Nginx+keepalived做双机热备-keepalived安装

原创

艾文编程 2023-04-30 06:17:52 博主文章分类：工作点滴那些事 ©著作权

©著作权归作者所有：来自51CTO博客作者艾文编程的原创作品，请联系作者获取转载授权，否则将追究法律责任

一、环境说明
keepalived-1.1.19.tar.gz
popt-1.16.tar.gz

二、环境配置

1、主Keepalived服务器IP地址 192.168.2.31
2、备Keepalived服务器IP地址 192.168.2.32
3、Keepalived虚拟IP地址 192.168.2.200

三、软件下载地址

wget http://keepalived.org/software/keepalived-1.1.19.tar.gz
wget http://rpm5.org/files/popt/popt-1.16.tar.gz

四、安装流程

在master和backup分别查看是否有ipvsadm软件
1. 检查ipvsadm是否安装成功.可以直接输入
[root@localhost ~]# ipvsadm
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn

2. 检查模版是否加入内核
[root@localhost ~]# lsmod |grep ip_vs
ip_vs 78081 0

1. 安装popt
cd /usr/local/src

编译keepalived时需要popt，否则会报以下错误：
configure: error: Popt libraries is required
tar -zxvf popt-1.16.tar.gz
cd popt-1.16
./configure
make
make install

2.安装keepalived
tar -zxvf keepalived-1.1.19.tar.gz
cd keepalived-1.1.19
./configure --prefix=/usr/local/keepalived
make
make install

安装keepalived出现错误：
checking openssl/ssl.h usability... no
checking openssl/ssl.h presence... no
checking for openssl/ssl.h... no
configure: error:
!!! OpenSSL is not properly installed on your system. !!!
!!! Can not include OpenSSL headers files. !!!

解决方案：
yum -y install openssl-devel
./configure
make
make install
再次执行就ok。

4.修改配置文件路径

[root@master ~]#  cp /usr/local/etc/rc.d/init.d/keepalived /etc/rc.d/init.d/

 [root@master ~]#  cp /usr/local/etc/sysconfig/keepalived /etc/sysconfig/

 [root@master ~]#  mkdir /etc/keepalived

 [root@master ~]#  cp /usr/local/sbin/keepalived /usr/sbin/

 [root@master ~]# vi /etc/keepalived/keepalived.conf


 vi /etc/keepalived/keepalived.conf



 ! Configuration File for keepalived

  

 global_defs {

    notification_email {

       shenfuli0712@126.com

    }

    notification_email_from shenfuli0712@126.com

    smtp_server smtp.126.com

   #smtp_connect_timeout 30

    router_id LVS_DEVEL

 }

  

 # VIP1

 vrrp_instance VI_1 {

     state MASTER             #备份服务器上将MASTER改为BACKUP   

     interface eth3           #绑定虚拟IP的网络接口

     lvs_sync_daemon_inteface eth3 #(HA监测网络接口)

     virtual_router_id 51#(主、备机的virtual_router_id必须相同)

     priority 100    # 备份服务上将100改为90

     advert_int 5    #组播信息发送间隔，两个节点设置必须一样

     authentication {#设置验证信息，两个节点必须一致

         auth_type PASS#(VRRP认证方式)

         auth_pass 1111#(密码)

     }

     virtual_ipaddress {  #指定虚拟IP, 两个节点设置必须一样

         192.168.2.200   

         #(如果有多个VIP，继续换行填写.)

     }

 }

  

 virtual_server 192.168.2.200 8081 {

     delay_loop 6                 #(每隔6秒查询realserver状态)

     lb_algo wlc                  #(lvs 算法)

     lb_kind DR                   #(Direct Route)

     persistence_timeout 60       #(同一IP的连接60秒内被分配到同一台realserver)

     protocol TCP                 #(用TCP协议检查realserver状态)

  

#nginx_1

     real_server 192.168.2.31 8081 {

         weight 100               
#(权重)

         TCP_CHECK {

connect_timeout 10       #(10秒无响应超时)

nb_get_retry 3

delay_before_retry 3

connect_port 8081

         }

     }

#nginx_2

     real_server 192.168.2.32 8081 {

         weight 100

         TCP_CHECK {

         connect_timeout 10

         nb_get_retry 3

         delay_before_retry 3

         connect_port 8081

         }

      }

 }



 [root@master ~]# service keepalived start|stop

 [root@master ~]# chkconfig –level 2345 keepalived on

五、配置realserver -在Nginx1和Nginx2主机上配置LVS-DR的相关配置.

vi /root/lvs_real.sh

 #!/bin/bash

 # description: Config realserver

 #Written by : shenfl

 SNS_VIP=192.168.2.200

  

 /etc/rc.d/init.d/functions

  

 case "$1" in

 start)

        /sbin/ifconfig lo:0 $SNS_VIP netmask 255.255.255.255 broadcast $SNS_VIP

        /sbin/route add -host $SNS_VIP dev lo:0

        echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore

        echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce

        echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore

        echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce

        sysctl -p >/dev/null 2>&1

        echo "RealServer Start OK"

  

        ;;

 stop)

        /sbin/ifconfig lo:0 down

        /sbin/route del $SNS_VIP >/dev/null 2>&1

        echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore

        echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce

        echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore

        echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce

        echo "RealServer Stoped"

        ;;

 *)

        echo "Usage: $0 {start|stop}"

        exit 1

 esac

  

 exit 0





 [root@web_1 ~]# chmod +x /roo/lvs_real.sh

 [root@web_1 ~]# /root/lvs_real.sh start

 [root@web_1 ~]# ifconfig

 #写入/etc/rc.local开机自动启动

 [root@web_1 ~]# echo “/root/lvs_real.sh start” >> /etc/rc.local

六、重启服务
#启动keepalived
service keepalived start

或者
/usr/local/sbin/keepalived -D -f /etc/keepalived/keepalived.conf
具体启动选项可以看手册 -D 产生日志默认到/vag/log/message -f 指定配置文件
Keepalived默认启动会启动两个进程，一个是vrrp的，另一个就是healthcheck
#启动vip绑定具体的网卡
/root/lvs_real.sh start
七、测试LVS+keepalived是否可以负载均衡
安装ipvsadm只是可以看到负载状况.其实只需要keepalived也可以实现负载均衡集群.

#! /bin/sh
for((i=1;i<=100;i++));do
curl http://192.168.2.200:8081 >> /tmp/q;
done

参考资料：
http://kerry.blog.51cto.com/172631/401253/

http://bbs.nanjimao.com/thread-855-1-1.html
http://wangyu.iteye.com/blog/424057
http://www.linuxidc.com/Linux/2014-02/97116.htm
http://blog.sina.com.cn/s/blog_6dbc8a680100u1s7.html
http://zhangxugg-163-com.iteye.com/blog/1665419

http://bbs.chinaunix.net/thread-4137355-1-1.html