搭建环境&＃xff1a;
两台director&＃xff0c;两台RS
director1&＃xff1a;ip&＃xff08;172.16.125.5&＃xff09;&＃xff0c;安装好keepalived&＃xff1b;
director2&＃xff1a;ip&＃xff08;172.16.125.6&＃xff09;&＃xff0c;安装好keepalived&＃xff1b;
RS1&＃xff1a;ip&＃xff08;172.16.125.7&＃xff09;&＃xff0c;安装好httpd&＃xff1b;
RS2&＃xff1a;ip&＃xff08;172.16.125.8&＃xff09;&＃xff0c;安装好httpd&＃xff1b;
vip&＃xff08;1&＃xff09;&＃xff1a;172.16.125.100&＃xff0c;vip&＃xff08;2&＃xff09;&＃xff1a;172.16.125.110。
在此处keepalived实现lvs的高可用&＃xff0c;使用了lvs的dr模型。关闭iptables和selinux&＃xff0c;且实现时间同步。
使用主从模式配置过程&＃xff1a;
&＃xff08;1&＃xff09;首先配置RS&＃xff0c;在每一台的RS上安装好httpd&＃xff0c;同时为了实现lvs调度算法的效果&＃xff0c;在此故意使得每一台RS上提供的网页内容不一样。
&＃xff08;2&＃xff09;首先设置内核参数&＃xff0c;保证请求vip的报文必须经过director进行调度&＃xff0c;才能到达后端RS上。
echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore
echo 1 > /proc/sys/net/ipv4/conf/lo/arp_ignore
echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce
echo 2 > /proc/sys/net/ipv4/conf/lo/arp_announce
&＃xff08;3&＃xff09;进行每一台RS上lo接口的vip的绑定&＃xff0c;同时设置路由。
~]# ifconfig lo:0 172.16.125.100/32 broadcast 172.16.125.100 up
~]# route add -host 172.16.125.100 dev lo:0
通过以上设置&＃xff0c;完成了后端RS的设置。
&＃xff08;4&＃xff09;进行两台director上keepalived服务的配置。首先设置一个虚拟路由器组&＃xff0c;其虚拟ip为172.16.125.100&＃xff08;也就是vip&＃xff09;&＃xff0c;在虚拟主机内部配置两台RS&＃xff0c;即后端的两台RS&＃xff0c;具体配置文件如下所示。
配置文件一&＃xff08;在主keepalived服务器上的配置&＃xff09;&＃xff1a;
global_defs {notification_email {root&＃64;localhost}notification_email_from Alexandre.Cassen&＃64;firewall.locsmtp_server 127.0.0.1smtp_connect_timeout 30router_id LVS_DEVEL
}vrrp_instance VI_1 {state MASTERinterface eno16777736virtual_router_id 51priority 100advert_int 1authentication {auth_type PASSauth_pass 125110}virtual_ipaddress {172.16.125.100/16 dev eno16777736 label eno16777736:0}
}virtual_server 172.16.125.100 80 {delay_loop 3lb_algo rrlb_kind DRnat_mask 255.255.0.0protocol TCPreal_server 172.16.125.7 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}real_server 172.16.125.8 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}
}
在从keepalived所在的主机上的配置&＃xff0c;不同的地方有两条&＃xff1a;一&＃xff0c;state设置为BACKUP&＃xff0c;表明该主机为从服务器&＃xff1b;二&＃xff0c;priority&＃xff08;优先级&＃xff09;要低于主keepalived服务器上的优先级。
在两台调度器上同时启动keepalived服务&＃xff0c;进行查看集群服务的相关信息。
一、使用ipvsadm查看负载均衡集群服务信息&＃xff1a;
二、查看vip是否已经加在主keepalived服务器上了&＃xff1a;
三、在客户端访问vip&＃xff0c;看是否能够实现负载均衡调度&＃xff0c;此处使用轮询&＃xff08;rr&＃xff09;算法。
四、在主keepalived服务器上关闭keepalived服务&＃xff0c;看高可用资源是否会发生转移&＃xff0c;同时进行vip的访问&＃xff0c;是否能够继续进行负载均衡调度。
使用双主模型实现keepalived&＃43;lvs&＃xff1a;
&＃xff08;1&＃xff09;在后端RS上设置内核参数&＃xff0c;保证请求vip的报文必须经过director进行调度&＃xff0c;才能到达后端RS上。设置第一个vip&＃xff08;172.16.125.100&＃xff09;&＃xff0c;同时设置路由&＃xff0c;详细配置步骤如主从模式的RS的vip的设置&＃xff0c;在此处不再赘述。
在后端RS上lo端口上配置第二个vip&＃xff08;172.16.125.110&＃xff09;&＃xff0c;同时设置路由。
~]# ifconfig lo:1 172.16.125.110/32 broadcast 172.16.125.110 up
