搭建Keepalived+LNMP架构web动态博客 实现高可用与负载均衡

环境准备：

192.168.193.80  node1

192.168.193.81 node2

关闭防火墙

[root@node1 ~]# systemctl stop firewalld        #两台都关闭
[root@node1 ~]# setenforce
setenforce: SELinux is disabled

host文件

[root@node1 ~]# vim /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.193.80 node1
192.168.193.81 node2

keepalived为主备模式

master为node1节点

backup为node2节点

yum源

[epel]
name=epel
enabled=
gpgcheck=
baseurl=https://mirrors.aliyun.com/epel/7/x86_64/
[centos]
name=centos base
enabled=
gpgcheck=
baseurl=http://mirrors.163.com/centos/7/os/x86_64/

master节点配置

下载keeplived

[root@node1 ~]# yum -y install keepalived

[root@node1 ~]# vim /etc/keepalived/keepalived.conf
, s/^/#/g    #-7行加注释
, s/^/#/g    #-
, s/^/#/g  #注释掉

vrrp_instance VI_1 {
    state MASTER
    interface ens33
    virtual_router_id
    priority 100            #优先级
    advert_int          #一秒检查一次  一秒给baskup发送一个报文
    authentication {
        auth_type PASS      #这个是密码认证，和51相辅相成，证明在一个网段里
        auth_pass       #密码
    }
    virtual_ipaddress {
        192.168.193.252      #这个就vip   可以有一个也可以有多个
    }
}

[root@node1 ~]# scp /etc/keepalived/keepalived.conf 192.168.193.81:/etc/keepalived/keepalived.conf  #把配置文件传到node2节点

配置backup端

[root@node2 ~]# vim /etc/keepalived/keepalived.conf

vrrp_instance VI_1 {
    state BACKUP
    interface ens33
    virtual_router_id
    priority
    advert_int
    authentication {
        auth_type PASS
        auth_pass
    }
    virtual_ipaddress {
        192.168.193.252
    }
}

[root@node1 ~]# systemctl start keepalived          #启动
[root@node2 ~]# systemctl start keepalived

[root@node1 ~]# ip a
: lo: <LOOPBACK,UP,LOWER_UP> mtu  qdisc noqueue state UNKNOWN qlen
    link/loopback ::::: brd :::::
    inet 127.0.0.1/ scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::/ scope host
       valid_lft forever preferred_lft forever
: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu  qdisc pfifo_fast state UP qlen
    link/ether :0c:::7a: brd ff:ff:ff:ff:ff:ff
    inet 192.168.193.80/ brd 192.168.193.255 scope global ens33
       valid_lft forever preferred_lft forever
    inet 192.168.193.252/ scope global ens33       #这个就是虚拟IP
       valid_lft forever preferred_lft forever
    inet6 fe80::9a7d:fb7d:d10f:e5e8/ scope link
       valid_lft forever preferred_lft forever

[root@node2 ~]# ip a
: lo: <LOOPBACK,UP,LOWER_UP> mtu  qdisc noqueue state UNKNOWN qlen
    link/loopback ::::: brd :::::
    inet 127.0.0.1/ scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::/ scope host
       valid_lft forever preferred_lft forever
: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu  qdisc pfifo_fast state UP qlen
    link/ether :0c::5b:: brd ff:ff:ff:ff:ff:ff
    inet 192.168.193.81/ brd 192.168.193.255 scope global ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::80ce:27dd:68f9:5adc/ scope link
       valid_lft forever preferred_lft forever

实验停止node1节点IP是否发生漂移

[root@node1 ~]# systemctl stop  keepalived

[root@node2 ~]# ip a
: lo: <LOOPBACK,UP,LOWER_UP> mtu  qdisc noqueue state UNKNOWN qlen
    link/loopback ::::: brd :::::
    inet 127.0.0.1/ scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::/ scope host
       valid_lft forever preferred_lft forever
: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu  qdisc pfifo_fast state UP qlen
    link/ether :0c::5b:: brd ff:ff:ff:ff:ff:ff
    inet 192.168.193.81/ brd 192.168.193.255 scope global ens33
       valid_lft forever preferred_lft forever
    inet 192.168.193.252/ scope global ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::80ce:27dd:68f9:5adc/ scope link
       valid_lft forever preferred_lft forever

