lvs

最新推荐文章于 2021-02-19 01:58:51 发布
最新推荐文章于 2021-02-19 01:58:51 发布
阅读量227 收藏
点赞数
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/period000/article/details/81294824
版权

LVS

 

Server1

[root@server1 yum.repos.d]# vim rhel-source.repo

10 [loadBalancer] 均衡负载

 11 name=LoadBalancer

 12 baseurl=http://172.25.77.250/rhel6.5/LoadBalancer

 13 gpgcheck=0

 

17 [HighAvailability] 高可用

 18 name=HighAvailability

 19 baseurl=http://172.25.77.250/rhel6.5/HighAvailability

 20 gpgcheck=0

 

25 [ResilientStorage]  分布型存取

 26 name=ResilientStorage

 27 baseurl=http://172.25.77.250/rhel6.5/ResilientStorage

 28 gpgcheck=0

 

31 [ScalableFileSystem] 大文件系统

 32 name=ScalableFileSystem

 33 baseurl=http://172.25.77.250/rhel6.5/ScalableFileSystem

 34 gpgcheck=0

[root@server1 yum.repos.d]# yum install -y ipvsadm

[root@server1 yum.repos.d]# ipvsadm -A -t 172.25.77.100:80 -s rr

[root@server1 yum.repos.d]# ipvsadm -l

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn

TCP  172.25.77.100:http rr

[root@server1 yum.repos.d]# ipvsadm -ln

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn

TCP  172.25.77.100:80 rr

 

 

 

 

 

配置虚拟主机

 

[root@server1 yum.repos.d]# ipvsadm -a -t 172.25.77.100:80 -r 172.25.77.2:80 -g

[root@server1 yum.repos.d]# ipvsadm -a -t 172.25.77.100:80 -r 172.25.77.3:80 -g

[root@server1 yum.repos.d]# ipvsadm -ln

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn

TCP  172.25.77.100:80 rr

  -> 172.25.77.2:80               Route   1      0          0         

  -> 172.25.77.3:80               Route   1      0          0

 

 

[root@server1 yum.repos.d]# ipvsadm -l

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn

TCP  172.25.77.100:http rr

  -> server2:http                 Route   1      0          0         

  -> server3:http                 Route   1      0          0     

 

 

 

[root@server1 yum.repos.d]# ip addr add 172.25.77.100/24 dev eth0

[root@server1 yum.repos.d]# ip addr

link/ether 52:54:00:b6:ae:90 brd ff:ff:ff:ff:ff:ff

 

 

 

 

 

 

 

Servser2

Server3

1.安装httpd、arptables_jf

 

 2.设置http默认发布文件 /var/www/html/index.html

[root@server2 ~]# curl localhost

<h1>www.westos.org - server 2</h1>

 

[root@server3 ~]# curl localhost

<h1>www.westos.org - server 3</h1>

 

 

 

[root@server2 html]# arptables -A IN -d 172.25.77.100 -j DROP

[root@server2 html]# arptables -A OUT -s 172.25.77.100 -j mangle --mangle-ip-s 172.25.77.2

 

 

 

 

[root@server2 html]# /etc/init.d/arptables_jf save

Saving current rules to /etc/sysconfig/arptables:          [  OK  ]

[root@server2 html]# arptables -L

Chain IN (policy ACCEPT)

target     source-ip            destination-ip       source-hw          destination-hw     hlen   op         hrd        pro       

DROP       anywhere             172.25.77.100        anywhere           anywhere           any    any        any        any       

 

Chain OUT (policy ACCEPT)

target     source-ip            destination-ip       source-hw          destination-hw     hlen   op         hrd        pro       

mangle     172.25.77.100        anywhere             anywhere           anywhere           any    any        any        any       --mangle-ip-s server2

 

Chain FORWARD (policy ACCEPT)

target     source-ip            destination-ip       source-hw          destination-hw     hlen   op         hrd        pro       

[root@server2 html]# arptables -nL

Chain IN (policy ACCEPT)

target     source-ip            destination-ip       source-hw          destination-hw     hlen   op         hrd        pro       

DROP       0.0.0.0/0            172.25.77.100        00/00              00/00              any    0000/0000  0000/0000  0000/0000

 

Chain OUT (policy ACCEPT)

target     source-ip            destination-ip       source-hw          destination-hw     hlen   op         hrd        pro       

mangle     172.25.77.100        0.0.0.0/0            00/00              00/00              any    0000/0000  0000/0000  0000/0000 --mangle-ip-s 172.25.77.2

 

Chain FORWARD (policy ACCEPT)

target     source-ip            destination-ip       source-hw          destination-hw     hlen   op         hrd        pro  

