keepalive+lvs实现lvs高可用

蔚落 2022-10-28 10:11 133阅读 0赞

实验环境：  
操作系统centos7，lvs使用的DR模式  
VIP :192.168.1.120  
lvs1 IP：192.168.1.121  
lvs2 IP: 192.168.1.122  
web1 IP: 192.168.1.118  
web2 IP: 192.168.1.119  
服务器防火墙、selinux已关闭，yum 源已配置  
一、配置web服务器  
web1

[root@web1 ~]# yum -y install httpd
    [root@web1 ~]# echo 192.168.1.118 > /var/www/html/index.html
    [root@web1 ~]# systemctl restart httpd

we2

[root@web2 ~]# yum -y install httpd
    [root@web2 ~]# echo 192.168.1.119 > /var/www/html/index.html
    [root@web2 ~]# systemctl restart httpd

二、配置web服务器网络  
web1

[root@web1 ~]# cp /etc/sysconfig/network-scripts/ifcfg-lo{,:0}
    [root@web1 ~]# vim /etc/sysconfig/network-scripts/ifcfg-lo:0
    [root@web1 ~]# cat /etc/sysconfig/network-scripts/ifcfg-lo:0
    DEVICE=lo:0
    IPADDR=192.168.1.120
    NETMASK=255.255.255.255
    NETWORK=192.168.1.120
    # If you're having problems with gated making 127.0.0.0/8 a martian,
    # you can change this to something else (255.255.255.255, for example)
    BROADCAST=192.168.1.120
    ONBOOT=yes
    NAME=lo:0

注意：子网掩码为4个255，配置完后不要重启网络，会产生地址冲突，需要修改内核参数

[root@web1 ~]# vim /etc/sysctl.conf 
    [root@web1 ~]# sysctl -p
    net.ipv4.conf.all.arp_ignore = 1
    net.ipv4.conf.lo.arp_ignore = 1
    net.ipv4.conf.lo.arp_announce = 2
    net.ipv4.conf.all.arp_announce = 2

\#配置这几条的作用是，当有arp广播问谁是192.168.1.120时，本机忽略该arp广播，不做回应，且不向外宣告自己的lo回环地址是192.168.1.120  
配置完内核参数后重启网络

[root@web1 ~]# systemctl restart network

web2

[root@web2 ~]# cp /etc/sysconfig/network-scripts/ifcfg-lo{,:0}
    [root@web2 ~]# vim /etc/sysconfig/network-scripts/ifcfg-lo:0
    [root@web2 ~]# cat /etc/sysconfig/network-scripts/ifcfg-lo:0
    DEVICE=lo:0
    IPADDR=192.168.1.120
    NETMASK=255.255.255.255
    NETWORK=192.168.1.120
    # If you're having problems with gated making 127.0.0.0/8 a martian,
    # you can change this to something else (255.255.255.255, for example)
    BROADCAST=192.168.1.120
    ONBOOT=yes
    NAME=lo:0

修改内核参数

[root@web2 ~]# vim /etc/sysctl.conf 
    [root@web2 ~]# sysctl -p
    net.ipv4.conf.all.arp_ignore = 1
    net.ipv4.conf.lo.arp_ignore = 1
    net.ipv4.conf.lo.arp_announce = 2
    net.ipv4.conf.all.arp_announce = 2

重启网络

[root@web2 ~]# systemctl restart network

三、lvs1、lvs2主机安装ipvsadm和keepalived软件  
lvs1

[root@lvs1 ~]#  yum -y install ipvsadm  keepalived

lvs2

[root@lvs2 ~]#  yum -y install ipvsadm  keepalived

四、配置keepalived

[root@lvs ~]# vim /etc/keepalived/keepalived.conf 
    
    ! Configuration File for keepalived
    
    global_defs {
       notification_email {
         acassen@firewall.loc
         failover@firewall.loc
         sysadmin@firewall.loc
       }
       smtp_connect_timeout 30
       router_id LVS1    #routeid 为LVS1
       vrrp_iptables
       vrrp_skip_check_adv_addr
       vrrp_strict
       vrrp_garp_interval 0
       vrrp_gna_interval 0
    }
    
    vrrp_instance VI_1 {
        state MASTER    #设置为主服务器
        interface eth0     #根据实际网卡名设置
        virtual_router_id 51   #主备id值必须一致
        priority 100               #优先级越高，越容易为主
        advert_int 1              
        authentication { 
            auth_type PASS
            auth_pass 1111
        }
        virtual_ipaddress {
            192.168.1.120           #VIP地址
        }
    }
    
    virtual_server 192.168.1.120 80 {   #配置LVS的VIP规则
        delay_loop 6                       #健康检查时间
        lb_algo rr                            #设置LVS调度算法为RR（轮询）
        lb_kind DR                   设置LVS的模式为DR（直连路由）
        #persistence_timeout 50  #开启后，客户端在一定时间内始终访问相同的服务器
        protocol TCP
    
        real_server 192.168.1.118 80 {  #设置后端真实使用的服务器
            weight 1
            TCP_CHECK {        #对后端真实服务器做健康检查
            connect_timeout 3            #每次连接的超时时间3s
            nb_get_retry 3                   #检查几次，显示连接失败
            delay_before_retry 3          #每隔3s检查一下
            }
        }
        real_server 192.168.1.119 80 {
            weight 1
            TCP_CHECK {
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
            }
        }
    }

配置完后启动keepalived服务

[root@lvs ~]# systemctl restart keepalived

lvs2作为备服务器

[root@lvs2 ~]# vim /etc/keepalived/keepalived.conf 
    
    ! Configuration File for keepalived
    
    global_defs {
       notification_email {
         acassen@firewall.loc
         failover@firewall.loc
         sysadmin@firewall.loc
       }
       notification_email_from Alexandre.Cassen@firewall.loc
       smtp_server 192.168.200.1
       smtp_connect_timeout 30
       router_id LVS2
       vrrp_iptables
       vrrp_skip_check_adv_addr
       vrrp_strict
       vrrp_garp_interval 0
       vrrp_gna_interval 0
    }
    
    vrrp_instance VI_1 {
        state BACKUP
        interface eth0
        virtual_router_id 51
        priority 50
        advert_int 1
        authentication {
            auth_type PASS
            auth_pass 1111
        }
        virtual_ipaddress {
            192.168.1.120
        }
    }
    
    virtual_server 192.168.1.120 80 {
        delay_loop 6
        lb_algo rr
        lb_kind DR
        #persistence_timeout 50
        protocol TCP
    
        real_server 192.168.1.118 80 {
            weight 1
            TCP_CHECK {
                connect_timeout 3
                nb_get_retry 3
                delay_before_retry 3
            }
        }
        real_server 192.168.1.119 80 {
            weight 1
            TCP_CHECK {
                connect_timeout 3
                nb_get_retry 3
                delay_before_retry 3
            }
        }
    }

配置完后启动keepalived

[root@lvs2 ~]# systemctl restart keepalived

五、通过客户端浏览器访问vip进行测试，关掉lvs1的keepalive进行测试看网站是否能正常访问。