LVS 的DR模式
LVS服务器(DR) | DIP:192.168.47.158 | VIP:192.168.47.250 |
---|---|---|
apache服务器(RS1) | RIP:192.168.47.163 | |
apache服务器(RS2) | RIP:192.168.47.164 |
//修改三台主机名关闭防火墙selinux
[root@localhost ~]# hostname DR
[root@localhost ~]# bash
[root@DR ~]# systemctl disable --now firewalld
Removed /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
[root@DR ~]# setenforce 0
//RS1和RS2下载安装httpd修改内容来提供访问
[root@RS1 ~]# yum -y install httpd
[root@RS1 ~]# systemctl enable --now httpd
[root@RS1 ~]# echo "hello 192.168.47.163" > /usr/share/httpd/noindex/index.html
[root@RS1 ~]# systemctl restart httpd
[root@RS2 ~]# yum -y install httpd
[root@RS2 ~]# echo "hello 192.168.47.164" > /usr/share/httpd/noindex/index.html
[root@RS2 ~]# systemctl restart httpd
//DR配置VIP
[root@DR ~]# ip addr add 192.168.47.250/24 dev ens33
[root@DR ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:0c:3a:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.47.158/24 brd 192.168.47.255 scope global dynamic noprefixroute ens33
valid_lft 1245sec preferred_lft 1245sec
inet 192.168.47.250/24 scope global secondary ens33
valid_lft forever preferred_lft forever
inet6 fe80::8eaa:96d7:f4d0:9c9/64 scope link noprefixroute
valid_lft forever preferred_lft forever
//RS配置apr内核参数
[root@RS1 ~]# cat /etc/sysctl.conf # 添加两行
net.ipv4.conf.all.arp_ignore = 1 # 将对应网卡设置为只回应目标IP为自身接口地址的ARP请求
net.ipv4.conf.all.arp_announce = 2 # 将ARP请求的源IP设置为ens33上的IP,也就是RIP
[root@RS1 ~]# sysctl -p
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
[root@RS2 ~]# cat /etc/sysctl.conf # 添加两行
net.ipv4.conf.all.arp_ignore = 1 # 将对应网卡设置为只回应目标IP为自身接口地址的ARP请求
net.ipv4.conf.all.arp_announce = 2 # 将ARP请求的源IP设置为ens33上的IP,也就是RIP
[root@RS2 ~]# sysctl -p
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
//RS上配置VIP
一定要先设置好内核参数在配置VIP,如果先配置VIP,VIP配置好后会立即通告给所有人,而修改内核参数就是为了不通告
[root@RS1 ~]# ip addr add 192.168.47.250/24 dev ens33
[root@RS1 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:36:5a:9e brd ff:ff:ff:ff:ff:ff
inet 192.168.47.163/24 brd 192.168.47.255 scope global dynamic noprefixroute ens33
valid_lft 1359sec preferred_lft 1359sec
inet 192.168.47.250/24 scope global secondary ens33
valid_lft forever preferred_lft forever
inet6 fe80::fd6:eb9d:a09a:50a8/64 scope link noprefixroute
valid_lft forever preferred_lft forever
[root@RS2 ~]# ip addr add 192.168.47.250/24 dev ens33
[root@RS2 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:0d:28:93 brd ff:ff:ff:ff:ff:ff
inet 192.168.47.164/24 brd 192.168.47.255 scope global dynamic noprefixroute ens33
valid_lft 1347sec preferred_lft 1347sec
inet 192.168.47.250/24 scope global secondary ens33
valid_lft forever preferred_lft forever
inet6 fe80::7f17:7566:4adf:f2cd/64 scope link noprefixroute
valid_lft forever preferred_lft forever
//DR上配置 转发规则
#LVS依赖于ipvsadm来进行配置,所以首先安装ipvsadm
[root@DR ~]# yum -y install ipvsadm
[root@DR ~]# ipvsadm -A -t 192.168.47.250:80 -s rr
[root@DR ~]# ipvsadm -a -t 192.168.47.250:80 -r 192.168.47.163:80 -g
