0## Keepalived
- keepalived观其名可知,保持存活,在网络里面就是保持在线了,也就是所谓的高可用或热备,用来防止单点故障(单点故障是指一旦某一点出现故障就会导致整个系统架构的不可用)的发生
- 主要提供 loadbalancing(负载均衡)和 high-availability(高可用)功能
- 负载均衡实现需要依赖Linux的虚拟服务内核模块(ipvs)
- 高可用是通过VRRP协议实现多台机器之间的故障转移服务
- 采用多进程的设计模式,每个进程负责不同的功能
VRRP 协议:
- 用于实现路由器冗余的协议
- 解决静态路由单点故障问题
- 通过一种竞选(election)协议来实现虚拟路由器的功能
IPVS( IP Virtual Server )
- Keepalived里面所有对LVS的相关操作并不直接使用ipvsadm这样的用户端程序,而是直接使用IPVS提供的函数进程操作,该代码都在check/ipwrapper.c中
主机环境:
RHEL6 系列 selinux and iptables disabled
主机名 | IP |
---|---|
server1 | 172.25.64.1 |
server2 | 172.25.64.2 |
server3 | 172.25.64.3 |
server4 | 172.25.64.4 |
- LVS ACTIVE: 172.25.64.1
- LVS BACKUP: 172.25.64.4
- LVS VIP: 172.25.64.100
- Realsever: 172.25.64.2 和172.25.64.3
配置过程:
- 配置高级yum源(server1和server4)
[root@server1 ~]# vim /etc/yum.repos.d/rhel-source.repo
[rhel-source]
name=Red Hat Enterprise Linux $releasever - $basearch - Source
baseurl=http://172.25.64.250/rhel6.5
enabled=1
gpgcheck=0
[LoadBalancer]
name=LoadBalancer
baseurl=http://172.25.64.250/rhel6.5/LoadBalancer
enabled=1
gpgcheck=0
[HighAvailability]
name=HighAvailability
baseurl=http://172.25.64.250/rhel6.5/HighAvailability
enabled=1
gpgcheck=0
- 虚拟服务器得到最新版本的keepalived包并解压安装
[root@server1 ~]# ls
keepalived-2.0.6.tar.gz
[root@server1 ~]# tar zxf keepalived-2.0.6.tar.gz
[root@server1 ~]# ls
keepalived-2.0.6 keepalived-2.0.6.tar.gz
[root@server1 ~]# cd keepalived-2.0.6
- 安装keepalived的依赖包:openssl-devel
[root@server1 keepalived-2.0.6]# yum install openssl-devel -y
- 编译keepalived的源码包
[root@server1 keepalived-2.0.6]# ./configure --prefix=/usr/local/keepalived --with-init=SYSV
[root@server1 keepalived-2.0.6]# make && make install
- 赋予脚本可执行权限
[root@server1 keepalived-2.0.6]# cd /usr/local/keepalived/etc/rc.d/init.d/
[root@server1 init.d]# ls
keepalived
[root@server1 init.d]# chmod +x keepalived
- 制作软连接方便keepalived的管理与设置
[root@server1 init.d]# ip addr del 172.25.64.100/24 dev eth0
[root@server1 etc]# ln -s /usr/local/keepalived/etc/rc.d/init.d/keepalived /etc/init.d/
[root@server1 etc]# ln -s /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
[root@server1 etc]# ln -s /usr/local/keepalived/etc/keepalived/ /etc/
[root@server1 etc]# ln -s /usr/local/keepalived/sbin/keepalived /sbin
- 在server1 中配置/keepalived的配置文件
Keepalived配置文件详解:
- Keepalived的所有配置都在一个配置文件里面设置,支持的配置项主要分三类:
- 全局配置(Global Configuration):作用于整个keepalived服务
- VRRPD配置:keepalived的核心
- 虚拟服务配置:指定服务与负载均衡
配置文件都是以块(block)形式组织的,每个块都在{ }包围的范围内
- #和!开头的行都是注释
[root@server1 sbin]# cd /etc/keepalived/
[root@server1 keepalived]# ls
keepalived.conf samples
[root@server1 keepalived]# vim keepalived.conf
! Configuration File for keepalived
## 全局配置
global_defs { ##全局定义块
notification_email { ##邮件通知
root@localhost
}
#设置邮件的发送地址
notification_email_from keepalived@localhost
smtp_server 127.0.01 #设置 smtp server 地址
smtp_connect_timeout 30 #设置连接 smtp 服务器超时时间
router_id LVS_DEVEL #load balancer 的标识 ID,用于 email 警报
