LVS+Keepalived 配置

LVS+Keepalived配置

环境准备

LVS1：192.168.1.1

LVS2：192.168.1.2

MySQL Server1：192.168.1.13

MySQL Server2：192.168.1.11

VIP：192.168.1.100

yum -y install keepalived ipvsadm

vi /etc/keepalived/keepalived.conf    

! Configuration File for keepalived

global_defs {
   router_id LVS_DB
}

vrrp_instance VI_1 {
    state BACKUP #全部设置为BACKUP，防止脑裂，抢资源
    interface eth0 #虚拟IP所在网
    virtual_router_id  #VRID，相同VRID为一个组，决定多播MAC地址
    priority  #优先级，另一台改为90 节点不一样
    advert_int   #检查间隔
    authentication {
        auth_type PASS  #认证方式，可以是pass或ha
        auth_pass   #认证密码
    }
    virtual_ipaddress {
        192.168.1.100  #VIP
    }
}

virtual_server 192.168.1.100  {
    delay_loop   #服务轮询的时间间隔
    lb_algo wrr  #加权轮询调度，LVS调度算法 rr|wrr|lc|wlc|lblc|sh|sh
    lb_kind DR   #LVS集群模式 NAT|DR|TUN，其中DR模式要求负载均衡器网卡必须有一块与物理网卡在同一个网段
    #nat_mask 255.255.255.0
    persistence_timeout   #会话保持时间
    protocol TCP  #健康检查协议

     ## Real Server设置，3306就是MySQL连接端口
    real_server 192.168.1.13  {
        weight   ##权重
        TCP_CHECK {
            connect_timeout
            nb_get_retry
            delay_before_retry
            connect_port
        }
    }
    real_server 192.168.1.11  {
        weight
        TCP_CHECK {
            connect_timeout
            nb_get_retry
            delay_before_retry
            connect_port
        }
    }
}

配置LVS

编写LVS启动脚本/etc/init.d/realserver

SNS_VIP=192.168.1.100
/etc/rc.d/init.d/functions
case "$1" in
start)
       ifconfig lo: $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP
       /sbin/route add -host $SNS_VIP dev lo:
       echo "" >/proc/sys/net/ipv4/conf/lo/arp_ignore
       echo "" >/proc/sys/net/ipv4/conf/lo/arp_announce
       echo "" >/proc/sys/net/ipv4/conf/all/arp_ignore
       echo "" >/proc/sys/net/ipv4/conf/all/arp_announce
       sysctl -p >/dev/null >&
       echo "RealServer Start OK"
       ;;
stop)
       ifconfig lo: down
       route del $SNS_VIP >/dev/null >&
       echo "" >/proc/sys/net/ipv4/conf/lo/arp_ignore
       echo "" >/proc/sys/net/ipv4/conf/lo/arp_announce
       echo "" >/proc/sys/net/ipv4/conf/all/arp_ignore
       echo "" >/proc/sys/net/ipv4/conf/all/arp_announce
       echo "RealServer Stoped"
       ;;
*)
       echo "Usage: $0 {start|stop}"
       exit
esac
exit 

将lvs脚本加入开机自启动

# chmod +x /etc/init.d/realserver
# echo "/etc/init.d/realserver" >> /etc/rc.d/rc.local

分别启动LVS和keepalived

# service realserver start
# service keepalived start

配置iptables

# Generated by iptables-save v1.4.21 on Wed Aug  ::
*filter
:INPUT ACCEPT [:]
:FORWARD ACCEPT [:]
:OUTPUT ACCEPT [:]
-A INPUT -d 224.0.0.0/ -i em2 -p vrrp -j ACCEPT
-A INPUT -s 192.168.1.100/ -i em2 -p vrrp -j ACCEPT
-A OUTPUT -d 224.0.0.0/ -o em2 -p vrrp -j ACCEPT
COMMIT
# Completed on Wed Aug  ::
# Generated by iptables-save v1.4.21 on Wed Aug  ::
*nat
:PREROUTING ACCEPT [:]
:INPUT ACCEPT [:]
:OUTPUT ACCEPT [:]
:POSTROUTING ACCEPT [:]
-A PREROUTING -d 192.168.1.0/ -p tcp -m tcp --dport  -j REDIRECT
COMMIT

2.在每台真实服务器上运行
ifconfig lo:0 192.168.1.100（虚拟IP地址） netmask 255.255.255.255 up

vi /etc/sysctl.conf
#或者
vi /usr/lib/sysctl.d/-system.conf
#添加如下代码：
net.ipv4.ip_forward=

#重启network服务
systemctl restart network