file.
  trusted-ca-file:
  # Peer TLS using generated certificates.
  auto-tls: false
# Enable debug-level logging for etcd.
debug: false
# Specify a particular log level for each etcd package (eg: 'etcdmain=CRITICAL,etcdserver=DEBUG'.
log-package-levels:
# Specify 'stdout' or 'stderr' to skip journald logging even when running under systemd.
log-output: default
# Force to create a new one member cluster.
force-new-cluster: false

（左右滑动查看完整内容）

03节点配置

# This is the configuration file for the etcd server.
# Human-readable name for this member.
name: 'etcd_03'
# Path to the data directory.
data-dir: /usr/local/hghac/etcd/etcd03
# Path to the dedicated wal directory.
wal-dir:
# Number of committed transactions to trigger a snapshot to disk.
snapshot-count: 10000
# Time (in milliseconds) of a heartbeat interval.
heartbeat-interval: 100
# Time (in milliseconds) for an election to timeout.
election-timeout: 1000
# Raise alarms when backend size exceeds the given quota. 0 means use the
# default quota.
quota-backend-bytes: 0
# List of comma separated URLs to listen on for peer traffic.
listen-peer-urls: http://x.x.0.103:2380
# List of comma separated URLs to listen on for client traffic.
listen-client-urls: http://x.x.0.103:2379,http://127.0.0.1:2379
# Maximum number of snapshot files to retain (0 is unlimited).
max-snapshots: 5
# Maximum number of wal files to retain (0 is unlimited).
max-wals: 5
# Comma-separated white list of origins for CORS (cross-origin resource sharing).
cors:
# List of this member's peer URLs to advertise to the rest of the cluster.
# The URLs needed to be a comma-separated list.
initial-advertise-peer-urls: http://x.x.0.103:2380
# List of this member's client URLs to advertise to the public.
# The URLs needed to be a comma-separated list.
advertise-client-urls: http://x.x.0.103:2379
# Discovery URL used to bootstrap the cluster.
discovery:
# Valid values include 'exit', 'proxy'
discovery-fallback: 'proxy'
# HTTP proxy to use for traffic to discovery service.
discovery-proxy:
# DNS domain used to bootstrap initial cluster.
discovery-srv:
# Initial cluster configuration for bootstrapping.
initial-cluster: etcd_01=http://x.x.0.101:2380,etcd_02=http://x.x.0.102:2380,etcd_03=http://x.x.0.103:2380
# Initial cluster token for the etcd cluster during bootstrap.
initial-cluster-token: 'etcd-cluster'
# Initial cluster state ('new' or 'existing').
initial-cluster-state: 'new'
# Reject reconfiguration requests that would cause quorum loss.
strict-reconfig-check: false
# Accept etcd V2 client requests
enable-v2: true
# Enable runtime profiling data via HTTP server
enable-pprof: false
# Valid values include 'on', 'readonly', 'off'
proxy: 'off'
# Time (in milliseconds) an endpoint will be held in a failed state.
proxy-failure-wait: 5000
# Time (in milliseconds) of the endpoints refresh interval.
proxy-refresh-interval: 30000
# Time (in milliseconds) for a dial to timeout.
proxy-dial-timeout: 1000
# Time (in milliseconds) for a write to timeout.
proxy-write-timeout: 5000
# Time (in milliseconds) for a read to timeout.
proxy-read-timeout: 0
client-transport-security:
  # DEPRECATED: Path to the client server TLS CA file.
  ca-file:
  # Path to the client server TLS cert file.
  cert-file:
  # Path to the client server TLS key file.
  key-file:
  # Enable client cert authentication.
  client-cert-auth: false
  # Path to the client server TLS trusted CA cert file.
  trusted-ca-file:
  # Client TLS using generated certificates
  auto-tls: false
peer-transport-security:
  # DEPRECATED: Path to the peer server TLS CA file.
  ca-file:
  # Path to the peer server TLS cert file.
  cert-file:
  # Path to the peer server TLS key file.
  key-file:
  # Enable peer client cert authentication.
  peer-client-cert-auth: false
  # Path to the peer server TLS trusted CA cert file.
  trusted-ca-file:
  # Peer TLS using generated certificates.
  auto-tls: false
# Enable debug-level logging for etcd.
debug: false
# Specify a particular log level for each etcd package (eg: 'etcdmain=CRITICAL,etcdserver=DEBUG'.
log-package-levels:
# Specify 'stdout' or 'stderr' to skip journald logging even when running under systemd.
log-output: default
# Force to create a new one member cluster.
force-new-cluster: false

