lvs + keepalived 双机热备份的使用方法

配置

机器	IP	机器名称	网卡名称
centos7.8	192.168.137.15	lvs-2	enp0s3
centos7.8	192.168.137.16	lvs-1	enp0s3
虚拟IP	192.168.137.111

步骤1： 

分别在二台机器上安装如下软件

# yum -y install kernel-devel openssl-devel popt-devel ipvsadm keepalived

安装成功

步骤二:

在二台机器上确认能够加载 ip-vs模块

# modprobe ip_vs

没提示表示成功，如果系统没安装就比较麻烦了，理论上目前这个是默认模块放在linux内核里面了。

步骤三：

修改系统内核参数

[root@localhost ~]vi /etc/sysctl.conf 
#把以下三行写入尾部
#net.ipv4.conf.all.send_redirects = 0
#net.ipv4.conf.default.send_redirects = 0
#net.ipv4.conf.enp0s3.send_redirects = 0
[root@localhost ~]# sysctl -p
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.enp0s3.send_redirects = 0
[root@localhost ~]# 

步骤三：设置keepalived 开启启动。

[root@localhost ~]# systemctl enable keepalived
Created symlink from /etc/systemd/system/multi-user.target.wants/keepalived.service to /usr/lib/systemd/system/keepalived.service.

 步骤四：配置主调度器

复制如下内容 到vs-1上/etc/keepalived/keepalived.conf。

另外将如下内容,将 priority 120 改成  priority 100 到vs-2上/etc/keepalived/keepalived.conf。

global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
   vrrp_strict
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

vrrp_instance  VI_1 {
    state BACKUP
    interface enp0s3
    virtual_router_id 51
mcast_src_ip 192.168.137.16
    priority 120
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.139.111
    }
}

二台重启服务 

systemctl restart keepalived

通过观察lvs-1，看到虚拟网址 111已经绑定好了。

[root@localhost ~]# ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 08:00:27:af:29:70 brd ff:ff:ff:ff:ff:ff
    inet 192.168.137.16/24 brd 192.168.137.255 scope global noprefixroute enp0s3
       valid_lft forever preferred_lft forever
    inet 192.168.137.111/32 scope global enp0s3
       valid_lft forever preferred_lft forever
    inet6 fe80::be0a:e8f2:197e:be87/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

步骤五：测试系统虚拟IP是否成功切换

可以看到目前是在ip为137.16的机器上。

[root@localhost html]# systemctl  restart keepalived
[root@localhost html]# ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 08:00:27:af:29:70 brd ff:ff:ff:ff:ff:ff
    inet 192.168.137.16/24 brd 192.168.137.255 scope global noprefixroute enp0s3
       valid_lft forever preferred_lft forever
    inet 192.168.137.111/32 scope global enp0s3
       valid_lft forever preferred_lft forever
    inet6 fe80::be0a:e8f2:197e:be87/64 scope link tentative noprefixroute dadfailed 
       valid_lft forever preferred_lft forever
    inet6 fe80::3445:c251:976:e8c6/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

停止137.16上的服务,使用命令  systemctl stop keepalived ，然后到137.15上看虚拟IP

[root@localhost keepalived]# ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 08:00:27:b2:f1:15 brd ff:ff:ff:ff:ff:ff
    inet 192.168.137.15/24 brd 192.168.137.255 scope global noprefixroute enp0s3
       valid_lft forever preferred_lft forever
    inet 192.168.137.111/32 scope global enp0s3
       valid_lft forever preferred_lft forever
    inet6 fe80::3445:c251:976:e8c6/64 scope link tentative noprefixroute dadfailed 
       valid_lft forever preferred_lft forever
    inet6 fe80::be0a:e8f2:197e:be87/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
    inet6 fe80::6d7a:d71c:8f2f:474/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

 可以看到切换到 137.15上了。切换成功之后特别注意

要将配置里面的 vrrp_strict 去除，否则虚拟地址不能访问

步骤六：测试系统是否能切换服务

在二个系统上使用 yum install httpd 安全apache httpd web服务器。然后使用使用如下命令分别在2个机器上。

   # ip addr show |grep inet >/var/www/html/index.html

步骤六：测试web

1) 再目前的机器上看到虚拟ip再15的机器上，停止服务，然后再看

停止服务后，结果：

成功