CentOS release 6.8 x64 (Final)2.6.32-642.4.2.el6.x86_64 安装keepalived-1.3.5+lvs
============
一、环境安装：
============
1.依赖安装
|
1
2
3
4
|
yum install -y openssl-devel libnl3-devel ipset-devel iptables-devel libnfnetlink-devel popt*
增加软连接
ln -s /usr/src/kernels/`uname -r` /usr/src/linux
|
2.5台机器IP设置
LVS1: 172.16.0.100
LVS2: 172.16.0.101
VIP: 172.16.0.150
WEB: 172.16.0.102
WEB2:172.16.0.103
web3:172.16.0.104(windows客户端IIS)
3.关闭selinux
修改/etc/selinux/config文件中设置SELINUX=disabled ，然后重启服务器。
4.关闭iptables,如果不关的话，需更具情况增加开放端口。
二、安装步骤(在LVS1.LVS2上安装）：
============
1）安装lvs管理工具
|
1
2
3
4
5
6
|
1.tar zxvf ipvsadm-1.26.tar.gz
2.cd ipvsadm-1.26
3.'make'
4.'make install'
5.
6.lsmod | grep ip_vs
|
2）安装keepalived软件
|
1
2
3
4
5
6
7
|
1. tar zxvf keepalived-1.3.5.tar.gz
2. cd ikeepalived-1.3.5
3. ./configure --prefix=/usr/local/keepalived --with-init=SYSV
4. 'make'
5. 'make install'.
|
6.配置keepalived文件的路径
|
1
2
3
4
5
|
cp /usr/local/keepalived/etc/rc.d/init.d/keepalived /etc/init.d/
cp /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
mkdir /etc/keepalived
cp /usr/local/keepalived/etc/keepalived/keepalived.conf /etc/keepalived/
cp /usr/local/keepalived/sbin/keepalived /usr/sbin/
|
7.配置文件（vim /etc/keepalived/keepalived.conf）
#这里是全局定义部分
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
global_defs {
notification_email {
root@local
}
notification_email_from server@local
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id LVS_ONE
vrrp_skip_check_adv_addr
vrrp_garp_interval 0
vrrp_gna_interval 0
}
vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 51
priority 150
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
172.16.0.150/24 brd 172.16.0.255 dev eth0 label eth0:0
}
}
virtual_server 172.16.0.150 80 {
delay_loop 6
lb_algo rr
lb_kind DR
persistence_timeout 0
protocol TCP
real_server 172.16.0.102 80 {
weight 1
TCP_CHECK {
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
real_server 172.16.0.103 80 {
weight 1
TCP_CHECK {
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
real_server 172.16.0.104 80 {
weight 1
TCP_CHECK {
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
}
|
三、客户端设置（web1,web2配置）
1.增加启动关闭脚本,并chmod执行权限
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
. /etc/rc.d/init.d/functions
VIP=172.16.0.150
host=`/bin/hostname`
case "$1" in
start)
/sbin/ifconfig lo down
/sbin/ifconfig lo up
echo 1 > /proc/sys/net/ipv4/conf/lo/arp_ignore
echo 2 > /proc/sys/net/ipv4/conf/lo/arp_announce
echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore
echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce
/sbin/ifconfig lo:0 $VIP broadcast $VIP netmask 255.255.255.255 up
/sbin/route add -host $VIP dev lo:0
;;
stop)
/sbin/ifconfig lo:0 down
echo 0 > /proc/sys/net/ipv4/conf/lo/arp_ignore
echo 0 > /proc/sys/net/ipv4/conf/lo/arp_announce
echo 0 > /proc/sys/net/ipv4/conf/all/arp_ignore
echo 0 > /proc/sys/net/ipv4/conf/all/arp_announce
;;
status)
islothere=`/sbin/ifconfig lo:0 | grep $VIP`
isrothere=`netstat -rn | grep "lo:0" | grep $VIP`
if [ ! "$islothere" -o ! "isrothere" ];then
echo "LVS-DR real server Stopped!"
else
echo "LVS-DR real server Running..."
fi
;;
*)
echo "$0: Usage: $0 {start|status|stop}"
exit 1
;;
esac
|
2.增加web http服务，使用80端口可以打开网站。
3.测试服务器相互之间是否可以PING通。
4.windows客户端增加VIP事项（web3机器）：
win2003地址设置方法：控制面板->添加硬件->添加新的硬件->手动安装硬件-》网络适配器
重命名为VIP,增加IP地址172.16.0.104，掩码255.255.255.0
打开regedit,编辑：subnetMask为255.255.255.255
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces
Win2008地址设置方法:控制面板-硬件和打印机->新增硬件
找到新增的环回连接，重命名为VIP, 右键VIP连接属性，开始设置TCP/IP
172.16.0.104 255.255.255.255.255 保存
运行CMD执行：
|
1
2
3
4
|
netsh interface ipv4 set interface "VIP" weakhostreceive=enabled
netsh interface ipv4 set interface "VIP" weakhostsend=enabled
netsh interface ipv4 set interface "LAN" weakhostreceive=enabled
netsh interface ipv4 set interface "LAN" weakhostsend=enabled
|
四、测试检查keepalived+lvs问题
1、 查看系统日志 /var/log/messages
2、 检查负载均衡器的网络连通状况（ping命令或arping）。
3、 检查 keepalived 的运行情况。ps -aux | grep keepalived查看是否进程启动。lsmod | grep ip_vs,检查ipvs 模块是否被加载到系统的内核，vip 是否被绑定到网络接口，ipvsadm 是否有输出。
4、 检查 keepalived 的配置文件书写是否正确。
5、 检查负载均衡器是否启用防火墙规则。
6、 realserver的web是否正常
本文转自 lcpljc 51CTO博客，原文链接：http://blog.51cto.com/lcpljc/1930821，如需转载请自行联系原作者
