keepalived+nginx双机热备高可用

**

安装nginx

**
https://blog.csdn.net/qq_38553950/article/details/115914614

按照上述步骤安装完成后
修改两个nginx的首页，以便于区分访问

vim /usr/share/nginx/html/index.html

分别访问对应的ip地址

安装keepalived

yum intall -y keepalived

如果安装有报错：
Error: Package: 1:net-snmp-agent-libs-5.7.2-49.el7_9.1.x86_64 (updates) Requires: libmysqlclient.so.18(libmysqlclient_18)(64bit)

wget https://repo.mysql.com/yum/mysql-5.7-community/el/7/x86_64/mysql-community-libs-compat-5.7.34-1.el7.x86_64.rpm
rpm -ivh mysql-community-libs-compat-5.7.34-1.el7.x86_64.rpm
#rm -rf mysql-community-libs-compat-5.7.34-1.el7.x86_64.rpm

重新执行keepalived安装命令

修改keepalived配置文件

vi /etc/keepalived/keepalived.conf

主节点配置

vrrp_script check_haproxy{
        script "/etc/keepalived/check_haproxy_alive_not.sh"  #检测nginx脚本地址
        interval 2
        weight -20
}

vrrp_instance VI_1 { #定义实例
    state MASTER #状态参数 master/backup
    interface ens33 #虚拟VIP放置的网卡名
    virtual_router_id 52 #同一家族要一直，同一个集群id一致
    priority 100 # 优先级决定是主还是备    越大越优先
    advert_int 1 #主备通讯时间间隔
    authentication {
        auth_type PASS
        auth_pass 1111 #密码
    }
        track_script {
                check_haproxy
        }

    virtual_ipaddress {
        192.168.88.200   #虚拟VIP
    }
}

从节点配置：

vrrp_script check_haproxy{
        script "/etc/keepalived/check_haproxy_alive_not.sh"
        interval 2
        weight -20
}

vrrp_instance VI_1 {
    state BACKUP
    interface ens33
    virtual_router_id 52
    priority 99
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
        track_script {
                check_haproxy
        }

    virtual_ipaddress {
        192.168.88.200
    }
}

创建check_haproxy_alive_not.sh执行脚本

vi /etc/keepalived/check_haproxy_alive_not.sh

脚本内容如下：

#!/bin/bash
LOG_FILE="/etc/keepalived/log/haproxy-check.log"
date "+%Y-%m-%d %H:%M:%S" >> $LOG_FILE

A=`ps -C haproxy --no-header | wc -l`

echo "check haproxy status" >> $LOG_FILE
# 判断haproxy是否宕机，如果宕机尝试重新启动
if [ $A -eq 0 ];then
      echo "haproxy -f /etc/haproxy/haproxy.cfg" >> $LOG_FILE
      haproxy -f /etc/haproxy/haproxy.cfg
      # 等待3秒检查nginx 如果没有启动成功 则停止keepalived 启动备用机
      sleep 5
      if [ `ps -C haproxy --no-header |wc -l` -eq 0 ];then
        echo "start haproxy failed, pkill -9 keepalived" >> $LOG_FILE
        pkill -9 keepalived
      fi
fi

保存后赋予执行权限

chmod +x /etc/keepalived/check_haproxy_alive_not.sh

防火墙必须开启组播策略，否则集群间不能通信，虚拟IP不能飘移
centos7使用一下命令:

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens33 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
firewall-cmd --reload

ens33是指的服务器的网卡名称,INPUT代表接收224.0.0.18的报文,使用 ip a 命令查看.

-----------------------------------------------
centos6系统 使用iptable修改策略:
vi /etc/sysconfig/iptables 添加以下编码

-A INPUT -p 112 -d 224.0.0.18/32 -j ACCEPT

-----------------------------------------------

-p 112指定协议为112，也可-p vrrp即vrrp，keepalived组播地址是224.0.0.18

启动keepalived

#启动keepalived
systemctl restart keepalived
#查看keepalived状态
systemctl status keepalived

查看IP

ip addr

访问设置的虚拟IP 192.168.88.100

杀死146的keepalived

查看147的IP信息（VIP已漂移过来）

重新访问虚拟IP地址

重新启动146的keepalived再进行访问

安装成功点个赞不过分吧