keepalived实现nginx高可用

最新推荐文章于 2018-12-16 10:56:48 发布
最新推荐文章于 2018-12-16 10:56:48 发布
阅读量170 收藏
点赞数
分类专栏： 作业 文章标签： keepalived nginx
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/Empty_city_dreams/article/details/83620059
版权

keepalived实现nginx高可用

环境

设备ip地址
centos7192.168.89.130
centos7192.168.89.129

1.两台设备都安装keepalived

[root@localhost ~]# yum -y install epel-release vim wget gcc gcc-c++
[root@localhost ~]# yum install keepalived -y
[root@localhost ~]# rpm -ql keepalived
/etc/keepalived/keepalived.conf     keepalived服务主配置文件
/etc/rc.d/init.d/keepalived         服务启动脚本
/etc/sysconfig/keepalived
/usr/bin/genhash
/usr/lib/systemd/system/keepalived.service    服务控制文件
/usr/libexec/keepalived
/usr/sbin/keepalived

2.两台设备都安装nginx

2.1MASTER端

[root@localhost ~]# yum -y install nginx
[root@localhost ~]#  cd /usr/share/nginx/html/
[root@localhost html]# mv index.html /root/
[root@localhost html]# echo 'master:192.168.89.130' > index.html
[root@localhost html]# systemctl start nginx
[root@localhost html]# systemctl enable nginx
[root@localhost html]# curl http://192.168.89.130
master:192.168.89.130

2.2SLAVE端

[root@localhost ~]# yum -y install nginx
[root@localhost ~]#  cd /usr/share/nginx/html/
[root@localhost html]# mv index.html /root/
[root@localhost html]# echo 'slave:192.168.89.129' > index.html
[root@localhost html]# systemctl start nginx
[root@localhost html]# systemctl enable nginx
[root@localhost html]# curl http://192.168.89.130
master:192.168.89.130

3.keepalived配置

##3.1 配置master端keepalived

[root@localhost html]# vim /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {
   router_id lb01
}  

vrrp_instance VI_1 {
    state MASTER
    virtual_router_id 51
    priority 100
    advert_int 1
        auth_type PASS
        auth_pass 1111
    }   
    virtual_ipaddress {
        192.168.89.150
    }
}   
virtual_server 192.168.89.150 80 {
    delay_loop 6
    lb_algo rr
    lb_kind DR
    persistence_timeout 50
    protocol TCP
    
    real_server 192.168.89.130 80 {
        weight 1
        TCP_CHECK {
	    connect_port 80
 	    connect_timeout 3
 	    nb_get_retry 3
 	    delay_before_retry 3
        }
    }
    real_server 192.168.89.129 80 {
        weight 1
        TCP_CHECK {
 	    connect_port 80
 	    connect_timeout 3
 	    nb_get_retry 3
 	    delay_before_retry 3
       }
    }
}
[root@localhost html]# systemctl start keepalived
[root@localhost html]# systemctl enable keepalived

3.2 备用段配置keepalived

[root@localhost html]# vim /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
   router_id lb02
}

vrrp_instance VI_1 {
    state BACKUP
    interface ens33
    virtual_router_id 51
    priority 90
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
	192.168.89.150
    }
}

virtual_server 192.168.89.150 80 {
    delay_loop 6
    lb_algo rr
    lb_kind DR
    persistence_timeout 50
    protocol TCP
    
    real_server 192.168.89.130 80 {
        weight 1
        TCP_CHECK {
	    connect_port 80
 	    connect_timeout 3
 	    nb_get_retry 3
 	    delay_before_retry 3
        }
    }
    real_server 192.168.89.129 80 {
        weight 1
        TCP_CHECK {
 	    connect_port 80
 	    connect_timeout 3
 	    nb_get_retry 3
 	    delay_before_retry 3
       }
    }
}
[root@localhost html]# systemctl start keepalived
[root@localhost html]# systemctl enable keepalived

3.3master端查看

[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:e1:46:7d brd ff:ff:ff:ff:ff:ff
    inet 192.168.89.130/24 brd 192.168.89.255 scope global noprefixroute dynamic ens33
       valid_lft 1185sec preferred_lft 1185sec
    inet 192.168.89.150/32 scope global ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::ed9:2153:d66f:1db9/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

3.4slave端查看

[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:47:80:d4 brd ff:ff:ff:ff:ff:ff
    inet 192.168.89.129/24 brd 192.168.89.255 scope global noprefixroute dynamic ens33
       valid_lft 1302sec preferred_lft 1302sec
    inet6 fe80::87d5:9fca:fb19:7de0/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

