keepalived高可用脚本配置自动切换+脑裂

环境说明

系统信息主机名IP
rhel8zabbix192.168.236.136
rhel8MASTER192.168.236.131
rhel8SLAVE192.168.236.135
keepalived安装

配置主keepalived

//关闭防火墙与SELINUX
[root@MASTER ~]# systemctl stop firewalld
[root@MASTER ~]# systemctl disable firewalld
[root@MASTER ~]# setenforce 0
[root@MASTER ~]# sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config

//配置网络源
[root@MASTER ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo
[root@MASTER ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
[root@MASTER ~]# sed -i 's/\$releasever/8/g' /etc/yum.repos.d/CentOS-Base.repo
[root@MASTER ~]# yum install -y https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
[root@MASTER ~]# sed -i 's|^#baseurl=https://download.fedoraproject.org/pub|baseurl=https://mirrors.aliyun.com|' /etc/yum.repos.d/epel*
[root@MASTER ~]# sed -i 's|^metalink|#metalink|' /etc/yum.repos.d/epel*

//安装keepalived
[root@MASTER ~]# yum -y install keepalived

在主备机上分别安装httpd

在master上安装httpd

[root@MASTER ~]# yum -y install httpd
[root@MASTER ~]# echo "web1" > /var/www/html/index.html
[root@MASTER ~]# systemctl start httpd
[root@MASTER ~]# ss -antl
State    Recv-Q   Send-Q     Local Address:Port     Peer Address:Port   
LISTEN   0        128              0.0.0.0:22            0.0.0.0:*      
LISTEN   0        128                    *:80                  *:*      
LISTEN   0        128                 [::]:22               [::]:*      
[root@MASTER ~]# systemctl enable --now httpd
Created symlink /etc/systemd/system/multi-user.target.wants/httpd.service → /usr/lib/systemd/system/httpd.service.

在slave上安装httpd

[root@SLAVE ~]# yum -y install httpd
[root@SLAVE ~]# echo "web2" > /var/www/html/index.html
[root@SLAVE ~]# systemctl  start httpd
[root@SLAVE ~]# ss -antl
State  Recv-Q Send-Q  Local Address:Port   Peer Address:Port                                                    
LISTEN 0      128           0.0.0.0:22          0.0.0.0:*                                                       
LISTEN 0      128                 *:80                *:*                                                       
LISTEN 0      128              [::]:22             [::]:*                                                       
[root@SLAVE ~]# systemctl enable --now httpd
Created symlink /etc/systemd/system/multi-user.target.wants/httpd.service → /usr/lib/systemd/system/httpd.service.

在备服务器上安装keepalived

//关闭防火墙与SELINUX
[root@SLAVE ~]# systemctl stop firewalld
[root@SLAVE ~]# systemctl disable firewalld
[root@SLAVE ~]#  setenforce 0
[root@SLAVE ~]# sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config

//配置网络源
[root@SLAVE ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo
[root@SLAVE ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
[root@SLAVE ~]# sed -i 's/\$releasever/8/g' /etc/yum.repos.d/CentOS-Base.repo 
[root@SLAVE ~]# yum install -y https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
[root@SLAVE ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo

keepalived监控httpd负载均衡机

keepalived通过脚本来监控httpd负载均衡机的状态

在master上编写脚本

[root@MASTER ~]# mkdir /scripts
[root@MASTER scripts]# vi check_n.sh 
#!/bin/bash
httpd_status=$(ps -ef|grep -Ev "grep|$0"|grep '\bhttpd\b'|wc -l)
if [ $httpd_status -lt 1 ];then
    systemctl stop keepalived
fi



[root@MASTER scripts]# chmod  +x check_n.sh
[root@MASTER scripts]# vi notify.sh

#!/bin/bash
VIP=$2
sendmail (){
        subject="${VIP}'s server keepalived state is translate"
        content="`date +'%F %T'`: `hostname`'s state change to master"
        echo $content | mail -s "$subject" 3091530433@qq.com
}
case "$1" in
  master)
        httpd_status=$(ps -ef|grep -Ev "grep|$0"|grep '\bhttpd\b'|wc -l)
        if [ $httpd_status -lt 1 ];then
            systemctl start httpd
        fi
        sendmail
  ;;
  backup)
        httpd_status=$(ps -ef|grep -Ev "grep|$0"|grep '\bhttpd\b'|wc -l)
        if [ $httpd_status -gt 0 ];then
            systemctl stop httpd
        fi
  ;;
  *)
        echo "Usage:$0 master|backup VIP"
  ;;
esac


