Centos7下（双网卡）搭建Nginx+Keepalived高可用

Centos7下（双网卡）搭建Nginx+Keepalived高可用

 一、背景说明

①、服务器版本信息

OS版本：CentOS Linux release 7.5.1804 (Core) 

Keepalived：Keepalived v1.3.5

注：每台服务器两张网卡，一张连内网一张网卡直接连接外网交换机，内网设置静态IP地址，外网网卡不做任何设置！

②、服务器网络信息

Master：10.20.11.180

ens224：内网网卡

ens192：VIP绑定网卡，不用做任何设置！

网络信息如下（keepalived已设置好后的截图）：

GENERAL.DEVICE:                         ens224
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         00:0C:29:C5:D9:BB
GENERAL.MTU:                            1500
GENERAL.STATE:                          100 (connected)
GENERAL.CONNECTION:                     ens224
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/ActiveConnection/16
WIRED-PROPERTIES.CARRIER:               on
IP4.ADDRESS[1]:                         10.20.11.180/24
IP4.GATEWAY:                            --
IP4.ROUTE[1]:                           dst = 10.20.11.0/24, nh = 0.0.0.0, mt = 100
IP4.DNS[1]:                             61.139.2.69
IP6.ADDRESS[1]:                         fe80::8839:e04e:d2f6:5a08/64
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = ff00::/8, nh = ::, mt = 256, table=255
IP6.ROUTE[2]:                           dst = fe80::/64, nh = ::, mt = 256
IP6.ROUTE[3]:                           dst = fe80::/64, nh = ::, mt = 100

GENERAL.DEVICE:                         ens192
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         00:0C:29:C5:D9:B1
GENERAL.MTU:                            1500
GENERAL.STATE:                          100 (connected)
GENERAL.CONNECTION:                     ens192
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/ActiveConnection/15
WIRED-PROPERTIES.CARRIER:               on
IP4.ADDRESS[1]:                         220.166.180.180/26
IP4.GATEWAY:                            220.166.180.129
IP4.ROUTE[1]:                           dst = 220.166.180.128/26, nh = 0.0.0.0, mt = 0
IP4.ROUTE[2]:                           dst = 0.0.0.0/0, nh = 220.166.180.129, mt = 0
IP6.GATEWAY:                            --

Slave：10.20.11.46

ens192：内网网卡

ens160：VIP绑定网卡

[root@nginx-180-slave-46 vhost]# nmcli device show
GENERAL.DEVICE:                         ens160
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         00:50:56:9B:AA:70
GENERAL.MTU:                            1500
GENERAL.STATE:                          100 (connected)
GENERAL.CONNECTION:                     ens160
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/ActiveConnection/4398
WIRED-PROPERTIES.CARRIER:               on
IP4.ADDRESS[1]:                         10.20.11.46/24
IP4.GATEWAY:                            --
IP4.ROUTE[1]:                           dst = 10.20.11.0/24, nh = 0.0.0.0, mt = 100
IP4.DNS[1]:                             61.139.2.69
IP6.ADDRESS[1]:                         fe80::ae3:b1b9:824a:d8a3/64
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 100
IP6.ROUTE[2]:                           dst = ff00::/8, nh = ::, mt = 256, table=255

GENERAL.DEVICE:                         ens192
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         00:50:56:9B:8C:FB
GENERAL.MTU:                            1500
GENERAL.STATE:                          100 (connected)
GENERAL.CONNECTION:                     ens192
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/ActiveConnection/38901
WIRED-PROPERTIES.CARRIER:               on
IP4.GATEWAY:                            --
IP6.GATEWAY:                            --

GENERAL.DEVICE:                         lo
GENERAL.TYPE:                           loopback
GENERAL.HWADDR:                         00:00:00:00:00:00
GENERAL.MTU:                            65536
GENERAL.STATE:                          10 (unmanaged)
GENERAL.CONNECTION:                     --
GENERAL.CON-PATH:                       --
IP4.ADDRESS[1]:                         127.0.0.1/8
IP4.GATEWAY:                            --
IP6.ADDRESS[1]:                         ::1/128
IP6.GATEWAY:                            --

VIP：220.166.180.180

注：内网网卡设置网络信息：设置IP地址、子网掩码、DNS地址即可，不用设置网关。外网网卡不用做任何设置。

③、网络架构图如下

 ④、Nginx、keepalived安装

nginx、keepalived 通过yum进行安装，如果需要二进制安装可以自行百度，本文重点在于配置nginx+keepalived使Nginx可以做到高可用。

二、配置邮件告警通知（已弃用改为钉钉群通知）

2.1、安装邮件服务

[root@server1 ~]# yum -y install mailx sendmail

修改邮件服务配置文件

在配置文件中添加如下参数

[root@server1 ~]# vim /etc/mail.rc 
##在配置文件中添加以下参数
set from=*******@qq.com  //邮箱账号
set smtp=smtp.qq.com
set smtp-auth-user=*******@qq.com     //邮箱账号
set smtp-auth-password=********   //邮箱smtp验证码
set smtp-auth=login

测试邮件发送

[root@localhost keepalived]# mail -s hello *****@qq.com < /etc/centos-release

查看接收邮件：

2.2、编写邮件通知脚本

邮件告警脚本

[root@server1 ~]# vim  /etc/keepalived/notify.sh 
#!/bin/bash
contact='******@qq.com'
notify() {
	mailsubject="$(hostname) to be $1 ,vip转移"
	mailbody="$(date +'%F %T'): vrrp trasition, $(hostname) change to be $1"
	echo " $mailbody" | mail -s "$mailsubject" $contact
}
case $1 in
master)
	notify master
	;;
backup)
	notify backup
	;;
fault)
	notify fault
	;;
*)
	echo "Usage: $(basename $