（左右滑动查看完整内容）

启动etcd（三台间隔时间不要太长）

[root@hgdb01 ~]# systemctl  start  etcd.service
[root@hgdb02 ~]# systemctl  start  etcd.service
[root@hgdb03 ~]# systemctl  start  etcd.service

（左右滑动查看完整内容）

查看etcd集群状态

[root@hgdb01 tools]# /usr/local/hghac/etcd/etcdctl  --endpoints=http://x.x.0.101:2379,http://x.x.0.102:2379,http://x.x.0.103:2379 endpoint status --write-out=table
+----------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+
|          ENDPOINT          |        ID        | VERSION | DB SIZE | IS LEADER | IS LEARNER | RAFT TERM | RAFT INDEX | RAFT APPLIED INDEX | ERRORS |
+----------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+
| http://x.x.0.101:2379  | 7a586afca670fdcd |  3.4.15 |   20 kB |     false |      false |         2 |          8 |                  8 |        |
| http://x.x.0.102:2379  |  5506b0263532a5d |  3.4.15 |   25 kB |     false |      false |         2 |          8 |                  8 |        |
| http://x.x.0.103:2379  | 21d26eb730319e20 |  3.4.15 |   25 kB |      true |      false |         2 |          8 |                  8 |        |
+----------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+

（左右滑动查看完整内容）

3、配置hghac组件

01节点

scope: highgo-see-cluster
namespace: /service/
name: see_01 
restapi:
  listen: x.x.0.101:8008
  connect_address: x.x.0.101:8008
etcd3:
  hosts: x.x.0.101:2379,x.x.0.102:2379,x.x.0.103:2379
#zookeeper:
#  hosts: ['x.x.31.101:2181', 'x.x.31.102:2181', 'x.x.31.103:2181']
bootstrap:
  dcs:
    ttl: 30
    loop_wait: 10
    retry_timeout: 10
    maximum_lag_on_failover: 1048576
    master_start_timeout: 300
    synchronous_mode: false
    postgresql:
      use_pg_rewind: true
      parameters:
        wal_level: replica
        hot_standby: "on"
        wal_keep_size: 100
        max_wal_senders: 10
        max_replication_slots: 10
        wal_log_hints: "on"
        archive_mode: "off"
        archive_timeout: 1800s
        logging_collector: "on"
  method: initdb_keygen
  initdb_keygen:
    command: /usr/local/hghac/hac/initdb_keygen.sh
    keep_existing_recovery_conf: True
    no_params: True
postgresql:
  database: highgo
  listen: 0.0.0.0:5866
  connect_address: x.x.0.101:5866
  bin_dir: /opt/highgo/hgdb-see-4.5.8/bin
  data_dir: /data/highgo/data
  config_dir: /data/highgo/data
  pgpass: /tmp/.pgpass
  authentication:
    replication:
      username: sysdba
      password: Hello@1234
    rewind:
      username: sysdba
      password: Hello@1234
    sysdba:
      password: Hello@1234
    syssso:
      password: Hello@1234
    syssao:
      password: Hello@1234
  parameters:
    ssl: 'on'
    ssl_cert_file: /data/highgo/data/server.crt
    ssl_key_file: /data/highgo/data/server.key
  pg_hba:
  - local   all             all                                     sm3
  - host    all             all             0.0.0.0/0               sm3
  - host    all             all             ::1/128                 sm3
  - local   replication     all                                     sm3
  - host    replication     all             0.0.0.0/0               sm3
  - host    replication     all             ::1/128                 sm3


tags:
    nofailover: false
    noloadbalance: false
    clonefrom: false
    nosync: false
log:
  level: INFO
  traceback_level: INFO
  dir: /usr/local/hghac/hac