[root@MASTER scripts]# chmod +x notify.sh

在slave上编写脚本

[root@localhost ~]# mkdir /scripts
[root@localhost ~]# cd /scripts/
[root@SLAVE scripts]# vim notify.sh 

#!/bin/bash
VIP=$2
sendmail (){
}
case "$1" in
  master)
        httpd_status=$(ps -ef|grep -Ev "grep|$0"|grep '\bhttpd\b'|wc -l)
        if [ $httpd_status -lt 1 ];then
            systemctl start httpd
        fi
        sendmail
  ;;
  backup)
        httpd_status=$(ps -ef|grep -Ev "grep|$0"|grep '\bhttpd\b'|wc -l)
        if [ $httpd_status -gt 0 ];then
            systemctl stop httpd
        fi
  ;;
  *)
        echo "Usage:$0 master|backup VIP"
  ;;
esac

[root@SLAVE scripts]# chmod +x notify.sh

配置keepalived加入监控脚本的配置

配置主keepalived

[root@MASTER scripts]# vi /etc/keepalived/keepalived.conf 
! Configuration File for keepalived

global_defs {
   router_id lb01
}

vrrp_script http_check {
    script "/scripts/check_n.sh"
    interval 1
    weight -20
}

vrrp_instance VI_1 {
    state MASTER
    interface ens160
    virtual_router_id 51
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 123123
    }
    virtual_ipaddress {
        192.168.236.250
    }
    notify_master "/scripts/notify.sh master 192.168.236.250"
    notify_backup "/scripts/notify.sh backup 192.168.236.250"
}

virtual_server 192.168.236.250 80 {
    delay_loop 6
    lb_algo rr
    lb_kind DR
    persistence_timeout 50
    protocol TCP

    real_server 192.168.236.135 80 {
        weight 1
        TCP_CHECK {
            connect_port 80
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
        }
    }

    real_server 192.168.236.131 80 {
        weight 1
        TCP_CHECK {
            connect_port 80
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
        }
    }
}


配置备keepalived

backup无需检测httpd是否正常,当升级为MASTER时启动httpd,当降级为BACKUP时关闭

[root@SLAVE ~]# vi /etc/keepalived/keepalived.conf 
! Configuration File for keepalived

global_defs {
   router_id lb02
}

vrrp_instance VI_1 {
    state BACKUP
    interface ens160
    virtual_router_id 51
    priority 90
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 123123
    }
    virtual_ipaddress {
        192.168.236.250
    }
    notify_master "/scripts/notify.sh master 192.168.236.250"
    notify_backup "/scripts/notify.sh backup 192.168.236.250"
}

virtual_server 192.168.236.250 80 {
    delay_loop 6
    lb_algo rr
    lb_kind DR
    persistence_timeout 50
    protocol TCP

    real_server 192.168.236.131 80 {
        weight 1
        TCP_CHECK {
            connect_port 80
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
        }
    }

    real_server 192.168.236.135 80 {
        weight 1
        TCP_CHECK {
            connect_port 80
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
        }
    }
}

在master关闭httpd keepalived
[root@MASTER ~]# systemctl  stop  httpd keepalived

[root@MASTER ~]# ss -antl
State                  Recv-Q                 Send-Q                     
LISTEN                 0                      128                        
LISTEN                 0                      128                        
[root@MASTER ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:0c:29:54:83:50 brd ff:ff:ff:ff:ff:ff
    inet 192.168.236.131/24 brd 192.168.236.255 scope global dynamic noprefixroute ens160
       valid_lft 984sec preferred_lft 984sec
    inet 192.168.236.250/32 scope global ens160
       valid_lft forever preferred_lft forever
    inet6 fe80::a19f:e276:27fd:d19/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever


//在slave查看
[root@SLAVE ~]# ss -antl
State          Recv-Q         Send-Q              
LISTEN         0              128                 
LISTEN         0              128                 
LISTEN         0              128                 
[root@SLAVE ~]# 
[root@SLAVE ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:0c:29:6e:47:6d brd ff:ff:ff:ff:ff:ff
    inet 192.168.236.135/24 brd 192.168.236.255 scope global dynamic noprefixroute ens160
       valid_lft 963sec preferred_lft 963sec
    inet6 fe80::8340:128f:869c:a4db/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
[root@SLAVE ~]# ss -antl
State    Recv-Q   Send-Q     Local Address:Port                  Peer Address:Port                
LISTEN   0        128              0.0.0.0:22                         0.0.0.0:*                   
LISTEN   0        128                 [::]:22                            [::]:* 

//在SLAVE配置脚本
[root@SLAVE ~]# cd /scripts/
[root@SLAVE scripts]# vi check_keepalived.sh 

if [ `ip a show ens33 |grep 192.168.236.250|wc -l` -ne 0 ]
then
    echo "1"
else
    echo "0"
fi

[root@SLAVE ~]#  tar  xf zabbix-5.2.0.tar.gz 
[root@SLAVE ~]# cd zabbix-5.2.0
[root@SLAVE zabbix-5.2.0]# yum -y install gcc gcc-c++ pcre-devel
[root@SLAVE zabbix-5.2.0]# useradd -r -M -s /sbin/nologin zabbix
[root@SLAVE zabbix-5.2.0]# make install
[root@SLAVE ~]# cd /usr/local/etc/
[root@SLAVE etc]# pwd
/usr/local/etc
[root@SLAVE etc]# vi zabbix_agentd.conf


zabbix页面部署

配置主机组
在这里插入图片描述
在这里插入图片描述
添加主机
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
添加触发器
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
添加媒介
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
在这里插入图片描述
在master关闭keepalived服务,看是否能触发

[root@localhost ~]# systemctl stop keepalived
  • 0
    点赞
  • 1
    收藏
    觉得还不错? 一键收藏
  • 1
    评论
配置keepalived高可用防火墙,首先需要进行环境准备。关闭防火墙、关闭SELinux和配置YUM源是必要的步骤。你可以使用以下命令来完成这些操作: 关闭防火墙: systemctl stop firewalld systemctl enable firewalld 关闭SELinux: setenforce 0 配置YUM源: 你可以直接使用keepalived软件包自带的镜像进行安装,或者在终端中执行以下命令来下载和安装keepalived: wget https://www.keepalived.org/software/keepalived-2.0.15.tar.gz yum -y install keepalived 一旦完成了环境准备,你可以开始配置keepalived高可用防火墙。具体的配置步骤和参数取决于你的具体需求和网络环境。通常,配置keepalived高可用防火墙需要以下几个步骤: 1. 配置keepalived主节点: 在主节点上,你需要编辑keepalived配置文件,通常是位于/etc/keepalived/keepalived.conf。你可以指定虚拟IP地址、监控脚本、检查间隔和故障转移等参数。确保配置文件正确并保存。 2. 配置keepalived备份节点: 在备份节点上,你需要编辑keepalived配置文件,同样位于/etc/keepalived/keepalived.conf。虽然备份节点的配置文件和主节点类似,但是在虚拟IP地址的配置上要确保与主节点不同。保存配置文件后,确保备份节点的keepalived服务已启动。 3. 启动keepalived服务: 在主节点和备份节点上,你可以使用以下命令启动keepalived服务: systemctl start keepalived 4. 进行测试: 一旦keepalived服务启动,你可以进行测试来验证高可用防火墙的配置是否正确。你可以尝试访问虚拟IP地址,并确保请求能够正确地转发到主节点或备份节点。 请注意,以上是一个简单的概述,具体的配置细节取决于你的需求和网络环境。建议你查阅keepalived的官方文档或参考其他可靠的资源,以获得更详细的配置指导。<span class="em">1</span><span class="em">2</span><span class="em">3</span> #### 引用[.reference_title] - *1* *2* *3* [nginx+keepalived高可用详解配置](https://blog.csdn.net/weixin_45894220/article/details/118808882)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 100%"] [ .reference_list ]

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值