4.修改内核参数，开启监听VIP功能

4.1master端设置

[root@localhost ~]#  echo 'net.ipv4.ip_nonlocal_bind = 1' >>/etc/sysctl.conf
[root@localhost ~]# sysctl -p
net.ipv4.ip_nonlocal_bind = 1
[root@localhost ~]# cat /proc/sys/net/ipv4/ip_nonlocal_bind
1

4.2slave端设置

[root@localhost ~]# echo 'net.ipv4.ip_nonlocal_bind = 1' >>/etc/sysctl.conf
[root@localhost ~]# sysctl -p
net.ipv4.ip_nonlocal_bind = 1
[root@localhost ~]# cat /proc/sys/net/ipv4/ip_nonlocal_bind
1

5.让keepalived监控nginx负载均衡

5.1在master编写脚本

[root@localhost ~]# vim check_n.sh

#!/bin/bash
nginx_status=$(ps -ef|grep -Ev "grep|$0"|grep '\bnginx\b'|wc -l)
if [ $nginx_status -lt 1 ];then
    systemctl stop keepalived
fi
[root@localhost ~]# vim nptofy.sh

#!/bin/bash
VIP=$2
sendmail (){
	    subject="${VIP}'s server keepalived state is translate"
        content="`date +'%F %T'`: `hostname`'s state change to master"
        echo $content | mail -s "$subject" 664506081@qq.com
}
case "$1" in
 master)
       nginx_status=$(ps -ef|grep -Ev "grep|$0"|grep '\bnginx\b'|wc -l)
       if [ $nginx_status -lt 1 ];then
           systemctl start nginx
       fi
       sendmail
 ;;
 backup)
       nginx_status=$(ps -ef|grep -Ev "grep|$0"|grep '\bnginx\b'|wc -l)
       if [ $nginx_status -gt 0 ];then
         systemctl stop nginx
       fi
 ;;
 *)
       echo "Usage:$0 master|backup VIP"
 ;;
esac
[root@localhost ~]# ll
总用量 16
-rw-------. 1 root root 1204 9月  27 14:48 anaconda-ks.cfg
-rw-r--r--  1 root root  140 10月 31 11:12 check_n.sh
-rw-r--r--  1 root root 3700 3月   6 2018 index.html
-rw-r--r--  1 root root  557 10月 31 11:13 nptofy.sh
[root@localhost ~]# chmod +x check_n.sh nptofy.sh 
[root@localhost ~]# ll
总用量 16
-rw-------. 1 root root 1204 9月  27 14:48 anaconda-ks.cfg
-rwxr-xr-x  1 root root  140 10月 31 11:12 check_n.sh
-rw-r--r--  1 root root 3700 3月   6 2018 index.html
-rwxr-xr-x  1 root root  557 10月 31 11:13 nptofy.sh
[root@localhost ~]# mkdir /kongbai
[root@localhost ~]# mv check_n.sh nptofy.sh /kongbai/

5.2slave编写脚本

脚本内容一致，直接将master段脚本发送过来即可

[root@localhost ~]# ll
总用量 16
-rw-------. 1 root root 1201 10月 16 19:40 anaconda-ks.cfg
-rwxr-xr-x  1 root root  140 10月 31 11:17 check_n.sh
-rw-r--r--  1 root root 3700 3月   6 2018 index.html
-rwxr-xr-x  1 root root  556 10月 31 11:17 nptofy.sh
[root@localhost ~]# mv check_n.sh nptofy.sh /etc/keepalived/

6.keepalived加入监控脚本的配置

6.1 MASTER端

[root@localhost ~]#  vim /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
   router_id lb01

   script nginx_check {
   script "/kongbai/check_n.sh"
   interval 1
   weight -20
}

vrrp_instance VI_1 {
    state MASTER
    interface ens33
    virtual_router_id 51
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
	192.168.89.150
    }
    track_script {
    nginx_check
    }
    notify_master "/etc/keepalived/notify.sh master 192.168.89.150"
    notify_backup "/etc/keepalived/notify.sh backup 192.168.89.150"
}

virtual_server 192.168.89.150 80 {
    delay_loop 6
    lb_algo rr
    lb_kind DR
    persistence_timeout 50
    protocol TCP
    
    real_server 192.168.89.130 80 {
        weight 1
        TCP_CHECK {
	    connect_port 80
 	    connect_timeout 3
 	    nb_get_retry 3
 	    delay_before_retry 3
        }
    }
    real_server 192.168.89.129 80 {
        weight 1
        TCP_CHECK {
 	    connect_port 80
 	    connect_timeout 3
 	    nb_get_retry 3
 	    delay_before_retry 3
       }
    }
}

