1. 安装 keepalived所需要的依赖包
yum -y install popt-devel openssl-devel
2. 下载安装 keepalived
wget http://www.keepalived.org/software/keepalived-1.2.7.tar.gz
tar zxvf keepalived-1.2.7.tar.gz
cd keepalived-1.2.7
./configure --prefix=/usr/local/keepalived --with-kernel-dir=/usr/src/kernels/2.6.32-279.el6.i686/
make &&make install
3. 设定 keepalived配置文件和启动文件 ,监控文件
mkdir /etc/keepalived
cp /usr/local/keepalived/etc/rc.d/init.d/keepalived /etc/init.d/keepalived
cp /usr/local/keepalived/etc/keepalived/keepalived.conf /etc/keepalived/
cp /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
cp /usr/local/keepalived/sbin/keepalived /sbin/
vi /etc/keepalived/keepalived.conf
vrrp_script chk_http_port {
script "/etc/keepalived/check_haproxy.sh"
interval 2
weight 2
global_defs {
router_id LVS_DEVEL
}
vrrp_instance VI_1 {
state MASTER #备机上改为 BAKCUP
interface eth0
virtual_router_id 51
priority 150 #备机上优先级改为低于 150
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
track_script {
chk_http_port
}
virtual_ipaddress {
192.168.148.200
}
}
}
设定监控文件
vi /etc/keepalived/check_haproxy.sh
#!/bin/bash
A=`ps -C haproxy --no-header |wc -l`
if [ $A -eq 0 ];then
/etc/init.d/haproxy restart
sleep 3
if [ `ps -C haproxy --no-header |wc -l` -eq 0 ];then
/etc/init.d/keepalived stop
fi
fi
4. 启动 keepalived服务并查看虚拟 IP
##启动
/etc/init.d/keepalived start
##查看配置文件中的虚拟 IP
ip add list
2: eth0: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:0c:29:2b:59:50 brd ff:ff:ff:ff:ff:ff
inet 192.168.148.100/24 brd 192.168.148.255 scope global eth0
inet 192.168.148.200/32 scope global eth0
inet6 fe80::20c:29ff:fe2b:5950/64 scope link
valid_lft forever preferred_lft forever
5. 在备机部署 haproxy+keepalived
在主机上打包并复制到备机 :
tar zcvf haproxy.tgz haproxy/
tar zcvf keepalived.tgz keepalived/
tar zcvfP /etc/keepalived.tgz /etc/keepalived/
scp /etc/keepalived.tgz test2:/etc/
scp haproxy.tgz keepalived.tgz test2:/usr/local/
scp /etc/init.d/haproxy test2:/etc/init.d/
在备机上解压缩并复制一些启动文件
tar zxvfP keepalived.tgz -C /etc/
tar zxvf keepalived.tgz -C /usr/local/
tar zxvf haproxy.tgz -C /usr/local/
cp /usr/local/keepalived/etc/rc.d/init.d/keepalived /etc/init.d/keepalived
cp /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
cp /usr/local/keepalived/sbin/keepalived /sbin/
6. 在备机修改 keepalived配置文件并启动
vi /etc/keepalived/keepalived.conf
state BACKUP #备机上改为 BAKCUP
priority 120 #备机上优先级改为 120
/etc/init.d/keepalived start (由于存在 check_haproxy.sh,haproxy会自动启动 )
7. 查看主备机器的 VRRP通信状态是否正常
查看 var/log/messages,如果看到都是 MASTER STATUS,或者 ip add list都可以看到 VIP,基本上可以说明 VRRP通信有问题,
Nov 6 10:28:10 test1 Keepalived_vrrp[7941]: VRRP_Instance(VI_1) setting protocol VIPs.
