脑裂
当两台高可用服务器在指定的时间内,无法互相检测到对方心跳而各自启动故障转移功能,取得了资源以及服务的所有权,而此时的两台高可用服务器对都还活着并作正常运行,这样就会导致同一个服务在两端同时启动而发生冲突的严重问题,最严重的就是两台主机同时占用一个VIP的地址(类似双端导入概念),当用户写入数据的时候可能会分别写入到两端,这样可能会导致服务器两端的数据不一致或造成数据的丢失,这种情况就称为裂脑,也有的人称之为分区集群或者大脑垂直分隔
脑裂产生的原因
一般来说,脑裂的发生,有以下几种原因:
高可用服务器对之间心跳线链路发生故障,导致无法正常通信 因心跳线坏了(包括断了,老化) 因网卡及相关驱动坏了,ip配置及冲突问题(网卡直连)
因心跳线间连接的设备故障(网卡及交换机) 因仲裁的机器出问题(采用仲裁的方案) 高可用服务器上开启了
iptables防火墙阻挡了心跳消息传输 高可用服务器上心跳网卡地址等信息配置不正确,导致发送心跳失败
其他服务配置不当等原因,如心跳方式不同,心跳广插冲突、软件Bug等 Keepalived配置里同一 VRRP实例如果
virtual_router_id两端参数配置不一致也会导致裂脑问题发生。
脑裂解决方案
在实际生产环境中,我们可以从以下几个方面来防止裂脑问题的发生:
1.同时使用串行电缆和以太网电缆连接,同时用两条心跳线路,这样一条线路坏了,另一个还是好的,依然能传送心跳消息
当检测到裂脑时强行关闭一个心跳节点(这个功能需特殊设备支持,如Stonith、feyce)。相当于备节点接收不到心跳消患,通过单独的线路发送关机命令关闭主节点的电源
2.做好对裂脑的监控报警(如邮件及手机短信等或值班).在问题发生时人为第一时间介入仲裁,降低损失。例如,百度的监控报警短信就有上行和下行的区别。报警消息发送到管理员手机上,管理员可以通过手机回复对应数字或简单的字符串操作返回给服务器.让服务器根据指令自动处理相应故障,这样解决故障的时间更短。
当然,在实施高可用方案时,要根据业务实际需求确定是否能容忍这样的损失。对于一般的网站常规业务.这个损失是可容忍的。
环境说明
zabbix server | 192.168.11.136 |
---|---|
备keepalived zabbix anget | 192.168.11.120 |
主 keepalived | 192.168.11.137 |
在zabbix客户端配置keepalived备
[root@localhost ~]# vi /etc/keepalived/keepalived.conf
[root@localhost ~]# dnf -y install keepalived
! Configuration File for keepalived
global_defs {
router_id lb02
}
vrrp_instance VI_1 {
state BACKUP
interface ens160
virtual_router_id 51
priority 90
advert_int 1
authentication {
auth_type PASS
auth_pass 12345678
}
virtual_ipaddress {
192.168.11.119
}
}
virtual_server 192.168.11.119 80 {
delay_loop 6
lb_algo rr
lb_kind DR
persistence_timeout 50
protocol TCP
real_server 192.168.11.137 80 {
weight 1
TCP_CHECK {
connect_port 80
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
real_server 192.168.11.120 80 {
weight 1
TCP_CHECK {
connect_port 80
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
}
[root@localhost ~]# systemctl start keepalived
[root@localhost ~]# systemctl enable keepalived
配置keepalived主
[root@localhost ~]# dnf -y install keepalived
[root@localhost ~]# vi /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {
router_id lb01
}
vrrp_instance VI_1 {
state BACKUP
interface ens160
virtual_router_id 51
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 12345678
}
virtual_ipaddress {
192.168.11.119
}
}
virtual_server 192.168.11.119 80 {
delay_loop 6
lb_algo rr
lb_kind DR
persistence_timeout 50
protocol TCP
real_server 192.168.11.137 80 {
weight 1
TCP_CHECK {
connect_port 80
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
real_server 192.168.11.120 80 {
weight 1
TCP_CHECK {
connect_port 80
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
}
[root@localhost ~]# systemctl start keepalived
[root@localhost ~]# systemctl enable keepalived
查看vip在哪里
[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 00:0c:29:7c:62:57 brd ff:ff:ff:ff:ff:ff
inet 192.168.11.120/24 brd 192.168.11.255 scope global noprefixroute ens160
valid_lft forever preferred_lft forever
inet 192.168.11.119/32 scope global ens160
