利用LVS+Keepalived+Nginx实现高性能高可用负载均衡服务器

万达换票券 · 发表于 2018-12-30 06:01:18

背景:
随着你的网站业务量的增长你网站的服务器压力越来越大？需要负载均衡方案！商业的硬件如F5又太贵，你们又是创业型互联公司如何有效节约成本，节省不必要的浪费？同时实现商业硬件一样的高性能高可用的功能？有什么好的负载均衡可伸张可扩展的方案吗？答案是肯定的！有！我们利用 LVS+Keepalived基于完整开源软件的架构可以为你提供一个负载均衡及高可用的服务器。

LVS+Keepalived 介绍
LVS
LVS 是Linux Virtual Server的简写，意即Linux虚拟服务器，是一个虚拟的服务器集群系统。本项目在1998年5月由章文嵩博士成立，是中国国内最早出现的自由软件项目之一。目前有三种IP负载均衡技术（VS/NAT、VS/TUN和VS/DR）；
八种调度算法（rr,wrr,lc,wlc,lblc,lblcr,dh,sh）。

Keepalvied
Keepalived在这里主要用作RealServer的健康状态检查以及LoadBalance主机和BackUP主机之间failover的实现
二. 网站负载均衡拓朴图(在做下面的附件里，有兴趣的朋友可以下载了查看)

IP信息列表：
名称 IP

LVS-DR-Master 192.168.81.128
LVS-DR-BACKUP 192.168.81.129
LVS-DR-VIP 192.168.81.130
WEB1-Realserver 192.168.81.131
WEB2-Realserver 192.168.81.132
GateWay 192.168.81.1
三. 安装LVS和Keepalvied软件包
1. 下载相关软件包

#mkdir /usr/local/src/lvs
#cd /usr/local/src/lvs
#wget http://www.linuxvirtualserver.org/software/kernel-2.6/ipvsadm-1.24.tar.gz
#wget http://www.keepalived.org/software/keepalived-1.1.15.tar.gz
2. 安装LVS和Keepalived

#lsmod |grep ip_vs
#uname -r
2.6.18-53.el5PAE
#ln -s /usr/src/kernels/2.6.18-53.el5PAE-i686/ /usr/src/linux

#tar zxvf ipvsadm-1.24.tar.gz
#cd ipvsadm-1.24
#make && make install
#find / -name ipvsadm # 查看ipvsadm的位置

#tar zxvf keepalived-1.1.15.tar.gz
#cd keepalived-1.1.15
#./configure && make && make install
#find / -name keepalived # 查看keepalived位置

#cp /usr/local/etc/rc.d/init.d/keepalived /etc/rc.d/init.d/
#cp /usr/local/etc/sysconfig/keepalived /etc/sysconfig/
#mkdir /etc/keepalived
#cp /usr/local/etc/keepalived/keepalived.conf /etc/keepalived/
#cp /usr/local/sbin/keepalived /usr/sbin/
#service keepalived start|stop #做成系统启动服务方便管理.
四. 配置LVS实现负载均衡
  1． LVS-DR，配置LVS脚本实现负载均衡
   #vi /usr/local/sbin/lvs-dr.sh
   #!/bin/bash
      # description: start LVS of DirectorServer
      #Written by :NetSeek

      GW=192.168.81.1
      # website director vip.
      SNS_VIP=192.168.81.130
      SNS_RIP1=192.168.81.131
      SNS_RIP2=192.168.81.132

   ./etc/rc.d/init.d/functions

      logger $0 called with $1

      case "$1" in

      start)
         # set squid vip
         /sbin/ipvsadm --set 30 5 60
               /sbin/ifconfig eth0:0 $SNS_VIP broadcast $SNS_VIP netmask 255.255.255.255
      broadcast $SNS_VIP up
         /sbin/route add -host $SNS_VIP dev eth0:0
         /sbin/ipvsadm -A -t $SNS_VIP:80 -s wrr -p 3
         /sbin/ipvsadm -a -t $SNS_VIP:80 -r $SNS_RIP1:80 -g -w 1
         /sbin/ipvsadm -a -t $SNS_VIP:80 -r $SNS_RIP2:80 -g -w 1
         touch /var/lock/subsys/ipvsadm >/dev/null 2>&1

   ;;
      stop)
         /sbin/ipvsadm -C
         /sbin/ipvsadm -Z
         ifconfig eth0:0 down
         ifconfig eth0:1 down
         route del $SNS_VIP
         route del $SS_VIP
         rm -rf /var/lock/subsys/ipvsadm >/dev/null 2>&1
         echo "ipvsadm stoped"
         ;;
   status)

         if [ ! -e /var/lock/subsys/ipvsadm ];then
            echo "ipvsadm stoped"
            exit 1
         else
            echo "ipvsadm OK"
         fi
         ;;
      *)
      echo "Usage: $0 {start|stop|status}"
         exit 1
      esac
      exit 0

2．配置Realserver脚本.
   #vi /usr/local/sbin/realserver.sh
      #!/bin/bash
      # description: Config realserver lo and apply noarp
      #Written by :NetSeek

