nginx+keepalived配置

Myth丶恋晨 2022-12-26 09:15 148阅读 0赞

# 1、keepalived介绍 #

keepalived是一个类似于layer3, 4 & 5交换机制的软件，以 VRRP 协议为实现基础，用 VRRP 协议来实现高可用性(HA)，可以用来防止服务器单点故障的发生，通过配合 Nginx 可以实现 web 前端服务的高可用。

# 2、部署概要 #

2个nginx服务器一主一备，之间用keepalived实现故障转移

![20201204101434372.png][]

# 3、部署操作 #

系统版本：centos7.8

软件版本：nginx-1.16.1，keepalived-1.4.5

主nginx服务器：10.137.8.203

备nginx服务器：10.137.8.204

vip：10.137.8.230

nginx安装不做叙述

keepalived下载地址：[https://www.keepalived.org/download.html][https_www.keepalived.org_download.html]

<table> 
 <tbody> 
 <tr> 
 <td> 1 2 3 4 5 6 7 8 9 </td> 
 <td> <code>//上传keepalived-1.4.5.tar.gz至2个服务器 /root 目录下</code> <code>//安装相关依赖包</code> <code>yum install libnl-devel libnl3-devel libnfnetlink-devel</code> <code>cd /root</code> <code>tar -xvf keepalived-</code><code>1.4</code><code>.</code><code>5</code><code>.tar.gz</code> <code>cd keepalived-</code><code>1.4</code><code>.</code><code>5</code> <code>./configure --prefix=/usr/local/keepalived</code> <code>make</code> <code>make install</code> </td> 
 </tr> 
 </tbody> 
</table>

### 1）、修改主nginx 10.137.8.203 keepalived的配置文件 ###

vim /usr/local/keepalived/etc/keepalived/keepalived.conf

<table> 
 <tbody> 
 <tr> 
 <td> 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 </td> 
 <td> <code>! Configuration File&nbsp;</code><code>for</code>&nbsp;<code>keepalived</code> &nbsp; <code>global_defs { </code> <code>}</code> &nbsp; <code>vrrp_instance vip_nginx {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>//实例名自定义</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>state MASTER&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>//主备配置为MASTER----BACKUP</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>interface</code>&nbsp;<code>ens160&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>//主机网卡名</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>virtual_router_id&nbsp;</code><code>51</code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code>//vrid 路由标识符，主备保持一致</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>priority&nbsp;</code><code>100</code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code>//值越大优先级越高</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>advert_int&nbsp;</code><code>1</code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code>//主服务器组播包发送间隔时间</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>#nopreempt&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>//采用抢占式，不开启此配置</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>authentication {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>//主备主机之间的认证表示信息</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>auth_type PASS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>auth_pass&nbsp;</code><code>1111</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>}</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>virtual_ipaddress {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>//设置虚拟ip地址信息</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>10.137</code><code>.</code><code>8.230</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>}</code> <code>}</code> </td> 
 </tr> 
 </tbody> 
</table>

启动keepalived

/usr/local/keepalived/sbin/keepalived -f /usr/local/keepalived/etc/keepalived/keepalived.conf

在10.137.8.203上查看是否已绑定vip

![20201204101702982.png][]

从其他服务器上ping 10.137.8.230测试，已可以ping通vip地址

![20201204101718219.png][]

### 2）、修改备nginx  10.137.8.204 keepalived的配置文件 ###

vim /usr/local/keepalived/etc/keepalived/keepalived.conf

<table> 
 <tbody> 
 <tr> 
 <td> 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 </td> 
 <td> <code>! Configuration File&nbsp;</code><code>for</code>&nbsp;<code>keepalived</code> &nbsp; <code>global_defs { </code> <code>}</code> &nbsp; <code>vrrp_instance vip_nginx { </code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>state BACKUP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>//标识为备节点</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>interface</code>&nbsp;<code>ens160</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>virtual_router_id&nbsp;</code><code>51</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>priority&nbsp;</code><code>90</code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code>//优先级低于主节点</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>advert_int&nbsp;</code><code>1</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>authentication { </code> <code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>auth_type PASS</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>auth_pass&nbsp;</code><code>1111</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>}</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>virtual_ipaddress { </code> <code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>10.137</code><code>.</code><code>8.230</code> <code>&nbsp;&nbsp;&nbsp;&nbsp;</code><code>}</code> <code>}</code> </td> 
 </tr> 
 </tbody> 
</table>

启动备节点keepalived

/usr/local/keepalived/sbin/keepalived -f /usr/local/keepalived/etc/keepalived/keepalived.conf

# 4、可用性验证 #

停止主服务器的keepalived进程

在备nginx上查看vip

发现vip已经漂移到备nginx，访问vip10.137.8.230 正常

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMyODIxNTk_size_16_color_FFFFFF_t_70][]

启动主nginx的keepalived，启动完成后vip漂移至主服务器

验证完成

# 5、keepalived抢占式与非抢占式 #

抢占模式就是，当master宕机后，backup 接管服务。后续当master恢复后，vip重新漂移到master上，master重新接管服务，多了一次vip切换。非抢占式， 原先的master恢复后，状态变为backup,不接管服务，这是非抢占模式。默认配置为抢占式

[20201204101434372.png]: /images/20221120/316b011ba95f4a11868898a18a346cf6.png
[https_www.keepalived.org_download.html]: https://www.keepalived.org/download.html
[20201204101702982.png]: /images/20221120/dd58248622ab44f1bc57ac1bbb82e0e0.png
[20201204101718219.png]: /images/20221120/4046945982be411baf4f9b80e714fc2f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMyODIxNTk_size_16_color_FFFFFF_t_70]: /images/20221120/f96c863f6848433f904b104c3e19b338.png