valid_lft forever preferred_lft forever
inet6 fe80::20c:29ff:fef0:be77/64 scope link
valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 52:54:00:f8:0e:33 brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
link/ether 52:54:00:f8:0e:33 brd ff:ff:ff:ff:ff:ff
[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 00:0c:29:f0:be:77 brd ff:ff:ff:ff:ff:ff
inet 192.168.11.137/24 brd 192.168.11.255 scope global noprefixroute ens160
valid_lft forever preferred_lft forever
inet 192.168.11.119/32 scope global ens160
valid_lft forever preferred_lft forever
inet6 fe80::20c:29ff:fef0:be77/64 scope link
valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 52:54:00:f8:0e:33 brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
link/ether 52:54:00:f8:0e:33 brd ff:ff:ff:ff:ff:ff
编写监控keppalived脚本
[root@localhost ~]# mkdir /scripts
[root@localhost ~]# vi /scripts/check_keepalived.sh
[root@localhost ~]# cat /scripts/check_keepalived.sh
#!bin/bash
if [ `ip a show ens160 |grep 192.168.11.119|wc -l` -ne 0 ]
then
echo "1"
else
echo "0"
fi
[root@localhost ~]# chmod +x /scripts/check_keepalived.sh
[root@localhost ~]# chown -R zabbix.zabbix /scripts/check_keepalived.sh
测试脚本
[root@localhost ~]# su - zabbix -s /bin/bash
su: warning: cannot change directory to /home/zabbix: No such file or directory
[zabbix@localhost root]$ bash /scripts/check_keepalived.sh
0
修改配置文件,将脚本写入配置文件
[root@localhost ~]# vi /usr/local/etc/zabbix_agentd.conf
UnsafeUserParameters=1
UserParameter=check_keepalived,/bin/bash /scripts/check_keepalived.sh
[root@localhost ~]# pkill zabbix
[root@localhost ~]# zabbix_agentd
配置zabbix页面
触发验证
修改virtual_router_id两端参数配置
[root@localhost ~]# vim /etc/keepalived/keepalived.conf
virtual_router_id 50
[root@localhost ~]# vim /etc/keepalived/keepalived.conf
interface ens160
virtual_router_id 51
priority 100
[root@localhost ~]# systemctl restart keepalived
[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:42:63:a3 brd ff:ff:ff:ff:ff:ff
inet 192.168.11.11.120/24 brd 192.168.11.255 scope global dynamic noprefixroute ens160
valid_lft 1489sec preferred_lft 1489sec
inet 192.168.11.119/32 scope global ens160
valid_lft forever preferred_lft forever
inet6 fe80::1fcc:722e:fbf2:e519/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 52:54:00:5e:61:e9 brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
link/ether 52:54:00:5e:61:e9 brd ff:ff:ff:ff:ff:ff
[root@localhost ~]# systemctl restart keepalived
[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:b4:ec:0b brd ff:ff:ff:ff:ff:ff
inet 192.168.11.137/24 brd 192.168.11.255 scope global dynamic noprefixroute ens160
valid_lft 939sec preferred_lft 939sec
inet6 fe80::bab5:57cc:73a1:f92c/64 scope link noprefixroute
valid_lft forever preferred_lft forever
inet 192.168.11.119/32 scope global ens160
valid_lft forever preferred_lft forever
inet6 fe80::1fcc:722e:fbf2:e519/64 scope link noprefixroute