实验记录
NAT模式
拓扑图
规划
rs1 10.0.0.7
rs2 10.0.0.17
lvs 10.0.0.8
client 192.168.10.6
rs1配置
- 主机名配置
[root@centos7 ~]#hostnamectl set-hostname rs1.kktb.org
[root@centos7 ~]#logout
- 配置httpd服务
[root@rs1 ~]#yum install httpd -y;echo "rs1 10.0.0.7" > /var/www/html/index.html;systemctl enable --now httpd
- 网关配置
[root@rs1 network-scripts]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.0.0.8 0.0.0.0 UG 100 0 0 ens33
10.0.0.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
rs2 配置
- 主机名配置
[root@centos7 ~]#hostnamectl set-hostname rs2.kktb.org
[root@centos7 ~]#logout
- 配置httpd服务
[root@rs2 ~]#yum install httpd -y;echo "rs2 10.0.0.17" > /var/www/html/index.html;systemctl enable --now httpd
- 网关配置
[root@rs2 ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.0.0.8 0.0.0.0 UG 100 0 0 eth0
10.0.0.0 0.0.0.0 255.255.255.0 U 100 0 0 eth0
lvs配置
- 主机名配置
[root@mysql ~]#hostnamectl set-hostname lvs.kktb.org
[root@mysql ~]#logout
- 安装lvs的使用工具
[root@lvs ~]#yum install -y ipvsadm
- 测试网络
[root@lvs ~]#ping 192.168.10.100
PING 192.168.10.100 (192.168.10.100) 56(84) bytes of data.
64 bytes from 192.168.10.100: icmp_seq=1 ttl=64 time=0.014 ms
[root@lvs ~]#ping 192.168.10.6
PING 192.168.10.6 (192.168.10.6) 56(84) bytes of data.
64 bytes from 192.168.10.6: icmp_seq=1 ttl=64 time=0.429 ms
[root@lvs ~]#ping 10.0.0.7
PING 10.0.0.7 (10.0.0.7) 56(84) bytes of data.
64 bytes from 10.0.0.7: icmp_seq=1 ttl=64 time=1.05 ms
[root@lvs ~]#ping 10.0.0.17
PING 10.0.0.17 (10.0.0.17) 56(84) bytes of data.
64 bytes from 10.0.0.17: icmp_seq=1 ttl=64 time=1.50 ms
- 创建lvs集群 指定调度模式为轮询调度
[root@lvs ~]#ipvsadm -A -t 192.168.10.100:80 -s rr
[root@lvs ~]#ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 192.168.10.100:80 rr
- 向集群中添加机器
[root@lvs ~]#ipvsadm -a -t 192.168.10.100:80 -r 10.0.0.7 -m
[root@lvs ~]#ipvsadm -a -t 192.168.10.100:80 -r 10.0.0.17 -m
[root@lvs ~]#ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 192.168.10.100:80 rr
