实现LVS-NAT

author：JevonWei
版权声明：原创作品

---

实现NAT模式的轮询rr模式

网络拓扑图如下

网络环境

RS1 192.168.198.138
RS2 192.168.198.120
LVS：
    DIP 192.168.198.128
    vip 172.16.253.105
路由R1：
    172.16.253.166
    192.168.80.128
Client 192.168.80.129
RS1,RS2的网关指向192.168.198.128，client的网关指向R1

VS

添加路由转发选项
[root@VS ~]# vim /etc/sysctl.d/99-sysctl.conf  
    net.ipv4.ip_forward=1
[root@VS ~]# sysctl -p /etc/sysctl.d/99-sysctl.conf \\刷新生效
net.ipv4.ip_forward = 1 
[root@VS ~]# route add  -net 192.168.80.0/24 gw 172.16.253.166
[root@VS ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.198.1   0.0.0.0         UG    100    0        0 ens34
0.0.0.0         192.16.0.1      0.0.0.0         UG    101    0        0 ens33
172.16.0.0      0.0.0.0         255.255.0.0     U     100    0        0 ens33
192.16.0.1      0.0.0.0         255.255.255.255 UH    100    0        0 ens33
192.168.80.0    172.16.253.166  255.255.255.0   UG    0      0        0 ens33
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0
192.168.198.0   0.0.0.0         255.255.255.0   U     100    0        0 ens34

配置LVS的调度算法为rr轮询
[root@VS ~]# yum -y install ipvsadm 
[root@VS ~]# ipvsadm -A -t 172.16.253.105:80 -s rr \\-t指定TCP协议，-s指定调度算法为轮询
[root@VS ~]# ipvsadm -a -t 172.16.253.105:80 -r 192.168.198.138 -m \\添加192.168.198.138 RS1服务器到LVS调度，-m 为nat类型
[root@VS ~]# ipvsadm -a -t 172.16.253.105:80 -r 192.168.198.120 -m 
[root@VS ~]# ipvsadm -Ln \\查看LVS调度信息
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  172.16.253.105:80 rr
  -> 192.168.198.120:80           Masq    1      0          0         
  -> 192.168.198.138:80           Masq    1      0          0
[root@VS ~]# curl 192.168.198.120
welcome to RS2
[root@VS ~]# curl 192.168.198.138
welcome to RS1

修改LVS的调度模式为wrr
[root@VS ~]# ipvsadm -E -t 172.16.253.105:80 -s wrr
[root@VS ~]# ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  172.16.253.105:80 wrr
  -> 192.168.198.120:80           Masq    1      0          0         
  -> 192.168.198.138:80           Masq    1      0          0
[root@VS ~]# ipvsadm -e -t 172.16.253.105:80 -r 192.168.198.138 -m -w 3 \\修改192.168.198.138 RS1主机的权重为3，-w 指定权重，-m为nat算法，192.168.198.120权重仍为1
[root@VS ~]# ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  172.16.253.105:80 wrr
  -> 192.168.198.120:80           Masq    1      0          0         
  -> 192.168.198.138:80           Masq    3      0          0 

RS1

[root@RS1 ~]# yum -y install httpd
[root@RS1 ~]# vim /var/www/html/index.html 
    welcome to RS1
[root@RS1 ~]# service httpd start

RS2

[root@RS2 ~]# yum -y install httpd
[root@RS2 ~]# vim /var/www/html/index.html 
    welcome to RS2
[root@RS2 ~]# service httpd start

路由器R1

[root@R1 ~]# vim /etc/sysctl.d/99-sysctl.conf  
    net.ipv4.ip_forward=1
[root@R1 ~]# sysctl -p /etc/sysctl.d/99-sysctl.conf 
net.ipv4.ip_forward = 1
[root@R1 ~]# route add -net 192.168.80.0/24 gw 192.168.80.129
[root@R1 ~]# route add -net 172.16.0.0/16 gw 172.16.253.105 
[root@R1 ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.80.0    192.168.80.129  255.255.255.0   UG    0      0        0 eth1
192.168.80.0    0.0.0.0         255.255.255.0   U     1      0        0 eth1
172.16.0.0      172.16.253.105  255.255.0.0     UG    0      0        0 eth0
172.16.0.0      0.0.0.0         255.255.0.0     U     1      0        0 eth0
0.0.0.0         172.16.0.1      0.0.0.0         UG    0      0        0 eth0

client

[root@client ~]# route add -net 172.16.0.0/16 gw 192.168.80.128

访问rr轮询算法
[root@client ~]# for i in {1..10};do curl 172.16.253.105;sleep 1;done 
welcome to RS2
welcome to RS1
welcome to RS2
welcome to RS1
welcome to RS2

访问wrr权重算法
[root@client ~]# for i in {1..10};do curl 172.16.253.105;sleep 1;done
welcome to RS2
welcome to RS1
welcome to RS1
welcome to RS1
welcome to RS2
welcome to RS1
welcome to RS1
welcome to RS1
welcome to RS2
welcome to RS1

查看LVS的信息

[root@VS ~]# ipvsadm -Ln --stats
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port               Conns   InPkts  OutPkts  InBytes OutBytes
  -> RemoteAddress:Port
TCP  172.16.253.105:80                  29      158      139    10710    15609
  -> 192.168.198.120:80                 15       82       69     5554     7923
  -> 192.168.198.138:80                 14       76       70     5156     7686
[root@VS ~]# ipvsadm -Ln --connection \\查看网络连接数
[root@VS ~]# cut -d " " -f1 /var/log/httpd/access_log | sort -nr | uniq -c| sort -n \\查看网络连接