keepalived + lvs + nginx 双主配置案例 (2)

一、本文基于上一篇主备配置案例场景，修改为双主模式

二、双主配置文件，即两组互为主备

1> 192.168.1.109配置文件

global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
   vrrp_strict
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

vrrp_instance VI_1 {
    state MASTER
    interface eth0
    virtual_router_id 51
    priority 200
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.1.50
    }
}

virtual_server 192.168.1.50 80 {  
    delay_loop 6                 
    lb_algo wrr              
    lb_kind DR 
    nat_mask 255.255.255.0                
    persistence_timeout 0          
    protocol TCP                  
    real_server 192.168.1.111 80 {  
        weight 3                 
        TCP_CHECK {  
        connect_timeout 10        
        nb_get_retry 3  
        delay_before_retry 3  
        connect_port 80  
        }  
    }  
    real_server 192.168.1.112 80 {  
        weight 3  
        TCP_CHECK {  
        connect_timeout 10  
        nb_get_retry 3  
        delay_before_retry 3  
        connect_port 80  
        }  
     }  
} 

vrrp_instance VI_2 {
    state BACKUP
    interface eth0
    virtual_router_id 52
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.1.51
    }
}

virtual_server 192.168.1.51 80 {  
    delay_loop 6                 
    lb_algo wrr                
    lb_kind DR 
    nat_mask 255.255.255.0                
    persistence_timeout 0          
    protocol TCP                  
    real_server 192.168.1.112 80 {  
        weight 3               
        TCP_CHECK {  
        connect_timeout 10        
        nb_get_retry 3  
        delay_before_retry 3  
        connect_port 80  
        }  
    }  
    real_server 192.168.1.111 80 {  
        weight 3 
        TCP_CHECK {  
        connect_timeout 10  
        nb_get_retry 3  
        delay_before_retry 3  
        connect_port 80  
        }  
     }  
} 

2> 192.168.1.110配置文件

global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
   vrrp_strict
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

vrrp_instance VI_1 {
    state BACKUP
    interface eth0
    virtual_router_id 51
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.1.50
    }
}

virtual_server 192.168.1.50 80 {  
    delay_loop 6 
    lb_algo wrr 
    lb_kind DR 
    nat_mask 255.255.255.0                
    persistence_timeout 0 
    protocol TCP         
    real_server 192.168.1.111 80 {  
        weight 3              
        TCP_CHECK {  
        connect_timeout 10
        nb_get_retry 3  
        delay_before_retry 3
        connect_port 80  
        }  
    }   
    real_server 192.168.1.112 80 {  
        weight 3    
        TCP_CHECK {   
        connect_timeout 10
        nb_get_retry 3  
        delay_before_retry 3
        connect_port 80  
        }  
     }  
}    

vrrp_instance VI_2 {
    state MASTER
    interface eth0
    virtual_router_id 52
    priority 200
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.1.51
    }
}

virtual_server 192.168.1.51 80 {
    delay_loop 6 
    lb_algo wrr 
    lb_kind DR 
    nat_mask 255.255.255.0
    persistence_timeout 0
    protocol TCP
    real_server 192.168.1.112 80 {  
        weight 3   
        TCP_CHECK {
        connect_timeout 10
        nb_get_retry 3
        delay_before_retry 3
        connect_port 80
        }
    }
    real_server 192.168.1.111 80 {  
        weight 3 
        TCP_CHECK {
        connect_timeout 10
        nb_get_retry 3
        delay_before_retry 3
        connect_port 80
        }
     }
}

三、状态

1> ip: 192.168.1.109 vip:192.168.1.50

2> ip: 192.168.1.110 vip:192.168.1.51

四、dns轮循

这个域名是不存在的域名直接本地局域网缓存访问，不会走外网。双主，任何一台down掉不影响访问。还可以用dns做负载。

转载于:https://blog.51cto.com/keep11/2082719