vrrp_skip_check_adv_addr
#vrrp_strict
vrrp_garp_interval 0
vrrp_gna_interval 0
}
## VRRPD配置
vrrp_instance VI_1 {
state MASTER #备机改为 BACKUP,此状态是由 priority 的值来决定的,当前
priority 的值小于备机的值,那么将会失去 MASTER 状态
interface eth0 #HA 监测网络接口
virtual_router_id 51 #主、备机的 virtual_router_id 必须相同,取值 0-255
priority 100 #主机的优先级,备份机改为 50,主机优先级一定要大于备机
advert_int 1 #主备之间的通告间隔秒数
authentication {
auth_type PASS #设置验证类型,主要有 PASS 和 AH 两种
auth_pass 1111
}
##指定漂移地址(VIP),即切换到MASTER时,这些IP会被添加,切换到BACKUP时,这些IP会被删除(传给ip addr命令),所以每台服务器可以不用绑定任何的虚拟地址。
virtual_ipaddress {
172.25.64.100
}
}
## 虚拟服务配置
virtual_server 172.25.64.100 80 { #定义虚拟服务器
delay_loop 6 #定义虚拟服务器
lb_algo rr #lvs 调度算法,这里使用轮叫
lb_kind DR #LVS 是用 DR 模式
#persistence_timeout 50 #注释掉
protocol TCP #指定转发协议类型,有 tcp 和 udp 两种
real_server 172.25.64.2 80 { #配置服务节点
weight 1 ##默认为1,0为失效
TCP_CHECK{ ##TCP方式的健康检查,realserve 的状态检测设置部分,单位是秒
connect_timeout 3 #10 秒无响应超时
retry 3 #重试次数
delay_before_retry 3 #重试间隔
}
}
real_server 172.25.64.3 80 {
weight 1
TCP_CHECK{
connect_timeout 3
retry 3
delay_before_retry 3
}
}
}
- 将配置好的keepalived文件发送给备机(server4), 并做修改
[root@server1 local]# cd /usr/local
[root@server1 local]# scp -r keepalived root@172.25.64.4:/usr/local
- 只修改两个地方
[root@server4 ~]# cd /usr/local/keepalived/etc/keepalived/
[root@server4 keepalived]# ls
keepalived.conf samples
[root@server4 keepalived]# vim keepalived.conf
! Configuration File for keepalived
global_defs {
notification_email {
root@localhost
}
notification_email_from keepalived@localhost
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id LVS_DEVEL
vrrp_skip_check_adv_addr
#vrrp_strict
vrrp_garp_interval 0
vrrp_gna_interval 0
}
vrrp_instance VI_1 {
state BACKUP ##修改地方1
interface eth0
virtual_router_id 19
priority 50 ##修改地方2
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
172.25.64.100
}
}
virtual_server 172.25.64.100 80 {
delay_loop 6
lb_algo rr
lb_kind DR
#persistence_timeout 50
protocol TCP
real_server 172.25.64.2 80 {
TCP_CHECK {
weight 1
connect_timeout 3
retry 3
delay_before_retry 3
}
}
real_server 172.25.64.3 80 {
TCP_CHECK {
weight 1
connect_timeout 3
retry 3
delay_before_retry 3
}
}
}
- 在sever4中同样制作软连接
[root@server4 keepalived]# ln -s /usr/local/keepalived/etc/rc.d/init.d/keepalived /etc/init.d/
[root@server4 keepalived]# ln -s /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
[root@server4 keepalived]# ln -s /usr/local/keepalived/etc/keepalived/ /etc/
[root@server4 keepalived]# ln -s /usr/local/keepalived/sbin/keepalived /sbin
10.在server1和server4中都重启服务
[root@server1 init.d]# /etc/init.d/keepalived restart
[root@server4 init.d]# /etc/init.d/keepalived restart
11.测试:
- 开启服务后,会自动分配vip地址(172.25.64.100)
- 将server1(主)的keepalived服务关闭,则vip地址漂移到server4(备)
server4中出现vip地址
- 高可用下实现健康检查
- 后端真实服务器都正常时(RealServer 无宕机 ):实行轮叫
- 将server3关掉(RealServer 有一台宕机)
[root@server3 html]# /etc/init.d/httpd stop
- 则显示只调度server2服务器
- 将两台realserver的httpd服务都关掉