 

浮动IP实现负载均衡

客户端

[root@foundation77 mnt]# yum install -y ipvsadm

 

 

[root@foundation77 mnt]# arp -d 172.25.77.100

[root@foundation77 mnt]# arp -an |grep 100

? (172.25.77.100) at 52:54:00:b6:ae:90 [ether] on br0

[root@foundation77 mnt]# curl 172.25.77.100

www.westos.org - server 3

[root@foundation77 mnt]# curl 172.25.77.100

www.westos.org - server2

 

 

第一阶段结束

 

 

 

 

 

第二阶段 LVS健康检查

Arptables 和iptables 防火墙面冲突

scheduler=rr  算法

 

 

Server1

[root@server1 ~]# yum install ldirectord-3.9.5-3.1.x86_64.rpm -y

[root@server1 ~]# yum install -y perl -y

[root@server1 ~]# rpm -ql ldirectord  （查找配置文件）

/etc/ha.d

/etc/ha.d/resource.d

/etc/ha.d/resource.d/ldirectord

/etc/init.d/ldirectord

/etc/logrotate.d/ldirectord

/usr/lib/ocf/resource.d/heartbeat/ldirectord

/usr/sbin/ldirectord

/usr/share/doc/ldirectord-3.9.5

/usr/share/doc/ldirectord-3.9.5/COPYING

/usr/share/doc/ldirectord-3.9.5/ldirectord.cf

/usr/share/man/man8/ldirectord.8.gz

[root@server1 ~]# cp /usr/share/doc/ldirectord-3.9.5/ldirectord.cf /etc/ha.d/

[root@server1 ~]# cd /etc/ha.d/

[root@server1 ha.d]# ls

ldirectord.cf  resource.d  shellfuncs

[root@server1 ha.d]# vim ldirectord.cf

 virtual=172.25.77.100:80

 26         real=172.25.77.2:80 gate

 27         real=172.25.77.3:80 gate

 28         fallback=127.0.0.1:80 gate

 29         service=http

 30         scheduler=rr

 31         #persistent=600

 32         #netmask=255.255.255.255

 33         protocol=tcp

 34         checktype=negotiate

 35         checkport=80

 36         request="index.html"

 37         #receive="Test Page"

 38         #virtualhost=www.x.y.z

 

 

 

 

清空ipvsadm策略，启动ldirectord服务

[root@server1 ha.d]# ipvsadm -C  

[root@server1 ha.d]# /etc/init.d/ldirectord start

Starting ldirectord... success

 

 

 

 

scheduler=rr

 

 

 

[root@server1 ha.d]# ipvsadm -l

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn

TCP  172.25.77.100:http rr

  -> server2:http                 Route   1      0          0         

  -> server3:http                 Route   1      0          0    

 

[root@server1 ha.d]# ipvsadm -ln

IP Virtual Server version 1.2.1 (size=4096)

Prot LocalAddress:Port Scheduler Flags

  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn

TCP  172.25.77.100:80 rr

  -> 172.25.77.2:80               Route   1      0          0         

  -> 172.25.77.3:80               Route   1      0          0      

scheduler=rr

[root@server1 ~] # cd /var/www/html

 

[root@server1 ~]# vim index.html

 

Server 1- 此网站在维护

 

 

 

 

Server 2

Server 3

Real Server主机关闭http服务，Virtual Server主机配置

[root@server2 ~]# /etc/init.d/httpd stop

[root@server3 ~]# /etc/init.d/httpd stop

 

客户端

 

[root@foundation77 mnt]# curl 172.25.77.100

Server 1- 此网站在维护

 

[root@foundation77 mnt]# curl 172.25.77.100

Server 1- 此网站在维护

 

报错 Server1 server2 server3 同时关闭的时候

[root@server1 ~]# /etc/init.d/httpd stop

 

[root@foundation77 ~]# curl 172.25.77.100

curl: (7) Failed connect to 172.25.77.100:80; Connection refused

 

[root@server1 ha.d]# netstat -antlp

 

tcp        0      0 :::80        :::*            LISTEN      1269/httpd

 

健康检查

安装ldirectord服务 清空ipvsadm的策略

修改配置文件vim ldirectord.cf 然server1 安装httpd服务 写入首页此网站在维护

把server2 server3的httpd服务关闭 curl 172.25.77.100显示server1的httpd

此网站正在维护  server1 2 3  全部关闭 客户端访问server v100 显示拒绝连接

[root@server1 ~]# curl localhost

<h1>此网站正在维护</h1>

 

第三阶段 高可用 负载均衡

 

 