（左右滑动查看完整内容）

启动hghac

# systemctl start hgahc.service

查看集群状态

# /usr/local/hghac/hac/hghactl/hghactl -c /usr/local/hghac/hac/hghac.yml list

（左右滑动查看完整内容）

02节点

scope: highgo-see-cluster
namespace: /service/
name: see_02 
restapi:
  listen: x.x.0.102:8008
  connect_address: x.x.0.102:8008
etcd3:
  hosts: x.x.0.101:2379,x.x.0.102:2379,x.x.0.103:2379
#zookeeper:
#  hosts: ['x.x.31.101:2181', 'x.x.31.102:2181', 'x.x.31.103:2181']
bootstrap:
  dcs:
    ttl: 30
    loop_wait: 10
    retry_timeout: 10
    maximum_lag_on_failover: 1048576
    master_start_timeout: 300
    synchronous_mode: false
    postgresql:
      use_pg_rewind: true
      parameters:
        wal_level: replica
        hot_standby: "on"
        wal_keep_size: 100
        max_wal_senders: 10
        max_replication_slots: 10
        wal_log_hints: "on"
        archive_mode: "off"
        archive_timeout: 1800s
        logging_collector: "on"
  method: initdb_keygen
  initdb_keygen:
    command: /usr/local/hghac/hac/initdb_keygen.sh
    keep_existing_recovery_conf: True
    no_params: True
postgresql:
  database: highgo
  listen: 0.0.0.0:5866
  connect_address: x.x.0.102:5866
  bin_dir: /opt/highgo/hgdb-see-4.5.8/bin
  data_dir: /data/highgo/data
  config_dir: /data/highgo/data
  pgpass: /tmp/.pgpass
  authentication:
    replication:
      username: sysdba
      password: Hello@1234
    rewind:
      username: sysdba
      password: Hello@1234
    sysdba:
      password: Hello@1234
    syssso:
      password: Hello@1234
    syssao:
      password: Hello@1234
  parameters:
    ssl: 'on'
    ssl_cert_file: /data/highgo/data/server.crt
    ssl_key_file: /data/highgo/data/server.key
  pg_hba:
  - local   all             all                                     sm3
  - host    all             all             0.0.0.0/0               sm3
  - host    all             all             ::1/128                 sm3
  - local   replication     all                                     sm3
  - host    replication     all             0.0.0.0/0               sm3
  - host    replication     all             ::1/128                 sm3


tags:
    nofailover: false
    noloadbalance: false
    clonefrom: false
    nosync: false
log:
  level: INFO
  traceback_level: INFO
  dir: /usr/local/hghac/hac

