用智能DNS实现大并发流量切割

 

1、在192.168.1.9上安装ipvsadm

 

1. # yum -y install ipvsadm

2. # ipvsadm -A -t 192.168.1.253:80 -s rr

3. # ipvsadm -a -t 192.168.1.253:80 -r 192.168.1.1 -g

4. # ipvsadm -a -t 192.168.1.253:80 -r 192.168.1.8 -g

5.  

6. # ifconfig eth0:100 192.168.1.253/32 up

2、在后端节点上配置ip和vip

 

 

1. # vim /opt/lvs-dr02.sh －－192.168.0.1-192.168.0.8

2. #!/bin/sh

3. IP=192.168.1.1

4. VIP=192.168.1.253

5. /sbin/ifconfig eth1:200 $IP up

6. /sbin/ifconfig lo:100 $VIP broadcast $VIP netmask 255.255.255.255 up

7. /sbin/route add -host $VIP dev lo:100

8. echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore

9. echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce

10. echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore

11. echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce

12. # vim /etc/rc.local

13. /bin/bash /opt/lvs-dr02.sh

3、制作智能DNS（192.168.0.254／192.168.1.254）

 

 

1. # yum -y install bind bind-utils

2. # vim /etc/named.conf

3. options {

4. listen-on { any; };

5. directory "/var/named";

6. dump-file "/var/named/data/cache_dump.db";

7. statistics-file "/var/named/data/named_stats.txt";

8. memstatistics-file "/var/named/data/named_mem_stats.txt";

9. dnssec-enable no;

10. dnssec-validation no;

11. dnssec-lookaside no;

12. bindkeys-file "/etc/named.iscdlv.key";

13.  

14. };

15.  

16. logging {

17. channel default_debug {

18. file "data/named.run";

19. severity dynamic;

20. };

21. };

22. view dxview {

23. match-clients { 192.168.0.0/24; };

24. include "/etc/named.rfc1912.zones";

25. zone "." {

26. type hint;

27. file "named.ca";

28. };

29. zone "kong.com" IN {

30. type master;

31. file "/var/named/kong.com.zone.dx";

32. allow-update { none; };

33. };

34. };

35. view wtview {

36. match-clients { 192.168.1.0/24; };

37. include "/etc/named.rfc1912.zones";

38. zone "." {

39. type hint;

40. file "named.ca";

41. };

42. zone "kong.com" IN {

43. type master;

44. file "/var/named/kong.com.zone.wt";

45. allow-update { none; };

46. };

47. };

 

1. # vim /var/named/kong.com.zone.dx

2. $TTL 1D

3. @ IN SOA dns.kong.com. admin.kong.com. (

4. 0 ; serial

5. 1D ; refresh

6. 1H ; retry

7. 1W ; expire

8. 3H ) ; minimum

9.  

10. @ IN NS dns.kong.com.

11. dns IN A 192.168.0.254

12.  

13. bbs1 IN A 192.168.0.253

14. bbs2 IN A 192.168.0.253

 

1. # vim /var/named/kong.com.zone.wt

2. $TTL 1D

3. @ IN SOA dns.kong.com. admin.kong.com. (

4. 0 ; serial

5. 1D ; refresh

6. 1H ; retry

7. 1W ; expire

8. 3H ) ; minimum

9.  

10. @ IN NS dns.kong.com.

11. dns IN A 192.168.0.254

12.  

13. bbs1 IN A 192.168.1.253

14. bbs2 IN A 192.168.1.253

15.  

16. # service named start

4、测试DNS是否准确可用

 

 

1. # host bbs1.kong.com 192.168.0.254

2. Using domain server:

3. Name: 192.168.0.254

4. Address: 192.168.0.254#53

5. Aliases:

6.  

7. bbs1.kong.com has address 192.168.0.253

8.  
9.  

10. # host bbs1.kong.com 192.168.1.254

11. Using domain server:

12. Name: 192.168.1.254

13. Address: 192.168.1.254#53

14. Aliases:

15.  

16. bbs1.kong.com has address 192.168.1.253

 

5、找两个客户端测试一下

 

1. 192.168.0.100

2. # vim /etc/resolv.conf

3. nameserver 192.168.0.254

4. # firefox http://bbs1.kong.com/

5. # firefox http://bbs2.kong.com/

6.  
7.  

8. 192.168.1.100

9. # vim /etc/resolv.conf

10. nameserver 192.168.1.254

11. # firefox http://bbs1.kong.com/

12. # firefox http://bbs2.kong.com/