集群（3）

LVS && HA

1.DR模式实现lvs

Server11端作为调度器

Sever11操作

首先配置yum源如图

wKiom1jLXO_g8mNFAANbaE3YCQ0298.png-wh_50

wKiom1jLXPHCvebIAANsQY-WNX0825.png-wh_50

Yum repolist##查看已拥有的yum仓库

wKioL1jLXQXD7MCXAAbliDOd-Y0638.png-wh_50

安装ipvsadm

Yum install -y ipvsadm

ip addr add 172.25.15.100/32 dev eth0     ##添加一个虚拟网络172.25.15.100

ipvsadm -C      #清空转发表

ipvsadm -A -t 172.25.15.100:80 -s rr##-A添加一个虚拟服务-ttcp服务-s使用的调度算法

ipvsadm -a -t 172.25.15.100:80 -r 172.25.15.13:80 -g##-a在内核虚拟服务器表的一条记录里添加一条新的服务器-r真实服务器-g指定工作模式为直接路由模式

ipvsadm -a -t 172.25.15.100:80 -r 172.25.15.14:80 -g

wKioL1jLXRXj0h1eAAQRbjb9vaw407.png-wh_50

 /etc/init.d/ipvsadm save##保存ipvsadm表

/etc/init.d/iptables stop##关闭防火墙

Server13 && server14

添加虚拟网络ip

wKioL1jLXUCQiba9AAKA4kY3SY0604.png-wh_50

yum install arptables_jf.x86_64 -y

arptables -A IN -d 172.25.15.100 -j DROP##-A追加规则-d目的地址-j跳到目标-s源地址

arptables -A OUT -s 172.25.15.100 -j mangle --mangle-ip-s 172.25.15.13

##这两条指令意思是将目的地址为172.25.15.100的包丢掉将源地址为172.25.15.100的请求包发给172.25.15.13

##server14同样操作

/etc/init.d/arptables_jf save##保存

安装httpd并开启

Yum install -y httpd

/etc/init.d/httpd start

并在默认发布目录上编辑index.html作为轮询时区别不同的虚拟机

Cd /var/www/html

Server13:

Echo <h1>server13.example.com</h1> >index.html

Server14:

Echo <h1>server14.example.com</h1> >index.html

测试1

真机curl虚拟ipcurl 172.25.15.100会发现server13 && server14轮询

wKiom1jLXa6AKd0_AAhi3qOkpJM329.png-wh_50

测试2

当关闭serever13端的lvs时轮询访问的server13会中断

wKioL1jLXcCgsg20AAZb2PZ_pkc047.png-wh_50

但下图会发现server11 ipvsadm -l 查询时并不会发现错误所以说明lvs本身没有健康检查功能

wKioL1jLXdLQoAUyAAXjJJsS8KQ471.png-wh_50

2.配置ldirectord 服务

想要有监测功能需要加入ldirectord服务

先配置ldirectord 服务:

Server11:

yum install ldirectord-3.9.5-3.1.x86_64.rpm

 cd /etc/ha.d/

cp /usr/share/doc/ldirectord-3.9.5/ldirectord.cf .

vim ldirectord.cf

wKioL1jLXgahVEHqAAgElJWZe0I318.png-wh_50

测试

/etc/init.d/ldirectord start

wKiom1jLXiDjhOMRAAfoGvNyiwM789.png-wh_50

轮询正常且虚拟服务存在

当server13关闭httpd服务时server11端再ipvsadm测试会发现server13虚拟服务已经关闭且curl 172.25.15.100时只会访问server14