[root@localhost ~]# systemctl restart keepalived

6.2 SLAVE端

备用段不许需要检测nginx 的是否正常，升级为master是自动启动nginx，降级是关闭

[root@localhost ~]#  vim /etc/keepalived/keepalived.conf
···
vrrp_instance VI_1 {
    state MASTER
    interface ens33
    virtual_router_id 51
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
	192.168.89.150
    }
    track_script {
    nginx_check
    }
    notify_master "/etc/keepalived/notify.sh master 192.168.89.150"
    notify_backup "/etc/keepalived/notify.sh backup 192.168.89.150"
}
virtual_server 192.168.89.150 80 {
    delay_loop 6
    lb_algo rr
    lb_kind DR
    persistence_timeout 50
    protocol TCP
    
    real_server 192.168.89.130 80 {
        weight 1
        TCP_CHECK {
	    connect_port 80
 	    connect_timeout 3
 	    nb_get_retry 3
 	    delay_before_retry 3
        }
    }
    real_server 192.168.89.129 80 {
        weight 1
        TCP_CHECK {
 	    connect_port 80
 	    connect_timeout 3
 	    nb_get_retry 3
 	    delay_before_retry 3
       }
    }
}
    
[root@localhost ~]# systemctl restart keepalived

7.查看效果

[root@localhost ~]# curl http://192.168.89.150
master:192.168.89.130
[root@localhost ~]# curl http://192.168.89.130
master:192.168.89.130
[root@localhost ~]# curl http://192.168.89.129
slave:192.168.89.129
[root@localhost ~]# nginx -s stop
[root@localhost ~]# curl http://192.168.89.150
curl: (7) Failed connect to 192.168.89.150:80; 拒绝连接    等待一会即可
[root@localhost ~]# curl http://192.168.89.150
slave:192.168.89.129
[root@localhost ~]# nginx
[root@localhost ~]# curl http://192.168.89.150
master:192.168.89.130
Empty_city_dreams
关注
专栏目录
Nginx+Keepalived实现nginx高可用详细步骤.docx
12-15
Keepalived是虚拟IP管理器，我们需要配置它以便实现高可用性。我们可以在keepalived.conf文件中配置virtual_server、vrrp_script和track_script等参数。 五、Nginx状态检测脚本 我们需要编写一个Nginx状态检测脚本...
Nginx+Keepalived实现nginx高可用和负载均衡详细步骤
02-10
而Keepalived则是一款网络服务监控工具，用于在主服务器故障时将流量切换到备份服务器，从而实现高可用性。以下将详细介绍如何在Redhat Linux 7.9环境下，结合Nginx和Keepalived搭建高可用和负载均衡的系统。 **一...
利用Keepalived实现Nginx高可用
11-14
【利用Keepalived实现Nginx高可用】 在IT领域，确保服务的高可用性是至关重要的，尤其是在处理Web服务时。Nginx作为一个流行的反向代理和负载均衡器，通常需要保持持续运行以避免单点故障。在这个场景中，我们可以...
zabbix监控mysql主从同步
Empty_city_dreams的博客
11-12 1815
#ZABBIX监控mysql主从状态 安装配置 IP zabbix-server 192.168.89.130 mysql主端/zabbix-agentd 192.168.89.135 mysql从端/zabbix-agentd 192.168.89.129 1.YUM安装zabbix-agentd添加监控项（192.168.89.135和192.168.89.129都...
nginx配置文件
Empty_city_dreams的博客
10-25 1478
ip 设备 192.168.89.130 NGINX 192.168.89.129 PHP 1.配置ip访问控制 allow：设定允许哪台或哪些主机访问，多个参数间用空格隔开 deny：设定不允许哪台或哪些主机访问，多个参数间用空格隔开 [root@localhost nginx-1.12.0]# cd /usr/local/nginx/conf/ [root@localh...
ProxySQL实现读写分离配置
Empty_city_dreams的博客
11-26 1309
文章目录1.安装mysql（略）2.配置mysql主从复制(192.168.161.166)2.1修改 mysql/master的配置文件2.2创建同步用账户(192.168.161.166)2.3修改 mysql/slave的配置文件(192.168.161.162)2.4 配置同步(192.168.161.162)2.5 查看slave状态3.ProxySQL实现读写分离配置3.1安装prox...
LNMP分开部署安装
Empty_city_dreams的博客
10-22 1068
