LVS NAT模式搭建
准备工作
三台机器上都执行执行
systemctl stop firewalld; systemctl disable firewalld
安装iptables-services
systemctl enable iptables; systemctl start iptables; iptables -F; service iptables save
setenforce 0
分发器的设置
配置内网ip 192.168.130.116
# vim /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.130.116
NETMASK=255.255.255.0
GATEWAY=192.168.130.2
DNS1=119.29.29.29
配置外网ip 192.168.214.116 （vmware仅主机模式）
# vim /etc/sysconfig/network-scripts/ifcfg-ens37
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens37
DEVICE=ens37
ONBOOT=no
IPADDR=192.168.214.116
安装ipvsadm
# yum install -y ipvsadm
编写脚本/usr/local/sbin/lvs_nat.sh
# vim /usr/local/sbin/lvs_nat.sh
#! /bin/bash
# director 服务器上开启路由转发功能
echo 1 > /proc/sys/net/ipv4/ip_forward
# 关闭icmp的重定向
echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects
echo 0 > /proc/sys/net/ipv4/conf/default/send_redirects
# 注意区分网卡名字，我的两个网卡分别为ens33和ens37
echo 0 > /proc/sys/net/ipv4/conf/ens33/send_redirects
echo 0 > /proc/sys/net/ipv4/conf/ens37/send_redirects
# director 设置nat防火墙
iptables -t nat -F
iptables -t nat -X
iptables -t nat -A POSTROUTING -s 192.168.130.0/24-j MASQUERADE
# director设置ipvsadm
IPVSADM='/usr/sbin/ipvsadm'
$IPVSADM -C
$IPVSADM -A -t 192.168.214.116:80 -s wlc
$IPVSADM -a -t 192.168.214.116:80 -r 192.168.130.118:80 -m -w 1
$IPVSADM -a -t 192.168.214.116:80 -r 192.168.130.128:80 -m -w 1
加载脚本/usr/local/sbin/lvs_nat.sh
# sh /usr/local/sbin/lvs_nat.sh
rs1的设置
配置内网ip 192.168.130.118
配置网关 192.168.130.116 （这里的网关为分发器的内网ip）
# vim /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.130.118
NETMASK=255.255.255.0
GATEWAY=192.168.130.116
DNS1=119.29.29.29
安装nginx 需要在能外网通信的时候安装
# yum install -y nginx
启动nginx
# systemctl start nginx
# ps aux |grep nginx
root 21310.00.2 1229082244 ? Ss 16:03 0:00 nginx: master process /usr/sbin/nginx
nginx 21320.00.3 1232923596 ? S 16:03 0:00 nginx: worker process
nginx 21330.00.3 1232923596 ? S 16:03 0:00 nginx: worker process
nginx 21340.00.3 1232923592 ? S 16:03 0:00 nginx: worker process
nginx 21350.00.3 1232923600 ? S 16:03 0:00 nginx: worker process
root 21420.00.0 112676 984 pts/0 S+ 16:09 0:00 grep --color=auto nginx
给nginx默认主页设置一个标志方便测试
# echo 'lynn-05' > /usr/share/nginx/html/index.html
# cat /usr/share/nginx/html/index.html
lynn-05
rs2的设置
配置内网ip 192.168.130.128
配置网关 192.168.130.116 （这里的网关为分发器的内网ip）
# vim /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
UUID=fef8a686-6a1e-49bc-b03e-7797fc4c58bb
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.130.128
NETMASK=255.255.255.0
GATEWAY=192.168.130.116
DNS1=119.29.29.29
安装nginx 需要在能外网通信的时候安装
# yum install -y nginx
启动nginx
# systemctl start nginx
# ps aux |grep nginx
root 36150.00.2 1229082244 ? Ss 11:03 0:00 nginx: master process /usr/sbin/nginx
nginx 36160.00.3 1232923348 ? S 11:03 0:00 nginx: worker process
nginx 36170.00.3 1232923600 ? S 11:03 0:00 nginx: worker process
nginx 36180.00.3 1232923600 ? S 11:03 0:00 nginx: worker process
nginx 36190.00.3 1232923600 ? S 11:03 0:00 nginx: worker process
root 534550.00.0 112676 984 pts/0 S+ 16:10 0:00 grep --color=auto nginx
给nginx默认主页设置一个标志方便测试
# echo 'lynn-06' > /usr/share/nginx/html/index.html
# cat /usr/share/nginx/html/index.html
lynn-06
测试
通过外网ip访问
# curl 192.168.214.116
lynn-05
# curl 192.168.214.116
lynn-06
# curl 192.168.214.116
lynn-05
# curl 192.168.214.116
lynn-06
# curl 192.168.214.116
lynn-05
# curl 192.168.214.116
lynn-06
555 222
页:
[1]