wKioL1jLXpnQ73yZAAXZohnF1M4388.png-wh_50

所以安装ldirectord 服务会具有健康检查功能

3.将ldirectord服务加入heartbeat 服务中

先将server11 && server12中的httpldirectord服务关掉并删掉虚拟网络

/etc/init.d/ldirectord stop

/etc/init.d/httpd stop

ip addr del 172.25.15.100/24 dev eth0

两边虚拟机都修改配置文件加入ldirectord服务

vim haresources

wKioL1jLXr_TD-K_AAbJMHc7r6U242.png-wh_50

两边虚拟机都启动heartbeat服务

/etc/init.d/heartbeat start

测试1

都启动服务后客户端正常访问且服务正常轮询虚拟网络服务正常运行

wKioL1jLXvHAuvBMAAkn_gwNzUA422.png-wh_50

wKiom1jLXvbDlyCoAAnggr7-Eek119.png-wh_50

测试2

当集群中server11关掉hearbeat服务时server12会自动接管服务而且客户端会正常工作

wKiom1jLXzrDrE_zAAMOS3ccoH0549.png-wh_50

wKiom1jLXzvzw_ydAAIK5N1jFiU038.png-wh_50

wKioL1jLXzzQs3tvAAJdfawAWf0703.png-wh_50

4.keepalived + lvs

1用httpd服务测试

Server11端

下载keepalived-1.2.24.tar.gz压缩包并解压

 tar zxf keepalived-1.2.24.tar.gz

安装软件包解决依赖性

yum install -y ipvsadm kernel-devel openssl-devel popt-devel libnl-devel gcc make -y

yum install libnfnetlink-devel-1.0.0-1.el6.x86_64.rpm

./configure --prefix=/usr/local/keepalived

make && make install

做四个软连接

ln -s /usr/local/keepalived/etc/rc.d/init.d/keepalived /etc/init.d/

ln -s /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/

ln -s /usr/local/keepalived/etc/keepalived/ /etc/

 ln -s /usr/local/keepalived/sbin/keepalived /usr/sbin/

Scp到server12上来

scp -r keepalived/ root@172.25.15.12:/usr/local/

Server12同样做软连接“

ln -s /usr/local/keepalived/etc/rc.d/init.d/keepalived /etc/init.d/

ln -s /usr/local/keepalived/etc/sysconfig/keepalived /etc/sysconfig/

ln -s /usr/local/keepalived/etc/keepalived/ /etc/

ln -s /usr/local/keepalived/sbin/keepalived /usr/sbin/

Server11端

 cd /etc/keepalived/

vim keepalived.conf

wKioL1jLX3Hxk7QeAAJRps1FztU986.png-wh_50

wKiom1jLX3LQbQ20AAIjDpjohg8807.png-wh_50

wKiom1jLX3SQzxYkAALkJmHvu4E447.png-wh_50

scp keepalived.conf root@172.25.15.12:/etc/keepalived/##发送给server12

Server 11 && server12 都安装mailx用来接受邮件

yum install -y mailx

Server12端

修改server11端传过来的keepalived的配置文件

Cd /etc/keepalived

Vim keepalived.conf

wKioL1jLX47haZyeAAY0gWr1b8E726.png-wh_50

##修改备份机状态为BACKUP以及备份机优先级为50

主机与备份机两边都给执行权限并开启

chmod +x /etc/init.d/keepalived

/etc/init.d/keepalived start

测试

正常启动后用 ip addr show 查看会发现真实运行在server11上但是ipvsadm会发现在备份机上也存在说明数据同时备份。当server11挂掉后数据就可继续运行不用从0开始

而且对客户端的访问并没有影响

wKioL1jLX9GApesCAAX9ke9nxEE712.png-wh_50

wKioL1jLYBDjlhvOAAYOULl2Q5s413.png-wh_50

wKiom1jLYBLgWW2aAAX-RJPiRcg423.png-wh_50

2用ftp服务测试

Server13 && server14端都安装vsftp服务

分别创建server13以及server14文件用来区分连接的虚拟机

Server11&& server12端

Vim keepalived.conf

wKioL1jLYPzxbaQnAAI3K7WhNW4969.png-wh_50

wKiom1jLYPzRPHEZAAI-mZtsXh4787.png-wh_50

Server13 && server14端

添加172.25.15.200虚拟ip:

wKioL1jLYQ_iFLuwAAIkuwXIb8s483.png-wh_50

wKiom1jLYRCw6bhTAAIh111ZbA4935.png-wh_50

Server11 &&server12端启动服务

/etc/init.d/keepalived start

测试

wKiom1jLYTWT0zUaAAJew-tJI_M222.png-wh_50

wKioL1jLYTWy4E4TAAJabRZUFxc264.png-wh_50

wKiom1jLYZvj2xZsAALgYrl5FIg305.png-wh_50

当server13断开服务时会自动切到server13上来

wKiom1jLYYuwR7T6AAHUp3oAcNA980.png-wh_50