Free -m 查看内存的情况

故障排除

[root@server1 ~]# /etc/init.d/keepalived status

keepalived dead but subsys locked

使用80端口 把[root@server1 keepalived]# vim keepalived.conf

 SSL_GET 的文件 改成 TCP_CHECK

 

DR > TUN > NAT > FULLNAT

 

安装keepalived

配置keepalived服务的路径

/usr/local/keepalived/etc/rc.d/init.d/keepalived

 

[root@server1 ~]# /etc/init.d/ldirectord stop

Stopping ldirectord... Success


[root@server1 ~]# tar zxf keepalived-2.0.6.tar.gz

[root@server1 ~]# cd keepalived-2.0.6

[root@server1 keepalived-2.0.6]# ls

aclocal.m4  bin          compile        configure     COPYING  genhash     keepalived          lib          Makefile.in  README.md

ar-lib      bin_install  config.log     configure.ac  depcomp  INSTALL     keepalived.spec     Makefile     missing      snap

AUTHOR      ChangeLog    config.status  CONTRIBUTORS  doc      install-sh  keepalived.spec.in  Makefile.am  README       TODO

 

[root@server1 keepalived-2.0.6]#less INSTALL

./configure --help

Neet to installed openssl-devel

 

make必须显示 Use IPVS Framework  :   Yes

Use VRRP Framework   :  yes

Use VRRP VMAC  : yes

USE VRRP authentication   :  yes

才是编译成功##注意：compile报错时，解决依赖性， 安装 openssl-devel

[root@server1 ~]# yum install openssl-devel -y

 

[root@server1 keepalived-1.4.3]# ./configure --prefix=/usr/local/keepalived --with-init=SYSV

 

/usr/local/keepalived  编译的安装路径

[root@server1 ~]# yum install libnfnetlink-devel  -y

 

[root@server1 keepalived-1.4.3]# make && make install

 

[root@server1 keepalived-1.4.3]# cd /usr/local/keepalived/etc/rc.d/init.d/

 

[root@server1 init.d]# ls

Keepalived

 

[root@server1 init.d]#chmod +x  Keepalived

[root@server1 init.d]#pwd

/usr/local/keepalived/etc/rc.d/init.d/

[root@server1 init.d]#ln -s /usr/local/keepalived/etc/keepalived /etc/

[root@server1 init.d]#ln -s /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/

 

 

 

 

 

[root@server1 init.d]#ln -s /usr/local/keepalived/etc/rc.d/init.d/keepalived  /etc/init.d/

[root@server1 init.d]#ln -s /usr/local/keepalived/sbin/keepalived /sbin/

 

 

smtp_connect_timeout 30 客户端curl 172.25.77.100 3秒检测

#   vrrp_strict 必须注释会报错

# persistence_timeout 50 必须注释 不注释回出现不能均衡负载

priority 100  主要虚拟主机

priority 50   次要备用虚拟主机

Keepalived 双虚拟主机热备

Server2 为真实服务器Server3 为真实服务器

 

 

root@server1 init.d]# vim /etc/keepalived/keepalived.conf

global_defs {

   notification_email {

        root@localhost

   }

   notification_email_from keepalived@localhost

   smtp_server 127.0.0.1

   smtp_connect_timeout 30

   router_id LVS_DEVEL

   vrrp_skip_check_adv_addr

#   vrrp_strict

   vrrp_garp_interval 0

   vrrp_gna_interval 0

}

 

vrrp_instance VI_1 {

    state MASTER

    interface eth0

    virtual_router_id 77

    priority 100

    advert_int 1

    authentication {

        auth_type PASS

        auth_pass 1111

    }

    virtual_ipaddress {

        172.25.77.100

    }

}

 

virtual_server 172.25.77.100 80 {

    delay_loop 3

    lb_algo rr

    lb_kind DR

   # persistence_timeout 50

    protocol TCP

 

    real_server 172.25.77.2 80 {

        weight 1

        TCP_CHECK {

            connect_timeout 3

            retry 3

            delay_before_retry 3

        }

    }

 

    real_server 172.25.77.3 80 {

        weight 1

        TCP_CHECK {

            connect_timeout 3

            retry 3

            delay_before_retry 3

        }

    }

}

 

 

 

 

 

 

 

 

 

新建立server4

[root@server1 local]# scp -r keepalived/  server4:/usr/local

server4主机进行keepalived配置

[root@server1 local]# vim /etc/keepalived/keepalived.conf

 

###主要修改以下部分

vrrp_instance VI_1 {

    state BACKUP

    interface eth0

    virtual_router_id 77

    priority 50

    advert_int 1

    authentication {

        auth_type PASS

        auth_pass 1111

    }

    virtual_ipaddress {

        172.25.77.100

    }

}

 

