k8s 集群版搭建（一)之 nginx+keepalived

demonlamei

已于 2024-03-03 19:12:37 修改

阅读量122

点赞数 1

分类专栏： k8s 文章标签： kubernetes nginx 容器

于 2024-02-29 11:54:26 首次发布

本文链接：https://blog.csdn.net/demonlamei/article/details/136363278

版权

k8s 专栏收录该内容

15 篇文章 0 订阅

订阅专栏

本文介绍了如何在两台机器上安装Nginx和Keepalived，并配置VRRP实现主备切换，以及如何在Nginx中设置4层转发，确保到KubernetesAPI服务器的连接高可用。

摘要由CSDN通过智能技术生成

机器信息

机器ip	功能
192.168.1.230	nginx+keepalived主
192.168.1.231	nginx+keepalived备
192.168.1.250	服务ip

安装nginx+keepalived

yum install keepalived nginx-all-modules.noarch -y

keepalived配置

#主节点
[root@lvs1 ~]# more /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
   router_id k8s
   #vrrp_skip_check_adv_addr
   #vrrp_strict
   #vrrp_garp_interval 0
   #vrrp_gna_interval 0
}

vrrp_instance VI_1 {
    state MASTER
    interface eth0
    virtual_router_id 51
    priority 100
    #mcast_src_ip 192.168.1.230
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 123456
    }
    virtual_ipaddress {
        192.168.1.250
    }
}

#备节点
[root@lvs2 ~]# cat /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
   router_id k8s
   #vrrp_skip_check_adv_addr
   #vrrp_strict
   #vrrp_garp_interval 0
   #vrrp_gna_interval 0
}

vrrp_instance VI_1 {
    state BACKUP
    interface eth0
    virtual_router_id 51
    priority 50
    #mcast_src_ip 192.168.1.231
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 123456
    }
    virtual_ipaddress {
        192.168.1.250
    }
}

#主备节点均执行
#启动keepalived
systemctl start keepalived
#开机自启
systemctl enable keepalived

NGINX 4层转发配置

#在nginx全局路径下增加如下配置，与http模块平级

stream{

upstream tcp_k8s {
        server 192.168.1.200:6443 max_fails=3 fail_timeout=10s;
        server 192.168.1.201:6443 max_fails=3 fail_timeout=10s;
        server 192.168.1.202:6443 max_fails=3 fail_timeout=10s;
        
}


server {
    listen     6443;
    #连接超时时间
    proxy_connect_timeout 5s;
    #超时时间
    proxy_timeout 10s;
    proxy_pass tcp_k8s;
}

}