lvs_keepalived安装文档

1 的前端，两台用于后台测试 web 。

LVS1-DR-Master            192.168.50.17       

LVS2-DR-BACKUP            192.168.50.18       

LVS-DR-VIP                192.168.50.33       

WEB1-Realserver          192.168.50.56       

WEB2-Realserver          192.168.50.57

2中最简单的架构，只能保证lvs前端和后台realserver）给了一份更为完美的架构。

 

 

架构图（2。可以保证交换机或机器的一个口在down掉情况下，仍能正常提供服务，消除了交换机和机器的单点故障。当然也可不绑定bond本身的功能，日后做系统，如有需要，也是一种单点的解决方案。

 

3个1000Base-X SFP口

 

1.5w

H3C S5100-48P-EI

二层

48个10/100/1000Base-T自适应以太网端口，4×10GE XFP插卡或者4端口可用于千兆以太网和光纤通道，而XFP

则支持万兆光纤接口。

3.5w

 

4和Keepalived

    #lsmod |grep ip_vs

#uname -r

2.6.9-67.Elsmp

#ln -s /usr/src/kernels/2.6.9-67.EL-i686/  /usr/src/linux

 

#tar zxvf ipvsadm-1.24.tar.gz

#cd ipvsadm-1.24

#make && make install

#find / -name ipvsadm  # 查看keepalived位置        

   

#cp /usr/local/etc/rc.d/init.d/keepalived /etc/rc.d/init.d/

#cp /usr/local/etc/sysconfig/keepalived /etc/sysconfig/

#mkdir /etc/keepalived

#cp /usr/local/etc/keepalived/keepalived.conf /etc/keepalived/

#cp /usr/local/sbin/keepalived /usr/sbin/

#service keepalived start|stop     #做成系统启动服务方便管理.

5、realserver端安装，只需安装ipvsadm

 下载及安装

     #mkdir /usr/local/src/lvs

     #cd /usr/local/src/lvs

     #wget http://www.linuxvirtualserver.org/software/kernel-2.6/ipvsadm-1.24.tar.gz

    #lsmod |grep ip_vs

#uname -r

2.6.9-67.Elsmp

 

 

#ln -s /usr/src/kernels/2.6.9-67.EL-i686/  /usr/src/linux

#tar zxvf ipvsadm-1.24.tar.gz

#cd ipvsadm-1.24

#make && make install

#find / -name ipvsadm  # 机器的配置,其他选项不用动，按下面来就可以了

# echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf

#sysctl -p

 

1> master配置

#Configuration File for keepalived

global_defs {

    notification_email {

        niulw@ifeng.com

    }

    notification_email_from lvs_check@ifeng.com

    smtp_server 127.0.0.1

    smtp_connect_timeout 30

    lvs_id LVS_ONE

}

    

vrrp_instance VI_1 {

    state MASTER

    interface bond0

    lvs_sync_daemon_interface bond0

    virtual_router_id 50

    priority 200

    advert_int 1

    smtp_alert

    garp_master_delay 1

    preempt_delay 1

    authentication {

        auth_type PASS

        auth_pass 1111

    }

    virtual_ipaddress {

      192.168.50.33/24 brd + dev bond0 scope global

    }

}

 

virtual_server 192.168.50.33 80 {

    delay_loop 5                

    lb_algo wlc              

    lb_kind DR             

 

    protocol TCP          

    real_server 192.168.50.56 80 {

         weight 1

         TCP_CHECK {

            connect_timeout 3

            nb_get_retry 3

            delay_before_retry 3

            connect_port 80

         }

    }

    real_server 192.168.50.57 80 {

         weight 1

         TCP_CHECK {

            connect_timeout 3

            nb_get_retry 3

            delay_before_retry 3

            connect_port 80

         }

    }

}

2> backup 配置

lvs2和 priority）。

state BACKUP

priority 50

 

7前端能探测到，而realserver则不能提供正常服务

#!/bin/bash

# description: Config realserver lo and apply noarp

      

VIP=192.168.50.33

 

. /etc/rc.d/init.d/functions

 

case "$1" in

start)

       ifconfig lo:0 $VIP netmask 255.255.255.255 broadcast $VIP

       /sbin/route add -host $VIP dev lo:0

       echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore

       echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce

       echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore

       echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce

       sysctl -p >/dev/null 2>&1

       echo "RealServer Start OK"

 

       ;;

stop)

       ifconfig lo:0 down

       route del $VIP >/dev/null 2>&1

       echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore

       echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce

       echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore

       echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce

       sysctl -p >/dev/null 2>&1

       echo "RealServer Stoped"

       ;;

*)

       echo "Usage: $0 {start|stop}"

       exit 1

esac

 

exit 0