keepalived高可用http服务实例
一、主机规划本次实验利用五台CentOS7虚拟机，其中两台安装keepalived，两台作为安装httpd，提供web服务。
RS1
172.18.12.3
httpd
RS2
172.18.12.
http
HA1
172.18.12.1
keepalived
HA2
172.18.12.11
keepalived
客户机
172.18.12.250.243
虚拟ip：172.18.12.234
为了尽量减少环境对实验的干扰，需关闭防火墙和selinux
二、HA主机设定
1. 安装keepalive和检查工具ipvsadm
# yum install keepalived -y
# yum install -y ipvsadm 2.修改配置文件
# vim keepalived.conf
! Configuration File for keepalived
global_defs {
notification_email {
root@dy.com
}
notification_email_from Rex@keadm
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id LVS_DEVEL
}
vrrp_instance VI_1 {
state MASTER
interface eno16777736
virtual_router_id 51
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
172.18.12.234/16
}
}
virtual_server 172.18.12.234 80 {
delay_loop 6
lb_algo rr
lb_kind DR
nat_mask 255.255.0.0
protocol TCP
real_server 172.18.12.3 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
real_server 172.18.12.4 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
}# systemctl restart keepalived.service 3.HA2备用路由器设定
! Configuration File for keepalived
global_defs {
notification_email {
root@dy.com
}
notification_email_from Rex@keadm
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id LVS_DEVEL
}
vrrp_instance VI_1 {
state BACKUP
interface eno16777736
virtual_router_id 51
priority 90
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
172.18.12.234/16
}
}
virtual_server 172.18.12.234 80 {
delay_loop 6
lb_algo rr
lb_kind DR
nat_mask 255.255.0.0
protocol TCP
real_server 172.18.12.3 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
real_server 172.18.12.4 80 {
weight 1
HTTP_GET {
url {
path /
status_code 200
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
} 三、RS主机设置
# yum install httpd -y
# vim /var/www/html/index.html www.RS2.com
# vim nkc.sh#!/bin/bash
#
VIP='172.18.12.234'
case $1 in
start)
echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore
echo 1 > /proc/sys/net/ipv4/conf/lo/arp_ignore
echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce
echo 2 > /proc/sys/net/ipv4/conf/lo/arp_announce
;;
stop)
echo 0 > /proc/sys/net/ipv4/conf/all/arp_ignore
echo 0 > /proc/sys/net/ipv4/conf/lo/arp_ignore
echo 0 > /proc/sys/net/ipv4/conf/all/arp_announce
echo 0 > /proc/sys/net/ipv4/conf/lo/arp_announce
esac
#
ifconfig lo:0$VIP netmask 255.255.255.255 broadcast $VIP
route add -host $VIP dev lo:0 脚本说明：通过传参来实现对内核参数的控制，控制arp解析通告级别，以及设置虚拟ip，并由一条路由来指定，凡是经过172.18.12.234进来的主机我们都让其从io：0出去。注意必须限制通告级别再设置ip。
#bash vkc.sh start # ifconfig
eno16777736: flags=4163mtu 1500
inet 172.18.253.86netmask 255.255.0.0broadcast 172.18.255.255
inet6 fe80::20c:29ff:fe3c:38beprefixlen 64scopeid 0x20
ether 00:0c:29:3c:38:betxqueuelen 1000(Ethernet)
RX packets 115308bytes 26442683 (25.2 MiB)
RX errors 0dropped 2overruns 0frame 0
TX packets 15460bytes 1839145 (1.7 MiB)
TX errors 0dropped 0 overruns 0carrier 0collisions 0
lo: flags=73mtu 65536
inet 127.0.0.1netmask 255.0.0.0
inet6 ::1prefixlen 128scopeid 0x10
looptxqueuelen 0(Local Loopback)
RX packets 166bytes 15346 (14.9 KiB)
RX errors 0dropped 0overruns 0frame 0
TX packets 166bytes 15346 (14.9 KiB)
TX errors 0dropped 0 overruns 0carrier 0collisions 0
lo:0: flags=73mtu 65536
inet 172.18.12.234netmask 255.255.255.255
looptxqueuelen 0(Local Loopback)# systemctl start httpd
RS2设置同上
五、测试过程
1.启动从主机查看ipvs规则
# ipvsadm -LnIP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP172.18.12.234:80 rr
-> 172.18.12.3:80 Route 1 0 0
-> 172.18.12.4:80 Route 1 0 0 可以发现，keepalived启动之后会自动加载配置文件中的集群服务规则
页:
[1]