keepalived配置日志与防火墙

日志配置

sed -i 's/KEEPALIVED_OPTIONS="-D"/KEEPALIVED_OPTIONS="-D -d -S 0"/g' /etc/sysconfig/keepalived 
echo 'local0.*    /var/log/keepalived.log' >> /etc/rsyslog.conf
systemctl restart rsyslog
systemctl restart keepalived

防火墙放通

keepalived主要用vrrp协议通信，因此放通vrrp协议就好
这里给出firewalld的放通vrrp协议的方法

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface bond0 --protocol vrrp -j ACCEPT
#firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface bond0 --destination 192.168.1.100 --protocol vrrp -j ACCEPT
firewall-cmd --reload