      SNS_VIP=192.168.81.130

      . /etc/rc.d/init.d/functions

      case "$1" in
      start)
            ifconfig lo:0 $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP
            /sbin/route add -host $SNS_VIP dev lo:0
            echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
            echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
            echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
            echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
            sysctl -p >/dev/null 2>&1
            echo "RealServer Start OK"
            ;;
      stop)
            ifconfig lo:0 down
            route del $SNS_VIP >/dev/null 2>&1
            echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
            echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce
            echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
            echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
            echo "RealServer Stoped"
            ;;
      *)
            echo "Usage: $0 {start|stop}"
            exit 1
      esac
      exit 0
或者采用secondary ip address方式配置
      # vi /etc/sysctl.conf
      net.ipv4.conf.lo.arp_ignore = 1
      net.ipv4.conf.lo.arp_announce = 2
      net.ipv4.conf.all.arp_ignore = 1
      net.ipv4.conf.all.arp_announce = 2
      [code]
      #sysctl –p
      #ip addr add 192.168.81.130/32 dev lo
      #ip add list 查看是否绑定
  3. 启动lvs-dr脚本和realserver启本，在DR上可以查看LVS当前状态:
      #watch ipvsadm –ln
五．利用Keepalvied实现负载均衡和和高可用性
  1.配置在主负载均衡服务器上配置keepalived.conf
  #vi /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {
notification_email {
   wangsong@test.com
  # failover@firewall.loc
  # sysadmin@firewall.loc
}
notification_email_from sns-lvs@gmail.com
smtp_server 127.0.0.1
  # smtp_connect_timeout 30
router_id LVS_DEVEL
}
# 20081013 written by :netseek
# VIP1
vrrp_instance VI_1 {
state MASTER          #备份服务器上将MASTER改为BACKUP
interface eth0
virtual_router_id 51
priority 100 # 备份服务上将100改为99
advert_int 1
authentication {
      auth_type PASS
      auth_pass 1111
}
virtual_ipaddress {
      192.168.81.130
      #(如果有多个VIP，继续换行填写.)
}
}

virtual_server 192.168.81.130 80 {
delay_loop 6                #(每隔10秒查询realserver状态)
lb_algo wrr                #(lvs 算法)
lb_kind DR                #(Direct Route)
persistence_timeout 60       #(同一IP的连接60秒内被分配到同一台realserver)
protocol TCP             #(用TCP协议检查realserver状态)

real_server 192.168.81.131 80 {
      weight 3             #(权重)
      TCP_CHECK {
      connect_timeout 10    #(10秒无响应超时)
      nb_get_retry 3
      delay_before_retry 3
connect_port 80
      }
}
real_server 192.168.81.132 80 {
      weight 3
      TCP_CHECK {
      connect_timeout 10
      nb_get_retry 3
      delay_before_retry 3
      connect_port 80
      }
   }
}

2. BACKUP服务器同上配置，先安装lvs再按装keepalived,仍后配置/etc/keepalived/keepalived.conf，
把vrrp_instance VI_1 {
state MASTER          #备份服务器上将MASTER改为BACKUP
interface eth0
virtual_router_id 51
priority 100 # 备份服务上将100改为99
其他的跟master一样。

3. vi /etc/rc.local
#/usr/local/sbin/lvs-dr.sh  将lvs-dr.sh这个脚本注释掉。步
#/usr/local/sbin/lvs-dr.sh stop 停止lvs-dr脚本
#/etc/init.d/keepalived start  启动keepalived 服务，keepalived就能利用keepalived.conf 配
置文件，实现负载均衡和高可用.

六、Lvs服务端的配置
(1).编辑/etc/sysctl.conf，添加如下内容：

net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.eth0.send_redirects = 1
然后 sysctl -p,使刚才的配置生效
(2). Ipvsadm 的配置信息
ipvsadm -A -t 192.168.81.130:http -s wlc
ipvsadm -a -t 192.168.81.130:http -r 192.168.81.131 -g
ipvsadm -a -t 192.168.81.130:http -r 192.168.81.132 -g

(3).把ipvsadm的配置写到/etc/rc.local里

ipvsadm -A -t 192.168.81.130:http -s wlc
ipvsadm -a -t 192.168.81.130:http -r 192.168.81.131 -g
ipvsadm -a -t 192.168.81.130:http -r 192.168.81.132 -g
七、lvs客户端的配置
(1).编辑/etc/sysctl.conf，添加一下内容到文件尾部

net.ipv4.conf.lo.arp_ignore = 1
net.ipv4.conf.lo.arp_announce = 2
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
(2).添加一个监听IP地址和一条路由
ifconfig lo:0 192.168.81.130 broadcast 192.168.81.130 netmask 255.255.255.255 up
route add -host 192.168.81.130 dev lo:0
(3).把(2)的配置信息写到/etc/rc.local文件里

八、查看lvs服务是否正常
  #watch ipvsadm –ln

IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port          Forward Weight ActiveConn InActConn
TCP  192.168.81.130:80 wrr persistent 60
  -> 192.168.81.131:80          Route 3    0       0
  -> 192.168.81.132:80          Route 3    0       0
#tail –f /var/log/message  监听日志，查看状态，测试LVS负载均衡及高可用性是否有效。

九、停Master服务器的keepalived服务，查看BAKCUP服务器是否能正常接管服务。

标注：
因为我条件有限，所以没有做LVS-DR-Master和LVS-DR-BACKUP的切换实验，有兴趣的朋友可以测试一下。上面的脚本应该没有问题。文档有写的不明白的地方或错误的地方请指出来，谢谢！

分享技术快乐自我

账号		自动登录	找回密码
密码			立即注册

wirelessnetview好用的无线分析工具

Red Hat RHCE 8 (EX294) Cert Guide

亿图图示专家(EDraw Max) V7.9 中文破解版

zabbix3.4.1安装部署+微信推送信息+大屏显

Red Hat OpenShift I: Containers & Kubern

2025 年，C++ 还能“硬核”多久？

RH199 RHCSA Rapid Track

[经验分享] 利用LVS+Keepalived+Nginx实现高性能高可用负载均衡服务器

浏览过的版块

扫码加入运维网微信交流群