Keepalived的VIP单播配置

默认keepalived主机之间利用多播相互通告消息，会造成网络拥塞，可以替换成单播，减少网络流量。

注意：启用 vrrp_strict 时，不能启用单播

#在所有节点vrrp_instance语句块中设置对方主机的IP，建议设置为专用于对应心跳线网络的地址，而非使
用业务网络
unicast_src_ip <IPADDR>  #指定发送单播的源IP
unicast_peer {
   <IPADDR>     #指定接收单播的对方目标主机IP
   ......
}
#启用 vrrp_strict 时，不能启用单播,否则服务无法启动,并在messages文件中记录下面信息
Jun 16 17:50:06 centos8 Keepalived_vrrp[23180]: (m44) Strict mode does not 
support authentication. Ignoring.
Jun 16 17:50:06 centos8 Keepalived_vrrp[23180]: (m44) Unicast peers are not 
supported in strict mode
Jun 16 17:50:06 centos8 Keepalived_vrrp[23180]: Stopped - used 0.000606 user 
time, 0.000000 system time
Jun 16 17:50:06 centos8 Keepalived[23179]: Keepalived_vrrp exited with permanent 
error CONFIG. Terminating
Jun 16 17:50:06 centos8 systemd[1]: keepalived.service: Succeeded.
Jun 16 17:50:06 centos8 Keepalived[23179]: Stopped Keepalived v2.0.10 
(11/12,2018)

1、master主机配置

[root@ka1 ~]# vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived
global_defs {
   notification_email {
   2796285750@qq.com
   }
   notification_email_from keepalived@ouqisheng.org
   smtp_server 127.0.0.1
   smtp_connect_timeout 30
   router_id ouqisheng.org
   vrrp_skip_check_adv_addr
   #vrrp_strict #注释此参数，与vip单播模式冲突
   vrrp_garp_interval 0
   vrrp_gna_interval 0
   vrrp_ipsets keepalived
}
vrrp_instance VI_1 {
   state MASTER
   interface eth0
   virtual_router_id 100
   priority 100
   advert_int 1
   authentication {
       auth_type PASS
       auth_pass 1111
   }
   virtual_ipaddress {
   172.25.254.100/24 dev ens33 label ens33:1
   }
   unicast_src_ip 172.25.254.10 #本机IP
   unicast_peer {
       172.25.254.20 #指向对方主机IP
       #如果有多个keepalived,再加其它节点的IP
   }
}

2、backup主机配置

[root@ka2 ~]# vim /etc/keepalived/keepalived.conf

! Configuration File for keepalived
global_defs {
   notification_email {
   2796285750@qq.com
   }
   notification_email_from keepalived@ouqisheng.org
   smtp_server 127.0.0.1
   smtp_connect_timeout 30
   router_id ouqisheng.org
   vrrp_skip_check_adv_addr
   #vrrp_strict #注释此参数，与vip单播模式冲突
   vrrp_garp_interval 0
   vrrp_gna_interval 0
   vrrp_ipsets keepalived
}
vrrp_instance VI_1 {
   state BACKUP
   interface eth0
   virtual_router_id 100
   priority 80
   advert_int 1
   authentication {
       auth_type PASS
       auth_pass 1111
   }
   virtual_ipaddress {
     172.25.254.100/24 dev ens33 label ens33:1
   }
   unicast_src_ip 172.25.254.20 #本机ip
   unicast_peer {
     172.25.254.10 #对端主机IP
   }
}

3、抓包查看单播效果