lnmp分开安装 ip 设备 192.168.89.132 NGINX 192.168.89.129 PHP 192.168.89.131 MYSQL 1.安装mysql(192.168.89.131) 1.1下载mysql [root@localhost ~]# cd /usr/src/ [root@localhost src]# wget https://downl...
cobbler配置
Empty_city_dreams的博客
10-26 752
cobbler配置 1.配置163网络yum源,安装cobbler相关软件 [root@localhost ~]# cd /etc/yum.repos.d/ [root@localhost yum.repos.d]# ls CentOS-Base.repo CentOS-Debuginfo.repo CentOS-Media.repo CentOS-Vault.repo CentOS-C...
2018-9-11日常作业：SAMBA搭建共享服务器
Empty_city_dreams的博客
09-11 747
1.搭建匿名用户共享服务器 2.搭建用户认证共享服务器 要求： 1.不论是匿名用户还是用户认证共享，均要在客户机验证结果 2.用户认证共享需要映射系统用户为一个虚拟用户 配置环境 主机端 客户端 192.168.88.128 192.168.88.129 1.搭建匿名用户共享服务器 1.搭建前准备 [root@localhost ~]...
vsftpd配置虚拟，本地，匿名用户
Empty_city_dreams的博客
09-13 678
1.安装vsftpd 2.配置匿名用户ftp 3.配置虚拟用户ftp 4.配置本地用户ftp 5.写明ftp的使用场景以及如何安装与配置 要求： 1.安装并配置完成后要使用ftp客户端工具登录配置 1.ftp的使用场景 1.服务器与用户端之间进行档案的传输 2.数据的备份 2.安装与配置 1.安装前准备 [root@localhost ~]# yum insta...
zabbix监控日志文件
Empty_city_dreams的博客
10-15 676
1.写脚本 链接: https://pan.baidu.com/s/1iH6_PQGyzMaGk-YSqrQZ2g 提取码: 5j52 2.测试脚本 [root@localhost ~]# cd /tmp/ [root@localhost tmp]# ll 总用量 480 -rw-r--r-- 1 zabbix zabbix 67 10月 15 15:38 aaa.log ...
zabbxi邮件报警
Empty_city_dreams的博客
10-15 663
1.zabbxi邮件报警 1、Zabbix服务端只是单纯的发送报警邮件到指定邮箱，发送报警邮件的这个邮箱账号是Zabbix服务端的本地邮箱账号（例如：zabbix@zabbix.com），只能发送，不能接收外部邮件。 2、使用一个可以在互联网上正常收发邮件的邮箱账号（例如：163邮箱，qq邮箱，新浪邮件等），通过在Zabbix服务端中设置，使其能够发送报警邮件到指定邮箱。 1.内部邮件报警 1.1...
vsftpd的配置脚本
Empty_city_dreams的博客
09-14 637
#!/bin/bash LUJING=&quot;/etc/vsftpd/vsftpd_login&quot; LUJING2=&quot;/etc/pam.d/vsftpd.vu&quot; echo ====================================================== read -p &quot;请输入ftp用户:&quot; ftp_user if [ `echo ${#ftp_user}` -eq 0 ];t..
zabbix-添加监控项
Empty_city_dreams的博客
10-15 479
zabbix-添加监控项 1.编码安装zabbix添加监控项 添加监控项不需要想安装服务端那么麻烦，只需要启动zabbix-agent服务即可，保证只要有10050端口起来即可，这里可以看看我的上一篇文章 https://blog.csdn.net/Empty_city_dreams/article/details/82977299 2.YUM安装zabbix添加监控项 2.1关闭防火请和seli...
KVM虚拟化
Empty_city_dreams的博客
12-16 478
环境 IP rhel7 192.168.160.129 1.kvm安装 1.1 关闭防火墙和SElinux [root@localhost ~]# systemctl restart firewalld [root@localhost ~]# systemctl disable firewalld Removed symlink /etc/systemd/system/mu...
lnmt部署
Empty_city_dreams的博客
10-29 375
1.nginx安装与配置(192.168.89.130) 1.1创建nginx用户 [root@localhost ~]# groupadd -r -g 955 nginx [root@localhost ~]# useradd -M -s /sbin/nologin -g 955 -u 955 nginx [root@localhost ~]# id nginx uid=955(nginx) g...
2018-9-6日常作业：几个有意思的脚本
Empty_city_dreams的博客
09-07 340
1.编写shell脚本，实现1-100的猜数字游戏 #!/bin/bash n=$[$RANDOM%100] while : do read -p &quot;请输入一个数字: &quot; n1 n2=`echo $n1 | sed 's/[0-9]//g'` Times=$[$Times + 1] if [ -z $n1 ] then echo...
keepalived安装部署
Empty_city_dreams的博客
10-31 333
keepalived安装 环境 设备 ip地址 centos7 192.168.89.130 centos7 192.168.89.129 1.两台设备都安装keepalived [root@localhost ~]# yum install keepalived -y [root@localhost ~]# rpm -ql keepalived /etc/keepaliv...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值