Keepalived+LVS(DR)部署高可用Web集群
集群環(huán)境
| 主機(jī) | 角色 | 服務(wù) |
|---|---|---|
| 192.168.110.134 | MASTER | Keepalived |
| 192.168.110.137 | BACKUP | Keepalived |
| 192.168.110.136 | Real server1 | HTTPD |
| 192.168.110.145 | Real server2 | HTTPD |
MASTER配置
global_defs {
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 192.168.200.1
smtp_connect_timeout 30
router_id LVS_BACKUP
vrrp_skip_check_adv_addr
vrrp_strict
vrrp_garp_interval 0
vrrp_gna_interval 0
}
vrrp_instance VI_1 {
state MASTER
interface ens33
virtual_router_id 51
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.110.252
}
}
virtual_server 192.168.110.252 80 {
delay_loop 6
lb_algo wrr
lb_kind DR
persistence_timeout 50
protocol TCP
real_server 192.168.110.136 80 {
weight 1
TCP_CHECK {
retry 3
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
conncet_port 80
}
}
real_server 192.168.110.136 80 {
weight 1
TCP_CHECK {
retry 3
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
conncet_port 80
}
}
}
}
BACKUP配置
global_defs {
notification_email {
acassen@firewall.loc
failover@firewall.loc
sysadmin@firewall.loc
}
notification_email_from Alexandre.Cassen@firewall.loc
smtp_server 192.168.200.1
smtp_connect_timeout 30
router_id LVS_BACKUP
vrrp_skip_check_adv_addr
vrrp_strict
vrrp_garp_interval 0
vrrp_gna_interval 0
}
vrrp_instance VI_1 {
state BACKUP
interface ens160
virtual_router_id 51
priority 50
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.110.252
}
}
virtual_server 192.168.110.252 80 {
delay_loop 6
lb_algo wrr
lb_kind DR
persistence_timeout 50
protocol TCP
real_server 192.168.110.136 80 {
weight 1
TCP_CHECK{
connect_timeout 3
retry 3
delay_before_retry 3
connect_port 80
}
}
real_server 192.168.110.145 80 {
weight 1
TCP_CHECK{
connect_timeout 3
retry 3
delay_before_retry 3
connect_port 80
}
}
}
}
檢查Virtual IP是否漂移
[root@keepalived ~]# ip addr| grep "252"
inet 192.168.110.252/32 scope global ens33
[root@localhost ~]# ip addr| grep "252"
[root@localhost ~]#
#關(guān)閉服務(wù)Keepalived-MASTER
[root@keepalived ~]# systemctl stop keepalived.service
[root@keepalived ~]# ip addr| grep "252"
[root@keepalived ~]#
[root@localhost ~]# ip addr| grep "252"
inet 192.168.110.252/32 scope global ens160
IPVS檢查
前提下載ipvsadm
MASTER
[root@keepalived ~]# ipvsadm -ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 192.168.110.252:80 wrr persistent 50
-> 192.168.110.136:80 Route 1 0 0
-> 192.168.110.145:80 Route 1 0 0
BACKUP
[root@localhost ~]# ipvsadm -ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 192.168.110.252:80 wrr persistent 50
-> 192.168.110.136:80 Route 1 0 0
-> 192.168.110.145:80 Route 1 0 0
Real Server配置
#將VIP綁定至環(huán)回網(wǎng)卡
[root@webserver ~]# ifconfig lo:eth1 192.168.110.252 netmask 255.255.255.255 up
#ARP抑制
[root@webserver ~]# echo "1" > /proc/sys/net/ipv4/conf/lo/arp_ignore
[root@webserver ~]# echo "2" > /proc/sys/net/ipv4/conf/lo/arp_announce
[root@webserver ~]# route add -host 192.168.110.252 dev lo
附上個(gè)人寫的小腳本
#!/bin/bash
read -p "Enter the Virtual IP : " vip
ifconfig lo:eth1 $vip netmask 255.255.255.255 up
if [ $? -eq 0 ]
then
echo -e "\033[32m OK \033[0m"
else
echo -e "\033[31m Failed \033[0m"
fi
echo "1" > /proc/sys/net/ipv4/conf/lo/arp_ignore
if [ $? -eq 0 ]
then
echo -e "\033[32m OK \033[0m"
else
echo -e "\033[31m Failed \033[0m"
fi
echo "2" > /proc/sys/net/ipv4/conf/lo/arp_announce
if [ $? -eq 0 ]
then
echo -e "\033[32m OK \033[0m"
else
echo -e "\033[31m Failed \033[0m"
fi
route add -host $vip dev lo
if [ $? -eq 0 ]
then
echo -e "\033[32m OK \033[0m"
else
echo -e "\033[31m Failed \033[0m"
fi
大家可以根據(jù)自己需要做調(diào)整。文章來源：http://www.zghlxwxcb.cn/news/detail-663564.html
測(cè)試
停用Real Server某一臺(tái)的Apache服務(wù)
#在Master上動(dòng)態(tài)監(jiān)測(cè)
[root@keepalived ~]# watch -n 0.5 ipvsadm -ln
#RS
[root@docker ~]# systemctl stop httpd
這里效果需要自己方能看出來。文章來源地址http://www.zghlxwxcb.cn/news/detail-663564.html
停用Master上的keepalived檢測(cè)Backup是否接管資源
#停用前
C:\Users\SuperMe>curl 192.168.110.252
Web Test Of 192.168.110.145
C:\Users\SuperMe>curl 192.168.110.252
Web Test Of 192.168.110.145
#停用后
[root@keepalived ~]# systemctl stop keepalived.service
C:\Users\SuperMe>curl 192.168.110.252
Web Test Of 192.168.110.145
C:\Users\SuperMe>curl 192.168.110.252
Web Test Of 192.168.110.145
[root@localhost ~]# ipvsadm -ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 192.168.110.252:80 wrr persistent 50
-> 192.168.110.136:80 Route 1 0 0
-> 192.168.110.145:80 Route 1 0 5
#可以看出來資源被接管后145被訪問了5此
到了這里，關(guān)于Keepalived+LVS部署高可用集群的文章就介紹完了。如果您還想了解更多內(nèi)容，請(qǐng)?jiān)谟疑辖撬阉鱐OY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！
