keepalived 实现 LVS 高可用

keepalived 实现 LVS 高可用

---

keepalived是什么

keepalived是集群管理中保证集群高可用的一个服务软件，其功能类似于heartbeat，用来防止单点故障。

---

keepalived工作原理

keepalived是以VRRP协议为实现基础的，VRRP全称Virtual Router Redundancy Protocol，即虚拟路由冗余协议。

虚拟路由冗余协议，可以认为是实现路由器高可用的协议，即将N台提供相同功能的路由器组成一个路由器组，这个组里面有一个master和多个backup，master上面有一个对外提供服务的vip（该路由器所在局域网内其他机器的默认路由为该vip），master会发组播，当backup收不到vrrp包时就认为master宕掉了，这时就需要根据VRRP的优先级来选举一个backup当master。这样的话就可以保证路由器的高可用了。

keepalived主要有三个模块，分别是core、check和vrrp。core模块为keepalived的核心，负责主进程的启动、维护以及全局配置文件的加载和解析。check负责健康检查，包括常见的各种检查方式。vrrp模块是来实现VRRP协议的。

---

参考文献

• 官方文档：https://www.keepalived.org/doc/index.html
• 配置文件参数含义官方文档 ： https://www.keepalived.org/doc/configuration_synopsis.html
• 配置文件参数含义参考博客： https://www.cnblogs.com/duanxiaojun/p/7171680.html
• 调度算法官方文档：https://www.keepalived.org/doc/scheduling_algorithms.html

---

实验

主机	ip	身份
server1	172.25.9.1/24	keepalived (master)
server4	172.25.9.4/24	keepalived (backup)
server2	172.25.9.2/24	httpd
server3	172.25.9.3/24	httpd

lvs 搭建参考： https://blog.csdn.net/qq_47714288/article/details/120319869

整体步骤

# server1:

## 安装 keepalived
 yum install -y keepalived
## 配置，具体配置，参照server1 keepalived 配置
 vim /etc/keepalived/keepalived.conf
## 启动服务 
 systemctl start keepalived
 ## 查看日志，到当前主机身份，目前 server1 应该是 MASTER。（主机身份与配置文件有关）
  cat keepalived.conf /var/log/messages | grep STATE
 
##  server4 作 备机
 server4 yum install -y keepalived
 scp root@server1:/etc/keepalived/keepalived.conf /etc/keepalived
 ## 配置，具体配置，参照server4 keepalived 配置
 vim /etc/keepalived/keepalived.conf
 ## 启动服务 
 systemctl start keepalived
## 查看日志，到当前主机身份，目前 server4 应该是 BACKUP。（主机身份与配置文件有关）
 cat keepalived.conf /var/log/messages | grep STATE

server1 keepalived 配置

# server1 keepalived 配置
vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived

## 全局定义
global_defs {
   notification_email {
     root@localhost
     #acassen@firewall.loc
     #failover@firewall.loc
     #sysadmin@firewall.loc
   }
   notification_email_from keeplived@localhost
   #smtp_server 192.168.200.1
   smtp_server 127.0.0.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
   #vrrp_strict
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

## VRRP 检测配置
vrrp_instance VI_1 {
	# 节点身份
    state MASTER
    # interface 节点固有IP（非VIP）的网卡，用来发VRRP包
    interface eth0
    # virtual_router_id 取值在0-255之间，用来区分多个instance的VRRP组播。
    virtual_router_id 51
    # 权重
    priority 100
    # advert_int 发VRRP包的时间间隔，即多久进行一次master选举（可以认为是健康查检时间间隔）。
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    # VIP
    virtual_ipaddress {
    172.25.9.100
    }
}

## 虚拟服务配置
virtual_server 172.25.9.100 80 {
    delay_loop 6
    # lb_algo 调度后端算法
    lb_algo rr
    # lb_kind LVS调度类型NAT/DR/TUN。
    lb_kind DR
    #persistence_timeout 50
    protocol TCP

	# 真正提供服务的机器 
    real_server 172.15.9.2 80 {
        weight 1
        TCP_CHECK {
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
        }
    }
    real_server 172.15.9.3 80 {
        weight 1
        TCP_CHECK {
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
        }
    }
}

server4 keepalived 配置

# server4 keepalived 配置
## 主要改了 主机身份与权重。（state BACKUP ），其它与 server1 一样
vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived

global_defs {
   notification_email {
     root@localhost
     #acassen@firewall.loc
     #failover@firewall.loc
     #sysadmin@firewall.loc
   }
   notification_email_from keeplived@localhost
   #smtp_server 192.168.200.1
   smtp_server 127.0.0.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
   #vrrp_strict
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

vrrp_instance VI_1 {
    state BACKUP
    interface eth0
    virtual_router_id 51
    priority 50
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
    172.25.9.100
    }
}

virtual_server 172.25.9.100 80 {
    delay_loop 6
    lb_algo rr
    lb_kind DR
    #persistence_timeout 50
    protocol TCP

    real_server 172.15.9.2 80 {
        weight 1
        TCP_CHECK {
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
        }
    }
    real_server 172.15.9.3 80 {
        weight 1
        TCP_CHECK {
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
        }
    }
}