[root@DR ~]# ipvsadm -a -t 192.168.47.250:80 -r 192.168.47.164:80 -g
[root@DR ~]# ipvsadm -Sn
-A -t 192.168.47.250:80 -s rr
-a -t 192.168.47.250:80 -r 192.168.47.163:80 -g -w 1
-a -t 192.168.47.250:80 -r 192.168.47.164:80 -g -w 1
[root@DR ~]# ipvsadm -Sn > /etc/sysconfig/ipvsadm //策略都会保存到这个文件
-A:添加虚拟服务器
-t :指定vip及tcp端口
-s:指定算法
rr:轮询
-a :添加节点
-t :指定vip和端口
-r :指定节点ip及端口
-g:表示使用DR模式
-w:设置权重
LVS 的NAT 模式
[root@DR ~]# systemctl disable --now firewalld
Removed /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
[root@DR ~]# setenforce 0
[root@RS1 ~]# systemctl disable --now firewalld
Removed /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
[root@RS1 ~]# setenforce 0
[root@RS2 ~]# systemctl disable --now firewalld
Removed /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
[root@RS2 ~]# setenforce 0
[root@DR ~]# ip addr add 192.168.47.250/24 dev ens33
[root@DR ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:0c:3a:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.47.158/24 brd 192.168.47.255 scope global dynamic noprefixroute ens33
valid_lft 1245sec preferred_lft 1245sec
inet 192.168.47.250/24 scope global secondary ens33
valid_lft forever preferred_lft forever
inet6 fe80::8eaa:96d7:f4d0:9c9/64 scope link noprefixroute
valid_lft forever preferred_lft forever
# 查看DR的网关
[root@DR ~]# tail /etc/sysconfig/network-scripts/ifcfg-ens33
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
UUID=273f82be-fae7-43ba-ae10-ae0c19f5a415
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.47.158 # IP地址
GATEWAY=192.168.47.2
NETMASK=255.255.255.0
DNS1=114.114.114.114
DNS2=8.8.8.8
[root@RS1 ~]# yum -y install httpd
[root@RS1 ~]# systemctl enable --now httpd
[root@RS1 ~]# echo "hello ! 192.168.47.163" > /usr/share/httpd/noindex/index.html
[root@RS1 ~]# systemctl restart httpd
[root@RS2 ~]# yum -y install httpd
[root@RS2 ~]# echo "hello ! 192.168.47.164" > /usr/share/httpd/noindex/index.html
[root@RS2 ~]# systemctl restart httpd
[root@RS1 ~]# sed -ri 's/^(GATEWAY=).*/\1192.168.47.158/' /etc/sysconfig/network-scripts/ifcfg-ens33
[root@RS2 ~]# sed -ri 's/^(GATEWAY=).*/\1192.168.47.158/' /etc/sysconfig/network-scripts/ifcfg-ens33
#LVS依赖于ipvsadm来进行配置,所以首先安装ipvsadm
[root@DR ~]# yum -y install ipvsadm
#开启转发功能
[root@DR ~]# vi /etc/sysctl.conf
[root@DR ~]# sysctl -p
net.ipv4.ip_forward = 1
# 配置转发规则
[root@DR ~]# ipvsadm -A -t 192.168.47.250:80 -s rr
[root@DR ~]# ipvsadm -ln
[root@DR ~]# ipvsadm -a -t 192.168.47.250:80 -r 192.168.47.163:80 -m
[root@DR ~]# ipvsadm -a -t 192.168.47.250:80 -r 192.168.47.164:80 -m
[root@DR ~]# ipvsadm -Sn > /etc/sysconfig/ipvsadm
[root@DR ~]# cat /etc/sysconfig/ipvsadm
-A -t 192.168.47.250:80 -s rr
-a -t 192.168.47.250:80 -r 192.168.47.163:80 -m -w 1
-a -t 192.168.47.250:80 -r 192.168.47.164:80 -m -w 1
-A:添加虚拟服务器
-t :指定vip及tcp端口
-s:指定算法
rr:轮询
-a :添加节点
-t :指定vip和端口
-r :指定节点ip及端口
-g:表示使用DR模式
-w:设置权重
[root@DR ~]# curl 192.168.47.250
hello ! 192.168.47.163
[root@DR ~]# curl 192.168.47.250
hello ! 192.168.47.164