nginx+keepalived配置

1、keepalived介绍

keepalived是一个类似于layer3, 4 & 5交换机制的软件，以 VRRP 协议为实现基础，用 VRRP 协议来实现高可用性(HA)，可以用来防止服务器单点故障的发生，通过配合 Nginx 可以实现 web 前端服务的高可用。

 

2、部署概要

2个nginx服务器一主一备，之间用keepalived实现故障转移

 

3、部署操作

系统版本：centos7.8

软件版本：nginx-1.16.1，keepalived-1.4.5

主nginx服务器：10.137.8.203

备nginx服务器：10.137.8.204

vip：10.137.8.230

nginx安装不做叙述

keepalived下载地址：https://www.keepalived.org/download.html

1 2 3 4 5 6 7 8 9

//上传keepalived-1.4.5.tar.gz至2个服务器 /root 目录下 //安装相关依赖包 yum install libnl-devel libnl3-devel libnfnetlink-devel cd /root tar -xvf keepalived-1.4.5.tar.gz cd keepalived-1.4.5 ./configure --prefix=/usr/local/keepalived make make install

1）、修改主nginx 10.137.8.203 keepalived的配置文件

vim /usr/local/keepalived/etc/keepalived/keepalived.conf

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

! Configuration File for keepalived   global_defs { }   vrrp_instance vip_nginx {     //实例名自定义     state MASTER              //主备配置为MASTER----BACKUP     interface ens160          //主机网卡名     virtual_router_id 51      //vrid 路由标识符，主备保持一致     priority 100              //值越大优先级越高     advert_int 1              //主服务器组播包发送间隔时间     #nopreempt                //采用抢占式，不开启此配置     authentication {          //主备主机之间的认证表示信息         auth_type PASS                auth_pass 1111     }     virtual_ipaddress {       //设置虚拟ip地址信息         10.137.8.230     } }

 

启动keepalived

/usr/local/keepalived/sbin/keepalived -f /usr/local/keepalived/etc/keepalived/keepalived.conf

在10.137.8.203上查看是否已绑定vip

 

从其他服务器上ping 10.137.8.230测试，已可以ping通vip地址

 

 

2）、修改备nginx  10.137.8.204 keepalived的配置文件

vim /usr/local/keepalived/etc/keepalived/keepalived.conf

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

! Configuration File for keepalived   global_defs { }   vrrp_instance vip_nginx {     state BACKUP                    //标识为备节点     interface ens160     virtual_router_id 51     priority 90                     //优先级低于主节点     advert_int 1     authentication {         auth_type PASS         auth_pass 1111     }     virtual_ipaddress {         10.137.8.230     } }

启动备节点keepalived

/usr/local/keepalived/sbin/keepalived -f /usr/local/keepalived/etc/keepalived/keepalived.conf

 

4、可用性验证

停止主服务器的keepalived进程

在备nginx上查看vip

 

发现vip已经漂移到备nginx，访问vip10.137.8.230 正常

启动主nginx的keepalived，启动完成后vip漂移至主服务器

验证完成

 

5、keepalived抢占式与非抢占式

抢占模式就是，当master宕机后，backup 接管服务。后续当master恢复后，vip重新漂移到master上，master重新接管服务，多了一次vip切换。非抢占式， 原先的master恢复后，状态变为backup,不接管服务，这是非抢占模式。默认配置为抢占式