~]# route add -host 172.16.125.110 dev lo:1
&＃xff08;2&＃xff09;在keepalived的服务器上修改配置文件&＃xff0c;增加一个新的虚拟路由器&＃xff0c;详细配置如下配置文件所示&＃xff1a;
主keepalived服务器1上的配置&＃xff1a;
global_defs {notification_email {root&＃64;localhost}notification_email_from Alexandre.Cassen&＃64;firewall.locsmtp_server 127.0.0.1smtp_connect_timeout 30router_id LVS_DEVEL
}vrrp_instance VI_1 {state MASTERinterface eno16777736virtual_router_id 51priority 100advert_int 1authentication {auth_type PASSauth_pass 125110}virtual_ipaddress {172.16.125.100/16 dev eno16777736 label eno16777736:0}
}virtual_server 172.16.125.100 80 {delay_loop 3lb_algo rrlb_kind DRnat_mask 255.255.0.0protocol TCPreal_server 172.16.125.7 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}real_server 172.16.125.8 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}
}vrrp_instance VI_2 {state BACKUPinterface eno16777736virtual_router_id 110priority 90advert_int 1authentication {auth_type PASSauth_pass 123456789}virtual_ipaddress {172.16.125.110/16 dev eno16777736 label eno16777736:1}
}virtual_server 172.16.125.110 80 {delay_loop 3lb_algo rrlb_kind DRnat_mask 255.255.0.0protocol TCPreal_server 172.16.125.7 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}real_server 172.16.125.8 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}
}
主keepalived服务器2上的配置&＃xff1a;
global_defs {notification_email {root&＃64;localhost}notification_email_from Alexandre.Cassen&＃64;firewall.locsmtp_server 127.0.0.1smtp_connect_timeout 30router_id LVS_DEVEL
}vrrp_instance VI_1 {state BACKUPinterface eno16777736virtual_router_id 51priority 90advert_int 1authentication {auth_type PASSauth_pass 125110}virtual_ipaddress {172.16.125.100/16 dev eno16777736 label eno16777736:0}
}virtual_server 172.16.125.100 80 {delay_loop 3lb_algo rrlb_kind DRnat_mask 255.255.0.0protocol TCPreal_server 172.16.125.7 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}real_server 172.16.125.8 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}
}vrrp_instance VI_2 {state MASTERinterface eno16777736virtual_router_id 110priority 100advert_int 1authentication {auth_type PASSauth_pass 123456789}virtual_ipaddress {172.16.125.110/16 dev eno16777736 label eno16777736:1}
}virtual_server 172.16.125.110 80 {delay_loop 3lb_algo rrlb_kind DRnat_mask 255.255.0.0protocol TCPreal_server 172.16.125.7 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}real_server 172.16.125.8 80 {weight 1HTTP_GET {url {path /status_code 200}connect_timeout 3nb_get_retry 3delay_before_retry 3}}
}
&＃xff08;3&＃xff09;在两台高可用服务器上启动keepalived服务&＃xff0c;查看vip是否分别加载到高可用服务器上。
在客户端进行测试&＃xff0c;分别访问vip&＃xff08;172.16.125.100&＃xff09;和vip&＃xff08;172.16.125.110&＃xff09;。
可以看到&＃xff0c;访问两个vip都可以正常访问&＃xff0c;并且实现了rr&＃xff08;轮询&＃xff09;调度算法。
京公网安备 11010802041100号