-> 10.0.0.7:80 Masq 1 0 0
-> 10.0.0.17:80 Masq 1 0 0
- 配置路由转发
[root@lvs sysctl.d]#sysctl -p
net.ipv4.ip_forward = 1
客户端
- 配置网络
[root@ubuntu1804 ~]#cat /etc/netplan/01-netcfg.yaml
# This file describes the network interfaces available on your system
# For more information, see netplan(5).
network:
version: 2
renderer: networkd
ethernets:
eth0:
addresses: [192.168.10.6/24]
nameservers:
addresses: [223.5.5.5,114.114.114.114]
#使配置生效
[root@ubuntu1804 ~]#netplan apply
- 测试
[root@ubuntu1804 ~]#while :;do curl 192.168.10.100 && sleep 1;done
rs1 10.0.0.7
rs2 10.0.0.17
rs1 10.0.0.7
rs2 10.0.0.17
其他:
#更改lvs的调度算法
#修改调度算法为wrr
ipvsadm -E -t 192.168.10.100:80 -s wrr
#修改权重
ipvsadm -e -t 192.168.10.100:80 -r 10.0.0.17 -m -w 5
#修改调度算法为sh
ipvsadm -E -t 192.168.10.100:80 -s sh
DR模式
拓扑图
规划
rs1 10.0.0.7
rs2 10.0.0.17
lvs 10.0.0.100
router 10.0.0.200
client 192.168.10.6
rs1配置
- web服务
[root@rs1 ~]#yum install httpd -y;echo "r1 10.0.0.7" > /var/www/html/index.html;systemctl enable --now httpd
- 网络配置
[root@rs1 ~]#cat /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE="Ethernet"
PROXY_METHOD="none"
BROWSER_ONLY="no"
BOOTPROTO="static"
IPADDR=10.0.0.7
NETMASK=255.255.255.0
GATEWAY=10.0.0.200
IPV4_FAILURE_FATAL="no"
NAME="ens33"
UUID="554f0ed4-9978-4844-85ee-97e4d68b5401"
DEVICE="ens33"
ONBOOT="yes"
#绑定lvs的回环地址
[root@rs1 ~]#ifconfig lo:1 10.0.0.100/32
- 临时关闭arp解析
[root@rs1 ~]#echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore
[root@rs1 ~]#echo 1 > /proc/sys/net/ipv4/conf/lo/arp_ignore
[root@rs1 ~]#echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce
[root@rs1 ~]#echo 2 > /proc/sys/net/ipv4/conf/lo/arp_announce
rs2配置
- web服务
[root@rs1 ~]#yum install httpd -y;echo "r12 10.0.0.7" > /var/www/html/index.html;systemctl enable --now httpd
- 网络配置
[root@rs2 ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth0
# Generated by dracut initrd
NAME="eth0"
DEVICE="eth0"
ONBOOT=yes
NETBOOT=yes
UUID=43cb1730-f3ce-3222-8928-244764237c96
IPV6INIT=yes
BOOTPROTO=static
IPADDR=10.0.0.17
NETMASK=255.255.255.0
GATEWAY=10.0.0.200
TYPE=Ethernet
#绑定lvs的回环地址
[root@rs2 ~]#ifconfig lo:1 10.0.0.100/32
- 临时关闭arp解析
[root@rs2 ~]#echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore
[root@rs2 ~]#echo 1 > /proc/sys/net/ipv4/conf/lo/arp_ignore
[root@rs2 ~]#echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce
[root@rs2 ~]#echo 2 > /proc/sys/net/ipv4/conf/lo/arp_announce
lvs配置
- 网络配置
[root@lvs ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=static
IPADDR=10.0.0.8
NETMASK=255.255.255.0
GATEWAY=10.0.0.200
[root@lvs ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth1
DEVICE=eth1
NAME=eth1
BOOTPROTO=static
IPADDR=192.168.10.100
NETMASK=255.255.255.0
- lvs规则配置
#创建lvs集群 设置调度算法为轮询
[root@lvs ~]#ipvsadm -A -t 10.0.0.100:80 -s rr
#设置lvs工作模式为DR 并添加主机至集群
[root@lvs ~]#ipvsadm -a -t 10.0.0.100:80 -r 10.0.0.7 -g
[root@lvs ~]#ipvsadm -a -t 10.0.0.100:80 -r 10.0.0.17 -g
#查看lvs规则配置
[root@lvs ~]#ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 10.0.0.100:80 rr
