RHEL5/Cluster(TUN部分)

RHEL5中的Cluster组件是基于章文嵩先生创立的LVS(Linux Virtual Server) 制作而成,

关于lvs的工作原理请参照《Linux 服务器集群系统》

Virtual Server via IP Tunneling（VS/TUN）
采用NAT技术时，由于请求和响应报文都必须经过调度器地址重写，当客户请求越来越多时，调度器的处理能力将成为瓶颈。为了解决这个问题，调度器把请求报文通过IP隧道转发至真实服务器，而真实服务器将响应直接返回给客户，所以调度器只处理请求报文。由于一般网络服务应答比请求报文大许多，采用VS/TUN技术后，集群系统的最大吞吐量可以提高10倍。

Cluster(TUN部分)实验

TUN类型的httpd负载均衡集群.网络拓扑为

eth0   192.168.1.100  eth0   192.168.1.200
tunl0  10.0.0.50      tunl0  10.0.0.50
gw     192.168.1.10   gw     192.168.1.10
______________      ______________
|              |    |              |
| realserver 1 |    | realserver 2 |
|______________|    |______________|
        |                   |
        |___________________|
                 |
           eth0 192.168.1.10
             ________
            |        |
            |   gw   |
            |________|
           eth1  10.0.0.10         
                |               
                |             
                |             
     VIP(eth0:1)=10.0.0.50     
            _ _ _ _ _       
           |          |
             director 
           |_ _ _ _ _ |
                |     
                |
                |
        ----------------------------------------
       |                 |                     |
       |                 |                     |
  eth0 10.0.0.1   eth0 10.0.0.2     eth0 10.0.0.3
  gw   10.0.0.10  gw   10.0.0.10    gw   10.0.0.10
______________    ______________    ______________
|              |  |              |  |              |
|    router    |  | router backup|  |     clinet   |
|______________|  |______________|  |______________|

[client]   
os:windwows xp
[gw]       
os:rhel5   
hostname:gw
[router/router backup]
os:rhel5   
hostname:vs/vs_bk   
software: ipvsadm piranha httpd php
[realserver1/realserver2]
os:rhel5   
hostname:rs1/rs2   
software:httpd
[director]
为router或者router backup中的一台虚拟出来

配置如下

[gw]

#打开路由转发
[root@gw ~]# echo 1 > /proc/sys/net/ipv4/ip_forward

[router]

#设置piranha密码
piranha-passwd

#开启服务
service piranha-gui start

#访问配置页面
http://10.0.0.1:3636/

#配置以后的文件
[root@vs ~]# cat /etc/sysconfig/ha/lvs.cf
serial_no = 53
primary = 10.0.0.1
service = lvs
backup_active = 1
backup = 10.0.0.2
heartbeat = 1
heartbeat_port = 539
keepalive = 6
deadtime = 18
network = tunnel
nat_nmask = 255.255.255.0
debug_level = NONE
monitor_links = 0
virtual HTTP {
     active = 1
     address = 10.0.0.50 eth0:1
     vip_nmask = 255.255.0.0
     port = 80
     send = "GET / HTTP/1.0\r\n\r\n"
     expect = "HTTP"
     use_regex = 0
     load_monitor = none
     scheduler = wlc
     protocol = tcp
     timeout = 6
     reentry = 15
     quiesce_server = 0
     server rs1.yubo.com {
         address = 192.168.1.100
         active = 1
         weight = 1
     }
     server rs2.yubo.com {
         address = 192.168.1.200
         active = 1
         weight = 1
     }
}

#重启服务
service pulse restart

[router backup]

#设置piranha密码
piranha-passwd

#开启服务
service piranha-gui start

#访问配置页面
http://10.0.0.2:3636/

#配置以后的文件
[root@vs_bk ~]# cat /etc/sysconfig/ha/lvs.cf
serial_no = 48
primary = 10.0.0.2
service = lvs
backup_active = 1
backup = 10.0.0.1
heartbeat = 1
heartbeat_port = 539
keepalive = 6
deadtime = 18
network = tunnel
nat_nmask = 255.255.0.0
debug_level = NONE
monitor_links = 0
virtual HTTP {
     active = 1
     address = 10.0.0.50 eth0:1
     vip_nmask = 255.255.0.0
     port = 80
     send = "GET / HTTP/1.0\r\n\r\n"
     expect = "HTTP"
     use_regex = 0
     load_monitor = none
     scheduler = wlc
     protocol = tcp
     timeout = 6
     reentry = 15
     quiesce_server = 0
     server rs1.yubo.com {
         address = 192.168.1.100
         active = 1
         weight = 1
     }
     server rs2.yubo.com {
         address = 192.168.1.200
         active = 1
         weight = 1
     }
}

#重启服务
service pulse restart

[realserver1/realserver2]
封装到达realserver的包,目的地址是vip的地址,而不是rs的ip地址,如果不做处理,会被拒绝,加上一个虚拟设备就解决问题了tunl0

ifconfig tunl0 10.0.0.50 netmask 255.255.255.255

之后开启rs1,rs2的httpd服务,为了使得便于观察

[root@rs1 ~]# echo "rs1.yubo.org" > /var/www/html/index.html
[root@rs2 ~]# echo "rs2.yubo.org" > /var/www/html/index.html

client频繁访问http://10.0.0.50时,会发现显示内容在”rs2.yubo.org”和”rs1.yubo.org”之间切换

试验完成以后,不要忘记保存配置,以免启动以后无法使用

[vs/vs_bk]

chkconfig --level 2345 piranha-gui on
chkconfig --level 2345 pulse on

[rs1/rs2]

echo "ifconfig tunl0 10.0.0.50 netmask 255.255.255.255" >> /etc/rc.local

[注意]
route 和 route backup 互为备份,没有主次之分(注意每个配置文件的backup和backup_private)
route backup 是route的备份
route 是route backup的备份
10.0.0.50个虚拟ip地址同一时刻只出现在1个router上,当前router当机以后,这个ip地址会被另一台备份机器接管

[其他]

[root@vs_bk ~]# ipvsadm --save -n
-A -t 10.0.0.50:80 -s wlc
-a -t 10.0.0.50:80 -r 192.168.1.200:80 -i -w 1
-a -t 10.0.0.50:80 -r 192.168.1.100:80 -i -w 1