Nov 6 10:28:10 test1 Keepalived_vrrp[7941]: VRRP_Instance(VI_1) Entering MASTER STATE
Nov 6 10:28:09 test1 Keepalived_vrrp[7941]: VRRP_Instance(VI_1) Transition to MASTER STATE
可以用 tcpdump – ni eth0 vrrp,看到主备 2台服务器都在发 VRRP包,正常情况下只有 MASTER发送 VRRP
[root@test1 local]# tcpdump -nni eth0 vrrp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
10:30:13.455292 IP 192.168.148.100 > 224.0.0.18: VRRPv2, Advertisement, vrid 51, prio 152, authtype simple, intvl 1s, length 20
10:30:14.456310 IP 192.168.148.100 > 224.0.0.18: VRRPv2, Advertisement, vrid 51, prio 152, authtype simple, intvl 1s, length 20
10:30:15.457330 IP 192.168.148.100 > 224.0.0.18: VRRPv2, Advertisement, vrid 51, prio 152, authtype simple, intvl 1s, length 20
检查 iptables防火墙,需要在 2台服务器上都加入以下 2条:
MASTER:
-A INPUT -s 192.168.148.110 -j ACCEPT
BACKUP:
-A INPUT -s 192.168.148.100 -j ACCEPT
8. 进行主备机的 HA切换测试
在 MASTER上停止 keepalived服务
/etc/init.d/keepalived stop
查看 BAKCUP /var/log/messages,是否切换到 MASTER
Nov 6 10:37:27 test2 Keepalived_vrrp[3824]: VRRP_Instance(VI_1) Sending gratuitous ARPs on eth1 for 192.168.148.200
Nov 6 10:37:22 test2 Keepalived_healthcheckers[3823]: Netlink reflector reports IP 192.168.148.200 added
Nov 6 10:37:22 test2 Keepalived_vrrp[3824]: VRRP_Instance(VI_1) Sending gratuitous ARPs on eth1 for 192.168.148.200
Nov 6 10:37:22 test2 Keepalived_vrrp[3824]: VRRP_Instance(VI_1) setting protocol VIPs.
Nov 6 10:37:22 test2 Keepalived_vrrp[3824]: VRRP_Instance(VI_1) Entering MASTER STATE
Nov 6 10:37:21 test2 Keepalived_vrrp[3824]: VRRP_Instance(VI_1) Transition to MASTER STATE
查看虚拟 IP是否启动
ip add list
2: eth1: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:0c:29:a6:8a:61 brd ff:ff:ff:ff:ff:ff
inet 192.168.148.110/24 brd 192.168.148.255 scope global eth1
inet 192.168.148.200/32 scope global eth1
inet6 fe80::20c:29ff:fea6:8a61/64 scope link
valid_lft forever preferred_lft forever
以上说明切换正常, HAproxy可以在备机正常使用
由于 keepalived默认是抢占模式, MASTER恢复后会进行再次切换 ,可以在配置文件里设置
nopreempt 来禁用这个功能
参考资料
http://www.cnblogs.com/dkblog/archive/2011/07/06/2098949.html
运维网声明
1、欢迎大家加入本站运维交流群:群②:261659950 群⑤:202807635 群⑦870801961 群⑧679858003
2、本站所有主题由该帖子作者发表,该帖子作者与运维网 享有帖子相关版权
3、所有作品的著作权均归原作者享有,请您和我们一样尊重他人的著作权等合法权益。如果您对作品感到满意,请购买正版
4、禁止制作、复制、发布和传播具有反动、淫秽、色情、暴力、凶杀等内容的信息,一经发现立即删除。若您因此触犯法律,一切后果自负,我们对此不承担任何责任
5、所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其内容的准确性、可靠性、正当性、安全性、合法性等负责,亦不承担任何法律责任
6、所有作品仅供您个人学习、研究或欣赏,不得用于商业或者其他用途,否则,一切后果均由您自己承担,我们对此不承担任何法律责任
7、如涉及侵犯版权等问题,请您及时通知我们,我们将立即采取措施予以解决
8、联系人Email:admin@iyunv.com 网址:www.yunweiku.com