2017最新nginx+keepalived+centos7安装配置过程
一、 地址规划nginx1-10.1.1.2
nginx2-10.1.1.3
vip-10.1.1.4
修改两台主机名：hostnamectl set-hostname nginx1
hostnamectl set-hostname nginx2
二、在nginx1和nginx2上分别安装nginx，这里用的是最新的稳定版
先安装依赖包
yum -y install gcc gcc++ prce pcre-devel zlib zlib-devel openssl openssl-devel
官网下载nginx-1.10.3源码包
tar xzvf nginx-1.10.3.tar.gz
mkdir -p /usr/local/nginx
mv nginx-1.10.3 /usr/local/
cd /usr/local/nginx-1.10.3/
./configure --prefix=/usr/local/nginx
make && make install
安装后注册nginx服务，使其可以开机启动
vi /lib/systemd/system/nginx.service
Description=nginx
After=network.target
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/usr/local/nginx/sbin/nginx -s> ExecStop=/usr/local/nginx/sbin/nginx -s quit
PrivateTmp=true
WantedBy=multi-user.target
设置nginx开机启动命令： systemctl enable nginx
启动nginx systemctl start nginx
三、分别在nginx1-2上安装keepalived
centos7可以直接yum安装keepalived,注意配置文件和脚本，否则不成功
keepalived -v
Keepalived v1.2.13 (11/05,2016) 版本信息
yum -y install keepalived
mv /etc/keepalived/keepalived.conf /etc/keepalived/keepalived.conf.orginal
vi /etc/keepalived/keepalived.conf
nginx1-master配置文件如下（为了方便你的粘贴就不上截图了）：
more /etc/keepalived/keepalived.conf （nginx1-master）
! Configuration file for keepalived
global_defs {
notification_email {
admin@wf.com
}
notification_email_from admin@wf.com
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id LVS_DEVEL
}
#监控nginx
vrrp_script chk_nginx {
script "/etc/keepalived/script/monitor_nginx.sh"
interval 2
weight 2
}
vrrp_instance VI_1 {
state MASTER#主从设置 MASTER
interface eth1#网卡名
virtual_router_id 51
mcast_src_ip 10.1.1.2 #本机ip
priority 51#从机小于主机
advert_int 1
authentication {
auth_type PASS
auth_pass chtopnet
}
virtual_ipaddress {
10.1.1.4#VIP 的IP
}
track_script {
chk_nginx#检测脚本
}
}
virtual_server 10.1.1.4 80 {
delay_loop 6
lb_algo rr
lb_kind DR
persistence_timeout 50
protocol TCP
real_server 10.1.1.2 80 {
weight 3
TCP_CHECK {
connect_timeout 10
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
nginx2-backup配置文件如下：
more /etc/keepalived/keepalived.conf （nginx1-backup）
! Configuration file for keepalived
global_defs {
notification_email {
admin@wf.com
}
notification_email_from admin@wf.com
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id LVS_DEVEL
}
#监控NGINX
vrrp_script chk_nginx {
script "/etc/keepalived/script/monitor_nginx.sh"
interval 2
weight 2
}
vrrp_instance VI_1 {
state BACKUP#主从设置 MASTER
interface eth1#网卡名
virtual_router_id 50
mcast_src_ip 10.1.1.2 #本机ip
priority 50#从机小于主机
advert_int 1
authentication {
auth_type PASS
auth_pass chtopnet
}
virtual_ipaddress {
10.1.1.4#VIP 的IP
}
track_script {
chk_nginx#检测脚本
}
}
virtual_server 10.1.1.4 80 {
delay_loop 6
lb_algo rr
lb_kind DR
persistence_timeout 50
protocol TCP
real_server 10.1.1.2 80 {
weight 3
TCP_CHECK {
connect_timeout 10
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
real_server 10.1.1.3 80 {
weight 3
TCP_CHECK {
connect_timeout 10
nb_get_retry 3
delay_before_retry 3
connect_port 80
}
}
}
监测脚本如下（nginx1-2相同）：
more /etc/keepalived/monitor_nginx.sh
#!/bin/bash
A=`ps -C nginx –no-header |wc -l`
if [ $A -eq 0 ];then
/usr/local/nginx/sbin/nginx
sleep 2
if [ `ps -C nginx --no-header |wc -l` -eq 0 ];then
systemctl stop keepalived
fi
fi
hostnamectl set-hostname nginx2
# 安装ipvsadm ()
#yum install ipvsadm
在两台nginx分别执行脚本，绑定虚拟IP，抑制ARP广播
#!/bin/bash
#description: Config realserver
VIP=10.1.1.4
/etc/rc.d/init.d/functions
case "$1" in
start)
/sbin/ifconfig lo:0 $VIP netmask 255.255.255.255 broadcast $VIP
/sbin/route add -host $VIP dev lo:0
echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
sysctl -p >/dev/null 2>&1
echo "RealServer Start OK"
;;
stop)
/sbin/ifconfig lo:0 down
/sbin/route del $VIP >/dev/null 2>&1
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
echo "RealServer Stoped"
;;
*)
echo "Usage: $0 {start|stop}"
exit 1
esac
exit 0
页:
[1]