keepalived + lvs + nginx 主备配置案例

ts2009

　　一、keepalived lvs  集群
1、结构

2、主备修改内核参数

net.ipv4.ip_forward = 1
net.ipv4.ip_nonlocal_bind = 1
net.ipv4.conf.lo.arp_ignore = 1
net.ipv4.conf.lo.arp_announce = 2
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
　　注:如果遇到提示是缺少包，yum 安装即可
　　3、启动keepalived
[root@iZ256w2hluuZ keepalived-1.3.5]# ./sbin/keepalived -f /usr/local/keepalived/etc/keepalived.conf

4、修改配置文件
　　1 > 192.168.1.109 vrrp-master-config

global_defs {      #全局定义模块
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 192.168.200.1
smtp_connect_timeout 30
router_id LVS_DEVEL
vrrp_skip_check_adv_addr
vrrp_strict
vrrp_garp_interval 0
vrrp_gna_interval 0
}
vrrp_instance VI_1 {    #vrrp 实例
state MASTER     #主master
interface eth0
virtual_router_id 51
priority 200
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.1.50     #vip 浮动的虚拟ip
}
}
virtual_server 192.168.1.50 80 {      #虚拟ip
delay_loop 6   # 健康检查时间，                  
lb_algo wrr      # 负载调度的算法为wlc                  
lb_kind DR      #DR模式
nat_mask 255.255.255.0               
persistence_timeout 0         
protocol TCP                  
real_server 192.168.1.111 80 {  # 指定real server1的IP地址
weight 3   #权值，数字越大权重越高              
TCP_CHECK {  
connect_timeout 10        
nb_get_retry 3  
delay_before_retry 3  
connect_port 80  
}  
}  
real_server 192.168.1.112 80 {  # 指定real server2的IP地址
weight 3  # 权值，数字越大权重越高  
TCP_CHECK {  
connect_timeout 10  
nb_get_retry 3  
delay_before_retry 3  
connect_port 80  
}  
}  
}
　　2> 192.168.1.110 vrrp-slave-config: 把master的文件copy过来，其它不变

vrrp_instance VI_1 {    #vrrp 实例要与master一致
state BACKUP     #slave
interface eth0
virtual_router_id 51
priority 100       #优先级调低
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.1.50     #vip 浮动的虚拟ip
}
}
　　3> 状态
vrrp 虚拟ip飘在master 109上:

把109的keepalived kill掉，vip会飘到备机110上

　　二、nginx 安装
1>分别在192.168.1.111 , 192.168.1.112 上安装，安装httpd也可以

　　2>   dr 模式需做特殊设置，创建脚本，并且start

[root@moban init.d]# cat realserver
#! /bin/bash
SNS_VIP=192.168.1.50
/etc/rc.d/init.d/functions
case "$1" in
start)
ifconfig lo:0 $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP
/sbin/route add -host $SNS_VIP dev lo:0
echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
sysctl -p >/dev/null 2>&1
echo "RealServer Start OK"
;;
stop)
ifconfig lo:0 down
route del $SNS_VIP >/dev/null 2>&1
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
echo "RealServer Stoped"
;;
*)
echo "Usage: $0 {start|stop}"
exit 1
esac
exit 0

　　三、访问测试，实现主备


wrr 轮循
[img]http://blog.运维网.com/keep11/