-> 10.0.0.7:80 Route 1 0 0
-> 10.0.0.17:80 Route 1 0 0
router配置
- 网络配置
[root@router ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth0
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
IPADDR=10.0.0.200
NETMASK=255.255.255.0
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
NAME=eth0
UUID=64cc8dd1-1831-3715-848d-95e45d87cf1a
DEVICE=eth0
ONBOOT=yes
[root@router ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth1
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
IPADDR=192.168.10.200
NETMASK=255.255.255.0
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
NAME=eth1
DEVICE=eth1
ONBOOT=yes
#永久开启路由转发
[root@router ~]#echo "net.ipv4.ip_forward =1" >> /etc/sysctl.conf
[root@router ~]#sysctl -p
net.ipv4.ip_forward = 1
客户端配置
- 网络配置
[root@ubuntu1804 ~]#cat /etc/netplan/01-netcfg.yaml
# This file describes the network interfaces available on your system
# For more information, see netplan(5).
network:
version: 2
renderer: networkd
ethernets:
eth0:
addresses: [192.168.10.6/24]
gateway4: 192.168.10.200
nameservers:
addresses: [223.5.5.5,114.114.114.114]
- 测试
[root@ubuntu1804 ~]#while :;do curl 10.0.0.100;sleep 1;done
rs2 10.0.0.17
rs1 10.0.0.7
rs2 10.0.0.17
rs1 10.0.0.7
DR模式多网段
规划
rs1 10.0.0.7
rs2 10.0.0.17
rs1
- 网络配置
ip a a 172.16.0.100/32 dev lo:0
[root@rs1 ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet 172.16.0.100/32 scope global lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:0c:29:f7:9a:d1 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.7/24 brd 10.0.0.255 scope global noprefixroute ens33
valid_lft forever preferred_lft forever
[root@rs1 ~]#cat /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE="Ethernet"
PROXY_METHOD="none"
BROWSER_ONLY="no"
BOOTPROTO="static"
IPADDR=10.0.0.7
NETMASK=255.255.255.0
GATEWAY=10.0.0.200
IPV4_FAILURE_FATAL="no"
NAME="ens33"
UUID="554f0ed4-9978-4844-85ee-97e4d68b5401"
DEVICE="ens33"
ONBOOT="yes"
rs2
- 网络配置
[root@rs2 ~]#ip a a 172.16.0.100/32 dev lo:0
[root@rs2 ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth0
# Generated by dracut initrd
NAME="eth0"
DEVICE="eth0"
ONBOOT=yes
NETBOOT=yes
UUID=43cb1730-f3ce-3222-8928-244764237c96
IPV6INIT=yes
BOOTPROTO=static
IPADDR=10.0.0.17
NETMASK=255.255.255.0
GATEWAY=10.0.0.200
TYPE=Ethernet
[root@rs2 ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet 172.16.0.100/32 scope global lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:0c:29:d4:b3:40 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.17/24 brd 10.0.0.255 scope global noprefixroute eth0
valid_lft forever preferred_lft forever
inet6 fe80::20c:29ff:fed4:b340/64 scope link noprefixroute
valid_lft forever preferred_lft forever
lvs
- 网络配置
[root@lvs ~]#ip a a 172.16.0.100/32 dev lo:1
[root@lvs ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet 172.16.0.100/32 scope global lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:36:59:07 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.8/24 brd 10.0.0.255 scope global noprefixroute eth0
valid_lft forever preferred_lft forever
inet6 fe80::20c:29ff:fe36:5907/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:36:59:11 brd ff:ff:ff:ff:ff:ff
[root@lvs ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=static
IPADDR=10.0.0.8
NETMASK=255.255.255.0
GATEWAY=10.0.0.200
DNS1=223.5.5.5
[root@lvs ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth1
DEVICE=eth1
NAME=eth1
BOOTPROTO=static
IPADDR=192.168.10.100
NETMASK=255.255.255.0
#GATEWAY=10.0.0.2
DNS1=223.5.5.5
- lvs规则配置
[root@lvs ~]#ipvsadm -A -t 172.16.0.100:80 -s wrr
[root@lvs ~]#ipvsadm -a -t 172.16.0.100:80 -r 10.0.0.7 -g -w 1
[root@lvs ~]#ipvsadm -a -t 172.16.0.100:80 -r 10.0.0.17 -g -w 1
[root@lvs ~]#ipvsadm -Ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 172.16.0.100:80 wrr
-> 10.0.0.7:80 Route 1 0 0
-> 10.0.0.17:80 Route 1 0 0
路由器配置
[root@router ~]#ip a a 172.16.0.200/24 dev eth0
[root@router ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth0
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
IPADDR=10.0.0.200
NETMASK=255.255.255.0
GATEWAY=10.0.0.2
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=eth0
UUID=64cc8dd1-1831-3715-848d-95e45d87cf1a
DEVICE=eth0
ONBOOT=yes
[root@router ~]#cat /etc/sysconfig/network-scripts/ifcfg-eth1
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
IPADDR=192.168.10.200
NETMASK=255.255.255.0
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
NAME=eth1
DEVICE=eth1
ONBOOT=yes
[root@router ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:ab:08:6a brd ff:ff:ff:ff:ff:ff
inet 10.0.0.200/24 brd 10.0.0.255 scope global noprefixroute eth0
valid_lft forever preferred_lft forever
inet 172.16.0.200/24 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::2d16:5b95:3217:9a96/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:ab:08:74 brd ff:ff:ff:ff:ff:ff
inet 192.168.10.200/24 brd 192.168.10.255 scope global noprefixroute eth1
valid_lft forever preferred_lft forever
inet6 fe80::20c:29ff:feab:874/64 scope link
valid_lft forever preferred_lft forever
客户端
[root@ubuntu1804 ~]#curl 172.16.0.100
rs2 10.0.0.17
[root@ubuntu1804 ~]#curl 172.16.0.100
rs1 10.0.0.7
[root@ubuntu1804 ~]#curl 172.16.0.100
rs2 10.0.0.17
[root@ubuntu1804 ~]#curl 172.16.0.100
rs1 10.0.0.7