搜索泥称 发表于 2019-1-3 12:37:42

vrrp下的lvs

  网络拓扑结构

https://s1.运维网.com/wyfs02/M01/95/BF/wKiom1kZWa3BHbECAAHqvO4pHQE741.png-wh_500x0-wm_3-wmp_4-s_1494057270.png
  操作系统为centos7.3
  1.所有主机RS1、RS2、DS1、DS2都开apache服务器,RS1、 RS2都用来测试web服务器的,DS1 、DS2是用来做sorry 服务器的。
  2.所有服务器都时间同步
  3.在DS上开vrrp
https://s1.运维网.com/wyfs02/M00/95/BF/wKiom1kZWerB_oLjAAAMLRwHTww172.png-wh_500x0-wm_3-wmp_4-s_2170307178.png
  DS1上配置
  ! Configuration File for keepalived
  global_defs {
  notification_email {
  root@localhost
  }
  notification_email_fromAlexandre.Cassen@firewall.loc
  smtp_server 127.0.0.1
  smtp_connect_timeout 30
  router_id node1
  }
  vrrp_instance jin-vrrp {
  state MASTER
  interface ens37
  virtual_router_id 51
  priority 100
  advert_int 1
  authentication {
  auth_type PASS
  auth_pass 1111
  }
  virtual_ipaddress {
  192.168.0.200/24 devens37
  }
  }
  virtual_server 192.168.0.200 80 {
  delay_loop 6
  lb_algo wrr
  lb_kind DR
  persistence timeout 50
  protocol TCP
  sorry_server 127.0.0.1 80
  real_server 192.168.0.10380 {
  weight 1
  HTTP_GET {
  url {
  path /
  status_code 200
  }
  connect_timeout 3
  nb_get_retry 3
  delay_before_retry3
  }
  }
  real_server 192.168.0.10480 {
  weight1
  HTTP_GET{
  url{
  path/
  status_code200
  }
  }
  connect_timeout3
  nb_get_retry3
  delay_before_retry3
  }
  }
  }
  DS2上配置
  ! Configuration File for keepalived
  global_defs {
  notification_email {
  root@localhost
  }
  notification_email_fromAlexandre.Cassen@firewall.loc
  smtp_server 127.0.0.1
  smtp_connect_timeout 30
  router_id node1
  }
  vrrp_instance jin-vrrp {
  state BACKUP
  interface ens37
  virtual_router_id 51
  priority 98
  advert_int 1
  authentication {
  auth_type PASS
  auth_pass 1111
  }
  virtual_ipaddress {
  192.168.0.200/24 dev ens37
  }
  }
  virtual_server 192.168.0.200 80 {
  delay_loop 6
  lb_algo wrr
  lb_kind DR
  persistence timeout 50
  protocol TCP
  sorry_server 127.0.0.1 80
  real_server 192.168.0.10380 {
  weight 1
  HTTP_GET {
  url {
  path /
  status_code 200
  }
  connect_timeout 3
  nb_get_retry 3
  delay_before_retry3
  }
  }
  real_server 192.168.0.10480 {
  weight1
  HTTP_GET{
  url{
  path/
  status_code200
  }
  }
  connect_timeout3
  nb_get_retry3
  delay_before_retry3
  }
  }
  }
  做这个实验的时候要小心花括号。
  4.在二个RS服务上写脚本用来做lvs-dr里的VIP
https://s5.运维网.com/wyfs02/M01/95/BF/wKioL1kZWjPDwUdqAAAODptKuzE700.png-wh_500x0-wm_3-wmp_4-s_37904284.png
https://s5.运维网.com/wyfs02/M02/95/BF/wKiom1kZWjSQ6-o6AABJOptTtcQ528.png-wh_500x0-wm_3-wmp_4-s_3196787439.png
  

  在lo上生成vip地址及路由条目。
https://s3.运维网.com/wyfs02/M01/95/BF/wKioL1kZWm_QtYqAAAGnIBkWQSA182.png-wh_500x0-wm_3-wmp_4-s_724244039.png
  5.由于二个DS配完keepalived的vrrp后。只要yum ipvsadm就可以了,至于ipvsadm策略会通过keepalived会自动生成
https://s4.运维网.com/wyfs02/M02/95/BF/wKioL1kZWreBh7OmAAAyGgVJ1WM293.png-wh_500x0-wm_3-wmp_4-s_2989773019.png
  6.测试结果
https://s1.运维网.com/wyfs02/M01/95/BF/wKiom1kZWuiAQkA8AAA1LJJuW1I628.png-wh_500x0-wm_3-wmp_4-s_3778798017.png



页: [1]
查看完整版本: vrrp下的lvs