LVS Funnat 编译安装使用
参照http://kb.linuxvirtualserver.org/wiki/IPVS_FULLNAT_and_SYNPROXY准备文件
下载源文件
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/kernel-2.6.32-220.23.1.el6.src.rpm
下载LVS Tools
http://kb.linuxvirtualserver.org/images/a/a5/Lvs-fullnat-synproxy.tar.gz
所有系统使用CentOS release 6.7
安装编译内核要的依懒包
1
yum install rpm-build -y
安装包
redhat-rpm-config-9.0.3-44.el6.centos.noarch
rpm-build-4.8.0-47.el6.x86_64
1
yum install gcc -y
安装包
mpfr-2.4.1-6.el6.x86_64
cpp-4.4.7-16.el6.x86_64
ppl-0.10.2-11.el6.x86_64
cloog-ppl-0.15.7-1.2.el6.x86_64
gcc-4.4.7-16.el6.x86_64
1
yum install xmlto -y
安装包
docbook-dtds-1.0-51.el6.noarch
docbook-style-xsl-1.75.2-6.el6.noarch
flex-2.5.35-9.el6.x86_64
xmlto-0.0.23-3.el6.x86_64
1
yum install newt-devel -y
安装包
slang-devel-2.2.1-1.el6.x86_64
1
yum install patchutils asciidoc elfutils-libelf-devel zlib-devel binutils-devel python-devel hmaccalc -y
开始编译安装
1
rpm -ivh kernel-2.6.32-220.23.1.el6.src.rpm
warning: user mockbuild does not exist - using root
warning: group mockbuild does not exist - using root
忽略
1
2
cd ~/rpmbuild/SPECS
rpmbuild -bp kernel.spec
出现
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
###
### Now generating a PGP key pair to be used for signing modules.
###
### If this takes a long time, you might wish to run rngd in the background to
### keep the supply of entropy topped up.It needs to be run as root, and
### should use a hardware random number generator if one is available, eg:
###
### rngd -r /dev/hwrandom
###
### If one isn't available, the pseudo-random number generator can be used:
###
### rngd -r /dev/urandom
###
+ gpg --homedir . --batch --gen-key /root/rpmbuild/SOURCES/genkey
gpg: WARNING: unsafe permissions on homedir `.'
gpg: keyring `./secring.gpg' created
gpg: keyring `./pubring.gpg' created
新开一个终端执行
1
rngd -r /dev/hwrandom 或者rngd -r /dev/urandom
rpmbuild完成
开始编译LVS FUNNNAT 内核补丁
1
2
3
4
5
6
7
cd ~/rpmbuild/BUILD/kernel-2.6.32-220.23.1.el6/linux-2.6.32-220.23.1.el6.x86_64
tar zxf Lvs-fullnat-synproxy.tar.gz
cp ~/lvs-fullnat-synproxy/lvs-2.6.32-220.23.1.el6.patch .
patch -p1<lvs-2.6.32-220.23.1.el6.patch
make -j16 #等待编译完成
make modules_install
make install
改GRUB 设置刚编译安装的内核为默认启动项
1
2
vim /etc/grub.conf
default=0
重起服务器
lvs funnat 内核path 完成
real serverpatch TOA
1
2
3
4
5
cp ~/lvs-fullnat-synproxy/toa-2.6.32-220.23.1.el6.patch .
patch -p1 <toa-2.6.32-220.23.1.el6.patch
make -j16
make modules_install
make install
安装lvs tool
1
2
cd lvs-fullnat-synproxy/
tar zxf lvs-tools.tar.gz
安装依懒包
1
yum install openssl-devel popt-devel -y
安装包
libcom_err-devel-1.41.12-22.el6.x86_64
libsepol-devel-2.0.41-4.el6.x86_64
libselinux-devel-2.0.94-5.8.el6.x86_64
keyutils-libs-devel-1.4-5.el6.x86_64
krb5-devel-1.10.3-42.el6.x86_64
openssl-devel-1.0.1e-42.el6.x86_64
popt-devel-1.13-7.el6.x86_64
lvs funnat管理工具ipvsadm ，必须安装
1
2
3
cd ~/lvs-fullnat-synproxy/tools/ipvsadm/
make && make install
ipvsadm --save > /etc/sysconfig/ipvsadm
lvs高可用工具keeplived ，如果用不到可以不安装
1
2
3
4
5
6
7
cd ~/lvs-fullnat-synproxy/tools/keepalived
./configure --with-kernel-dir="/lib/modules/`uname -r`/build"
make && make install
cp keepalived/etc/init.d/keepalived.init /etc/init.d/keepalived
mkdir /etc/keepalived/
cp keepalived/etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf
cp keepalived/etc/init.d/keepalived.sysconfig /etc/sysconfig/keepalived
lvs高可用工具quagga，可以配置OSPF等路由协议，如果用不到可以不安装
1
2
3
cd ~/lvs-fullnat-synproxy/tools/quagga
./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc--enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga --sysconfdir=/etc/quagga --prefix=/usr
make && make install
安装全部完成
配置使用LVS
三台服务器
Real server 1:10.10.10.51
Real server 2:10.10.10.52
LVS Directory:10.10.10.53
VIP: 10.10.10.111
全部服务器关闭selinux 和 iptables
Real server 1
1
2
3
yum install httpd -y
echo "Real Server 1" > /var/www/html/index.html
service httpd start
Real server 2
1
2
3
yum install httpd -y
echo "Real Server 2" > /var/www/html/index.html
service httpd start
Director
1
2
3
4
5
ifconfig eth0:1 10.10.10.111/24
ipvsadm -A -t 10.10.10.111:80 -s rr
ipvsadm -a -t 10.10.10.111:80 -r 10.10.10.51:80 -b
ipvsadm -a -t 10.10.10.111:80 -r 10.10.10.52:80 -b
ipvsadm -P -t 10.10.10.111:80 -z 10.10.10.111 #添加Local Address(可任意路由能通IP，可添加多个)
浏览器打开http://10.10.10.111,按CRTL+F5刷新，查看效果
页:
[1]