实现MASTR/BACKUP的Keepalived单主架构

1、 MASTER配置

编辑keepalived.conf配置文件

[root@ka1 ~]# vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived
global_defs {
   notification_email {
       QQ邮箱@qq.com
   }
   notification_email_from keepalived@ouqisheng.org
   smtp_server 127.0.0.1
   smtp_connect_timeout 30
   router_id ouqisheng.org
   vrrp_skip_check_adv_addr
   #vrrp_strict #添加此选项无法访问vip，可以用nft list ruleset查看
   vrrp_garp_interval 0
   vrrp_gna_interval 0
   vrrp_mcast_group4 224.0.0.18
}
vrrp_instance VI_1 {
   state MASTER
   interface ens33
   virtual_router_id 100
   priority 100
   advert_int 1
   authentication {
       auth_type PASS
       auth_pass 1111
   }
   virtual_ipaddress {
       172.25.254.100/24 dev ens33 label ens33:0
    }
}

2、BACKUP配置

编辑keepalived.conf配置文件

[root@ka2 ~]# vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived
global_defs {
   notification_email {
       QQ邮箱@qq.com
   }
   notification_email_from keepalived@ouqisheng.org
   smtp_server 127.0.0.1
   smtp_connect_timeout 30
   router_id ouqisheng.org
   vrrp_skip_check_adv_addr
   #vrrp_strict
   vrrp_garp_interval 0
   vrrp_gna_interval 0
   vrrp_mcast_group4 224.0.0.18
}
vrrp_instance VI_1 {
   state BACKUP
   interface ens33
   virtual_router_id 100 #相同id管理同一个虚拟路由
   priority 80 #低优先级
   advert_int 1
   authentication {
       auth_type PASS
       auth_pass 1111
   }
   virtual_ipaddress {
       172.25.254.100/24 dev ens33 label ems33:1
   }
}

3、重启服务，抓包观察

 tcpdump -i ens33 -nn host 224.0.0.18

ka1和ka2都开启时：

因为ka1的优先级比ka2要高，当它们都开启时，会只抓到ka1的包

ka1关闭、ka2开启时：