LVS DR+keepalived负载均衡配置

拓扑

lvs安装部署:

1
2
3
4
5
6
[root@localhost~]# uname -r  #查看linux内核版本  
2.6.32-573.el6.x86_64
[root@localhost~]# lsmod | grep ip_vs
[root@localhost~]#

[root@localhost~]#wget http://www.linuxvirtualserver.org/software/kernel-2.6/ipvsadm-1.26.tar.gz

安装lvs安装

1
2
3
4
5
6
7
8
9
10
11
12
[root@localhost~]#yum install -y gcc gcc-c++ makepcre pcre-devel kernel-devel openssl-devel libnl-devel popt-devel popt-static
[root@localhost~]tar -zxvf ipvsadm-1.26.tar.gz
[root@localhost~]cd ipvsadm-1.26
[root@localhostipvsadm-1.26]make && make install
[root@localhostipvsadm-1.26]# ipvsadm #执行ipvsadm命令,把LVS添加到linux内核中
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
[root@localhostipvsadm-1.26]# lsmod | grep ip_vs #查看LVS是否已经添加到linux内核了,如果有如下输出表示已经成功。
ip_vs 126534 0
libcrc32c 1246 1 ip_vs
ipv6 335589 39 ip_vs,cnic,ip6t_REJECT,nf_conntrack_ipv6,nf_defrag_ipv6

安装keepalived

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
wget http://www.keepalived.org/software/keepalived-1.3.5.tar.gz
tar -zxvf keepalived-1.3.5.tar.gz
cd keepalived-1.3.5
./configure --prefix=/usr/local/keepalived #error: libnfnetlink headers missing
安装yum install -y libnfnetlink-devel
make && make install

将keepalived配置成系统服务
```php
mkdir /etc/keepalived/

cp -r /usr/local/keepalived/etc/keepalived/* /etc/keepalived/
cp /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/
cp /usr/local/keepalived/sbin/keepalived /usr/sbin/
cp /root/ipvsadm-1.26/keepalived-1.3.5/keepalived/etc/init.d/keepalived /etc/init.d/ #这文件在解压目录下面

修改主keepalived配置文件(备只修改router_id、state和priority)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
vi /etc/keepalived/keepalived.conf
! Configuration File forkeepalived
global_defs {
notification_email {
test@sina.com #故障接受联系人
}
notification_email_from admin@test.com #故障发送人
smtp_server 127.0.0.1 #本机发送邮件
smtp_connect_timeout 30
router_id LVS_MASTER #BACKUP上修改为LVS_BACKUP
}
vrrp_instance VI_1 {
state MASTER #BACKUP上修改为BACKUP
interface eth0
virtual_router_id 51 #虚拟路由标识,主从相同
priority 100 #BACKUP上修改为90
advert_int 1
authentication {

auth_type PASS
auth_pass 1111 #主从认证密码必须一致
}
virtual_ipaddress { #Web虚拟IP(VTP)
172.16.0.10
}
}
virtual_server 172.16.0.10 80 { #定义虚拟IP和端口
delay_loop 6 #检查真实服务器时间,单位秒
lb_algo rr #设置负载调度算法,rr为轮训
lb_kind DR #设置LVS负载均衡DR模式
persistence_timeout 50 #同一IP的连接60秒内被分配到同一台真实服务器
protocol TCP #使用TCP协议检查realserver状态
real_server 172.16.0.13 80 { #第一个web服务器
weight 3 #节点权重值
TCP_CHECK { #健康检查方式
connect_timeout 3 #连接超时
nb_get_retry 3 #重试次数
delay_before_retry 3 #重试间隔/S
}
}
real_server 172.16.0.14 80 { #第二个web服务器
weight 3
TCP_CHECK {
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
}

vim /etc/sysctl.conf
……//省略部分内容
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.eth0.send_redirects = 0
net.ipv4.conf.eth1.send_redirects = 0
[root@localhost /]#sysctl -p

分别在两台Web服务器编写脚本并启动

1
 vi /etc/init.d/lvs_dr.sh
#description : start realserver
VIP=172.16.0.10
. /etc/init.d/functions
case "$1" in
start)
/sbin/ifconfig lo:0 $VIP broadcast $VIP netmask 255.255.255.255 up
/sbin/route add -host $VIP dev lo:0
echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
echo "LVS RealServer Start OK"
;;
stop)
/sbin/ifconfig lo:0 down
/sbin/route del $SNS_VIP >/dev/null 2>&1 
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce
echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
echo "LVS RealServer Stoped OK"
;;
*)
echo "Usage: $0 {start|stop}"
exit 1
esac

chmod +x /etc/init.d/lvs_dr.sh
/etc/init.d/lvs_dr.sh start
echo “/etc/init.d/lvs_dr.sh start” >> /etc/rc.local