lvs+keepalived集群安装配置

我这里实验选择的是DR模式wlc算法。
1、环境准备
lvs1:192.0.2.16
lvs2:192.0.2.17
nginx:192.0.2.18
nginx:192.0.2.19
VIP:192.0.2.20


2、安装ipvsadm
yum install ipvsadm 
ipvsadm-1.26-4.el6.i686.rpm 
3、安装keepalived
yum install keepalived
keepalived-1.2.13-5.el6_6.i686.rpm 
4、配置keepalived
vi /etc/keepalived/keepalived.conf
service keepalived restart
5、维护命令
service ipvsadm start
service keepalived start


service ipvsadm stop
service keepalived stop


6、加入开机自启动
chkconfig keepalived on
chkconfig ipvsadm on


7、服务器端配置
master
[root@lvs2 keepalived]# cat keepalived.conf 
! Configuration File for keepalived


global_defs {
   notification_email {
     yujinga@wumart.com
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server smtp.wumart.com
   smtp_connect_timeout 30
   router_id LVS_DEVEL
}


vrrp_instance VI_1 {
    state MASTER                              
    interface eth0
    virtual_router_id 51                             //主备机一致
    priority 100                                     //主机高于备机
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.0.2.20                                   //vip
    }
}


virtual_server 192.0.2.20 80 {
    delay_loop 6
    lb_algo wlc
    lb_kind DR
    nat_mask 255.255.0.0
    persistence_timeout 50
    protocol TCP


    real_server 192.0.2.18 80 {
        weight 15
        TCP_CHECK {
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
            connect_port 80
    }
}
    real_server 192.0.2.19 80 {
        weight 10
            TCP_CHECK { 
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
            connect_port 80
    }
! Configuration File for keepalived


global_defs {
   notification_email {
     yujinga@wumart.com
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server smtp.wumart.com
   smtp_connect_timeout 30
   router_id LVS_DEVEL
}


vrrp_instance VI_1 {
    state backup
    interface eth0
    virtual_router_id 51       
    priority 90
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.0.2.20
    }
}


virtual_server 192.0.2.20 80 {
    delay_loop 6
    lb_algo wlc
    lb_kind DR
    nat_mask 255.255.0.0
    persistence_timeout 50
    protocol TCP


    real_server 192.0.2.18 80 {
        weight 15
        TCP_CHECK {
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
            connect_port 80
    }
}
    real_server 192.0.2.19 80 {
        weight 10
            TCP_CHECK { 
            connect_timeout 3
            nb_get_retry 3
            delay_before_retry 3
            connect_port 80
    }
}
=====================================================================================
linux客户端配置
客户端配置脚本 drvip.sh
#!/bin/bash
# description: Config realserver lo and apply noarp 
SNS_VIP=192.0.2.20
/etc/rc.d/init.d/functions
case "$1" in
start)
       ifconfig lo:0 $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP
       /sbin/route add -host $SNS_VIP dev lo:0
       echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
       echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
       echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
       echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
       sysctl -p >/dev/null 2>&1
       echo "RealServer Start OK"
       ;;
stop)
       ifconfig lo:0 down
       route del $SNS_VIP >/dev/null 2>&1
       echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
       echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce
       echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
       echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
       echo "RealServer Stoped"
       ;;
*)
       echo "Usage: $0 {start|stop}" 
       exit 1
esac
exit 0


客户端启停
/sbin/drvip.sh start
/sbin/drvip.sh stop
--------------------------------------------------------------------------------
win客户端配置
1、win客户端
需要从管理工具里面--添加设备---回环网卡---4个255+虚拟ip
2、添加到服务器配置文件
3、重启keeplived
=================================================================================
服务器端查看连接数和vip
查看连接数
ipvsadm -ln
查看源IP 目的IP 访问
ipvsadm -l -n --connection
==================================================================================
测试
安装两台nginx服务器
chkconfig iptables off
service iptables stop
chkconfig NetworkManager off
vi /etc/selinux/config
SELINUX=disabled


1、相关依赖包安装
yum -y install gcc openssl-devel pcre-devel zlib-devel openssl pcre wget 
2、建立nginx用户及组
groupadd -r nginx && useradd -r -g nginx -s /bin/false -M nginx
3、下载并安装nginx
wget ftp://10.101.200.210/pub/nginx/nginx-1.8.0.tar.gz
tar -xzvf nginx-1.8.0.tar.gz
cd ./nginx-1.8.0
./configure   --prefix=/usr/local/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log   --pid-path=/var/run/nginx/nginx.pid    --lock-path=/var/lock/nginx.lock   --user=nginx   --group=nginx   --with-http_ssl_module   --with-http_flv_module   --with-http_realip_module   --with-http_stub_status_module   --with-http_gzip_static_module   --http-client-body-temp-path=/var/tmp/nginx/client/   --http-proxy-temp-path=/var/tmp/nginx/proxy/   --http-fastcgi-temp-path=/var/tmp/nginx/fcgi/   --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi   --http-scgi-temp-path=/var/tmp/nginx/scgi   --with-pcre
make && make install
启动停止脚本
wget ftp://10.101.200.210/pub/nginx/nginx -O /etc/rc.d/init.d/nginx
chmod +x /etc/rc.d/init.d/nginx
chkconfig --level 345 nginx on
chkconfig --list | grep nginx
service nginx start
service nginx status
#service nginx stop


查看nginx配置
nginx -V
进入目录
cd /usr/local/nginx/html
vi index.html
加入区分标志
在表头加入ip地址
分别输入ip地址可以访问。
===================================================================================
启动keealived，并进行测试访问。
1、启动keealived，并进行测试访问。
2、停止lvs1，在进行访问，并查看lvs2上面的vip地址和连接。
3、启动lvs1，看是否回切。
4、可以在主备机上打开log。查看切换过程。