发生漂移，这样就成功了，利用了VRRP协议

配置LVS

node1配置

vrrp_instance VI_1 {
    state MASTER
    interface ens33
    virtual_router_id
    priority 100
    advert_int
    authentication {
        auth_type PASS
        auth_pass
    }
    virtual_ipaddress {
        192.168.193.252
    }
}

virtual_server 192.168.193.252  {
    delay_loop
    lb_algo rr
    lb_kind DR
    protocol TCP

    real_server 192.168.193.80  {
        weight
        HTTP_GET {
            url {
              path /
              status_code
            }
            connect_timeout
            nb_get_retry
            delay_before_retry
        }
    }
    real_server 192.168.193.81  {
        weight
        HTTP_GET {
            url {
              path /
              status_code
            }
            connect_timeout
            nb_get_retry
            delay_before_retry
        }
    }
}

node2配置

vrrp_instance VI_1 {
    state BACKUP
    interface ens33
    virtual_router_id
    priority
    advert_int
    authentication {
        auth_type PASS
        auth_pass
    }
    virtual_ipaddress {
        192.168.193.252
    }
}

virtual_server 192.168.193.252  {
    delay_loop
    lb_algo rr
    lb_kind DR
    protocol TCP

    real_server 192.168.193.80  {
        weight
        HTTP_GET {
            url {
              path /
              status_code
            }
            connect_timeout
            nb_get_retry
            delay_before_retry
        }
    }
    real_server 192.168.193.81  {
        weight
        HTTP_GET {
            url {
              path /
              status_code
            }
            connect_timeout
            nb_get_retry
            delay_before_retry
        }
    }
}

[root@node1 ~]# yum -y install 

[root@node1 ~]# bash  .sh  start
启动成功
[root@node2 ~]# bash  .sh  start
启动成功

#!/bin/bash
case $ in
start)
        echo  > /proc/sys/net/ipv4/conf/all/arp_ignore
        echo  > /proc/sys/net/ipv4/conf/lo/arp_ignore
        echo  > /proc/sys/net/ipv4/conf/all/arp_announce
        echo  > /proc/sys/net/ipv4/conf/lo/arp_announce
        ifconfig ens33: 192.168.193.252/ broadcast 192.168.193.252 up
        if [ $? -eq  ];then
                route add -host 192.168.193.252 dev ens33:
        fi
        echo "启动成功"
;;
stop)
        echo  > /proc/sys/net/ipv4/conf/lo/arp_ignore
        echo  > /proc/sys/net/ipv4/conf/all/arp_ignore
        echo  > /proc/sys/net/ipv4/conf/lo/arp_announce
        echo  > /proc/sys/net/ipv4/conf/all/arp_announce
        ifconfig ens33: down
        route del -host 192.168.193.252
        echo "删除成功"
;;
*)
        echo "usage start|stop"
;;
esac

[root@node1 ~]# systemctl restart   keepalived
[root@node2 ~]# systemctl restart   keepalived   

[root@node1 ~]# yum -y install ipvsadm 

[root@node1 ~]# ipvsadm -Ln
IP Virtual Server version 1.2. (size=)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.193.252: rr
  -> 192.168.193.80:            Route
  -> 192.168.193.81:            Route                        

这样Keeplived就继承了LVS的功能  高可用与负载均衡

继续搭建nginx

以下操作2台节点同样操作

[root@node1 ~]# yum install nginx php php-fpm mariadb-server  php-mysql  -y

[root@node2 ~]# yum install nginx php php-fpm mariadb-server  php-mysql  -y

      server {
          listen        default_server;
          listen       [::]: default_server;
          server_name  _;
          root         /var/www/html;   #修改网站访问目录
          index      index.php  index。html;     #修改动态静态

          location / {              #复制
          }

          location ~ ^/.*\.php$ {             #添加
          fastcgi_pass 127.0.0.1:;
          include fastcgi.conf;
          }
          

检测配置文件是否有错

[root@node1 ~]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

[root@node1 ~]# systemctl restart mariadb     #启动数据库

[root@node1 ~]# cd /var/www/html/   #进入网站根目录

[root@node1 html]# rz          #上传动态博客压缩包
rz waiting to receive.
 zmodem trl+C ȡ

  %     KB  KB/s ::        Errorszip...

[root@node1 html]# ls
wordpress-3.3.1-zh_CN.zip

[root@node1 html]# unzip wordpress-3.3.1-zh_CN.zip

[root@node1 html]# mv wordpress/*  .

[root@node1 html]# cp wp-config-sample.php wp-config.php

[root@node1 html]#  vim wp-config.php

  define('DB_NAME', 'king');

  /** MySQL 数据库用户名 */
  define('DB_USER', 'king');

  /** MySQL 数据库密码 */
  define('DB_PASSWORD', '');

[root@node1 html]# mysql -uroot
MariaDB [(none)]> create database king;
MariaDB [(none)]> grant all on *.* to king@'localhost' identified by '';
MariaDB [(none)]> exit
Bye

[root@node1 ~]# systemctl restart nginx        #两台同样操作
[root@node1 ~]# systemctl restart php-fpm
[root@node1 ~]# systemctl restart keepalived
[root@node1 ~]# ipvsadm -Ln
IP Virtual Server version 1.2. (size=)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.193.252: rr
  -> 192.168.193.80:            Route
  -> 192.168.193.81:            Route                         

[root@node2 ~]# ipvsadm -Ln
IP Virtual Server version 1.2. (size=)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.193.252: rr
  -> 192.168.193.80:            Route
  -> 192.168.193.81:            Route                      

现在访问虚拟IP试验