LVS(TUN)+keepalived部署文档（二）

 

u       Real机配置

[root@localhost ~]# vi /root/real.sh

 

#!/bin/bash

#description : start realserver

VIP=192.168.15.253

/etc/rc.d/init.d/functions

case "$1" in

start)

echo " start LVS of REALServer"

/sbin/modprobe ipip

/sbin/ifconfig tunl0 $VIP broadcast $VIP netmask 255.255.255.255 up

/sbin/route add -host $VIP dev tunl0

echo "1" >/proc/sys/net/ipv4/conf/tunl0/arp_ignore

echo "2" >/proc/sys/net/ipv4/conf/tunl0/arp_announce

echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore

echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce

sysctl -p >/dev/null 2>&1

;;

stop)

#echo " stop LVS of REALServer"

echo "close LVS Directorserver"

echo "0" >/proc/sys/net/ipv4/conf/tunl0/arp_ignore

echo "0" >/proc/sys/net/ipv4/conf/tunl0/arp_announce

echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore

echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce

/sbin/ifconfig tunl0 down

/sbin/modprobe -r ipip

;;

*)

echo "Usage: $0 {start|stop}"

exit 1

esac

 

 

u       Mster keepalived配置

只需要将更改lb_kind TUN，backup机对应修改即可！

[root@localhost ~]# vi /etc/keepalived/keepalived.conf

 

! Configuration File for keepalived

 

global_defs {

   notification_email {

     88fly@163.com

     chenhaibo@myhexin.com

     sysadmin@firewall.loc

   }

   notification_email_from Alexandre.Cassen@firewall.loc

   smtp_server smtp.163.com

   smtp_connect_timeout 30

   router_id LVS_DEVEL

}

 

vrrp_instance VI_1 {

    state MASTER

    interface eth0

    virtual_router_id 51

    priority 100

    advert_int 5

    authentication {

        auth_type PASS

        auth_pass 1111

    }

    virtual_ipaddress {

        192.168.15.253

    }

}

 

virtual_server 192.168.15.253 80 {

    #delay_loop 10

    lb_algo wlc

    lb_kind TUN

#    persistence_timeout 1

    protocol TCP

#   sorry_server 127.0.0.1 80

 

    real_server 192.168.15.233 80 {

        weight 1

        TCP_CHECK {

        connect_timeout 1

        nb_get_retry 3

        delay_before_retry 3

        connect_port 80

        }

    }

    real_server 192.168.15.234 80 {

        weight 1

        TCP_CHECK {

        connect_timeout 1

        nb_get_retry 3

        delay_before_retry 3

        connect_port 80

        }

    }

}

注：测试时将keepavlived里配置信息（weight、connect_timeout等）可自行设置。若要查看测试效果，则设置 （connect_timeout 1 、weight 1 ，便于查看切换)