（左右滑动查看完整内容）

启动hghac

# systemctl start hgahc.service

查看集群状态

# /usr/local/hghac/hac/hghactl/hghactl -c /usr/local/hghac/hac/hghac.yml list

（左右滑动查看完整内容）

4、配置hgproxy

所有节点配置相同

[root@hgdb01 hgproxy]# cat  /usr/local/hgproxy/etc/proxy.conf
# version: 4.0.27
[Log]
log_collector       = on
                    # 是否开始日志功能
log_level           = log
                    #  可选日志级别如下:
                    #    debug5
                    #    debug4
                    #    debug3
                    #    debug2    - 显示设置路由节点的关键点
                    #    debug1    - 显示语句与协议包的路由节点
                    #    log       - 显示会话的开始与结束
                    #    commerror
                    #    info
                    #    notice
                    #    warning
                    #    error
                    #    fatal
                    #    panic
log_destination     = file
                    # stdout： 标准输出
                    # stderr:  标准错误输出
                    # file:    输出到文件
log_filename        = /data/hglog/hgproxy.log
                    # 日志输出文件
                    # 设置按日期输出到不同文件, 只需要在文件名中添加时间转换字符 %d(%Y%m%d), 例如：/tmp/log/hgproxy.%d(%Y%m%d).log, 输出文件名样式为：hgproxy.20200808.log
log_format          = "%d.%us %-7V [pid:%-7p cid:%-7U %18F:%-5L] %m%n"
                    # 格式说明:
                    # %d           :时间格式(2012-01-01 17:03:12)
                    # %d.%ms       :时间格式(2012-01-01 17:03:12.123)
                    # %d.%us       :时间格式(2012-01-01 17:03:12.123456)
                    # %m           :用户日志(必须)
                    # %n           :换行符(必须)
                    # %p           :进程id
                    # %t           :线程id
                    # %U           :协程id
                    # %V           :日志级别,大写
                    # %v           :日志级别,小写
                    # %F           :源代码文件名
                    # %L           :源代码行数
log_rotation_size   = 500MB
                    # 日志文件自动转存大小(转存文件后缀数字越大，日志时间越新).
                    # 设置为0, 则关闭此功能.
log_max_rotation_file_num = 0
                    # 转存文件最大保留个数(设置的值大于1时, 此功能生效).
                    # 当转存文件达到设置的个数时，依次自动删除最旧的文件.
                    # 当日志文件比较重要时，请谨慎决定是否打开此功能.
[Proxy]
listen_addresses    = *
port                = 5888
socket_dir          = /tmp
process_nums        = 0
                    # 负责处理会话的进程个数(建议设置为服务器核心数; 设置为0时, 自动获取CPU核心数进行设置)
session_balance     = on
                    # 以轮询的的方式使进程间处理的会话尽量均衡
process_bind_cpu    = off
                    # 负责处理会话的进程, 是否绑定CPU运行
extension_module    = librwsplit.so
                    # hgproxy扩展模块, 目前只有读写分离模块，默认即可
auto_replace_application_name  = "hgproxy: app[__IP__:__PORT__:__ORIGINAL__]"
                    # 自动修改 application_name 参数.
                    # __IP__       : 应用的IP.
                    # __PORT__     : 应用的端口.
                    # __ORIGINAL__ : 原始数据.
                    # 注意：由于数据库限制，开启此功能后，hgproxy会添加额外的信息，因此应用可自定义设置的 application_name 字符串会减少。
                    # 参数值设置为空，则关闭此功能
use_mctx = off
         # 使用内存上下文机制管理内存
transaction_mode = Auto
                 # Auto     事务内会进行读写分离，路由节点自动判断
                 # Primary  事务内不进行读写分离，固定发往主节点
read_write_separation = on
                      # 读写分离开关
                      # 该配置项支持使用 proxy_ctl reloadcfg 生效，无需重启
[BackendNode]
node_num            = 2
                    # 后端节点数量
load_balancing_mode = 1
                    # 负载均衡模式（目前只有一种模式，默认即可）
                    # 1：权重模式
startup_check       = off
                    # 启动时, 检查配置的数据库是否能够连接
hostname0           = x.x.0.101
port0               = 5866
backend_weigh0      = 1
                    # hostnameN        第N个节点IP
                    # portN            第N个节点端口
                    # backend_weightN  第N个节点权重比
hostname1           = x.x.0.102
port1               = 5866
backend_weigh1      = 1
#hostname2           = 127.0.0.1
#port2               = 5868
#backend_weigh2      = 1
read_timeout_close  = 0
                    # 当读取数据库超时自动断开连接.
                    # 此值不能设置为负数，设置的值大于0时, 此功能生效.
                    # 单位：秒，取值最大为604800(一周)
standby_additional_check = "select count(pid) > 0 from pg_stat_wal_receiver;"
                    # 备节点额外的检测
                    # 请确保该SQL的返回结果为单行单列，且值为 t 或 f;
[Replication]
streaming_replication_delay_time    = 100000
                                    # 假设流复制延迟时间, 单位: 微秒
                                    # 设置为 0 则关闭此功能
                                    # 取值范围: 0 - 3600000000(1小时)
[DatabaseCheck]
lifecheck_user      = sysdba
                    # 用于检测时的用户名
lifecheck_dbname    = highgo
                    # 用于检测时的数据库
lifecheck_time      = 10
                    # 连接间隔时间，取值范围 1 - 3600, 单位：秒
lifecheck_num       = 3
                    # 连续连接失败指定次数，达到该次数，节点将置为异常, 取值范围 1 - 10
[routing]
null_query_routing = both
                    # 空语句发送的节点: primary/standby/both
                    # 该配置项支持使用 proxy_ctl reloadcfg 生效，无需重启
regex_routing_file  =
                      # 正则路由配置文件，配置模板文件见 etc/regex_routing_settings.json
                      # 注意事项：请配置 json 文件绝对路径
                      # 该配置项支持使用 proxy_ctl reloadcfg 生效，无需重启
routing_unnamed_parse_to_both = no
                              # 未命名的 parse 协议是否发送到双节点
                              # 该配置项支持使用 proxy_ctl reloadcfg 生效，无需重启
[BlackList]
# 此配置参数未来会移除，建议使用 regex_routing_file 配置
ignore_regex_case               = off
                                # on:  匹配时忽略大小写
                                # off: 匹配时不忽略大小写
# 此配置参数未来会移除，建议使用 regex_routing_file 配置
black_regex_token_list          =
                                # 匹配到了发往主节点
# 此配置参数未来会移除，建议使用 regex_routing_file 配置
white_regex_token_list          =
                                # 匹配成功发往备节点
object_relationship_list        = /usr/local/hgproxy/etc/object_relationship_list.json
[watchdog]
server_watchdog                 = on
                                # 检测 hgproxy 端口是否可以连接
server_watchdog_interval        = 30
                                # 检测时间间隔(秒)
                                # 取值范围: 1 - 3600
server_watchdog_auto_restart    = on
                                # 检测 hgproxy 端口不可用后, 是否自动重启 hgproxy.
server_watchdog_failed_count    = 3
                                # 连续失败次数, 达到该计数后,
                                # 如果 server_watchdog_auto_restart 为 on, 则会自动重启 hgproxy
                                # 取值范围: 1 - 3600
status_watchdog                 = on
                                # 内部统计打印日志输出
status_watchdog_interval        = 60
                                # 内部统计打印日志输出时间间隔(秒)
                                # 取值范围: 1 - 3600
status_watchdog_pretty_log      = off
                                # 是否对日志输出进行美化处理
[SSL]
ssl_switch                = off
ssl_cert                  = /usr/local/hgproxy/etc/server.crt
ssl_key                   = /usr/local/hgproxy/etc/server.key
ssl_ca_cert               = /usr/local/hgproxy/etc/root.crt
ssl_ca_cert_dir           = /usr/local/hgproxy/etc
ssl_ciphers               = HIGH:MEDIUM:+3DES:!aNULL
ssl_prefer_server_ciphers = on
ssl_ecdh_curve            = prime256v1
ssl_dh_params_file        =
[admin]
virtual_database                = hgproxy
                                # 虚拟数据库, 无需数据中存在
virtual_user                    = hgproxy
                                # 虚拟用户, 无需数据中存在
virtual_user_auth_method        = password
                                # 可选取值: "md5", "password"
virtual_user_password           = hgproxy@123
                                # 如果 virtual_user_auth_method 配置为 md5,
                                # md5密码生成方法: echo -n "123456hgproxy" | md5sum
                                # 123456 是登录密码, hgproxy 是 virtual_user 配置的用户名

