keepalived + lvs + nginx 双主配置案例 (2)

　　一、本文基于上一篇主备配置案例场景，修改为双主模式

二、双主配置文件，即两组互为主备
　　1> 192.168.1.109配置文件

global_defs {
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 192.168.200.1
smtp_connect_timeout 30
router_id LVS_DEVEL
vrrp_skip_check_adv_addr
vrrp_strict
vrrp_garp_interval 0
vrrp_gna_interval 0
}
vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 51
priority 200
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.1.50
}
}
virtual_server 192.168.1.50 80 {  
delay_loop 6                 
lb_algo wrr              
lb_kind DR
nat_mask 255.255.255.0               
persistence_timeout 0         
protocol TCP                  
real_server 192.168.1.111 80 {  
weight 3                 
TCP_CHECK {  
connect_timeout 10        
nb_get_retry 3  
delay_before_retry 3  
connect_port 80  
}  
}  
real_server 192.168.1.112 80 {  
weight 3  
TCP_CHECK {  
connect_timeout 10  
nb_get_retry 3  
delay_before_retry 3  
connect_port 80  
}  
}  
}
vrrp_instance VI_2 {
state BACKUP
interface eth0
virtual_router_id 52
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.1.51
}
}
virtual_server 192.168.1.51 80 {  
delay_loop 6                 
lb_algo wrr               
lb_kind DR
nat_mask 255.255.255.0               
persistence_timeout 0         
protocol TCP                  
real_server 192.168.1.112 80 {  
weight 3               
TCP_CHECK {  
connect_timeout 10        
nb_get_retry 3  
delay_before_retry 3  
connect_port 80  
}  
}  
real_server 192.168.1.111 80 {  
weight 3
TCP_CHECK {  
connect_timeout 10  
nb_get_retry 3  
delay_before_retry 3  
connect_port 80  
}  
}  
}
　　2> 192.168.1.110配置文件

global_defs {
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 192.168.200.1
smtp_connect_timeout 30
router_id LVS_DEVEL
vrrp_skip_check_adv_addr
vrrp_strict
vrrp_garp_interval 0
vrrp_gna_interval 0
}
vrrp_instance VI_1 {
state BACKUP
interface eth0
virtual_router_id 51
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.1.50
}
}
virtual_server 192.168.1.50 80 {  
delay_loop 6
lb_algo wrr
lb_kind DR
nat_mask 255.255.255.0               
persistence_timeout 0
protocol TCP         
real_server 192.168.1.111 80 {  
weight 3              
TCP_CHECK {  
connect_timeout 10
nb_get_retry 3  
delay_before_retry 3
connect_port 80  
}  
}   
real_server 192.168.1.112 80 {  
weight 3   
TCP_CHECK {   
connect_timeout 10
nb_get_retry 3  
delay_before_retry 3
connect_port 80  
}  
}  
}   
vrrp_instance VI_2 {
state MASTER
interface eth0
virtual_router_id 52
priority 200
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.1.51
}
}
virtual_server 192.168.1.51 80 {
delay_loop 6
lb_algo wrr
lb_kind DR
nat_mask 255.255.255.0
persistence_timeout 0
protocol TCP
real_server 192.168.1.112 80 {  
weight 3   
TCP_CHECK {
connect_timeout 10
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
real_server 192.168.1.111 80 {  
weight 3
TCP_CHECK {
connect_timeout 10
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
}

　　三、状态
　　1> ip: 192.168.1.109  vip:192.168.1.50

2>  ip: 192.168.1.110  vip:192.168.1.51

四、dns轮循

这个域名是不存在的域名直接本地局域网缓存访问，不会走外网。双主，任何一台down掉不影响访问。还可以用dns做负载。