 

[root@server4 init.d]#ln -s /usr/local/keepalived/etc/keepalived /etc/

[root@server4 init.d]#ln -s /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/

[root@server4 init.d]#ln -s /usr/local/keepalived/etc/rc.d/init.d/keepalived  /etc/init.d/

[root@server4 init.d]#ln -s /usr/local/keepalived/sbin/keepalived /sbin/

 

 

 

[root@foundation77 ~]# arp -d 172.25.77.100

[root@foundation77 ~]# arp -an | grep 100

? (172.25.77.100) at <incomplete> on br0

 

实现高可用和健康检查

server1主机和server4主机：

安装mailx服务

Yum install mailx

启动ipvsadm

加载keepalived  （reload）

/etc/init.d/keepalived restart

 

server2主机和server3主机：

http服务正常

默认发布文件ok

 

物理主机实验  

##实验时，可删除vip，停止keepalived服务，停止网络服务，刷掉内核

##注意：手动删除vip时，keepalived

[root@foundation77 ~]# curl 172.25.77.100

www.westos.org - server2

[root@foundation77 ~]# curl 172.25.77.100

www.westos.org - server 3

 

 

server1主机keepalived服务开启时： (server1优先级高，显示server1的Mac地址)

[root@foundation77 ~]# arp -an | grep 100

? (172.25.77.100) at 52:54:00:b6:ae:90 [ether] on br0

 

[root@server1 keepalived-2.0.6]# ip addr

link/ether 52:54:00:b6:ae:90

server1主机keepalived服务关闭时：(切换到server2主机,显示server4的Mac地址）

[root@server1 keepalived-2.0.6]# /etc/init.d/keepalived stop

Stopping keepalived:                                       [  OK  ]

 

[root@foundation77 ~]# arp -an | grep 100

? (172.25.77.100) at 52:54:00:f5:49:4b [ether] on br0

 

[root@server4 keepalived]# ip addr

link/ether 52:54:00:f5:49:4b

 

 

 

 

server1主机keepalived服务再次开启时： （由于server1主机优先级高，再次切换到server1主机)

 

[root@server1 keepalived-2.0.6]# /etc/init.d/keepalived start

Starting keepalived:                                       [  OK  ]

 

[root@foundation77 ~]# arp -an | grep 100

? (172.25.77.100) at 52:54:00:b6:ae:90 [ether] on br0

 

[root@server1 keepalived-2.0.6]# ip addr

 link/ether 52:54:00:b6:ae:90

[root@foundation77 ~]# curl 172.25.77.100

www.westos.org - server 3

[root@foundation77 ~]# curl 172.25.77.100

www.westos.org - server2

 

 

cat /var/log/messages

[root@server1 keepalived-2.0.6]#yum install mailx -y

[root@server1 keepalived-2.0.6]# /etc/init.d/keepalived start

Starting keepalived:

You have new mail in /var/spool/mail/root

 

 

Keepalived 双虚主机热备用

避免了server1 虚拟主机关闭 不能访问真实服务器sever2 server3

当server1 关闭 server4马上顶替 为主虚拟机工作

Server1 重新工作 再次切换为主虚拟机 server4 作为备用虚拟机

 

 

虚假的设计当server1 server4同时关闭

Server1的httpd 显示此网站正在维护

 

 