（左右滑动查看完整内容）

拷贝ssl证书文件

[root@xxdb01 etc]# cp  /data/highgo/data/server.*   /opt/HighGo/tools/hgproxy/etc/
[root@xxdb01 etc]# cp  /data/highgo/data/root.crt   /opt/HighGo/tools/hgproxy/etc/

（左右滑动查看完整内容）

初始化hgproxy

[root@hgdb01 etc]# /usr/local/hgproxy/bin/proxy_ctl  init -h x.x.0.101 -U sysdba -d highgo -p 5866
ip       == [x.x.0.101]
port     == [5866]
database == [highgo]
username == [sysdba]
please enter password:
init successfully

（左右滑动查看完整内容）

启动服务

[root@xxdb01 etc]# systemctl start hgproxy

（左右滑动查看完整内容）

验证登录

[root@xxdb01 etc]# psql highgo sysdba -p 5888

（左右滑动查看完整内容）

3.注意事项

1、如果用的是tar包安装，etcd.service和hghac.service需要手动拷贝到/usr/lib/systemd/system/文件夹下

# cp /usr/local/hghac/etcd/etcd.service /usr/lib/systemd/system/
# cp /usr/local/hghac/hac/hghac.service /usr/lib/systemd/system/
# systemctl daemon-reload

（左右滑动查看完整内容）

2、关闭服务时先停止hghac.service，再关闭etcd.service，防止数据库都变成备库模式。

3、注意备份原集群配置文件，参数尽量保持与原配置相同。

版权声明：本文由瀚高及PG志愿者翻整理，转载请注明出处，本页面内容均源自PostgreSQL Weekly英文官网，翻译目的在于传递更多信息，并不意味着瀚高赞同其观点或证实其内容的真实性。如果其他媒体、网站或其他任何形式的法律实体和个人使用，必须经过著作权人合法书面授权并自负全部法律责任。不得擅自使用瀚高名义进行转载，或盗用瀚高名义发布信息。否则瀚高将保留追究法律责任的权利！

文章转载自瀚高PG实验室，如果涉嫌侵权，请发送邮件至：contact@modb.pro进行举报，并提供相关证据，一经查实，墨天轮将立刻删除相关内容。

hghac和hgproxy版本升级相关操作和注意事项

2、关闭hghac服务

3、关闭etcd服务

安装软件包

2、配置并启动etcd

3、配置hghac组件

4、配置hgproxy

（左右滑动查看完整内容）

3.注意事项

评论