Lvs—dr 类型负载均衡实验
实验说明:
==本实验所用到的所有IP(CIP、VIP、DIP、RIP1、RIP2)均需在同一逻辑网络内,不考虑负载均衡器分隔网络(即VIP与DIP在不同逻辑网络)的情况。==
绘制拓扑图
实验步骤:
由于本实验步骤较多,且全部为标准化操作,通过写脚本,在对应的VS或RS上执行对应的脚本即可完成实验的绝大部分。
实验准备:
- VS与RS均只需配置一块网卡,且处于同一VLan
- 两个RS上需提前准备好web服务
Virtual Server初始化配置脚本:
#!/bin/bash
#
read -p "set VIP_ADDRESS : " VIP_ADDR
echo "VIP_ADDRESS is : ${VIP_ADDR}"
MASK='255.255.255.255'
echo "Mask is : $MASK"
IFACE='ens34'
PORT='80'
RS1_ADDR='172.16.50.2'
RS2_ADDR='172.16.50.3'
SCHEDULER='wrr'
LVS_TYPE='-g'
read -p "choose action between start and stop ? " ACTION
case $ACTION in
start)
ifconfig $IFACE ${VIP_ADDR} netmask $MASK broadcast ${VIP_ADDR} up
iptables -F
ipvsadm -A -t ${VIP_ADDR}:$PORT -s $SCHEDULER
ipvsadm -a -t ${VIP_ADDR}:$PORT -r ${RS1_ADDR} ${LVS_TYPE} -w 1
ipvsadm -a -t ${VIP_ADDR}:$PORT -r ${RS2_ADDR} ${LVS_TYPE} -w 1
;;
stop)
ipvsadm-save > /etc/sysconfig/ipvsadm
ifdown $IFACE
;;
*)
echo "Usage $(basename $0) start|stop "
exit 1
;;
esac
Real Server初始化脚本如下:
#!/bin/bash
#
read -p "set VIP_ADDRESS : " VIP_ADDRESS
echo ${VIP_ADDRESS}
MASK='255.255.255.255'
read -p "choose start or stop ? " ACTION
case $ACTION in
start)
echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore
echo 1 > /proc/sys/net/ipv4/conf/lo/arp_ignore
echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce
echo 2 > /proc/sys/net/ipv4/conf/lo/arp_announce
ifconfig lo:0 ${VIP_ADDRESS} netmask $MASK broadcast ${VIP_ADDRESS} up
route add -host ${VIP_ADDRESS} dev lo:0
;;
stop)
ifdown lo:0
route del -host 172.16.50.10 dev lo:0
echo 0 > /proc/sys/net/ipv4/conf/all/arp_ignore
echo 0 > /proc/sys/net/ipv4/conf/lo/arp_ignore
echo 0 > /proc/sys/net/ipv4/conf/all/arp_announce
echo 0 > /proc/sys/net/ipv4/conf/lo/arp_announce
;;
*)
echo "Usage $(basename $0) start|stop "
exit 1
;;
esac
实验结果测试:
# for ((i=1;i<=10;i++)) do curl 172.16.50.10;done
实验扩展:
- 可通过在VS上修改ipsadm规则实现“保持连接”效果:
# ipvsadm -E -t 172.16.50.10:80 -s wrr -p 10
- 如果多个RS提供多个不同的服务,可通过FireWallMark 实现将多种不同服务统一调度效果:
# iptables -t mangle -A PREROUTING -d 172.16.50.10 -p tcp -m multiport --dports 80,443 -j --set-mark 5
# ipvsadm -A -f 5 -s wrr
- 另外还有ipvsadm规则保存及重载,对后端RS健康状态监测实现高可用等其他扩展。