period000
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
nginx_引入keepalived实现高可用
qq_36777191的博客
01-13 228
现有服务器两台 编号 ip 系统 服务 职能 1 192.168.136.128 centos 7.6 x64 nginx、keepalived (yum安装) 主机（master） 2 192.168.136.129 centos 7.6 x64 nginx、keepalived (yum安装) 备机（backup） 如列表展示，机器1作nginx集群的主机，机器2作nginx集群的备机，通过ke...
keepalived + nginx
lp_306664907的博客
03-13 271
keepalived + nginx 实现思路是：master的优先级为100，backup的优先级为99；在master上面配置一个检测nginx监控状态的脚本（backup不用配置），当发现master的nginx故障后将master的优先级减2为98，使其backup优先级比master高，bakup获取到vip对外提供服务；当master服务器上面的nginx服务恢复正常后，maste...
CentOS6.9 配置keepalived 1.4.3 HA双机
幽灵 逐梦--专栏
04-24 1203
记录在CentOS6.9 下配置keepalived 1.4.3 HA双机主要参考以下文章：https://blog.csdn.net/libaineu2004/article/details/79551455https://www.cnblogs.com/clsn/p/8052649.html#auto_id_17https://blog.csdn.net/xyang81/article/det...
MySQL高可用系列之MHA（二）
dba成长之路
07-29 2674
参数说明 MHA提供了一系列配置参数，深入理解每个参数的具体含义，对优化配置、合理使用MHA非常重要，很多高可用性也都是通过合理配置一些参数而实现的。 MHA包括如下配置参数，分别说明如下： hostname/ip/port (Local Only) hostname为MySQL Server的IP地址或主机名； ip为MySQL Server的IP地址，缺省从$hostname中获取；
keepalived+双主实践HA
weixin_30544657的博客
10-07 180
正好前段时间看过关于keepalived+双主实现高可用的文章，也恰好身边的朋友所在的公司也部分用这个架构。对比下MMM、MHA、keepalived+双主三种架构的优劣和DB维护的体验感。简单讲讲自己的用户体验感，就搭建难易程度讲MMM的安装包封装好的，修改的配置文件较MHA少一些，比keepalived+双主要稍微麻烦点儿。本着省事，维护起来省事还是觉得MMM真的便利，黑盒操作适合我这...
mysql的subsys locked_mysqld dead but subsys locked 的解决办法
weixin_42333370的博客
02-19 202
项目使用的mysql数据突然宕掉了，使用ps -ef|grep mysql ，没有发现mysql的进程，只有一些使用了mysql的项目的进程。数据库脚本目录：/usr/bin/mysqlmysqld目录：/etc/init.d/mysqld1、检查mysql服务状态：[root@ bin]# /usr/bin/mysql statusERROR 2002 (HY000): Can't conne...
cadence 615中跑lvs流程
04-13
在反向整理电路时需要与原始电路或网表进行比对来检测是否有错误变动。LVS(layout vs schematic)用来比对初始网表与整理后电路网表是否一致，以此判断整理电路过程是否出错。
LVS.rar_lvs
09-14
**负载均衡服务（LVS）详解** 在构建大型、高性能的网络服务时，负载均衡技术是不可或缺的关键组件。LVS，即Linux Virtual Server，是由Chen Yi编写的开源项目，它为Linux操作系统提供了强大的负载均衡功能，使得...
calibre lvs option
03-17
calibre lvs option
lvs资源包，rpm资源
最新发布
05-15
LVS（Linux Virtual Server）是基于Linux操作系统的高性能负载均衡解决方案，它利用内核级的虚拟网络技术，为网络服务提供了高可用性、高可扩展性的集群系统。RPM（Red Hat Package Manager）则是Linux系统中广泛...
RedHat5.9通过Keepalived双机热备Nginx
05-03
RedHat5.9通过Keepalived双机热备Nginx, RedHat5 HA
lvs使用说明
11-05
lvs使用说明，适合广大新手练手，通俗易懂，入门必备。
企业级调度器LVS原理与实战
12-04
【企业级调度器LVS原理与实战】 LVS（Linux Virtual Server）是一种高效的企业级负载均衡解决方案，它基于Linux操作系统，能够实现网络流量的智能调度，以提高系统的可扩展性和高可用性。LVS主要利用Linux内核的...
运维架构lvs调优
08-20
但是GRO 和 LVS 协作得并不好，具体表现就是，POST 数据到 LVS 很慢（可以抓包，不多说了，嘿嘿），所以要关闭。 LRO(Large Receive Offload) 和 GRO 是相似的，只不过GRO 克服了LRO的一些缺点，更通用，LRO基本上...
LVS DR介绍
10-29
LVS DR的说明介绍，具体的调度流程，及具体方案说明文档
keepalived启动不成功,状态一直是inactive(dead) 的解决办法以及keepalived高版本没有rc.d目录,虚拟VIP无法访问问题...
weixin_34189116的博客
03-20 7408
安装配置教程我就不说了,网上很多,这里只给出我遇到的两个坑: 1 rc.d目录 ,kp在1.4版本之后rc.d要去解压之后的源码包里去找,make之后的目录里面没有了,我使用的是2.0.13最新版本,到2019年3月目前为止 2 安装后启动不报错,但是查看状态一直dead 3 这里还有一个坑,就是虚拟ip网段要和real server 真实ip的网络地址一致,比如 192.168.171.1...
Nginx+keepalived实现故障切换和邮件报警
weixin_34293141的博客
06-11 1124
拓扑图如下：实现思路是：master的优先级为100，backup的优先级为99；在master上面配置一个检测nginx监控状态的脚本（backup不用配置），当发现master的nginx故障后将master的优先级减2为98，使其backup优先级比master高，bakup获取到vip对外提供服务；当master服务器上面的nginx服务恢复正常后，master的优先...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值